last executing test programs: 5.983523149s ago: executing program 3 (id=6368): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newsa={0x1c4, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x711, 0x4e23, 0x25, 0x0, 0x0, 0xa0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x8, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x2, 0x20}, [@algo_comp={0xad, 0x3, {{'deflate\x00'}, 0x328, "1d62c4a51e4876820cd8de1a9caffa075c2d24e5c04358c8f77c2fcc551d87c24163a87ec78a3a783c2f0d33ac79dee4831a266e5db7f74e3fb690714448e8b23623cee00b7f85a7ff05b5d429d4ad1083c6c539b5888fd1e2dbe174f3846d4e90d680cb59"}}, @lifetime_val={0x24, 0x9, {0x4000f, 0x3ff, 0x9, 0x400100}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000000c0), 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r2, &(0x7f0000000440)=ANY=[], 0xa) accept4(r0, &(0x7f0000000200)=@alg, &(0x7f0000000280)=0x80, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newsa={0x154, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast2, {0x300, 0xf, 0x9ba3, 0x636f, 0x8251c, 0x5, 0xfffffffffffffffc}, {0x2, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e23, 0xd, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x154}}, 0x844) 5.735699864s ago: executing program 3 (id=6373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000100000000000000810000005f40f8ff04000000caa5fcff10000000182700003dd41253c57e9a78f939f92564439f729e4b368c4db020be88571fabf57d21d3f61b0f4f4f50ec92c5ad608aa4172787d22f0ec28e2ea0ba9dd2df15303683dc51c68d5376ad8179a6535c902ffc75b476d52944d60ad32b2e2bf734ea94c2c9d2db517e4993e3a3167e2ddba531c40e25ca6d9c01cc8bbb519246e19b31b3d1a5eb4b6cfec62c", @ANYRES32, @ANYBLOB="00000000636bca4d39950000e0b6d85985000000a6000000186600000b000000000000000d0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1ff, 0x4f, &(0x7f0000000300)=""/79, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xf, 0x80000001, 0x2}, 0x10, 0x26fcb, 0xffffffffffffffff, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x0, 0x1, 0xd, 0x4}, {0x1, 0x3, 0xf, 0x4}], 0x10, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000001000000123bd7000ca9d1c26e381fbdb", @ANYRES32=0x0, @ANYBLOB="80000000839504003c0012800b00010067726574617000002c00028008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080005000000010005000a000100000008000600ac14141f"], 0x5c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4048844) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000540)=r2, 0x4) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24) listen(r1, 0x80000000) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000181100004c9606305609b1f800b9b567b52af0149b6237c14c8dfe92a67047ae4bf3c06e2b5887c275817b7f6c1ab40859dc04a6c69b417155d8281550e4", @ANYRES32, @ANYBLOB="8504c92e6471954bc6b7903ef83ae30c17d4d013e1a817db24321b873db61d93aeff9d495fba748b064dc4d96e0bb948823544abd8069e54a263756dc91dd91d4e26d9261344e337ef58a6c7e9340aca65d9fe32bbf3baaaa8b0dc7ab9ab77d869971d1a6a37d866f90c88659ea1d427e283049b3fef28612db4119b04a271f4a0a2ca696a57641dd77bb229d2f43d6985937566477438e6e5ac7be3256f14e799945cf925319c411925c440347dde77d60cdc49f16137576d605a339de8ed862f008612d83c45af7f89cb87d2841ce282e35dafb89c7df0c5f4e00b45e2e6429dbcb5", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="0200ffffdf48f3be5283092376de52", 0xf}, {&(0x7f0000000680)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4f0001000000000000", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="b8000000000000001701000002000000a10000005da9d7fbffd681e731eea870dcf1e7416182021f3f3996246bdc74df8f4bfce902ce6630f66a70ffa6550f6e8b6e6d18fde10d3f420bbdec61b1f0be343a76681e9d03f8fd6c1e78f182d3e9bf687517652c09bf13e30404ca05d3246ae6bc0bb6840c817032666ba78665f6e89a0293d416c2812c04a31cb5e224ce9632a70100000000000000ac77e3395fa6ccdd36e0af9a80128fe525da72a3ff000000001bc99ddb94bd5c6ff31b59ef260f347c4cd491ce8fa6674e5000000000"], 0xb8, 0x4000850}], 0x1, 0x40800) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x19}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x5}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0xfffffffffffffefb, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0xb, 0x70bd2d, 0x25dfdbfe, {}, [{0x64, 0x1, [@m_gact={0x60, 0x1, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x9, 0x7, 0x8, 0xfffffff6}}, @TCA_GACT_PROB={0xd, 0x3, {0x3, 0x1124, 0x5}}]}, {0xffffffffffffff8b, 0x6, "f1264d5c4f6a24cc77acf66c8150a62f4527ca2a201638fb630002a62339f42edcf88b803626a3e27a5227110e1806ed770e5a2dce3c9120f5e84103d19e9799fad076eaca6ba940f11fe9b6eb3d42d062d0fba7e7efe1eac99518621cca7b544f9165605ab5983f31199444641561894af40c59de80451c8c70d9ae943fd4789efd00"/142}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000010}, 0x44) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 5.211895595s ago: executing program 4 (id=6380): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000080", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 5.012037597s ago: executing program 4 (id=6381): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000300000000000000000000090000000000000000000000010500000008000000010000000000000f440000000000000000000003000000000300000002000000000000000061"], 0x0, 0x5b}, 0x28) socket$netlink(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000900)={0x30, 0x13, 0x1, 0x70bd2b, 0x25dfdbf8, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @pid}, @nested={0x14, 0x16a, 0x0, 0x1, [@nested={0x8, 0x2e, 0x0, 0x1, [@typed={0x4, 0xb, 0x0, 0x0, @binary}]}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}]}]}, 0x30}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6000007, 0x4010, 0xffffffffffffffff, 0x85893000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) ioctl$XFS_IOC_GETBMAP(0xffffffffffffffff, 0xc0205826, &(0x7f0000000300)={0x101, 0x9, 0x706, 0x5, 0x5}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2dc5ca0b10318993938323e53ee2ab64bbfbd5c1e2c87947dad15605dc88eeb6a0a02be09802e1b0a3375b6a809de5a2f6121183c86e3c91eb27bac83aacb76095528f021e08b52e8163b4ffbf56a11e45ac112ef3226b", @ANYRES16=r2, @ANYBLOB="010080fffbff000000000100000008000200030000000800010003000000"], 0x24}}, 0x4080) unshare(0x22020600) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @multicast1, @private=0xa010102}, 0xc) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f00000004c0)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e23, @empty}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) pwrite64(r6, &(0x7f0000000380)='k', 0x1, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[], 0x20) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @private=0xa010101}, {0x2, 0x4e26, @multicast2}, 0x2a0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x100000, 0x0, 0x5}) 4.294388841s ago: executing program 1 (id=6388): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400000000000fb8000a0e408e8d8ef52a98516277ce06b", 0x4e}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) getpeername(r1, &(0x7f00000000c0)=@can, &(0x7f0000000140)=0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f00000003c0)) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket(0x10, 0x80000, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x68, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6}, {0x5, 0x40, 0x2}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40050) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000200), &(0x7f0000000340)=0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000140) r10 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000040)=0x4, 0x4) recvfrom(r10, 0x0, 0x0, 0x40, 0x0, 0x0) 4.218359847s ago: executing program 4 (id=6389): r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006200)=[{{&(0x7f0000000b40)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe4}, 0x1c, 0x0, 0x0, &(0x7f0000000ec0)=[@dstopts_2292={{0x18, 0x29, 0x32, {0x32}}}], 0x18}}], 0x1, 0x20000040) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000000), &(0x7f0000000140)=r9}, 0x20) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000010b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) (async) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2c, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}}, 0x18) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000140)={0x21, @private=0xa010101, 0x4e22, 0x3, 'rr\x00', 0x34, 0x80001, 0x70}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0xac91d2bf000ec5eb, 0xcd}}, 0x44) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xb}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r12, 0x84, 0x17, &(0x7f00000001c0)={r13, 0x9, 0x71, "ed573af018ab1b17dad50611a2e6d5b4d810cea2c2cb5d81910d2c1a87ad0607f2682820a639b40956aa076ae59be9f4d5b382d8e0c94fd164b969be7c018d1c0a03c04ff6048b46c51a87140cb10b90b5b25196a0fe84932763e614900390493ed88ecdc463ef4c2cdfe65fb89e3cc88e"}, 0x79) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r11, 0x0, 0x485, 0x0, 0x0) 4.128794078s ago: executing program 1 (id=6391): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x8, 0x8001, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x68, 0x0, 0x3, 0x4, 0x0, @loopback, @private=0xa010100, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2f, 0x8, 0x5, 0x0, 0x13, @remote, @private0, 0x10, 0x7, 0x4, 0x9}}) 4.07437673s ago: executing program 3 (id=6393): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88c}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10050}, 0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x21, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000000000000000c000000480005800800010065756800070002"], 0x5c}}, 0x0) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x6c, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x3, 0xfff1}, {0x4, 0xe}, {0xc}}, [{0x8, 0xb, 0xf18}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4060000", @ANYRES32=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.991035757s ago: executing program 0 (id=6394): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000001400)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="18c91500"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000028500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="140800000000009465f381ab504f", 0x0, 0xffffff00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x9b0318}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x10000006, 0x0, 0x4, 0x100, 0x4000000010000009, 0x10200}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000dc0)=@newtfilter={0x440, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x410, 0x2, [@TCA_CGROUP_EMATCHES={0x40c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf3d0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7ff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="5fedb61a2a4303cc6b", @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x1000, 0x2, 0x1}, {0x6, 0x7, 0x1, "0bc085073a6b7b"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_LIST={0x184, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3bb, 0x3, 0x2}, {0x41b, 0x9, 0xfffffffe, 0x5307}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0xfff9}, {0x0, 0x1, 0x2}}}, @TCF_EM_CONTAINER={0xb0, 0x1, 0x0, 0x0, {{0x2, 0x0, 0xd}, "f4bb0c0118a96e73995a525d6ba4365b4e78f3d546e0cd1c0fb2a93709000bba928750f3cfe5756577eb65c641a0ad6b0b157c2aac81a4590586db21a9f0ff6fe31a60e0e6726c3a3635e8556c75c6f005151d6f395c2c88190fdcd3b01f39a3d60ba24bb86081768ffc08658e404b2797869bfbfb3070e843175def6416fd090b36b1b4f23878481cf7ee8a812cf62bf0fa412c7dba0dc45e7dc604364948ee9dcf7582"}}, @TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0xe, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x3a, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="1e2bfce94acb", @TCF_META_TYPE_VAR="f31106adbb0000000000", @TCF_META_TYPE_VAR="4dab33475cac814d", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='\n', @TCF_META_TYPE_VAR="b09348972a37892b", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="910da847b1"]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0x9}, {{0x4, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xe, 0x1, 0x8}, {0x4, 0x2, 0xa, 0x2, 0xb, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x1}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xb71}, {0x7a2, 0x9, 0x0, "f9e399a01c64169cbb"}}}]}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x8}, {0x3, 0x6, 0x62ada78f12079ad}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0xfbb}, {0x4, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x1f4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0xe}, {0x10, 0x3ff, 0xfffa, 0x6, 0x3, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x3}, {0x7, 0x6, 0x8, 0x3, 0x2, 0x0, 0x2}}}, @TCF_EM_IPT={0x114, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x8db}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_DATA={0x7, 0x5, "3fdd1e"}, @TCA_EM_IPT_MATCH_DATA={0x22, 0x5, "34479674bd814b75191353def1df59c4af301f4bf1c1e1a36d2044309103"}, @TCA_EM_IPT_MATCH_DATA={0xb9, 0x5, "a35bfe244f41b6accc46f56f3d9708aa6c38ceeb78b3c7ff9c62fc54c7dee4ca31336e708cca7bf27853eb1650bc3f7708475e72a0a26b7527f78d16680b52b58ef694d52656ee7bd8722a1096a9dc661cdaaae7ca8a5f102d97220a846d72b2b552de55f4b4ac951900114a222ef3c346dbb31f9b2929369fc0418740d43be5508d82717c5989aaf844700df921bc68606c81d736857651a78853290f35a8e934415e0c001aee992219760270807c468e8f63337e"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xa1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}]}}, @TCF_EM_META={0x5c, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='OnC', @TCF_META_TYPE_VAR="6f8b50cf085ff65f93", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR="da57c8315d922ad350", @TCF_META_TYPE_VAR="8dacb773c480ea35", @TCF_META_TYPE_VAR="1b4aa3", @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="34b718"]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xff, 0x3, 0x9}, {0x1, 0xfb8b, 0x1, 0x3ff}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x6}, {0x6, 0xa, 0x0, "9cc9ffcf94bcb4e40d06"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0xfff9}, {0x1, 0x2, 0x6, 0x7, 0x3, 0x1}}}]}]}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x20048091}, 0x20000880) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'gre0\x00', 0x0}) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="180c00001e0001002dbd7000fcdbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\n\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) syz_emit_ethernet(0x32, &(0x7f00000013c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080045000024fffd000000119078ac1e0001e0000001000017c10010907801000000d482449abf0400efd52a4dcd9050"], 0x0) 3.759214356s ago: executing program 4 (id=6396): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000500)=r1, 0x4) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x1, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASK={0x40, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf4478a0d25327336}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x78}}, 0x0) write$nci(r2, 0x0, 0x14) r8 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r8, 0x0, 0x0, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000100)="f257a8ea7b4db1384ae8095c0106", 0xe, 0x8040, &(0x7f0000000200)={0x11, 0x17, r9}, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x400, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40841}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}]}, 0x3c}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000540)={0x23c, r11, 0xee237020da99a77d, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x10}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x208, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, "ebf0ac05753ae744567e69d2abf2b6016231088d7c1ef1c2129930149263308f54b5824fc734ab7091e0604e77e654ab9450c43f5b611b5b"}, @NL80211_BAND_2GHZ={0x53, 0x0, "b2e410658b29b4cc06f033a8861382295694a4367b53dbff0bfd510389344d42b195e14b1a5050462ee6d44309885922835c2c9f0aab01e67483b38ac69089f9cc25e460f488d6c07caa2f09fc485d"}, @NL80211_BAND_6GHZ={0xa4, 0x3, "051f6e471e7636ab06ebe414d90483cf1426dd5dbef1673dfbc639911492a0038a8091d9f49f265a8cfdcaba029ef9b52d6fe6dd85e1849aed9bf3b008a508f40a6b602ee3e428c1e5244b7139e89b04c22428052b1b09895ce9676acbbbece6e4ba17cd781aacfe8b28916eff507ea6e6e7e65eb9beb1b4439945d233523c3b372794e3bb7a5ceaf731a9ac43a93a1f7107ffff819f3c4f6d409c57e18f32a1"}, @NL80211_BAND_5GHZ={0xd0, 0x1, "bb7b70fc57865df1afaaffd4bb468eb9f5c7c955b39b72afb96e6bd370b898bbe663727083109e1f1208ea2f6ee6ad1f2209a3c736c7ef4862df05e2295a26c6d5840980f4f80656a9ffbfe33c0e62553368131489c7d2e5bacfb9d888419b37e0760afadd5aed3572e347f9772647b6c1732008b6de756da55d0e1c246946e32395a799b4fdaad3d8f705acf8d12e51396efaa97ce73348875431197ba6910bc526f8b5f898f59f82431e3b025af4a436954ca19200c233c7f6eb19e4e84c1c8f2c6cabef20db4c92420c7f"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x23c}, 0x1, 0x0, 0x0, 0xc011}, 0x2) 3.52522005s ago: executing program 1 (id=6398): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.339741427s ago: executing program 1 (id=6399): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x52e02, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x5]}, {0xffff, 0x1, 0x8, 0x3}}, 0x58, 0x0, 0x0}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) 3.321674367s ago: executing program 0 (id=6401): r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x1c) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0x10000, @mcast1, 0x6}, 0x1c) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x38) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$unix(r3, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000003c0)=0x68) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340), 0x8}, 0xc085) getpeername$unix(r3, &(0x7f0000000280), &(0x7f0000000300)=0x6e) 3.213355096s ago: executing program 3 (id=6403): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@tipc, &(0x7f0000000080)=0x80) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x84) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'pim6reg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWMDB={0x58, 0x54, 0x100, 0x70bd2d, 0x25dfdbff, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x0, {@ip4=@rand_addr=0x64010102, 0x8edd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x44045}, 0x1) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0xb8, 0x6, 0xa751, 0xffffffffffffffff, 0x95, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0xe}, 0x50) (async) getpeername$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@fwd={0xb}]}, {0x0, [0x30, 0x30, 0x0, 0x61, 0x30, 0x0, 0x0, 0x30]}}, &(0x7f00000006c0)=""/102, 0x2e, 0x66, 0x0, 0x1}, 0x28) (async) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x25, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x6, &(0x7f0000000480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x3, 0x3, 0x0, 0x6, 0x8, 0x18}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc301}, @map_val={0x18, 0x2, 0x2, 0x0, r3}], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0xec, &(0x7f0000000500)=""/236, 0x40f00, 0x20, '\x00', r4, @fallback=0x11, r5, 0x8, &(0x7f0000000780)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x2, 0x3, 0xfffffffa}, 0x10, 0x0, r6, 0x6, &(0x7f0000000980)=[r7, r8, 0x1], &(0x7f00000009c0)=[{0x0, 0x1, 0x7, 0x9}, {0x0, 0x4, 0xa, 0x8}, {0x5, 0x5, 0xb, 0x5}, {0x0, 0x2, 0x10}, {0x0, 0x5, 0x9, 0x9}, {0x3, 0x3, 0x8, 0x2}], 0x10, 0x80000000}, 0x94) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000c00)={&(0x7f0000000b00)=""/199, 0xc7, 0x200, 0x4}) (async) recvfrom$l2tp6(r0, &(0x7f0000000c40)=""/231, 0xe7, 0x40010022, &(0x7f0000000d40)={0xa, 0x0, 0x0, @initdev}, 0x20) (async) r9 = socket$inet(0x2, 0x800, 0xf) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000d80)={0x0, @initdev, @dev}, &(0x7f0000000dc0)=0xc) sendmsg$inet6(r0, &(0x7f0000002000)={&(0x7f0000000e00)={0xa, 0x4e24, 0x1000, @empty, 0x8}, 0x1c, &(0x7f0000001f80)=[{&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)="ba5966c4e36ebca2819e6ffedf70018eb680424be51e789274b3533588429f224d612677c38595b9dcd37280", 0x2c}, {&(0x7f0000001e80)="4a2f8fadb1ca42961fdeffa2d19893bc485db23aa63ccc30b7ef7ba08714d08d8377908e0a773420e8aaf21e1e8cdc7d92b0bc0823fb24cf93e1771ff487ca386bcd16b643bd4f81879f6ebdfb83f7ce77bfed525bd36255a5d1f4667ddd6102f9a84390b8502075f8d2269b4e59c403a74e6c9535c391b7e46fafece013b4ada3c67141bc4437e46afafcdc605d2c2bed35ec45537410d80a8aee6553c1a4f583ec5aa5f478dd44c3112e2d45cfa7", 0xaf}, {&(0x7f0000001f40)="34c701a5bd5b58d51642913aee0e966ae4caba747e57f7a2ad9f0f3c3867c9c7905d70", 0x23}], 0x4, &(0x7f0000001fc0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x400}}], 0x30}, 0x2c008084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002340)={r6, 0x0, 0xe0, 0xd4, &(0x7f0000002040)="01f251e0e8fc8711d8ee681f30c3336ae9b6276f0811b2e83f286c22fb6f3055c7cd34269bc1860e70f53bfcf409ab06ca9bcbe1f11de3b012106a4d886fa5d64a7ab42a6749656f4f14c5fd71774b35c77c8c61fdaa6053755703ec694c06f838a7b747486f1a8bd0d22be60dfcf79f188afd49c675169a6a1a82f4b74f17509bc8e27291ea7bcea42314cda7026ddc7e2d7f1d1e252864f4034dee95582fbe1013fa54a63932105d2898f8cd588acadd54d19be5b7ef3f58e3996f9bc6042df9a9a400ba464df4b3768bef434bcb2db0574010848576187e586c50cd18a286", &(0x7f0000002140)=""/212, 0x2, 0x0, 0xad, 0x12, &(0x7f0000002240)="f2418a14bb10bf62a26ae7225a3b4a202415e3d935638bb9e915ff39158f89bbc2d0554c7dfb5ca6a0eb4307c51cdb32b166cfa97a5f24431deb5377ce5569dd986b026c70be0b47107f0bba3a19822348708436a8cd542bc243a576b39c8de683eb72cf1ef006d92866f5aadf844e4fb69795043493937ab7339dc9db1842f1f78b003ad9896fc835c2bf7d8f0335c2f14973ea7a8950d4922045eb45aa7ce23a767b8188821db27e2530e06c", &(0x7f0000002300)="e00f509fd1e59b6c80daf1807acd35e96aca", 0x4, 0x0, 0x7f}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000023c0)={r3, 0xffffffffffffffff}, 0x4) (async) getsockopt$IP_SET_OP_GET_BYNAME(r9, 0x1, 0x53, &(0x7f0000002400)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000002440)=0x28) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0xfff) (async) pselect6(0x40, &(0x7f0000002480)={0x3a3e, 0x0, 0x6, 0xffffffff, 0x8000000000000001, 0x0, 0x0, 0x6}, &(0x7f00000024c0)={0x1000, 0x5, 0x1, 0xffe0000000000000, 0x8, 0x1fa, 0xffffffffffffffff, 0x5}, &(0x7f0000002500)={0xfffffffffffffffe, 0x22a3, 0x9c, 0x38000000000000, 0x9, 0x7fff, 0x4, 0x7}, &(0x7f0000002540)={0x77359400}, &(0x7f00000025c0)={&(0x7f0000002580)={[0xffffffffffffffff]}, 0x8}) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000002600)) r12 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r12, 0x8982, &(0x7f0000002640)={0x7, 'xfrm0\x00', {0xfffffffe}, 0x2}) r13 = socket$tipc(0x1e, 0x2, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r3, 0x40285881, &(0x7f0000002680)={r13, 0x0, 0x0, 0x10001, 0xa8a7, 0x455e73228fb40f82}) (async) sendmsg$nl_route(r0, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)=@bridge_newneigh={0x3c, 0x1c, 0x100, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x0, r4, 0x20, 0xc, 0x4}, [@NDA_VLAN={0x6, 0x5, 0x4}, @NDA_VNI={0x8, 0x7, 0x96f}, @NDA_IFINDEX={0x8, 0x8, r10}, @NDA_DST_IPV4={0x8, 0x1, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000027c0)={r3, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r11, 0x50009401, &(0x7f0000002800)={{r14}, "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"}) 2.984082105s ago: executing program 3 (id=6404): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x4}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x6, 0x80000, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_netdev_private(r5, 0x89f2, &(0x7f0000000200)="cf416b9ce4eb0892a41457d6763b89c91f93052ee8dd0a96e3") socketpair(0x28, 0x5, 0x401, &(0x7f0000000240)) (async) socketpair(0x28, 0x5, 0x401, &(0x7f0000000240)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r10, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r10, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, 0x0, 0x15) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 2.867490373s ago: executing program 2 (id=6405): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000800)={0xdc, 0x0, 0x2, 0x2, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xf, @empty, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x44018}, 0x55) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000300000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$inet(r2, &(0x7f0000001f40)={&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001ec0)=[{&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000001dc0)="90a9651e0b9820b766e06dd4db2c6459c60d2ea7a9affbfd61d669c8b7893ed12c6de055e7a263f3be65d876c2179a1b7b422e5f945bc971fd67a1f1fffa6eed5dedb0a5", 0x44}, {&(0x7f0000001e40)="aa773ae91ae8068629ec18f0d3a1b7018525f9a3903584eb8c64f2dea039c972c03ff98049a7effb9677ff82873ef3da5b61799416766bb9fbe845575725a06d3081903e94f2f21813a96a64d399a7c2b3ce589a0b25dba04e6fbe8c45e329a336672ace6d653d88", 0x68}], 0x3, &(0x7f0000001f00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x30}, 0x4c800) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r3, @ANYRESHEX=r2, @ANYRES8=r3, @ANYRES32=r3], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000002000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000008"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) syz_emit_ethernet(0x68, &(0x7f0000000340)={@random="cf702e8cf675", @remote, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2a, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2}]}}}}}}, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="13000000b90d0000000000fa0a00eaff00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000000), &(0x7f0000000140)=r7}, 0x20) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYBLOB="8a71000002a00000240012800b00010069703667726500001400028005000b0002000000050008000c000000"], 0x44}}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000de5488b8c8fda0af79b965db7891e62c5d3ac819153b729a4f55abd5da2b34cf274d0c391bff114e3d41eba1cae4b4b6b4c652062fd1ca3754c4546704dacd99e74467068f8208d60c3a89f31870564a8e028eaaa8760f7a5fc79390e0d5684dcb2f3603444125054b033c08f54595fb0bfcf30892363f2af4f3c93220a123b60643d43de8da2c4283eb0cb012258f8280a2186c8ce021391bca", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf5) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008f6ff00000000000800000071117a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f00000001c0)={0x1, 0x1, 0xd5, 0x3, 0x1}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.850285373s ago: executing program 0 (id=6406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES64], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x15, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000012000000000000000000030018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7081c33b30a0000755ced1254bb9be4b914b592e4d77b8af8ff00000000bfa20000000000000702000000000001000000b7040000020000008500680f3008141235ec72f0ee1c520ba2d223b8697a84ea0de43b7cf06f892dcfed61cade13fcbec8c8d24fa69bb42f8593f183dce975f0c8ddc730ad6585b75eb6d978591999ac1845f8"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{r3, &(0x7f0000000380)='\x00', 0x4100, 0x0, 0xffff, &(0x7f00000000c0), &(0x7f0000000140)=0x4}, {[0x9, 0x1000, 0x5, 0x1]}, 0x2a, 0x5, &(0x7f0000000180)=""/5}) syz_emit_ethernet(0xba, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527a00843c0020010000000000000000000000000001ff02000000000000000000000000808715b02a62108379190f240800012f04000000000000c910ff020000000000000000000000000001c910fe8000000000000000000000000000aa000000000420880b0000000000000800ba878464fe4672d177b58c20328b9fc8000486dd080088be00000001100020000100000000000000080022eb00000000200000080200000000000078531666d74fd7bbfca58361bf855a792a3b02262065143b438817e09bdd"], 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000001300)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x806) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@rand_addr=' \x01\x00', @in6=@mcast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x80000000, 0x0, 0x100000}, {}, {0xfffffffe, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf25170000005400068014000300322d73352d3a955d482ee5364c4323843c00040067636d2861657329b7ff00000000000000000000000000000000000000000000140000009ea2d328893918792a5ca222a6ad614b6f3aa3a6"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='%\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb06000f0001000000"], 0x40}}, 0x24000080) sendto$packet(r6, &(0x7f0000000440)="05d936277c6f5422007f83477ca12425fe85b94394b03bf637d75009d3695c066733fe86748e3bf281e5e3f633b8f0a289039e34ca7f2916c9afc8af7a2a6719055f981f06f3f4f065", 0x49, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @random="6c267dad3e11"}, 0x14) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b40)=@newtfilter={0x11fc, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x11cc, 0x2, [@TCA_FLOW_EMATCHES={0x11c8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1194, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x8c, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_DATA={0xd, 0x5, "479bb735bfaffbc858"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x57, 0x5, "8c7dad409bc13bcc3507617eaf1500b6d16299ca32886db947a72fc2b4a23dfc90e62830d531fb6b38ec931812aeb1f2b96090e0f3e0807e29692dbc85d649a260ed7cb9aa06a07c2974d0ccafcb7f2c856122"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xeb}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8000, 0x1, 0x7fff}, {0x9f31, 0xfd, 0x1000, 0x0, 0x9, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4d, 0x7, 0x9}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0x5}, "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"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x3}, {0x4, 0x7, 0xc, 0xfc4c16d}}}, @TCF_EM_CANID={0x14, 0x7f, 0x0, 0x0, {{0x7, 0x7, 0xf2d6}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x6c, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x6}, {0x8, 0x6}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='j']}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="235311ce03eb", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b1"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x3, 0x2}, {0xc641, 0xfc, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xc3, 0x2}, {0x4, 0x0, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf, 0x2}, {0x4, 0x4, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x80, 0x7, 0x401}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x1ff}, {0x6, 0xea, 0x4, 0xb5a}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0xfffc}, {0x20004, 0x80, 0x2, 0x9}}}]}]}]}}]}, 0x11fc}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 1.893802413s ago: executing program 2 (id=6407): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newtaction={0x20c, 0x30, 0x1, 0x70bd25, 0x25dfdbff, {}, [{0x1f8, 0x1, [@m_mpls={0x1f4, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x1, 0x7, 0x8}, 0x4}}]}, {0x1a4, 0x4, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) setsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f0000000500)={@empty}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r7, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0xfffffffffffffc49) setsockopt$inet_int(r9, 0x0, 0x2, &(0x7f0000000000)=0x4, 0x4) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r10 = socket(0xa, 0xa, 0xfffffffd) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, @xdp={0x2c, 0x1, r11, 0x5}, @sco={0x1f, @none}, @vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x800, 0x0, 0x0, 0x0, 0xc, 0x0, 0x7fff, 0x5, 0x8}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2b000000211c61"], 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) 599.826317ms ago: executing program 1 (id=6408): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x20, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x40000, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdc01, {0x7, 0x0, 0x0, r2, 0x81, 0x6e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x4040000) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$sock_buf(r6, 0x1, 0x10, &(0x7f0000000040)=""/60, &(0x7f00000000c0)=0x3c) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000300), 0x12) sendfile(r8, r8, 0x0, 0x10001) r10 = openat$cgroup_procs(r4, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000300), 0x12) sendfile(r5, r5, 0x0, 0x10001) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000500)={0xa, 0x4e20, 0xfffffffc, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "00ea00", 0xc, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x6, 0x0, @void}}}}}}}}, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) accept4(r12, 0x0, 0x0, 0x800) 599.349136ms ago: executing program 4 (id=6409): ppoll(&(0x7f0000000740), 0x2000000000000219, &(0x7f0000000900)={0x77359400}, &(0x7f0000000940)={[0x4]}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 583.689776ms ago: executing program 3 (id=6410): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0000006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4008851}, 0x0) r2 = socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) sendmsg$kcm(r2, &(0x7f00000023c0)={&(0x7f0000000140)=@nfc={0x27, r7, 0x1, 0x7}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)="293f0bb9731e3d96a009f18ee81dd724d103c32ff4eb8088341bc34984b8be6f0a37d18b0c74bd1728267a704854", 0x2e}, {&(0x7f0000000340)="ad4c6b72c533d898855640997cae9195f59d974779e7a410e479339de2b5262ce61d03f43a18f1bba322ff1fcff529257e608c3a2e8c610902250ef6c871e82e40830765d5201de8b010d126c2388fac9d51be8b46d460192df53c91f017c2bb5089c5ac727f0e4a49af1bd0151b8e448dc646afb192f0bfbaa9fd7d65e534cc34eff13332859bcdee76a07d05af3abb0ec2e77888f79a64", 0x98}], 0x2, &(0x7f0000001100)=[{0x1010, 0x114, 0x1000, "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"}, {0x110, 0x1, 0xfe000000, "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"}, {0xa8, 0x101, 0xa6, "6b67a70c6e960a5063660f2f98c4d424dcc13402209b3f003aa8b51e4f0672d3a230400159675066bdfc96d1603967e04ba13713dd44ed740cf6a71675027618f5850f88bd95fbc42cfa196f173d288383d2a98b9b42f90197003f5384ae90c685d8f974334e5ebef661f1d55165d2b0e88ec7fe3dfb30cb3041db37088ee9dc8dbed61a9506a51f1f86d2cd7db1fda5885c"}, {0xc0, 0x1, 0x0, "bb0e54c01ca907cd8b8ba3f3fb7d16461c733fe2772150ec0409d82b5f59d995750b1761fc0fa7382b9f8f8ac3da676759a64bb35ba68923a2243458f4a6a922ae96bdfea3ce84dea4a1e6483b3cb786d715c077e929b89387ef8f93af649b3a8ab786a5c86c6b3c53111ecf4ed195428bc198fd93a7da8fd6cbb38cb3ef5279b7fb98f2769e200f975ee4431b79a4d29a2a876ea7266aab421722e5af47159fd9351351a4ad4322c8c37fa393ab646f"}], 0x1288}, 0x41) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r3}, 0x18) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1e, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @generic={0x4, 0x7, 0xd, 0x9, 0x8b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x27, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r8, r8, r8, r8, r8, r8, r8, r8, r2], 0x0, 0x10, 0x80000000}, 0x94) poll(&(0x7f0000000700)=[{r8, 0x488}, {r9, 0x10}, {r0, 0xa001}, {r2, 0x9001}, {r8, 0x15034}], 0x5, 0xb39c) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x3) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x38, 0x1403, 0x905dba7008364433, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 566.523597ms ago: executing program 0 (id=6411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020756c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f4940000850000000600000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) (async) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket(0x1e, 0x805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, &(0x7f0000000140)) (rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x3, 0x6, @remote}, 0x14) getsockopt$inet_mreqn(r5, 0x0, 0x24, 0x0, 0x0) (async) close(r1) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0x8, 0x1, 0x3, 0x1, 0x3, 0x80000000, 0xfc}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 32) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) 516.362507ms ago: executing program 2 (id=6412): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c"], 0xfc}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r4 = socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff, 0x17}, 0x14) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%-010d \x00'}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x27, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x200}, {}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @ringbuf_query, @snprintf, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x0, 0x4057b0d5, 0x80000000}, 0x10, 0x0, r7, 0x1, &(0x7f0000000a80)=[r8, r9, r10, r8], &(0x7f0000000ac0)=[{0x0, 0x5, 0xc, 0x2}], 0x10, 0x10000000}, 0x94) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r12, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) 417.33348ms ago: executing program 4 (id=6413): r0 = socket$inet(0x2, 0x2, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) r3 = socket(0x1e, 0x4, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'geneve0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x8}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01000000000000faffff0000200089eed137b32f8b0da20d67915dcc4c1c97046d26828b913136bf1de33fcf45ab854ce2449ba54f4d80000000000000120000160000000000"], 0x14}}, 0x20000040) (async) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) (async, rerun: 32) recvmmsg$unix(r1, &(0x7f0000001bc0), 0x0, 0x0, 0x0) (rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="c927d9ceda7045612153a6e4796c286aaed9cb167cdfe6505018"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x24000004) recvmmsg(r2, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) (async) preadv(r5, &(0x7f0000003c00)=[{&(0x7f0000000500)=""/255, 0xff}, {&(0x7f00000000c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001c00)=""/4094, 0xffe}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x1, 0x23a1, 0x1) (async) close(r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) r9 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000000c0), 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x0, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @rand_addr=0x64010100, 0x0, 0x0, 'team_slave_1\x00', 'veth1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x52ffe4dd04836947}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 281.86631ms ago: executing program 0 (id=6414): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRESDEC=r0], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x50, r0, 0x4000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@routing={0x5c, 0x0, 0x1, 0x5}, 0x8) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1ff, 0x0, 0x0, 0xa, 0x81, 0x1000, 0x0, 0xff, 0x0, 0x8, 'syz1\x00'}) 223.981992ms ago: executing program 2 (id=6415): unshare(0x400) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) recvfrom$inet6(r2, 0x0, 0x0, 0x40, 0x0, 0x0) tee(r0, r2, 0x0, 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc038586b, &(0x7f0000000280)={r2, &(0x7f00000000c0)='syzkaller\x00', 0x8003, &(0x7f0000000100)={@align=0x200, {0x0, 0x6, 0x7, 0xf}}, 0x9, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000240)=0x3}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={r4, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="260000aa373d010efd0000000000a8c5011a8550c539ce00ac70e6ef10348d1560f3829f2d8c9d4b9c88f12fee178c50dfed", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) 108.300854ms ago: executing program 2 (id=6416): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000001080)) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x10}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000280)={r6, 0x8}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x94, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 92.307373ms ago: executing program 0 (id=6417): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd29, 0x3, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {}, {0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r1, @ANYBLOB="400096040a000200aaaaaaaaaa0c000006000500"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b40)={0x1c, 0x38, 0x119, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1888ad47"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 392.657µs ago: executing program 1 (id=6418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet6(0xa, 0x5, 0x0) listen(r3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x40}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 0s ago: executing program 2 (id=6419): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r3, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x8050) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="183000000000000000000000030000001830000000000000000000000000000018000000000000000000000000000000000000000000000000000000080000001800000000000000000000000000000018100000", @ANYRES32, @ANYBLOB="414bd7d90000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x44}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xc8, r6}, [@IFA_ADDRESS={0x14, 0x1, @loopback={0x100000000000000}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c050}, 0x8004) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000973ee238e82b0b72b17b9f010a120900000300"/32, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4004090) kernel console output (not intermixed with test programs): tributes in process `syz.3.5088'. [ 684.117755][T26334] bond0: (slave geneve4): making interface the new active one [ 684.125995][T26334] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 684.135520][T26329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5088'. [ 684.145247][ T8894] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 684.162502][ T8894] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 684.167971][T26324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5085'. [ 684.180001][ T8894] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 684.190771][ T8894] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 684.208635][T26324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.233529][T26324] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5085'. [ 684.344133][T26343] netlink: 'syz.3.5091': attribute type 1 has an invalid length. [ 684.430305][T26353] macvlan0: mtu less than device minimum [ 685.009783][T26398] netlink: 'syz.0.5109': attribute type 3 has an invalid length. [ 685.027580][T26399] xt_CT: You must specify a L4 protocol and not use inversions on it [ 685.035317][T26402] syzkaller0: mtu greater than device maximum [ 685.748812][T26411] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 686.049949][T26445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 686.175491][T26459] ip6tnl4: entered allmulticast mode [ 773.654666][T26497] __nla_validate_parse: 5 callbacks suppressed [ 773.654684][T26497] netlink: 272 bytes leftover after parsing attributes in process `syz.2.5129'. [ 773.961582][T26518] netlink: 'syz.1.5133': attribute type 13 has an invalid length. [ 774.057385][T26498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.127638][T26498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.320206][T26498] veth0_macvtap: left allmulticast mode [ 774.360599][T26498] vti0: left allmulticast mode [ 774.366711][T26498] xfrm1: left allmulticast mode [ 774.394146][T26498] vlan2: left allmulticast mode [ 774.399647][T26498] .`: left allmulticast mode [ 774.410210][T26498] ì: left allmulticast mode [ 774.415133][T26498] bridge0: left allmulticast mode [ 774.426527][T26498] bridge2: left allmulticast mode [ 774.462354][ T5355] lo speed is unknown, defaulting to 1000 [ 774.472314][ T5355] syz1: Port: 1 Link DOWN [ 774.524257][ T8877] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.533434][ T8877] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.542904][ T8877] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 774.552734][ T8877] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 774.563324][ T8877] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.572430][ T8877] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.581723][ T8877] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 774.590931][ T8877] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 774.601852][ T809] lo speed is unknown, defaulting to 1000 [ 774.660132][ T8877] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.686821][ T8877] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.702648][ T8877] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 774.727785][ T8877] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 774.750181][ T8877] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.776546][ T8877] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.790975][ T8877] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 774.806512][ T8877] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 774.835000][T26540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5140'. [ 774.903501][T26535] siw: device registration error -23 [ 774.909616][T26537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5139'. [ 774.971278][T26543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5141'. [ 775.453897][T26562] ip6tnl0: Caught tx_queue_len zero misconfig [ 775.640965][T26570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5149'. [ 776.368837][T26587] ±ÿ speed is unknown, defaulting to 1000 [ 776.382261][T26579] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 776.470914][T26587] wlan0 speed is unknown, defaulting to 1000 [ 776.494528][T26587] lo speed is unknown, defaulting to 1000 [ 776.854221][T26596] siw: device registration error -23 [ 777.054907][T26608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5158'. [ 777.347555][T26626] netlink: zone id is out of range [ 777.352767][T26626] netlink: zone id is out of range [ 777.367760][T26626] netlink: zone id is out of range [ 777.374155][T26623] bridge0: left promiscuous mode [ 777.382064][T26627] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5160'. [ 777.383673][T26626] netlink: set zone limit has 8 unknown bytes [ 777.478647][T26623] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 777.728719][T26652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5165'. [ 777.779646][T26656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5167'. [ 777.993557][T26662] netlink: 388 bytes leftover after parsing attributes in process `syz.1.5168'. [ 778.191264][T26669] gretap1: entered promiscuous mode [ 778.338023][T26675] openvswitch: netlink: Message has 12 unknown bytes. [ 778.347941][T26675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.588046][T26691] syzkaller0: entered promiscuous mode [ 778.616320][T26691] syzkaller0: entered allmulticast mode [ 778.639446][T26691] TC_ACT_REPEAT abuse ? [ 778.872226][T26706] __nla_validate_parse: 3 callbacks suppressed [ 778.872244][T26706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5182'. [ 778.911208][T26706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5182'. [ 779.003150][T26710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5185'. [ 779.045222][T26710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5185'. [ 779.523447][T26742] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5193'. [ 779.781406][T26757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5198'. [ 780.269271][T26793] xt_limit: Overflow, try lower: 268435456/134217728 [ 780.280682][T26794] team0: No ports can be present during mode change [ 780.602724][T26809] x_tables: duplicate underflow at hook 2 [ 781.017612][T26817] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5212'. [ 781.064824][T26819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5213'. [ 781.290693][T26827] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5218'. [ 781.321190][T26827] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5218'. [ 781.414231][T26825] sctp: [Deprecated]: syz.0.5217 (pid 26825) Use of struct sctp_assoc_value in delayed_ack socket option. [ 781.414231][T26825] Use struct sctp_sack_info instead [ 781.541070][T26842] ±ÿ speed is unknown, defaulting to 1000 [ 781.561831][T26844] sock: sock_timestamping_bind_phc: sock not bind to device [ 781.565679][T26842] wlan0 speed is unknown, defaulting to 1000 [ 781.599196][T26842] lo speed is unknown, defaulting to 1000 [ 781.680890][T26855] erspan0: left promiscuous mode [ 781.744223][T26855] bridge0: left promiscuous mode [ 781.753921][T26855] macsec1: left promiscuous mode [ 781.823221][T26860] netlink: 'syz.4.5225': attribute type 9 has an invalid length. [ 781.873554][T26855] xfrm1: left allmulticast mode [ 781.935810][T26855] veth9: left allmulticast mode [ 781.973600][ T8866] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.005941][ T8866] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 782.041274][ T8866] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.061516][ T8866] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 782.093944][ T8866] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.124903][ T8866] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 782.146011][ T8866] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.166047][ T8866] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 782.541785][T26889] bridge4: entered promiscuous mode [ 782.565328][T26889] bridge4: entered allmulticast mode [ 782.579602][T26889] team0: Port device bridge4 added [ 783.745015][T26930] netlink: 'syz.3.5245': attribute type 8 has an invalid length. [ 784.932425][T26988] netlink: 'syz.1.5260': attribute type 2 has an invalid length. [ 785.068573][T26994] __nla_validate_parse: 6 callbacks suppressed [ 785.068614][T26994] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5263'. [ 785.119289][T26994] gretap0: entered promiscuous mode [ 785.143490][T27006] netlink: 'syz.1.5266': attribute type 26 has an invalid length. [ 785.351508][T27018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5270'. [ 785.390410][T27018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5270'. [ 785.403930][T27022] hsr0: entered allmulticast mode [ 785.430343][T27022] hsr_slave_0: entered allmulticast mode [ 785.449383][T27022] hsr_slave_1: entered allmulticast mode [ 785.456019][T27016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5268'. [ 785.494432][T27016] hsr_slave_0: left promiscuous mode [ 785.541926][T27016] hsr_slave_1: left promiscuous mode [ 785.562114][T27034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5273'. [ 785.602821][T27016] hsr0 (unregistering): left allmulticast mode [ 785.719584][T27041] vlan3: entered allmulticast mode [ 785.740728][T27041] bridge5: entered allmulticast mode [ 785.759378][T27034] bridge5: port 1(erspan0) entered blocking state [ 785.786541][T27034] bridge5: port 1(erspan0) entered disabled state [ 785.817588][T27034] erspan0: entered allmulticast mode [ 785.824216][T27049] netlink: 'syz.2.5277': attribute type 2 has an invalid length. [ 785.836032][T27034] erspan0: entered promiscuous mode [ 785.962119][T27049] : entered promiscuous mode [ 788.762383][T27064] ipvlan0: Caught tx_queue_len zero misconfig [ 788.788621][T27076] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 788.799166][T27076] batman_adv: batadv0: Adding interface: gretap3 [ 788.805624][T27076] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.849606][T27076] batman_adv: batadv0: Interface activated: gretap3 [ 788.861170][T27084] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5283'. [ 788.879847][T27084] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5283'. [ 788.902424][T27084] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5283'. [ 789.222576][T27109] xt_connbytes: Forcing CT accounting to be enabled [ 789.253198][T27111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5290'. [ 789.613981][T27124] ±ÿ speed is unknown, defaulting to 1000 [ 789.654414][T27124] wlan0 speed is unknown, defaulting to 1000 [ 789.686010][T27124] lo speed is unknown, defaulting to 1000 [ 789.791410][T27138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5298'. [ 790.022169][T27144] netlink: 'syz.2.5301': attribute type 4 has an invalid length. [ 790.062833][T27143] ±ÿ speed is unknown, defaulting to 1000 [ 790.084584][T27144] netlink: 'syz.2.5301': attribute type 4 has an invalid length. [ 790.110635][T27143] wlan0 speed is unknown, defaulting to 1000 [ 790.394804][T27131] __nla_validate_parse: 3 callbacks suppressed [ 790.394822][T27131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5295'. [ 790.430519][T27154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5303'. [ 792.713391][T27143] lo speed is unknown, defaulting to 1000 [ 793.278191][T27198] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.5310'. [ 793.505332][T27200] ip6tnl6: entered allmulticast mode [ 793.576903][T27200] netlink: 'syz.2.5312': attribute type 1 has an invalid length. [ 793.834986][T27206] tipc: Enabled bearer , priority 0 [ 793.843891][T27212] syzkaller0: entered promiscuous mode [ 793.852598][T27212] syzkaller0: entered allmulticast mode [ 793.884734][T27218] 8021q: VLANs not supported on lo [ 793.899380][T27203] tipc: Resetting bearer [ 793.938325][T27221] bond0: Caught tx_queue_len zero misconfig [ 793.952092][T27222] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 794.001027][T27202] tipc: Resetting bearer [ 794.065660][T27202] tipc: Disabling bearer [ 794.134187][T27233] netlink: get zone limit has 4 unknown bytes [ 794.441083][T27245] syzkaller0: entered promiscuous mode [ 794.468090][T27245] syzkaller0: entered allmulticast mode [ 794.607409][T27258] pim6reg: entered allmulticast mode [ 794.911770][T27277] netlink: 376 bytes leftover after parsing attributes in process `syz.2.5330'. [ 795.054050][ T30] audit: type=1804 audit(1784843766.514:11): pid=27290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5335" name="/newroot/419/cgroup.controllers" dev="tmpfs" ino=2164 res=1 errno=0 [ 795.123123][ T30] audit: type=1800 audit(1784843766.514:12): pid=27290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5335" name="cgroup.controllers" dev="tmpfs" ino=2164 res=0 errno=0 [ 795.208891][T27298] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5334'. [ 795.261203][T27302] syzkaller1: entered promiscuous mode [ 795.277771][T27302] syzkaller1: entered allmulticast mode [ 795.305216][T27302] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 795.345233][T27305] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5340'. [ 795.373475][T27305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 795.390398][T27302] netlink: 'syz.2.5339': attribute type 2 has an invalid length. [ 795.415766][T27297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5337'. [ 795.574964][T27312] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5342'. [ 795.679872][T27312] syzkaller0: entered promiscuous mode [ 795.685493][T27312] syzkaller0: entered allmulticast mode [ 795.694426][T27319] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5342'. [ 795.905827][T27326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5347'. [ 796.104623][T27335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5351'. [ 798.542716][T27358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5355'. [ 798.557952][T27358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5355'. [ 799.120703][T27388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5362'. [ 799.684808][T27408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5368'. [ 802.088603][T27393] erspan0: left allmulticast mode [ 802.094112][T27393] erspan0: left promiscuous mode [ 802.100181][T27393] bridge5: port 1(erspan0) entered disabled state [ 802.112336][T27393] .`: (slave bridge0): Releasing backup interface [ 802.144593][T27393] bond3: (slave .`): Releasing backup interface [ 802.165006][T27393] bridge_slave_0: left allmulticast mode [ 802.173448][T27393] bridge_slave_0: left promiscuous mode [ 802.181056][T27393] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.192131][T27393] bridge_slave_1: left allmulticast mode [ 802.198124][T27393] bridge_slave_1: left promiscuous mode [ 802.203888][T27393] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.215367][T27393] .`: (slave 30ì): Releasing backup interface [ 802.225865][T27393] team0: Port device team_slave_0 removed [ 802.235729][T27393] team0: Port device team_slave_1 removed [ 802.244737][T27393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.252653][T27393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.260580][T27393] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 802.567840][T27402] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.596896][T27427] netlink: 'syz.1.5372': attribute type 6 has an invalid length. [ 802.810028][T27402] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.890059][T27435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5375'. [ 803.025502][T27402] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.051256][T27444] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 803.192552][T27402] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.263678][T27449] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5381'. [ 803.420310][ T8873] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.548472][T27458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5384'. [ 803.630919][ T8897] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.648677][ T8897] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.810141][T27458] 8021q: adding VLAN 0 to HW filter on device bond15 [ 803.971230][ T8897] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.001809][T27456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5384'. [ 804.054168][T27456] bond15: entered allmulticast mode [ 804.198474][T27482] tipc: Enabled bearer , priority 0 [ 804.405053][T27482] tipc: Resetting bearer [ 804.698115][T27509] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5392'. [ 804.759088][T27509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5392'. [ 804.874928][ T8873] tipc: Resetting bearer [ 804.910870][T27476] tipc: Resetting bearer [ 805.158904][T27519] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5394'. [ 805.210806][T27523] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5394'. [ 807.423431][T27476] tipc: Disabling bearer [ 807.437532][T27511] tipc: Enabled bearer , priority 0 [ 807.495826][T27491] tipc: Disabling bearer [ 807.525324][T27523] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5394'. [ 807.657236][T27529] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5396'. [ 807.954384][T27544] syzkaller1: entered promiscuous mode [ 807.969472][T27544] syzkaller1: entered allmulticast mode [ 808.133659][T27551] __nla_validate_parse: 3 callbacks suppressed [ 808.133704][T27551] netlink: 300 bytes leftover after parsing attributes in process `syz.4.5403'. [ 808.214630][T27553] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 809.324615][T27608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5416'. [ 810.130537][T27645] ±ÿ speed is unknown, defaulting to 1000 [ 810.157318][T27645] wlan0 speed is unknown, defaulting to 1000 [ 810.187951][T27645] lo speed is unknown, defaulting to 1000 [ 810.263328][T27659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 810.632406][T27665] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 810.779942][T27684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.334487][T27700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5433'. [ 811.457919][T27705] netlink: 'syz.0.5437': attribute type 2 has an invalid length. [ 811.684561][T27710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5439'. [ 811.713045][T27702] syzkaller0: entered promiscuous mode [ 811.728422][T27702] syzkaller0: entered allmulticast mode [ 815.872689][ T8844] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 815.911348][ T8844] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 815.954924][ T8844] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 815.983917][ T8844] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 816.039395][T27752] netlink: 'syz.2.5449': attribute type 28 has an invalid length. [ 816.052628][T27752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5449'. [ 816.108370][T27757] x_tables: duplicate underflow at hook 2 [ 816.580896][T27777] syzkaller0: entered promiscuous mode [ 816.598344][T27777] syzkaller0: entered allmulticast mode [ 817.094679][T27798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5463'. [ 817.104619][T27798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5463'. [ 817.169266][T27800] netlink: 'syz.0.5465': attribute type 8 has an invalid length. [ 817.190195][T27800] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5465'. [ 817.440595][T27818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5470'. [ 817.471587][T27816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5470'. [ 817.480780][T27817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5466'. [ 817.675222][T27830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5475'. [ 817.969156][T27842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 818.026836][T27838] syzkaller0: entered promiscuous mode [ 818.046106][T27838] syzkaller0: entered allmulticast mode [ 818.420853][T27854] netlink: 'syz.2.5481': attribute type 1 has an invalid length. [ 818.438944][T27854] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5481'. [ 818.612870][T27862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5483'. [ 820.439088][T27957] netlink: 'syz.3.5507': attribute type 11 has an invalid length. [ 820.508100][ T8873] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.522451][T27957] netlink: 'syz.3.5507': attribute type 11 has an invalid length. [ 820.548801][ T8873] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.598586][ T8873] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.639545][ T8873] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.804395][T27978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 821.205701][T27987] netlink: 'syz.2.5513': attribute type 1 has an invalid length. [ 821.467485][T27987] 8021q: adding VLAN 0 to HW filter on device bond9 [ 821.572317][T28002] bond9: (slave gretap2): making interface the new active one [ 821.613935][T28002] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 821.884852][T28031] __nla_validate_parse: 9 callbacks suppressed [ 821.884869][T28031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5521'. [ 822.044416][T28036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5522'. [ 822.176508][T28043] ipip0: entered promiscuous mode [ 822.202576][T28043] ipip0: entered allmulticast mode [ 822.428013][T28051] syzkaller0: entered promiscuous mode [ 822.441542][T28051] syzkaller0: entered allmulticast mode [ 822.513826][T28051] netlink: 47 bytes leftover after parsing attributes in process `syz.0.5526'. [ 822.554677][T28054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5527'. [ 822.580542][T28053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5527'. [ 822.710606][T28054] 8021q: adding VLAN 0 to HW filter on device bond5 [ 823.052220][T28075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5530'. [ 823.274372][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5531'. [ 823.729110][T28092] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 823.913160][T28103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5539'. [ 823.948038][T28103] netlink: 'syz.3.5539': attribute type 1 has an invalid length. [ 824.118135][T28117] netlink: 'syz.2.5544': attribute type 10 has an invalid length. [ 824.163115][T28115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5541'. [ 824.207435][T28103] 8021q: adding VLAN 0 to HW filter on device bond16 [ 824.625225][T28136] netlink: 'syz.4.5546': attribute type 15 has an invalid length. [ 824.650365][T28136] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5546'. [ 824.963279][T28147] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 825.049655][T28149] netlink: 'syz.4.5551': attribute type 2 has an invalid length. [ 825.117834][T28157] bond5: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 825.142858][T28157] bond5 (unregistering): Released all slaves [ 825.377323][T28169] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 825.754623][T28189] xt_hashlimit: size too large, truncated to 1048576 [ 826.103983][T28198] bond7: entered promiscuous mode [ 826.115495][T28198] 8021q: adding VLAN 0 to HW filter on device bond7 [ 826.309559][T28212] netlink: 'syz.3.5565': attribute type 11 has an invalid length. [ 826.902702][T28228] syzkaller0: entered promiscuous mode [ 826.914318][T28228] syzkaller0: entered allmulticast mode [ 826.947594][T28228] __nla_validate_parse: 2 callbacks suppressed [ 826.947610][T28228] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5570'. [ 826.996106][T28228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5570'. [ 827.018081][T28228] geneve0: entered allmulticast mode [ 827.789865][T28256] netlink: 'syz.4.5577': attribute type 4 has an invalid length. [ 827.832975][T28256] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5577'. [ 828.293526][T28274] vlan2: entered promiscuous mode [ 828.300943][T28274] bond0: entered promiscuous mode [ 828.663353][T28285] netlink: 'syz.1.5585': attribute type 2 has an invalid length. [ 828.871831][T28285] : entered promiscuous mode [ 829.070219][T28303] syzkaller0: entered promiscuous mode [ 829.089986][T28303] syzkaller0: entered allmulticast mode [ 829.226069][T28313] netlink: 'syz.1.5594': attribute type 62 has an invalid length. [ 829.461671][T28330] netlink: 'syz.4.5598': attribute type 13 has an invalid length. [ 829.494680][T28330] netlink: 'syz.4.5598': attribute type 27 has an invalid length. [ 829.752743][T28350] netlink: 'syz.1.5602': attribute type 39 has an invalid length. [ 829.792193][T28355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5605'. [ 829.859788][T28352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5604'. [ 830.037618][T28355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5605'. [ 830.083759][T28368] bridge_slave_0: left allmulticast mode [ 830.178917][T28368] bridge_slave_0: left promiscuous mode [ 830.207033][T28368] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.321409][T28368] bridge_slave_1: left allmulticast mode [ 830.329502][T28368] bridge_slave_1: left promiscuous mode [ 830.336344][T28368] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.379054][T28368] bond0: (slave bond_slave_0): Releasing backup interface [ 830.387726][T28368] bond_slave_0: left allmulticast mode [ 830.403315][T28368] bond0: (slave bond_slave_1): Releasing backup interface [ 830.415162][T28368] bond_slave_1: left allmulticast mode [ 830.431707][T28368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.441752][T28368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.462861][T28368] batman_adv: batadv0: Interface deactivated: gretap1 [ 830.469848][T28368] batman_adv: batadv0: Removing interface: gretap1 [ 830.484406][T28368] bond6: (slave geneve2): Releasing active interface [ 830.494848][T28368] geneve2: left allmulticast mode [ 830.514863][T28368] bond9: (slave gretap2): Releasing active interface [ 830.591617][T28381] pim6reg: left allmulticast mode [ 830.705103][T28380] ±ÿ speed is unknown, defaulting to 1000 [ 830.735719][T28380] wlan0 speed is unknown, defaulting to 1000 [ 830.753864][T28380] lo speed is unknown, defaulting to 1000 [ 830.929361][T28395] sctp: [Deprecated]: syz.4.5614 (pid 28395) Use of int in max_burst socket option deprecated. [ 830.929361][T28395] Use struct sctp_assoc_value instead [ 831.195943][T28398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5616'. [ 831.207635][T28400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5615'. [ 831.222677][T28398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5616'. [ 831.256206][T28398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5616'. [ 831.926241][T28415] syz_tun: entered promiscuous mode [ 831.940070][T28415] erspan0: entered promiscuous mode [ 831.965823][T28415] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 832.007140][T28415] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 832.113935][ T30] audit: type=1800 audit(1784843803.574:13): pid=28423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5621" name="memory.events" dev="tmpfs" ino=2455 res=0 errno=0 [ 832.262565][T28425] dvmrp0: entered allmulticast mode [ 832.269411][T28427] __nla_validate_parse: 3 callbacks suppressed [ 832.269426][T28427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5623'. [ 832.329971][T28431] openvswitch: netlink: Key 22 has unexpected len 0 expected 4 [ 832.461873][T28433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5623'. [ 832.541560][T28435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5625'. [ 832.622323][T28439] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5626'. [ 832.674757][T28443] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5626'. [ 832.766210][T28439] ip6gre1: entered promiscuous mode [ 832.797560][T28439] ip6gre1: entered allmulticast mode [ 833.059744][T28456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5628'. [ 833.074398][T28454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5629'. [ 833.144998][ T8866] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.184281][ T8866] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.250597][ T8866] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.309235][ T8866] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.965983][T28474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5630'. [ 834.070347][T28474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5630'. [ 834.101760][T28474] netlink: 'syz.1.5630': attribute type 12 has an invalid length. [ 834.184378][T28474] netlink: 'syz.1.5630': attribute type 14 has an invalid length. [ 834.199949][T28504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5639'. [ 834.654660][T28536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.040313][T28545] syzkaller0: entered promiscuous mode [ 835.075231][T28545] syzkaller0: entered allmulticast mode [ 836.385707][T28596] netlink: 'syz.2.5660': attribute type 14 has an invalid length. [ 836.821921][T28616] netlink: 'syz.1.5662': attribute type 29 has an invalid length. [ 836.992547][T28622] netlink: 'syz.4.5665': attribute type 23 has an invalid length. [ 837.159673][T28636] netlink: 'syz.2.5669': attribute type 1 has an invalid length. [ 837.454650][T28637] veth7: entered allmulticast mode [ 837.481132][T28637] bond10: (slave veth7): Enslaving as an active interface with a down link [ 837.599621][T28651] : option downdelay: invalid value (18446744073709547007) [ 837.608648][T28651] : option downdelay: allowed values 0 - 2147483647 [ 837.625590][T28651]  (unregistering): Released all slaves [ 837.723307][T28668] syzkaller0: entered promiscuous mode [ 837.748405][T28668] syzkaller0: entered allmulticast mode [ 837.952205][T28675] __nla_validate_parse: 4 callbacks suppressed [ 837.952224][T28675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5676'. [ 838.455581][T28700] macvlan0: entered promiscuous mode [ 838.480619][T28700] netlink: 'syz.0.5684': attribute type 1 has an invalid length. [ 838.522853][T28700] netlink: 'syz.0.5684': attribute type 2 has an invalid length. [ 838.599634][T28705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5686'. [ 838.621781][T28705] siw: device registration error -23 [ 838.643011][T28705] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5686'. [ 838.690280][T28705] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5686'. [ 839.100127][T28722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5690'. [ 839.318236][T28722] bond5: entered promiscuous mode [ 839.327163][T28722] 8021q: adding VLAN 0 to HW filter on device bond5 [ 839.383153][T28722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5690'. [ 839.470501][T28724] 8021q: adding VLAN 0 to HW filter on device bond6 [ 839.484768][T28724] bond6: entered promiscuous mode [ 839.492343][T28724] bond5: (slave bond6): Enslaving as an active interface with an up link [ 839.553379][T28717] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 839.613611][T28722] bridge8: entered promiscuous mode [ 839.644128][T28722] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 840.176054][T28755] bridge0: entered promiscuous mode [ 840.183001][T28755] bridge0: entered allmulticast mode [ 840.425887][T28759] ipip0: entered promiscuous mode [ 840.557811][T28762] batadv_slave_0: entered promiscuous mode [ 840.585022][T28764] ip6_vti0: Caught tx_queue_len zero misconfig [ 840.652821][T28769] nbd: nbd4 already in use [ 840.696810][T28769] block nbd4: NBD_DISCONNECT [ 840.716421][T28769] block nbd4: Send disconnect failed -32 [ 840.741667][T28769] block nbd4: shutting down sockets [ 840.799717][T28776] netlink: 'syz.1.5705': attribute type 10 has an invalid length. [ 840.841240][T28771] ±ÿ speed is unknown, defaulting to 1000 [ 840.873098][T28771] wlan0 speed is unknown, defaulting to 1000 [ 840.919586][T28771] lo speed is unknown, defaulting to 1000 [ 841.023647][T28781] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5708'. [ 841.060009][T28781] veth0: Caught tx_queue_len zero misconfig [ 841.310811][T28761] batadv_slave_0: left promiscuous mode [ 841.423493][T28797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5715'. [ 841.481118][T28802] xt_TCPMSS: Only works on TCP SYN packets [ 841.684484][T28801] syzkaller0: entered promiscuous mode [ 841.709978][T28801] syzkaller0: entered allmulticast mode [ 841.743262][T28809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5716'. [ 841.751592][T28808] xt_hashlimit: size too large, truncated to 1048576 [ 841.754024][T28809] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 841.780786][T28807] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5718'. [ 843.104489][T28831] __nla_validate_parse: 2 callbacks suppressed [ 843.104522][T28831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5720'. [ 845.059462][T28847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5724'. [ 845.064186][T28852] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5727'. [ 845.270618][T28858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.400110][T28863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5731'. [ 845.430918][T28863] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5731'. [ 845.617796][T28856] IPVS: length: 217 != 8 [ 845.710915][T28871] netlink: 'syz.2.5734': attribute type 1 has an invalid length. [ 845.772278][T28871] bond11: entered promiscuous mode [ 845.778665][T28871] 8021q: adding VLAN 0 to HW filter on device bond11 [ 845.867706][T28871] 8021q: adding VLAN 0 to HW filter on device bond11 [ 845.887594][T28871] bond11: (slave vti0): The slave device specified does not support setting the MAC address [ 845.900862][T28871] bond11: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 845.925899][T28871] bond11: (slave vti0): making interface the new active one [ 845.937888][T28871] vti0: entered promiscuous mode [ 845.944515][T28871] bond11: (slave vti0): Enslaving as an active interface with an up link [ 845.994822][T28877] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 846.032689][T28879] gre4: entered promiscuous mode [ 846.107357][T28879] gre4: entered allmulticast mode [ 846.426101][T28901] netlink: 332 bytes leftover after parsing attributes in process `syz.3.5739'. [ 846.460701][T28901] netlink: 'syz.3.5739': attribute type 9 has an invalid length. [ 846.495175][T28901] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5739'. [ 846.532438][T28901] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5739'. [ 846.536101][T28904] netlink: 'syz.4.5741': attribute type 1 has an invalid length. [ 846.751745][T28915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5743'. [ 846.983713][T28931] netlink: 'syz.1.5747': attribute type 8 has an invalid length. [ 847.079048][T28933] syzkaller0: entered promiscuous mode [ 847.085242][T28933] syzkaller0: entered allmulticast mode [ 847.250614][T28942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5752'. [ 848.149899][T28962] __nla_validate_parse: 2 callbacks suppressed [ 848.149933][T28962] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5757'. [ 848.385375][T28970] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5758'. [ 848.412573][T28974] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5760'. [ 848.609143][T28983] xt_recent: Unsupported userspace flags (000000c5) [ 848.891291][T28993] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5764'. [ 849.035446][T29006] IPv6: NLM_F_REPLACE set, but no existing node found! [ 849.139005][T29010] syzkaller0: entered promiscuous mode [ 849.156471][T29010] syzkaller0: entered allmulticast mode [ 849.792819][T29044] IPVS: set_ctl: invalid protocol: 12139 57.155.194.241:44889 [ 849.801642][T29043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5780'. [ 849.829725][T29044] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 849.840573][T29044] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 849.917839][T29047] syzkaller0: entered promiscuous mode [ 849.923677][T29047] syzkaller0: entered allmulticast mode [ 849.975543][T29047] tipc: Enabled bearer , priority 0 [ 850.023276][T29046] tipc: Resetting bearer [ 850.136881][T29046] tipc: Disabling bearer [ 850.372780][T29065] netlink: 'syz.1.5785': attribute type 2 has an invalid length. [ 850.386696][T29065] netlink: 'syz.1.5785': attribute type 8 has an invalid length. [ 850.442083][T29065] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5785'. [ 850.637452][T29079] netlink: 51 bytes leftover after parsing attributes in process `syz.0.5792'. [ 850.651782][T29075] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5789'. [ 850.892533][T29091] netlink: 'syz.0.5793': attribute type 1 has an invalid length. [ 851.119397][T29095] bond7: (slave dummy0): making interface the new active one [ 851.141398][T29095] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 851.187625][T29099] bond7: (slave dummy0): Releasing active interface [ 851.240593][T29099] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 851.717992][T29114] ±ÿ speed is unknown, defaulting to 1000 [ 851.763492][T29114] wlan0 speed is unknown, defaulting to 1000 [ 851.820008][T29114] lo speed is unknown, defaulting to 1000 [ 851.927586][T29131] netlink: 'syz.0.5805': attribute type 1 has an invalid length. [ 851.972116][T29131] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5805'. [ 852.090180][T29137] xt_hashlimit: size too large, truncated to 1048576 [ 852.196004][T29142] netlink: 'syz.0.5807': attribute type 21 has an invalid length. [ 852.236907][T29142] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5807'. [ 852.314625][T29142] netlink: 'syz.0.5807': attribute type 1 has an invalid length. [ 853.344925][T29178] netlink: 'syz.2.5813': attribute type 1 has an invalid length. [ 853.983966][T29203] __nla_validate_parse: 3 callbacks suppressed [ 853.983985][T29203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5818'. [ 854.180669][T29207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5819'. [ 854.300489][T29208] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5818'. [ 854.324021][T29208] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5818'. [ 854.410055][T29215] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5818'. [ 854.480593][T29208] bond3: (slave ): Releasing active interface [ 854.898410][T29229] sctp: [Deprecated]: syz.1.5822 (pid 29229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 854.898410][T29229] Use struct sctp_sack_info instead [ 855.037445][T29233] ±ÿ speed is unknown, defaulting to 1000 [ 855.082578][T29233] wlan0 speed is unknown, defaulting to 1000 [ 855.112247][T29233] lo speed is unknown, defaulting to 1000 [ 855.316978][T29257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5826'. [ 855.521786][T29262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5830'. [ 855.993781][T29291] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5834'. [ 856.321160][T29296] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5835'. [ 856.389460][T29279] ±ÿ speed is unknown, defaulting to 1000 [ 856.442791][T29279] wlan0 speed is unknown, defaulting to 1000 [ 856.494709][T29279] lo speed is unknown, defaulting to 1000 [ 857.203193][T29330] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5845'. [ 857.527177][T29336] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 858.104692][T29346] bond8 (unregistering): Released all slaves [ 858.843024][T29374] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 859.522879][T29395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5863'. [ 859.713986][T29404] lo: Caught tx_queue_len zero misconfig [ 859.722855][T29404] netlink: 'syz.1.5866': attribute type 14 has an invalid length. [ 860.461736][T29447] 8021q: VLANs not supported on ip_vti0 [ 860.615483][T29457] netlink: 'syz.0.5881': attribute type 1 has an invalid length. [ 860.822978][T29464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5886'. [ 860.836186][T29464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5886'. [ 860.850911][T29464] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5886'. [ 860.875976][T29469] netlink: 'syz.0.5881': attribute type 10 has an invalid length. [ 860.903927][T29457] 8021q: adding VLAN 0 to HW filter on device bond8 [ 860.913040][T29469] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5881'. [ 861.039826][T29476] nbd: must specify at least one socket [ 861.107809][T29459] bond8: (slave veth7): Enslaving as an active interface with a down link [ 861.224804][ T30] audit: type=1107 audit(1784843832.684:14): pid=29467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 861.249905][T29462] bond8: (slave dummy0): making interface the new active one [ 861.263966][T29479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5889'. [ 861.338805][T29462] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 861.388674][T29469] dummy0: entered promiscuous mode [ 861.414171][T29469] bond8: (slave dummy0): Releasing active interface [ 861.629987][T29496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5892'. [ 861.865318][T29501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5892'. [ 861.908085][T29497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5892'. [ 862.408803][T29525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5898'. [ 862.500173][T29525] ip6gre2: entered promiscuous mode [ 862.505611][T29525] ip6gre2: entered allmulticast mode [ 862.543698][T29529] netlink: 'syz.1.5899': attribute type 10 has an invalid length. [ 862.563670][T29525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.388804][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 863.405846][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 863.417275][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 863.431535][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 863.442044][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 863.547473][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 863.563945][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 863.582728][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 863.593681][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 863.603615][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 863.953217][T29581] 8021q: adding VLAN 0 to HW filter on device bond17 [ 863.981978][T29586] bond17: (slave gretap2): Enslaving as an active interface with an up link [ 864.063405][T17160] syz_tun (unregistering): left allmulticast mode [ 864.654998][T29562] ±ÿ speed is unknown, defaulting to 1000 [ 864.669329][T29562] wlan0 speed is unknown, defaulting to 1000 [ 864.711433][T29562] lo speed is unknown, defaulting to 1000 [ 864.794440][T29618] __nla_validate_parse: 6 callbacks suppressed [ 864.794484][T29618] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5918'. [ 864.841875][T29618] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5918'. [ 865.341849][T29643] netlink: 6732 bytes leftover after parsing attributes in process `syz.4.5922'. [ 865.380591][T29643] openvswitch: netlink: Flow key attr not present in new flow. [ 865.687596][ T5625] Bluetooth: hci1: command tx timeout [ 865.747210][T29662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5929'. [ 867.777113][ T5625] Bluetooth: hci1: command tx timeout [ 868.510500][T29670] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5930'. [ 868.825728][T29694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5936'. [ 869.119251][T29709] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 869.169554][T29712] syzkaller1: entered promiscuous mode [ 869.181769][T29712] syzkaller1: entered allmulticast mode [ 869.350714][T29725] netlink: 'syz.1.5943': attribute type 9 has an invalid length. [ 869.567627][T29739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5946'. [ 869.623489][T29562] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.640303][T29741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5945'. [ 869.640895][T29562] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.656999][T29562] bridge_slave_0: entered allmulticast mode [ 869.664589][T29562] bridge_slave_0: entered promiscuous mode [ 869.675137][T29739] IPVS: Error connecting to the multicast addr [ 869.699125][T29741] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5945'. [ 869.709324][T29741] netlink: 'syz.0.5945': attribute type 11 has an invalid length. [ 869.723071][T29562] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.730635][T29562] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.742927][T29562] bridge_slave_1: entered allmulticast mode [ 869.751071][T29562] bridge_slave_1: entered promiscuous mode [ 869.848065][ T5625] Bluetooth: hci1: command tx timeout [ 869.960327][T29562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.050803][T29562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.135148][T29562] team0: Port device team_slave_0 added [ 870.147566][T29562] team0: Port device team_slave_1 added [ 870.167141][T29756] syzkaller0: entered promiscuous mode [ 870.173229][T29756] syzkaller0: entered allmulticast mode [ 870.230347][T29562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.238341][T29562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.268750][T29562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.351294][T29562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.360993][T29562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.390989][T29562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.403590][T29763] xt_CONNSECMARK: invalid mode: 254 [ 870.415693][T29758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5951'. [ 870.433151][T29758] tc_dump_action: action bad kind [ 870.439550][T29756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5950'. [ 870.468801][T29758] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5951'. [ 870.520680][T29562] hsr_slave_0: entered promiscuous mode [ 870.528868][T29562] hsr_slave_1: entered promiscuous mode [ 870.535460][T29562] debugfs: 'hsr0' already exists in 'hsr' [ 870.542173][T29562] Cannot create hsr debugfs directory [ 870.966900][T29562] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.049496][T29562] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.096087][T29562] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.150672][T29562] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.926625][ T5625] Bluetooth: hci1: command tx timeout [ 872.412926][T29729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 872.471837][T29562] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 872.544265][T29562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 872.555566][T29562] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 872.583286][T29562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 872.593219][T29562] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 872.614384][T29562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 872.624344][T29562] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 872.648929][T29562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 872.985706][T29562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.034591][T29562] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.042435][T29794] netlink: 'syz.3.5960': attribute type 7 has an invalid length. [ 873.072355][T29794] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5960'. [ 873.091917][T29795] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5961'. [ 873.101687][T29794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5960'. [ 873.132809][ T8875] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.139970][ T8875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.189184][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.196378][ T8875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.352867][T29802] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 873.558923][T29809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5965'. [ 873.594439][T29809] siw: device registration error -23 [ 873.867483][T29819] netlink: 'syz.4.5968': attribute type 1 has an invalid length. [ 873.922719][T29823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5966'. [ 873.970660][T29819] bond6: entered promiscuous mode [ 874.001826][T29819] 8021q: adding VLAN 0 to HW filter on device bond6 [ 874.097644][T29819] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 874.112266][T29819] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 874.124455][T29819] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 874.187368][T29826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5968'. [ 874.454511][T29562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.645112][T29562] veth0_vlan: entered promiscuous mode [ 874.693511][T29562] veth1_vlan: entered promiscuous mode [ 874.835070][T29562] veth0_macvtap: entered promiscuous mode [ 874.944660][T29562] veth1_macvtap: entered promiscuous mode [ 875.030609][T29562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.084150][T29562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.174149][ T8873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.214658][ T8873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.239330][ T8873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.257261][ T8873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.335665][T29864] FAULT_INJECTION: forcing a failure. [ 875.335665][T29864] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 875.350605][T29864] CPU: 0 UID: 0 PID: 29864 Comm: syz.3.5979 Not tainted syzkaller #0 PREEMPT(full) [ 875.350630][T29864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 875.350648][T29864] Call Trace: [ 875.350721][T29864] [ 875.350770][T29864] dump_stack_lvl+0xe8/0x150 [ 875.350883][T29864] should_fail_ex+0x40c/0x560 [ 875.350938][T29864] prepare_alloc_pages+0x230/0x650 [ 875.350998][T29864] __alloc_frozen_pages_noprof+0x12f/0x380 [ 875.351028][T29864] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 875.351066][T29864] ? __pfx_policy_nodemask+0x10/0x10 [ 875.351107][T29864] alloc_pages_mpol+0x212/0x380 [ 875.351139][T29864] alloc_pages_noprof+0xac/0x2a0 [ 875.351168][T29864] anon_pipe_write+0x1f0/0x1c30 [ 875.351201][T29864] ? kstrtoull+0x12f/0x1d0 [ 875.351237][T29864] ? get_pid_task+0x20/0x1f0 [ 875.351289][T29864] ? get_pid_task+0x20/0x1f0 [ 875.351317][T29864] ? __pfx_anon_pipe_write+0x10/0x10 [ 875.351346][T29864] ? apparmor_file_permission+0x1f4/0x300 [ 875.351393][T29864] ? bpf_lsm_file_permission+0x9/0x20 [ 875.351427][T29864] ? security_file_permission+0x75/0x260 [ 875.351460][T29864] vfs_write+0x612/0xba0 [ 875.351505][T29864] ? __pfx_vfs_write+0x10/0x10 [ 875.351542][T29864] ? __fget_files+0x2a/0x420 [ 875.351575][T29864] ksys_write+0x150/0x270 [ 875.351604][T29864] ? __pfx_ksys_write+0x10/0x10 [ 875.351640][T29864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.351679][T29864] do_syscall_64+0x174/0x580 [ 875.351767][T29864] ? trace_irq_disable+0x3b/0x140 [ 875.351806][T29864] ? clear_bhb_loop+0x40/0x90 [ 875.351835][T29864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.351853][T29864] RIP: 0033:0x7f994b59de99 [ 875.351902][T29864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.351917][T29864] RSP: 002b:00007f99497f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 875.351944][T29864] RAX: ffffffffffffffda RBX: 00007f994b825fa0 RCX: 00007f994b59de99 [ 875.351957][T29864] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 875.351969][T29864] RBP: 00007f99497f6090 R08: 0000000000000000 R09: 0000000000000000 [ 875.351980][T29864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.351991][T29864] R13: 00007f994b826038 R14: 00007f994b825fa0 R15: 00007ffd98879b18 [ 875.352022][T29864] [ 875.867562][T29867] veth9: entered allmulticast mode [ 875.873965][T29875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5982'. [ 875.902836][T29868] veth11: entered allmulticast mode [ 875.952912][T29872] hsr0: entered promiscuous mode [ 875.979587][T29872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5980'. [ 875.999464][ T8868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.034725][ T8868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.064601][T29872] hsr_slave_0: left promiscuous mode [ 876.084463][T29872] hsr_slave_1: left promiscuous mode [ 876.105882][T29872] hsr0 (unregistering): left promiscuous mode [ 876.212859][ T8868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.245786][ T8868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.375897][T29893] netlink: 'syz.1.5986': attribute type 5 has an invalid length. [ 876.426081][T29893] ip6erspan0: entered allmulticast mode [ 876.448430][T29897] netlink: 'syz.1.5986': attribute type 4 has an invalid length. [ 876.499781][T29893] netlink: 'syz.1.5986': attribute type 4 has an invalid length. [ 876.778024][T29908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5987'. [ 877.284527][T29930] FAULT_INJECTION: forcing a failure. [ 877.284527][T29930] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 877.349159][T29930] CPU: 0 UID: 0 PID: 29930 Comm: syz.1.5991 Not tainted syzkaller #0 PREEMPT(full) [ 877.349185][T29930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 877.349196][T29930] Call Trace: [ 877.349204][T29930] [ 877.349212][T29930] dump_stack_lvl+0xe8/0x150 [ 877.349246][T29930] should_fail_ex+0x40c/0x560 [ 877.349274][T29930] prepare_alloc_pages+0x230/0x650 [ 877.349307][T29930] __alloc_frozen_pages_noprof+0x12f/0x380 [ 877.349337][T29930] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 877.349367][T29930] ? __pfx_policy_nodemask+0x10/0x10 [ 877.349403][T29930] alloc_pages_mpol+0x212/0x380 [ 877.349435][T29930] alloc_pages_noprof+0xac/0x2a0 [ 877.349467][T29930] anon_pipe_write+0x1f0/0x1c30 [ 877.349490][T29930] ? kstrtoull+0x12f/0x1d0 [ 877.349518][T29930] ? get_pid_task+0x20/0x1f0 [ 877.349545][T29930] ? get_pid_task+0x20/0x1f0 [ 877.349573][T29930] ? __pfx_anon_pipe_write+0x10/0x10 [ 877.349602][T29930] ? apparmor_file_permission+0x1f4/0x300 [ 877.349630][T29930] ? bpf_lsm_file_permission+0x9/0x20 [ 877.349650][T29930] ? security_file_permission+0x75/0x260 [ 877.349689][T29930] vfs_write+0x612/0xba0 [ 877.349726][T29930] ? __pfx_vfs_write+0x10/0x10 [ 877.349763][T29930] ? __fget_files+0x2a/0x420 [ 877.349796][T29930] ksys_write+0x150/0x270 [ 877.349825][T29930] ? __pfx_ksys_write+0x10/0x10 [ 877.349861][T29930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.349882][T29930] do_syscall_64+0x174/0x580 [ 877.349902][T29930] ? trace_irq_disable+0x3b/0x140 [ 877.349924][T29930] ? clear_bhb_loop+0x40/0x90 [ 877.349947][T29930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.349966][T29930] RIP: 0033:0x7f2d9239de99 [ 877.349984][T29930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.350000][T29930] RSP: 002b:00007f2d93199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 877.350020][T29930] RAX: ffffffffffffffda RBX: 00007f2d92625fa0 RCX: 00007f2d9239de99 [ 877.350034][T29930] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 877.350047][T29930] RBP: 00007f2d93199090 R08: 0000000000000000 R09: 0000000000000000 [ 877.350059][T29930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.350070][T29930] R13: 00007f2d92626038 R14: 00007f2d92625fa0 R15: 00007fff22116e58 [ 877.350101][T29930] [ 878.080934][T29947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5996'. [ 878.132453][T29950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5997'. [ 878.135509][T29952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5996'. [ 878.307408][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 878.333633][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 878.344017][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 878.357188][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 878.366153][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 878.510882][T29947] veth3: entered allmulticast mode [ 878.710882][T29959] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.718576][T29959] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.947056][T29959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.971702][T29959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.198442][T17771] syz_tun (unregistering): left promiscuous mode [ 879.235947][T29980] netlink: 208 bytes leftover after parsing attributes in process `syz.4.6001'. [ 879.260567][T29980] netlink: 208 bytes leftover after parsing attributes in process `syz.4.6001'. [ 879.305286][ T8868] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.334993][ T8868] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.376424][ T8868] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.409235][ T8844] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.802143][T30012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6009'. [ 880.189845][T30029] netlink: 'syz.4.6014': attribute type 1 has an invalid length. [ 880.211950][T29961] ±ÿ speed is unknown, defaulting to 1000 [ 880.257728][T29961] wlan0 speed is unknown, defaulting to 1000 [ 880.304908][T29961] lo speed is unknown, defaulting to 1000 [ 880.406853][ T5625] Bluetooth: hci5: command tx timeout [ 880.439437][T30047] x_tables: duplicate underflow at hook 1 [ 880.468972][T30048] x_tables: duplicate underflow at hook 1 [ 880.677403][T30054] batman_adv: batadv0: Adding interface: gretap1 [ 880.701904][T30054] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.733927][T30063] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6022'. [ 880.764653][T30063] netlink: 'syz.0.6022': attribute type 1 has an invalid length. [ 880.776466][T30054] batman_adv: batadv0: Interface activated: gretap1 [ 880.791156][T30063] netlink: 'syz.0.6022': attribute type 1 has an invalid length. [ 880.991886][T30063] 8021q: adding VLAN 0 to HW filter on device bond9 [ 881.028960][T30069] __nla_validate_parse: 2 callbacks suppressed [ 881.028978][T30069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6023'. [ 881.481185][T30097] netlink: 'syz.1.6031': attribute type 1 has an invalid length. [ 881.582883][T30097] 8021q: adding VLAN 0 to HW filter on device bond8 [ 881.603089][T30097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6031'. [ 881.638672][T30097] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6031'. [ 881.733802][T30112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6032'. [ 881.783095][T30112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6032'. [ 881.833688][T30112] netlink: 'syz.0.6032': attribute type 12 has an invalid length. [ 881.869431][T30112] netlink: 'syz.0.6032': attribute type 14 has an invalid length. [ 881.939170][T30112] netlink: 'syz.0.6032': attribute type 10 has an invalid length. [ 882.026184][T30112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 882.059771][T30112] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 882.157631][T29961] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.177334][T29961] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.195353][T29961] bridge_slave_0: entered allmulticast mode [ 882.228585][T29961] bridge_slave_0: entered promiscuous mode [ 882.249175][T29961] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.262016][T29961] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.270240][T29961] bridge_slave_1: entered allmulticast mode [ 882.278840][T29961] bridge_slave_1: entered promiscuous mode [ 882.309666][T30134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6037'. [ 882.368770][T29961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.422058][T29961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.486962][ T5625] Bluetooth: hci5: command tx timeout [ 882.502688][T29961] team0: Port device team_slave_0 added [ 882.521482][T29961] team0: Port device team_slave_1 added [ 882.597297][T30138] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6039'. [ 882.609659][T29961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.618195][T29961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.669210][T29961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.711142][T29961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.736612][T29961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.803277][T29961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.835759][T30147] block nbd2: Unsupported socket: should be TCP or UNIX. [ 882.946592][T29961] hsr_slave_0: entered promiscuous mode [ 882.971916][T29961] hsr_slave_1: entered promiscuous mode [ 882.990454][T29961] debugfs: 'hsr0' already exists in 'hsr' [ 883.002624][T29961] Cannot create hsr debugfs directory [ 883.017915][T30153] netlink: 'syz.4.6044': attribute type 1 has an invalid length. [ 883.107413][T30156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6045'. [ 883.192096][T30160] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6046'. [ 883.244964][T30163] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6046'. [ 884.566986][ T5625] Bluetooth: hci5: command tx timeout [ 884.915521][T30153] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.922938][T30153] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.989387][T30153] bridge_slave_0: left allmulticast mode [ 884.995092][T30153] bridge_slave_0: left promiscuous mode [ 885.001110][T30153] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.105143][T30153] bridge_slave_1: left allmulticast mode [ 885.111014][T30153] bridge_slave_1: left promiscuous mode [ 885.119945][T30153] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.147999][T30153] .`: (slave bond_slave_0): Releasing backup interface [ 885.198882][T30153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.214172][T30153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.238355][T30153] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 885.287374][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 886.266772][T30193] __nla_validate_parse: 1 callbacks suppressed [ 886.266806][T30193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6054'. [ 886.605107][T30198] FAULT_INJECTION: forcing a failure. [ 886.605107][T30198] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 886.625375][T30198] CPU: 1 UID: 0 PID: 30198 Comm: syz.0.6056 Not tainted syzkaller #0 PREEMPT(full) [ 886.625399][T30198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 886.625409][T30198] Call Trace: [ 886.625416][T30198] [ 886.625424][T30198] dump_stack_lvl+0xe8/0x150 [ 886.625463][T30198] should_fail_ex+0x40c/0x560 [ 886.625489][T30198] prepare_alloc_pages+0x230/0x650 [ 886.625521][T30198] __alloc_frozen_pages_noprof+0x12f/0x380 [ 886.625550][T30198] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 886.625578][T30198] ? __pfx_policy_nodemask+0x10/0x10 [ 886.625610][T30198] alloc_pages_mpol+0x212/0x380 [ 886.625639][T30198] alloc_pages_noprof+0xac/0x2a0 [ 886.625666][T30198] anon_pipe_write+0x1f0/0x1c30 [ 886.625689][T30198] ? kstrtoull+0x12f/0x1d0 [ 886.625717][T30198] ? get_pid_task+0x20/0x1f0 [ 886.625743][T30198] ? get_pid_task+0x20/0x1f0 [ 886.625770][T30198] ? __pfx_anon_pipe_write+0x10/0x10 [ 886.625797][T30198] ? apparmor_file_permission+0x1f4/0x300 [ 886.625825][T30198] ? bpf_lsm_file_permission+0x9/0x20 [ 886.625844][T30198] ? security_file_permission+0x75/0x260 [ 886.625875][T30198] vfs_write+0x612/0xba0 [ 886.625909][T30198] ? __pfx_vfs_write+0x10/0x10 [ 886.625943][T30198] ? __fget_files+0x2a/0x420 [ 886.625974][T30198] ksys_write+0x150/0x270 [ 886.626003][T30198] ? __pfx_ksys_write+0x10/0x10 [ 886.626038][T30198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.626059][T30198] do_syscall_64+0x174/0x580 [ 886.626082][T30198] ? clear_bhb_loop+0x40/0x90 [ 886.626106][T30198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.626125][T30198] RIP: 0033:0x7f794379de99 [ 886.626142][T30198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.626159][T30198] RSP: 002b:00007f7944744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 886.626179][T30198] RAX: ffffffffffffffda RBX: 00007f7943a25fa0 RCX: 00007f794379de99 [ 886.626193][T30198] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 886.626205][T30198] RBP: 00007f7944744090 R08: 0000000000000000 R09: 0000000000000000 [ 886.626217][T30198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.626229][T30198] R13: 00007f7943a26038 R14: 00007f7943a25fa0 R15: 00007fffb3ca4808 [ 886.626257][T30198] [ 886.871256][T29961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.893492][ T5625] Bluetooth: hci5: command tx timeout [ 886.893544][ T5634] block nbd2: Receive control failed (result -32) [ 886.898938][ T5625] block nbd2: Receive control failed (result -32) [ 887.039650][T29961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 887.205804][T30212] netlink: 'syz.4.6058': attribute type 3 has an invalid length. [ 887.314312][T30214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6061'. [ 887.460989][T29961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 887.483505][T30218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6061'. [ 887.506322][T30218] netlink: 'syz.2.6061': attribute type 26 has an invalid length. [ 887.526239][T30218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6061'. [ 887.541835][T30218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6061'. [ 887.550817][T30218] netlink: 'syz.2.6061': attribute type 26 has an invalid length. [ 887.562810][T30218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6061'. [ 887.666583][T30223] veth1_to_bond: Caught tx_queue_len zero misconfig [ 887.725919][T30229] can: request_module (can-proto-0) failed. [ 887.847717][T30234] dummy0: left promiscuous mode [ 887.943173][T30237] FAULT_INJECTION: forcing a failure. [ 887.943173][T30237] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 887.946804][T29961] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 887.956403][T30237] CPU: 1 UID: 0 PID: 30237 Comm: syz.1.6067 Not tainted syzkaller #0 PREEMPT(full) [ 887.956424][T30237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 887.956435][T30237] Call Trace: [ 887.956443][T30237] [ 887.956451][T30237] dump_stack_lvl+0xe8/0x150 [ 887.956484][T30237] should_fail_ex+0x40c/0x560 [ 887.956507][T30237] prepare_alloc_pages+0x230/0x650 [ 887.956532][T30237] __alloc_frozen_pages_noprof+0x12f/0x380 [ 887.956554][T30237] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 887.956575][T30237] ? __pfx_policy_nodemask+0x10/0x10 [ 887.956603][T30237] alloc_pages_mpol+0x212/0x380 [ 887.956628][T30237] alloc_pages_noprof+0xac/0x2a0 [ 887.956650][T30237] anon_pipe_write+0x1f0/0x1c30 [ 887.956669][T30237] ? kstrtoull+0x12f/0x1d0 [ 887.956694][T30237] ? get_pid_task+0x20/0x1f0 [ 887.956717][T30237] ? get_pid_task+0x20/0x1f0 [ 887.956741][T30237] ? __pfx_anon_pipe_write+0x10/0x10 [ 887.956765][T30237] ? apparmor_file_permission+0x1f4/0x300 [ 887.956788][T30237] ? bpf_lsm_file_permission+0x9/0x20 [ 887.956805][T30237] ? security_file_permission+0x75/0x260 [ 887.956830][T30237] vfs_write+0x612/0xba0 [ 887.956859][T30237] ? __pfx_vfs_write+0x10/0x10 [ 887.956886][T30237] ? __fget_files+0x2a/0x420 [ 887.956921][T30237] ksys_write+0x150/0x270 [ 887.956944][T30237] ? __pfx_ksys_write+0x10/0x10 [ 887.956973][T30237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.956991][T30237] do_syscall_64+0x174/0x580 [ 887.957007][T30237] ? trace_irq_disable+0x3b/0x140 [ 887.957031][T30237] ? clear_bhb_loop+0x40/0x90 [ 887.957050][T30237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.957065][T30237] RIP: 0033:0x7f2d9239de99 [ 887.957081][T30237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.957094][T30237] RSP: 002b:00007f2d93199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 887.957117][T30237] RAX: ffffffffffffffda RBX: 00007f2d92625fa0 RCX: 00007f2d9239de99 [ 887.957129][T30237] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 887.957139][T30237] RBP: 00007f2d93199090 R08: 0000000000000000 R09: 0000000000000000 [ 887.957150][T30237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.957161][T30237] R13: 00007f2d92626038 R14: 00007f2d92625fa0 R15: 00007fff22116e58 [ 887.957191][T30237] [ 888.310975][T30239] syzkaller0: entered promiscuous mode [ 888.323675][T30239] syzkaller0: entered allmulticast mode [ 888.420442][T30249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6069'. [ 888.486753][T30244] ±ÿ speed is unknown, defaulting to 1000 [ 888.518376][T30250] bond0: (slave vlan2): Opening slave failed [ 888.605111][T30244] wlan0 speed is unknown, defaulting to 1000 [ 888.699623][T29961] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 888.724425][T29961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 888.739125][T29961] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 888.768600][T29961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 888.776176][T30244] lo speed is unknown, defaulting to 1000 [ 888.782921][T30248] dvmrp0: entered allmulticast mode [ 888.789655][T29961] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 888.809865][T30261] netlink: 'syz.4.6074': attribute type 1 has an invalid length. [ 888.811265][T29961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 888.845987][T29961] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 888.870295][T29961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 888.986097][T30261] 8021q: adding VLAN 0 to HW filter on device bond8 [ 889.110538][T30271] bond8: (slave veth5): Enslaving as an active interface with a down link [ 889.184278][T30261] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 889.201114][T30261] bond8: (slave batadv1): making interface the new active one [ 889.214870][T30261] batadv1: entered promiscuous mode [ 889.220493][T30261] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 889.306837][T30288] FAULT_INJECTION: forcing a failure. [ 889.306837][T30288] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 889.320204][T30271] bond8: (slave veth7): Enslaving as an active interface with a down link [ 889.320855][T30288] CPU: 0 UID: 0 PID: 30288 Comm: syz.0.6079 Not tainted syzkaller #0 PREEMPT(full) [ 889.320878][T30288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 889.320889][T30288] Call Trace: [ 889.320897][T30288] [ 889.320904][T30288] dump_stack_lvl+0xe8/0x150 [ 889.320937][T30288] should_fail_ex+0x40c/0x560 [ 889.320964][T30288] prepare_alloc_pages+0x230/0x650 [ 889.320996][T30288] __alloc_frozen_pages_noprof+0x12f/0x380 [ 889.321025][T30288] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 889.321054][T30288] ? __pfx_policy_nodemask+0x10/0x10 [ 889.321090][T30288] alloc_pages_mpol+0x212/0x380 [ 889.321124][T30288] alloc_pages_noprof+0xac/0x2a0 [ 889.321153][T30288] anon_pipe_write+0x1f0/0x1c30 [ 889.321174][T30288] ? kstrtoull+0x12f/0x1d0 [ 889.321204][T30288] ? get_pid_task+0x20/0x1f0 [ 889.321237][T30288] ? get_pid_task+0x20/0x1f0 [ 889.321264][T30288] ? __pfx_anon_pipe_write+0x10/0x10 [ 889.321293][T30288] ? apparmor_file_permission+0x1f4/0x300 [ 889.321321][T30288] ? bpf_lsm_file_permission+0x9/0x20 [ 889.321341][T30288] ? security_file_permission+0x75/0x260 [ 889.321374][T30288] vfs_write+0x612/0xba0 [ 889.321408][T30288] ? __pfx_vfs_write+0x10/0x10 [ 889.321444][T30288] ? __fget_files+0x2a/0x420 [ 889.321476][T30288] ksys_write+0x150/0x270 [ 889.321509][T30288] ? __pfx_ksys_write+0x10/0x10 [ 889.321542][T30288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.321563][T30288] do_syscall_64+0x174/0x580 [ 889.321583][T30288] ? trace_irq_disable+0x3b/0x140 [ 889.321606][T30288] ? clear_bhb_loop+0x40/0x90 [ 889.321628][T30288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.321647][T30288] RIP: 0033:0x7f794379de99 [ 889.321665][T30288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.321680][T30288] RSP: 002b:00007f7944744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 889.321700][T30288] RAX: ffffffffffffffda RBX: 00007f7943a25fa0 RCX: 00007f794379de99 [ 889.321713][T30288] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 889.321726][T30288] RBP: 00007f7944744090 R08: 0000000000000000 R09: 0000000000000000 [ 889.321737][T30288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.321748][T30288] R13: 00007f7943a26038 R14: 00007f7943a25fa0 R15: 00007fffb3ca4808 [ 889.321778][T30288] [ 889.900296][T29961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.946366][T29961] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.989749][T30304] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 890.003130][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.010262][ T8864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.049847][T30302] xt_CT: No such helper "netbios-ns" [ 890.052821][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.062262][ T8864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.114070][T30302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6084'. [ 890.158122][T30308] syz_tun: left allmulticast mode [ 890.247875][T30308] v: renamed from syz_tun [ 890.255640][T30307] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 890.486033][T30319] netlink: 'syz.0.6087': attribute type 1 has an invalid length. [ 890.515348][T30319] 8021q: adding VLAN 0 to HW filter on device bond10 [ 890.781647][T29961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.831086][T29961] veth0_vlan: entered promiscuous mode [ 890.844458][T29961] veth1_vlan: entered promiscuous mode [ 890.954068][T29961] veth0_macvtap: entered promiscuous mode [ 890.973743][T29961] veth1_macvtap: entered promiscuous mode [ 890.993050][T29961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.006266][T29961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.023200][ T8864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.034268][ T8864] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.043034][ T8864] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.052623][ T8864] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.250228][T30348] FAULT_INJECTION: forcing a failure. [ 891.250228][T30348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.263645][T30348] CPU: 1 UID: 0 PID: 30348 Comm: syz.1.6091 Not tainted syzkaller #0 PREEMPT(full) [ 891.263669][T30348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 891.263680][T30348] Call Trace: [ 891.263688][T30348] [ 891.263696][T30348] dump_stack_lvl+0xe8/0x150 [ 891.263729][T30348] should_fail_ex+0x40c/0x560 [ 891.263757][T30348] _copy_from_iter+0x1d3/0x1660 [ 891.263783][T30348] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 891.263813][T30348] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 891.263843][T30348] ? __pfx__copy_from_iter+0x10/0x10 [ 891.263867][T30348] ? __pfx___mutex_lock+0x10/0x10 [ 891.263896][T30348] ? alloc_pages_mpol+0x24a/0x380 [ 891.263927][T30348] copy_page_from_iter+0x219/0x2d0 [ 891.263954][T30348] anon_pipe_write+0xc38/0x1c30 [ 891.264000][T30348] ? __pfx_anon_pipe_write+0x10/0x10 [ 891.264030][T30348] ? apparmor_file_permission+0x1f4/0x300 [ 891.264059][T30348] ? bpf_lsm_file_permission+0x9/0x20 [ 891.264079][T30348] ? security_file_permission+0x75/0x260 [ 891.264112][T30348] vfs_write+0x612/0xba0 [ 891.264148][T30348] ? __pfx_vfs_write+0x10/0x10 [ 891.264186][T30348] ? __fget_files+0x2a/0x420 [ 891.264219][T30348] ksys_write+0x150/0x270 [ 891.264248][T30348] ? __pfx_ksys_write+0x10/0x10 [ 891.264281][T30348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.264303][T30348] do_syscall_64+0x174/0x580 [ 891.264322][T30348] ? trace_irq_disable+0x3b/0x140 [ 891.264343][T30348] ? clear_bhb_loop+0x40/0x90 [ 891.264367][T30348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.264385][T30348] RIP: 0033:0x7f2d9239de99 [ 891.264403][T30348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.264419][T30348] RSP: 002b:00007f2d93199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 891.264439][T30348] RAX: ffffffffffffffda RBX: 00007f2d92625fa0 RCX: 00007f2d9239de99 [ 891.264453][T30348] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 891.264465][T30348] RBP: 00007f2d93199090 R08: 0000000000000000 R09: 0000000000000000 [ 891.264477][T30348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.264489][T30348] R13: 00007f2d92626038 R14: 00007f2d92625fa0 R15: 00007fff22116e58 [ 891.264518][T30348] [ 891.271207][ T8866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.390478][ T8866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.612851][T30354] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20002 [ 891.620017][T30354] netlink: 'syz.0.6093': attribute type 1 has an invalid length. [ 891.656555][T30352] bond0: (slave ip6tnl0): refused to change device type [ 891.674736][ T8868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.682567][ T8868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.755265][T30354] ip6erspan0: entered allmulticast mode [ 891.862876][T30367] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6095'. [ 892.058548][T30378] netlink: 516 bytes leftover after parsing attributes in process `syz.1.6100'. [ 892.102894][T30376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6100'. [ 892.320459][T30392] FAULT_INJECTION: forcing a failure. [ 892.320459][T30392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.333540][T30392] CPU: 1 UID: 0 PID: 30392 Comm: syz.1.6104 Not tainted syzkaller #0 PREEMPT(full) [ 892.333564][T30392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 892.333575][T30392] Call Trace: [ 892.333583][T30392] [ 892.333592][T30392] dump_stack_lvl+0xe8/0x150 [ 892.333621][T30392] should_fail_ex+0x40c/0x560 [ 892.333648][T30392] _copy_from_iter+0x1d3/0x1660 [ 892.333674][T30392] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 892.333702][T30392] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 892.333731][T30392] ? __pfx__copy_from_iter+0x10/0x10 [ 892.333755][T30392] ? __pfx___mutex_lock+0x10/0x10 [ 892.333781][T30392] ? alloc_pages_mpol+0x24a/0x380 [ 892.333810][T30392] copy_page_from_iter+0x219/0x2d0 [ 892.333837][T30392] anon_pipe_write+0xc38/0x1c30 [ 892.333881][T30392] ? __pfx_anon_pipe_write+0x10/0x10 [ 892.333910][T30392] ? apparmor_file_permission+0x1f4/0x300 [ 892.333938][T30392] ? bpf_lsm_file_permission+0x9/0x20 [ 892.333958][T30392] ? security_file_permission+0x75/0x260 [ 892.333991][T30392] vfs_write+0x612/0xba0 [ 892.334026][T30392] ? __pfx_vfs_write+0x10/0x10 [ 892.334063][T30392] ? __fget_files+0x2a/0x420 [ 892.334095][T30392] ksys_write+0x150/0x270 [ 892.334126][T30392] ? __pfx_ksys_write+0x10/0x10 [ 892.334161][T30392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.334182][T30392] do_syscall_64+0x174/0x580 [ 892.334203][T30392] ? trace_irq_disable+0x3b/0x140 [ 892.334227][T30392] ? clear_bhb_loop+0x40/0x90 [ 892.334250][T30392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.334270][T30392] RIP: 0033:0x7f2d9239de99 [ 892.334289][T30392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.334306][T30392] RSP: 002b:00007f2d93199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 892.334326][T30392] RAX: ffffffffffffffda RBX: 00007f2d92625fa0 RCX: 00007f2d9239de99 [ 892.334340][T30392] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 892.334368][T30392] RBP: 00007f2d93199090 R08: 0000000000000000 R09: 0000000000000000 [ 892.334381][T30392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 892.334392][T30392] R13: 00007f2d92626038 R14: 00007f2d92625fa0 R15: 00007fff22116e58 [ 892.334424][T30392] [ 892.696213][T30396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 892.745583][T30395] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6106'. [ 892.862023][T30402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6108'. [ 892.906534][T30402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6108'. [ 892.910220][T30403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6109'. [ 893.005008][T30408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6110'. [ 893.155585][T30421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6115'. [ 893.177501][T30421] netlink: 'syz.2.6115': attribute type 10 has an invalid length. [ 893.193704][T30421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6115'. [ 893.275568][T30424] FAULT_INJECTION: forcing a failure. [ 893.275568][T30424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.288627][T30424] CPU: 1 UID: 0 PID: 30424 Comm: syz.1.6117 Not tainted syzkaller #0 PREEMPT(full) [ 893.288650][T30424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 893.288661][T30424] Call Trace: [ 893.288669][T30424] [ 893.288677][T30424] dump_stack_lvl+0xe8/0x150 [ 893.288711][T30424] should_fail_ex+0x40c/0x560 [ 893.288737][T30424] _copy_from_iter+0x1d3/0x1660 [ 893.288762][T30424] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 893.288792][T30424] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 893.288821][T30424] ? __pfx__copy_from_iter+0x10/0x10 [ 893.288845][T30424] ? __pfx___mutex_lock+0x10/0x10 [ 893.288872][T30424] ? alloc_pages_mpol+0x24a/0x380 [ 893.288901][T30424] copy_page_from_iter+0x219/0x2d0 [ 893.288930][T30424] anon_pipe_write+0xc38/0x1c30 [ 893.288974][T30424] ? __pfx_anon_pipe_write+0x10/0x10 [ 893.289002][T30424] ? apparmor_file_permission+0x1f4/0x300 [ 893.289032][T30424] ? bpf_lsm_file_permission+0x9/0x20 [ 893.289052][T30424] ? security_file_permission+0x75/0x260 [ 893.289086][T30424] vfs_write+0x612/0xba0 [ 893.289121][T30424] ? __pfx_vfs_write+0x10/0x10 [ 893.289157][T30424] ? __fget_files+0x2a/0x420 [ 893.289189][T30424] ksys_write+0x150/0x270 [ 893.289219][T30424] ? __pfx_ksys_write+0x10/0x10 [ 893.289254][T30424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.289275][T30424] do_syscall_64+0x174/0x580 [ 893.289295][T30424] ? trace_irq_disable+0x3b/0x140 [ 893.289318][T30424] ? clear_bhb_loop+0x40/0x90 [ 893.289341][T30424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.289360][T30424] RIP: 0033:0x7f2d9239de99 [ 893.289378][T30424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.289395][T30424] RSP: 002b:00007f2d93199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 893.289415][T30424] RAX: ffffffffffffffda RBX: 00007f2d92625fa0 RCX: 00007f2d9239de99 [ 893.289429][T30424] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 893.289442][T30424] RBP: 00007f2d93199090 R08: 0000000000000000 R09: 0000000000000000 [ 893.289453][T30424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 893.289472][T30424] R13: 00007f2d92626038 R14: 00007f2d92625fa0 R15: 00007fff22116e58 [ 893.289504][T30424] [ 893.349375][T30428] ±ÿ speed is unknown, defaulting to 1000 [ 893.393946][T30426] netlink: 'syz.3.6116': attribute type 13 has an invalid length. [ 894.006086][T30428] wlan0 speed is unknown, defaulting to 1000 [ 894.013909][T30428] lo speed is unknown, defaulting to 1000 [ 894.967005][ T5634] Bluetooth: hci5: command 0x0405 tx timeout [ 896.170095][T30518] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 896.178107][T30518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 896.224951][T30519] netlink: 'syz.0.6141': attribute type 1 has an invalid length. [ 896.272977][T30519] 8021q: adding VLAN 0 to HW filter on device bond11 [ 896.957274][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 896.971489][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 896.987525][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 896.996219][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 897.004262][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 897.362435][T30560] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 897.384522][T30560] syzkaller1: linktype set to 773 [ 897.485625][T30565] ì: renamed from bond_slave_0 [ 897.598282][T30574] __nla_validate_parse: 4 callbacks suppressed [ 897.598299][T30574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6153'. [ 897.614375][T30574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6153'. [ 897.710758][T30547] ±ÿ speed is unknown, defaulting to 1000 [ 897.740857][T30547] wlan0 speed is unknown, defaulting to 1000 [ 897.758296][T30547] lo speed is unknown, defaulting to 1000 [ 897.765832][T30579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6154'. [ 898.051890][T30588] openvswitch: netlink: Key type 53 is out of range max 32 [ 898.103354][T30587] syzkaller0: entered promiscuous mode [ 898.143016][T30587] syzkaller0: entered allmulticast mode [ 898.149906][T30593] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 898.298786][T30598] block nbd4: Unsupported socket: should be TCP or UNIX. [ 898.327036][T30597] syzkaller0: entered promiscuous mode [ 898.334605][T30597] syzkaller0: entered allmulticast mode [ 898.349585][T30597] tipc: Started in network mode [ 898.355412][T30597] tipc: Node identity cab39285c5bc, cluster identity 4711 [ 898.367532][T30597] tipc: Enabled bearer , priority 0 [ 898.422754][T30597] tipc: Resetting bearer [ 898.438640][T30603] bridge_slave_0: left allmulticast mode [ 898.444532][T30603] bridge_slave_0: left promiscuous mode [ 898.445102][T30611] netlink: 'syz.4.6164': attribute type 1 has an invalid length. [ 898.450312][T30603] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.459293][T30611] netlink: 'syz.4.6164': attribute type 3 has an invalid length. [ 898.459309][T30611] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6164'. [ 898.491238][T30608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6162'. [ 898.491270][T30608] netlink: 'syz.2.6162': attribute type 3 has an invalid length. [ 898.491435][T30607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6162'. [ 898.518329][T30607] netlink: 'syz.2.6162': attribute type 3 has an invalid length. [ 898.531020][T30603] bridge_slave_1: left allmulticast mode [ 898.545526][T30603] bridge_slave_1: left promiscuous mode [ 898.553690][T30603] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.565849][T30603] bond0: (slave bond_slave_0): Releasing backup interface [ 898.575189][T30603] bond0: (slave bond_slave_1): Releasing backup interface [ 898.589972][T30603] team0: Port device team_slave_0 removed [ 898.597755][T30603] team0: Port device team_slave_1 removed [ 898.603925][T30603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.613954][T30603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.622414][T30603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 898.639255][T30596] tipc: Resetting bearer [ 898.660840][T30596] tipc: Disabling bearer [ 898.872402][T30619] netlink: 'syz.1.6165': attribute type 23 has an invalid length. [ 899.018134][T30630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6169'. [ 899.047566][ T5634] Bluetooth: hci2: command tx timeout [ 899.268490][T30547] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.280386][T30547] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.301205][T30547] bridge_slave_0: entered allmulticast mode [ 899.312469][T30547] bridge_slave_0: entered promiscuous mode [ 899.333676][T30547] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.342288][T30547] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.349451][T30547] bridge_slave_1: entered allmulticast mode [ 899.357138][T30547] bridge_slave_1: entered promiscuous mode [ 899.392326][T30547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.425711][T30547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.487018][T30648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6175'. [ 899.508100][T30547] team0: Port device team_slave_0 added [ 899.516302][T30547] team0: Port device team_slave_1 added [ 899.548777][T30547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.574048][T30547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.601971][T30547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.613699][T30655] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6175'. [ 899.615391][T30547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.647468][T30653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6176'. [ 899.656445][T30547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.694888][T30547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.765926][T30547] hsr_slave_0: entered promiscuous mode [ 899.772559][T30547] hsr_slave_1: entered promiscuous mode [ 899.778834][T30547] debugfs: 'hsr0' already exists in 'hsr' [ 899.784569][T30547] Cannot create hsr debugfs directory [ 899.931326][T30664] netlink: 'syz.2.6181': attribute type 1 has an invalid length. [ 899.958271][T30660] syzkaller0: entered promiscuous mode [ 899.963772][T30660] syzkaller0: entered allmulticast mode [ 900.037546][T30660] tipc: Enabled bearer , priority 0 [ 900.053536][T30660] tipc: Resetting bearer [ 900.116316][T30659] tipc: Resetting bearer [ 900.132284][T30671] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 900.159647][T30659] tipc: Disabling bearer [ 900.443101][T30685] sctp: [Deprecated]: syz.3.6189 (pid 30685) Use of int in max_burst socket option deprecated. [ 900.443101][T30685] Use struct sctp_assoc_value instead [ 900.530903][T30547] .`: (slave netdevsim1): Releasing backup interface [ 900.622614][T30697] x_tables: duplicate underflow at hook 1 [ 900.662255][T30699] netlink: 'syz.4.6194': attribute type 8 has an invalid length. [ 900.705566][T30702] bridge_slave_1: left allmulticast mode [ 900.735389][T30702] bridge_slave_1: left promiscuous mode [ 900.742381][T30702] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.751330][T30702] bridge_slave_0: left allmulticast mode [ 900.760129][T30702] bridge_slave_0: left promiscuous mode [ 900.765867][T30702] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.933244][T30711] tipc: Enabling of bearer rejected, already enabled [ 901.126728][ T5634] Bluetooth: hci2: command tx timeout [ 901.416004][T30547] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 901.459046][T30547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 901.482408][T30547] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 901.543770][T30547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 901.551629][T30547] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 901.562745][T30547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 901.570561][T30735] geneve0: entered allmulticast mode [ 901.581117][T30547] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 901.622234][T30547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 901.658036][T30735] syzkaller0: entered promiscuous mode [ 901.663569][T30735] syzkaller0: entered allmulticast mode [ 901.889070][T30547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.913015][T30547] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.924949][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.932117][ T8873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.971935][ T8868] batadv1: left promiscuous mode [ 901.989665][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.996810][ T8873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.347856][T30773] syzkaller0: entered promiscuous mode [ 902.355308][T30773] syzkaller0: entered allmulticast mode [ 902.719152][T30776] __nla_validate_parse: 6 callbacks suppressed [ 902.719171][T30776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6210'. [ 902.738966][T30547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.784469][T30547] veth0_vlan: entered promiscuous mode [ 902.803665][T30547] veth1_vlan: entered promiscuous mode [ 902.846142][T30547] veth0_macvtap: entered promiscuous mode [ 902.854804][T30547] veth1_macvtap: entered promiscuous mode [ 902.872001][T30547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.884417][T30547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.896258][T23987] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.914011][T23987] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.983876][T23987] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.002188][T23987] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.167633][ T8868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.175477][ T8868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.216484][ T5634] Bluetooth: hci2: command tx timeout [ 903.252793][ T8866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.260668][ T8866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.777646][T30804] syzkaller1: entered promiscuous mode [ 903.813176][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 903.826015][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 903.836634][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 903.843877][T30804] syzkaller1: entered allmulticast mode [ 903.857502][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 903.869744][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 904.011420][T30804] bridge8: entered promiscuous mode [ 904.047707][T30804] bridge8: entered allmulticast mode [ 904.771794][T30809] ±ÿ speed is unknown, defaulting to 1000 [ 904.783522][T30809] wlan0 speed is unknown, defaulting to 1000 [ 904.791190][T30809] lo speed is unknown, defaulting to 1000 [ 905.216394][T30867] syzkaller0: entered promiscuous mode [ 905.221899][T30867] syzkaller0: entered allmulticast mode [ 905.288050][T30868] tipc: Started in network mode [ 905.292946][T30868] tipc: Node identity 86104064062a, cluster identity 4711 [ 905.300205][T30868] tipc: Enabled bearer , priority 0 [ 905.313229][T30873] syzkaller0: entered promiscuous mode [ 905.324137][T30873] syzkaller0: entered allmulticast mode [ 905.344836][T30873] tipc: Started in network mode [ 905.359277][T30873] tipc: Node identity 268a41fb059b, cluster identity 4711 [ 905.369848][T30873] tipc: Enabled bearer , priority 0 [ 905.380316][T30873] tipc: Resetting bearer [ 905.388334][ T5634] Bluetooth: hci2: command tx timeout [ 905.408945][T30868] tipc: Resetting bearer [ 905.430105][T30868] tipc: Disabling bearer [ 905.439082][T30872] tipc: Resetting bearer [ 905.453733][T30872] tipc: Disabling bearer [ 905.525211][T30890] netlink: 'syz.3.6241': attribute type 1 has an invalid length. [ 905.712203][T30890] bond1: entered promiscuous mode [ 905.717735][T30890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 905.749861][T30900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6243'. [ 905.850472][T30900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 905.926445][ T5634] Bluetooth: hci4: command tx timeout [ 906.072000][T30916] netlink: 'syz.2.6247': attribute type 10 has an invalid length. [ 906.110515][T30916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.121802][T30916] team0: Port device bond0 added [ 906.171667][T30912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6244'. [ 906.175745][T30809] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.193305][T30809] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.202317][T30809] bridge_slave_0: entered allmulticast mode [ 906.213130][T30809] bridge_slave_0: entered promiscuous mode [ 906.227576][T30809] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.235837][T30809] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.244105][T30809] bridge_slave_1: entered allmulticast mode [ 906.255368][T30809] bridge_slave_1: entered promiscuous mode [ 906.338083][T30923] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6249'. [ 906.435918][T30809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.459224][T30809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.590436][T30809] team0: Port device team_slave_0 added [ 907.519559][T30938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6253'. [ 908.008856][ T5634] Bluetooth: hci4: command tx timeout [ 909.401290][T30809] team0: Port device team_slave_1 added [ 909.424029][T30931] batadv0: entered promiscuous mode [ 909.431881][T30931] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 909.494617][T30809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.511902][T30809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.575721][T30809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.593061][T30809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.600805][T30809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.685427][T30809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.880283][T30809] hsr_slave_0: entered promiscuous mode [ 909.910571][T30809] hsr_slave_1: entered promiscuous mode [ 909.928716][T30809] debugfs: 'hsr0' already exists in 'hsr' [ 909.942579][T30809] Cannot create hsr debugfs directory [ 910.136382][ T5634] Bluetooth: hci4: command tx timeout [ 910.163505][T30959] ±ÿ speed is unknown, defaulting to 1000 [ 910.194750][T30959] wlan0 speed is unknown, defaulting to 1000 [ 910.220009][T30959] lo speed is unknown, defaulting to 1000 [ 910.457730][T30809] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.478124][T30971] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6259'. [ 910.495168][T30809] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 910.628607][T30975] gretap0: entered promiscuous mode [ 910.747491][T30975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6263'. [ 910.756718][ T5751] IPVS: starting estimator thread 0... [ 910.949644][T30997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6267'. [ 910.991035][T30996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6267'. [ 911.031479][T31000] xt_connbytes: Forcing CT accounting to be enabled [ 911.105388][T30989] IPVS: using max 26 ests per chain, 62400 per kthread [ 911.194020][T30809] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.211232][T30809] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 911.254397][T31012] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6273'. [ 911.373923][ T5751] IPVS: starting estimator thread 0... [ 911.452773][T31031] netlink: 'syz.2.6278': attribute type 2 has an invalid length. [ 911.472117][T31031] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6278'. [ 911.547114][T31037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6280'. [ 911.556106][T31037] nbd: must specify a device to reconfigure [ 911.559100][T31034] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 911.590446][T31037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6280'. [ 911.601472][T31037] nbd: must specify a device to reconfigure [ 911.652430][T31024] IPVS: using max 31 ests per chain, 74400 per kthread [ 911.677320][T31043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6281'. [ 911.691736][T31037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6280'. [ 911.700850][T31037] nbd: must specify a device to reconfigure [ 911.707324][T31037] nbd: must specify a device to reconfigure [ 911.804702][T30809] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.855447][T30809] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 912.120469][T31060] netlink: 'syz.0.6287': attribute type 15 has an invalid length. [ 912.184739][T31062] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 912.211212][ T5629] Bluetooth: hci4: command tx timeout [ 912.308879][T30809] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.319170][T30809] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 912.607133][T31089] ip6tnl1: entered allmulticast mode [ 912.937338][T30809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 912.951918][T30809] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 912.961920][T30809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 912.976538][T30809] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 912.984440][T30809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 912.996398][T30809] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 913.004259][T30809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 913.014069][T30809] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 913.149145][T30809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.209515][T30809] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.222929][T23987] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.230161][T23987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.266569][T23987] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.273762][T23987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.924257][T30809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.100919][T31138] geneve2: entered promiscuous mode [ 914.383478][ T8873] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 914.419960][T31159] geneve3: entered promiscuous mode [ 914.428785][ T8864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.437294][T31147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 914.488373][ T8864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.564798][ T8864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.598234][ T8864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.732363][T30809] veth0_vlan: entered promiscuous mode [ 914.765200][T30809] veth1_vlan: entered promiscuous mode [ 914.904355][T31171] ±ÿ speed is unknown, defaulting to 1000 [ 914.968037][T30809] veth0_macvtap: entered promiscuous mode [ 914.988598][T31171] wlan0 speed is unknown, defaulting to 1000 [ 915.002553][T31181] ipip1: entered promiscuous mode [ 915.015729][T30809] veth1_macvtap: entered promiscuous mode [ 915.054670][T31171] lo speed is unknown, defaulting to 1000 [ 915.086748][T30809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.132767][T30809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.153580][T31187] netlink: 'syz.1.6315': attribute type 3 has an invalid length. [ 915.163463][T31187] netlink: 'syz.1.6315': attribute type 1 has an invalid length. [ 915.168742][ T8868] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.204295][ T8868] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.245998][ T8868] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.265548][ T8868] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.508920][T23987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.521027][T23987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.714815][ T8866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.724523][ T8866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.741795][T31201] netlink: 'syz.1.6319': attribute type 12 has an invalid length. [ 915.749687][T31201] __nla_validate_parse: 11 callbacks suppressed [ 915.749702][T31201] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6319'. [ 915.768437][T31201] xt_hashlimit: size too large, truncated to 1048576 [ 915.934232][T31212] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6321'. [ 915.982951][T31212] netlink: 'syz.3.6321': attribute type 33 has an invalid length. [ 916.006946][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 916.143901][T31220] bridge0: port 1(syz_tun) entered blocking state [ 916.150474][T31220] bridge0: port 1(syz_tun) entered disabled state [ 916.161728][T31220] syz_tun: entered allmulticast mode [ 916.183983][T31220] syz_tun: entered promiscuous mode [ 916.226813][T31225] tun0: tun_chr_ioctl cmd 1074025680 [ 916.894721][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 916.926335][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 916.939600][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 916.958105][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 916.981469][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 917.302564][T31243] ±ÿ speed is unknown, defaulting to 1000 [ 917.309177][T31243] wlan0 speed is unknown, defaulting to 1000 [ 917.316085][T31243] lo speed is unknown, defaulting to 1000 [ 917.431926][T31259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6330'. [ 917.443563][T31259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6330'. [ 917.714109][T31275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6334'. [ 917.716841][T31271] netlink: 'syz.0.6331': attribute type 11 has an invalid length. [ 917.730995][T31262] netlink: 'syz.0.6331': attribute type 11 has an invalid length. [ 917.888454][T31243] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.895720][T31243] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.907441][T31243] bridge_slave_0: entered allmulticast mode [ 917.915113][T31243] bridge_slave_0: entered promiscuous mode [ 917.922678][T31243] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.929808][T31243] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.936883][T31243] bridge_slave_1: entered allmulticast mode [ 917.945236][T31243] bridge_slave_1: entered promiscuous mode [ 917.968911][T31243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.980010][T31243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.044796][T31243] team0: Port device team_slave_0 added [ 918.062026][T31243] team0: Port device team_slave_1 added [ 918.098793][T31243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.105742][T31243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.135259][T31243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.150237][T31243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.157453][T31243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.185143][T31243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.242646][T31243] hsr_slave_0: entered promiscuous mode [ 918.250384][T31243] hsr_slave_1: entered promiscuous mode [ 918.258307][T31243] debugfs: 'hsr0' already exists in 'hsr' [ 918.264041][T31243] Cannot create hsr debugfs directory [ 918.414300][T31243] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.504357][T31243] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.576714][T31243] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.625161][T31243] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.793728][T31243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 918.805513][T31243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 918.814192][T31243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 918.824736][T31243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 918.833054][T31243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 918.844653][T31243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 918.854459][T31243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 918.869389][T31243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 918.987351][T31243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.010792][T31243] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.026176][ T8868] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.033697][ T8868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.047806][ T5634] Bluetooth: hci3: command tx timeout [ 919.064474][T23987] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.071628][T23987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.521412][T31243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.586248][T31243] veth0_vlan: entered promiscuous mode [ 919.601128][T31243] veth1_vlan: entered promiscuous mode [ 919.641750][T31243] veth0_macvtap: entered promiscuous mode [ 919.652221][T31243] veth1_macvtap: entered promiscuous mode [ 919.673771][T31243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.691589][T31243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.709262][T23987] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.718125][T23987] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.731168][T23987] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.743751][T23987] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.903108][T23987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.922211][T23987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.953327][T23987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.961253][T23987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.128433][ T5634] Bluetooth: hci3: command tx timeout [ 923.207392][ T5634] Bluetooth: hci3: command tx timeout [ 925.287759][ T5634] Bluetooth: hci3: command tx timeout [ 954.101686][T31322] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 954.192031][T31325] batadv_slave_0: Caught tx_queue_len zero misconfig [ 954.212661][T31332] netlink: 'syz.0.6340': attribute type 13 has an invalid length. [ 954.349248][T31332] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.356890][T31332] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.543464][T31332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.614878][T31332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.893006][T23987] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.923113][T23987] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.949167][T23987] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.978850][T23987] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.098016][T31364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6349'. [ 955.493050][T31389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6356'. [ 955.500211][T31379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6354'. [ 955.530941][T31391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6353'. [ 955.605387][T31379] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 955.705409][T31400] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 955.725385][T31398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6358'. [ 955.730085][T31400] bond1: (slave lo): Enslaving as an active interface with an up link [ 955.742859][T31400] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 955.842044][T31407] netlink: 'syz.0.6361': attribute type 12 has an invalid length. [ 955.849898][T31407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6361'. [ 956.239560][T31422] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6366'. [ 958.355562][T31380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 958.612032][T31440] netlink: 292 bytes leftover after parsing attributes in process `syz.1.6371'. [ 958.716316][T31437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6369'. [ 958.757098][T31440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6371'. [ 958.767689][T31448] ±ÿ speed is unknown, defaulting to 1000 [ 958.908615][T31448] wlan0 speed is unknown, defaulting to 1000 [ 958.926704][T31448] lo speed is unknown, defaulting to 1000 [ 959.549042][T31488] ±ÿ speed is unknown, defaulting to 1000 [ 959.583152][T31488] wlan0 speed is unknown, defaulting to 1000 [ 959.590935][T31488] lo speed is unknown, defaulting to 1000 [ 959.851019][T31499] bridge3: entered allmulticast mode [ 959.999314][T31503] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 960.314758][T31518] IPVS: set_ctl: invalid protocol: 33 10.1.1.1:20002 [ 960.406960][T31523] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 960.505533][T31527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.629084][T31527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.849472][T31549] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 960.858873][T31549] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 961.130938][T31565] __nla_validate_parse: 56 callbacks suppressed [ 961.130954][T31565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6401'. [ 962.579604][T31597] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6407'. [ 962.641559][T31600] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6407'. [ 962.654990][T31600] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6407'. [ 963.694059][T31543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 963.932506][T31609] netlink: 'syz.2.6412': attribute type 1 has an invalid length. [ 963.953384][T31606] xt_hashlimit: size too large, truncated to 1048576 [ 964.048154][T31609] bond3: entered promiscuous mode [ 964.061664][T31609] 8021q: adding VLAN 0 to HW filter on device bond3 [ 964.104180][T31627] siw: device registration error -23 [ 964.463900][T31641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6419'. [ 966.914543][T31608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1018.683548][T31637] netlink: 'syz.0.6417': attribute type 1 has an invalid length. [ 1069.574955][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1069.581931][ C1] rcu: 0-....: (1 ticks this GP) idle=c79c/1/0x4000000000000000 softirq=154241/154241 fqs=23 [ 1069.593384][ C1] rcu: hardirqs softirqs csw/system [ 1069.599794][ C1] rcu: number: 3 18 10 [ 1069.606202][ C1] rcu: cputime: 0 0 0 ==> 50900(ms) [ 1069.613995][ C1] rcu: (detected by 1, t=10510 jiffies, g=164721, q=772 ncpus=2) [ 1069.621802][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1069.621837][ C0] NMI backtrace for cpu 0 [ 1069.621852][ C0] CPU: 0 UID: 0 PID: 5284 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 1069.621871][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1069.621882][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 1069.621930][ C0] Code: 89 44 11 20 c3 cc cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 15 38 0a a6 11 65 8b 0d 59 0a a6 11 81 e1 00 01 ff 00 74 [ 1069.621945][ C0] RSP: 0018:ffffc90000007d60 EFLAGS: 00000006 [ 1069.621961][ C0] RAX: ffffffff81b34943 RBX: 0000000000000000 RCX: ffff88801eaf8000 [ 1069.621974][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1069.621984][ C0] RBP: 0000000000000000 R08: ffffffff9aa644bb R09: 1ffffffff354c897 [ 1069.621997][ C0] R10: dffffc0000000000 R11: fffffbfff354c898 R12: 0000000000000001 [ 1069.622009][ C0] R13: dffffc0000000000 R14: ffff88804880c300 R15: 0000000000000000 [ 1069.622021][ C0] FS: 00007f9abfa1d780(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000 [ 1069.622037][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1069.622049][ C0] CR2: 000055579ab83450 CR3: 00000000780e2000 CR4: 00000000003526f0 [ 1069.622064][ C0] Call Trace: [ 1069.622072][ C0] [ 1069.622080][ C0] trace_hrtimer_start+0x33/0x200 [ 1069.622118][ C0] enqueue_hrtimer+0xb7/0x2c0 [ 1069.622139][ C0] __hrtimer_run_queues+0x4ce/0xa10 [ 1069.622167][ C0] hrtimer_interrupt+0x448/0x910 [ 1069.622198][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1069.622227][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1069.622249][ C0] [ 1069.622255][ C0] [ 1069.622262][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1069.622282][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1069.622302][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d d4 4e 89 0c 48 89 de 5b e9 a3 01 62 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d 78 0e a6 11 65 8b 15 99 0e a6 [ 1069.622316][ C0] RSP: 0018:ffffc900034df620 EFLAGS: 00000286 [ 1069.622330][ C0] RAX: 1ffff11006736171 RBX: ffff8880339b0b80 RCX: dffffc0000000000 [ 1069.622343][ C0] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000028 [ 1069.622354][ C0] RBP: 0000000000000000 R08: ffff8880783cb017 R09: 1ffff1100f079602 [ 1069.622366][ C0] R10: dffffc0000000000 R11: ffffed100f079603 R12: ffff8880414564f0 [ 1069.622378][ C0] R13: ffff8880339b0b88 R14: 1ffff1100f079600 R15: 0000000000000028 [ 1069.622400][ C0] anon_vma_interval_tree_insert+0x25e/0x3c0 [ 1069.622431][ C0] anon_vma_clone+0x7a1/0x9e0 [ 1069.622458][ C0] anon_vma_fork+0x177/0x540 [ 1069.622479][ C0] ? dup_mmap+0x89a/0x1d90 [ 1069.622501][ C0] dup_mmap+0x970/0x1d90 [ 1069.622530][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1069.622548][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1069.622581][ C0] ? copy_mm+0x10f/0x480 [ 1069.622605][ C0] ? copy_mm+0x10f/0x480 [ 1069.622632][ C0] copy_mm+0x11a/0x480 [ 1069.622651][ C0] ? copy_process+0xd3c/0x4390 [ 1069.622674][ C0] copy_process+0x1e3e/0x4390 [ 1069.622699][ C0] ? copy_process+0xd3c/0x4390 [ 1069.622727][ C0] ? __pfx_copy_process+0x10/0x10 [ 1069.622753][ C0] kernel_clone+0x2d7/0x940 [ 1069.622772][ C0] ? cgroup1_freezing+0x20/0x350 [ 1069.622796][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1069.622826][ C0] __x64_sys_clone+0x1b6/0x230 [ 1069.622849][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1069.622879][ C0] ? do_sock_setsockopt+0x185/0x1b0 [ 1069.622977][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.622995][ C0] do_syscall_64+0x174/0x580 [ 1069.623014][ C0] ? trace_irq_disable+0x3b/0x140 [ 1069.623035][ C0] ? clear_bhb_loop+0x40/0x90 [ 1069.623055][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.623073][ C0] RIP: 0033:0x7f9abfaf1636 [ 1069.623089][ C0] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 1069.623104][ C0] RSP: 002b:00007fff4bd80e30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1069.623121][ C0] RAX: ffffffffffffffda RBX: 00007fff4bd80e38 RCX: 00007f9abfaf1636 [ 1069.623134][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1069.623144][ C0] RBP: 00007fff4bda1380 R08: 0000000000000000 R09: 0000000000000001 [ 1069.623155][ C0] R10: 00007f9abfa1da50 R11: 0000000000000246 R12: 00007fff4bd80f70 [ 1069.623167][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000555768a1eac0 [ 1069.623188][ C0] [ 1069.623831][ C1] rcu: rcu_preempt kthread starved for 5056 jiffies! g164721 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1070.075612][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1070.085574][ C1] rcu: RCU grace-period kthread stack dump: [ 1070.091451][ C1] task:rcu_preempt state:R running task stack:26848 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1070.104947][ C1] Call Trace: [ 1070.108219][ C1] [ 1070.111150][ C1] __schedule+0x17d9/0x56c0 [ 1070.115673][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1070.120641][ C1] ? __pfx___schedule+0x10/0x10 [ 1070.125506][ C1] ? schedule+0x90/0x2b0 [ 1070.129747][ C1] schedule+0x164/0x2b0 [ 1070.133905][ C1] schedule_timeout+0x152/0x2c0 [ 1070.138763][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1070.144140][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1070.149433][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1070.155246][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1070.160793][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1070.165659][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1070.171818][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1070.177110][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1070.182927][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1070.187529][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1070.192733][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1070.197674][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1070.202703][ C1] kthread+0x388/0x470 [ 1070.206776][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1070.211980][ C1] ? __pfx_kthread+0x10/0x10 [ 1070.216576][ C1] ret_from_fork+0x514/0xb70 [ 1070.221210][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1070.226326][ C1] ? __switch_to+0xc89/0x1420 [ 1070.231007][ C1] ? __pfx_kthread+0x10/0x10 [ 1070.235613][ C1] ret_from_fork_asm+0x1a/0x30 [ 1070.240410][ C1] [ 1070.243424][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1070.249743][ C1] CPU: 1 UID: 0 PID: 8868 Comm: kworker/u8:44 Not tainted syzkaller #0 PREEMPT(full) [ 1070.259283][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1070.269336][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1070.275852][ C1] RIP: 0010:smp_call_function_many_cond+0x10b0/0x14b0 [ 1070.282618][ C1] Code: c0 75 73 41 8b 1e 89 de 83 e6 01 31 ff e8 d8 22 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 84 1e 0c 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 69 1e 0c [ 1070.302221][ C1] RSP: 0018:ffffc900036ef720 EFLAGS: 00000293 [ 1070.308287][ C1] RAX: ffffffff81ba5317 RBX: dffffc0000000000 RCX: ffff88807b21be00 [ 1070.316255][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1070.324219][ C1] RBP: ffffc900036ef860 R08: ffffffff905789f7 R09: 1ffffffff20af13e [ 1070.332193][ C1] R10: dffffc0000000000 R11: fffffbfff20af13f R12: 1ffff110170c85fd [ 1070.340173][ C1] R13: ffff8880b873c448 R14: ffff8880b8642fe8 R15: 0000000000000000 [ 1070.348148][ C1] FS: 0000000000000000(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 1070.357074][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1070.363653][ C1] CR2: 00007f9abfc1ddd0 CR3: 000000000e946000 CR4: 00000000003526f0 [ 1070.371627][ C1] Call Trace: [ 1070.374909][ C1] [ 1070.377842][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1070.382877][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1070.389208][ C1] ? kmem_cache_alloc_bulk_noprof+0xb7/0x7b0 [ 1070.395205][ C1] ? __pfx___text_poke+0x10/0x10 [ 1070.400159][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1070.405187][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1070.410305][ C1] smp_text_poke_batch_finish+0x5fd/0x1110 [ 1070.416121][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1070.422109][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1070.427138][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1070.433398][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 1070.439654][ C1] ? __jump_label_update+0x347/0x370 [ 1070.444984][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1070.450975][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 1070.456887][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1070.462614][ C1] static_key_enable+0x1a/0x20 [ 1070.467382][ C1] toggle_allocation_gate+0xab/0x290 [ 1070.472675][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1070.478570][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1070.484305][ C1] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 1070.490376][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1070.496100][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1070.501671][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1070.507660][ C1] ? assign_work+0x3cf/0x5d0 [ 1070.512253][ C1] worker_thread+0xa47/0xfb0 [ 1070.516870][ C1] kthread+0x388/0x470 [ 1070.520962][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1070.526094][ C1] ? __pfx_kthread+0x10/0x10 [ 1070.530703][ C1] ret_from_fork+0x514/0xb70 [ 1070.535314][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1070.540434][ C1] ? __switch_to+0xc89/0x1420 [ 1070.545118][ C1] ? __pfx_kthread+0x10/0x10 [ 1070.549713][ C1] ret_from_fork_asm+0x1a/0x30 [ 1070.554493][ C1]