last executing test programs: 11.803651355s ago: executing program 3 (id=3210): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000b00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xdc, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xc8, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49ff01a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b34fb9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57849b8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ed4837a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a61b69c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71ea6367}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2391d7fd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x569487a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ea16b4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5edf2fd5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x519ae14b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000024646c0c00000000002020207b1af8ff00000015bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000077b501b049d093bde197b22ce9a278c6111ad884f5384909ed4160492428d8579ebb1ae5504b2daea709b6cd809b1c219661e59431fc9da23889ca270ddf4b7db6cb199a615243b91aa11da27a12bf637097ac491c48e58cb53133e34fe2e9c22890bdd7a6bcbbf40ff39a3445e63aafdc89418a347c96c761fdf1f380ee57da34152f9a26dcf0ead1442b74a738bb6af6e03c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x1, 0x0) (async) r4 = socket(0x2, 0x1, 0x0) unshare(0x20000400) bind$alg(r4, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f00000004c0)=ANY=[@ANYRES64=r3, @ANYRESDEC=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x2, 0x0) (async) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x2}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x41098}, 0x4880) socket$unix(0x1, 0x2, 0x0) (async) r11 = socket$unix(0x1, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r12 = socket$kcm(0x11, 0x3, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r9, 0x110, 0x2, &(0x7f00000001c0)='GPL\x00', 0x4) (async) setsockopt$RXRPC_SECURITY_KEYRING(r9, 0x110, 0x2, &(0x7f00000001c0)='GPL\x00', 0x4) close(r13) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) (async) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 11.107285929s ago: executing program 3 (id=3216): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="0511430000000000a510000002000000850000005600000095000000000000009500a50500000000557fd4cc259356ef61bcd08f50548464e5791f0a25bd1718eb790520533b7c4f08a34523510695ebef3ade0f675d0c5daeb94c5693de9ca41c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socket$kcm(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x20) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xcff5}, 0x38) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r6, 0x89f5, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r8, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0xd, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) 10.85570548s ago: executing program 3 (id=3218): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r2, 0x3141e0b2751b0f9b, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0x7}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 10.590988032s ago: executing program 3 (id=3220): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2, 0xd55}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xdd204690f20f8277}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.227657495s ago: executing program 3 (id=3222): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r1) socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r1, r0, 0x0, 0xf03a0005) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r6}, 0x38) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) (async) close(r1) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) sendfile(r1, r0, 0x0, 0xf03a0005) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r4}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r6}, 0x38) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) 9.876324952s ago: executing program 3 (id=3225): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x7}}, ["", ""]}, 0x24}}, 0x8040) 4.591001648s ago: executing program 2 (id=3266): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0000002}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f0000001500)={0x0, @in6={{0xa, 0x4e21, 0x8000008, @empty, 0x28f9fed5}}, 0xfffe}, 0x90) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES16=r0, @ANYBLOB="0000000000000000bf0300000000000085000000a4000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe85}, 0x94) 4.386562955s ago: executing program 2 (id=3268): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="8f2dea96734a537b407e25fb070aecb9d3584a71ab77b917f91fed6d2739a67ed7", 0x21}], 0x1}, 0x894) 3.997608407s ago: executing program 4 (id=3273): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0xa, 0x3, 0x1) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x80000000, @vifc_lcl_addr=@remote, @broadcast}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500f81b100000008002907800000000e000030008f08000907800060003dc2e3973a930e0d64e0420e77b05109efdacf81d0b8334d8f28f61c766765fdacbdb3ddf07cd0b120210ccf2685a473150bc19cc1baa6dacbc5ac756b20d8657693e4f"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@broadcast, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) r5 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a010400000000000000000a0600010900010073797a31000000000900020073797a3200000000780004806400018009000100686173680000000054000280080007400000000108000540"], 0xcc}}, 0x24000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x60, 0x0, 0x1, 0x74bd29, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0xffffffffffffffb4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xdc2}, @NL802154_ATTR_WPAN_DEV={0xbb}, @NL802154_ATTR_TX_POWER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1300}, [@printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) 3.92361044s ago: executing program 0 (id=3274): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f00000003c0)=0x40002, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r6, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) pipe(&(0x7f00000007c0)) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async) close(r1) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f00000003c0)=0x40002, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r6, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) (async) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) (async) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) (async) 3.712122526s ago: executing program 4 (id=3275): r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000080)="6a5b3986af4597e5", 0x8}], 0x1, 0x8) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) recvmmsg(r0, &(0x7f0000008f00)=[{{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000000240)=""/133, 0x85}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/38, 0x26}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000004540)=""/4096, 0x1000}], 0x6}, 0x5}], 0x2, 0x40018020, 0x0) 3.624277284s ago: executing program 0 (id=3276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880100001800c0010800400108004000f800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08c80d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}}, 0x40) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000000000000c7000000c700000006000000100000000800000f030000000200000005000000080000000200000004000000100000000200000001000100070000000500000002000000f00700000200000009000000f90000000100000006000000060000000100000003000000feffffff01000000ff0300000500000043ac260b00000008000006040000000100000000000000100000000f2a00000f00000003000000000000000600000005000000100000000b000000a60e00000f000000040000000f00000006000000100000000000000204000000000030005f30002720142c6859772871d39956ced881e226e4b46dff74c5d3ab14888c3179fc340f263a28c033036b20837c18819ed6d70507bc5f"], &(0x7f0000000740)=""/152, 0xe6, 0x98, 0x1, 0x7, 0x119bb96314581df1}, 0x28) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000840)={'ip_vti0\x00', 0x0, 0x7800, 0x1, 0x8, 0xe, {{0x35, 0x4, 0x0, 0x1, 0xd4, 0x65, 0x0, 0x48, 0x4, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x70, 0x0, [{0x6, 0x4, "996a"}, {0x2, 0xe, "dbb0cde07d41ed8774bd61e6"}, {0x0, 0x8, "16ff735626c4"}, {0x7, 0x10, "d489ddd8d30c291c48ce5b29b05f"}, {0x2, 0xf, "1128f2e88c44094a6dd50175b5"}, {0x6, 0x8, "6fbe4b47f3dd"}, {0x7, 0x10, "9f4f47e2d99f2d0192cb7a20a549"}, {0x2, 0xe, "f97eaea61552afb6afe7a56f"}, {0x2, 0xb, "bd50a9072f52008baf"}]}, @end, @timestamp_addr={0x44, 0x44, 0xb8, 0x1, 0x6, [{@empty, 0x1}, {@loopback, 0x8}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}, {@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x4}, {@empty, 0xa6}, {@multicast2, 0x6}]}, @timestamp={0x44, 0x8, 0x23, 0x0, 0x9, [0x2]}, @noop, @noop]}}}}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', r5, 0x0, r4}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r6, 0xffffffffffffffff, 0x13, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x12e9dd81}}, 0x30) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r8}, 0x10, &(0x7f00000003c0)={0x0}, 0x2, 0x0, 0x0, 0x1}, 0x10044009) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="14000000100001000000000000000000f900000a30000000060a030400000000000000000a0000010900010073797a3100000000040004800900020073797a3000000000140000001100010000de0000000000000a00000a"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080), 0x4) 3.558998281s ago: executing program 4 (id=3277): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x7, 0x0, 0x8, 0x3, 0x0, 0x40, 0x8}, @ldst={0x0, 0x3, 0x1, 0x3, 0x2, 0x6, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x2, 0x1, 0x2, 0x2, 0xfffffffffffffffc, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0xb7, &(0x7f0000000200)=""/183, 0xc3300, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0x8, 0x3d02, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x2, 0x5, 0x6, 0xa}, {0x2, 0x3, 0x5, 0x5}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="7a7fa22c2aff88d753ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.405278424s ago: executing program 4 (id=3278): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr, 0x6, 0x0}, 0x0) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr, 0x6, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) 3.335837005s ago: executing program 0 (id=3279): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000c80)={0x28, 0x12, 0x1, 0x70bd25, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}]}, @nested={0x8, 0x31, 0x0, 0x1, [@nested={0x4, 0xd5}]}]}, 0x28}], 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000003c0)={r0, &(0x7f0000000280)='-)+:#,\'\x00', 0x400200, &(0x7f0000000300)={@align=0xd2da, {0x2, 0x3, 0xc, 0x6}}, 0x7, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x80}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000a40)=0x40) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0x4, r6, 0x1, 0x8, 0x6, @broadcast}, 0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x40080) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_RX_RING(r8, 0x10e, 0x6, &(0x7f0000000000)={0x2, 0x8, 0x6c, 0xec}, 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r9, 0x0, 0xd6, 0x1000, &(0x7f0000000100)="70e7239132b1422931901cf8b59318b679e264dcd9d853e04fa6e3768bf2a3f899d01916ce54521901aecce5bb3059ebaaee4b7415f51995d9f11f5e1a3150d3059d908adc4075548fda2cab76c09b2754507baf5acb991da4a4bfc029e512a7a0e6bb9e7cb64a281c15bded1246542aba8a4233e79812ce95353a4fb6f9934db93106bd029adadd735b24a5cc3422a0b8fa61859f9a69c68a7374082f3ff2f7b9e59276d7dbc6c59b31ae94d5ebb57635e8f615d13515c6213948dc8b4c24508244cf0c2fc6cf94034609893f632ce434ac1954420e", &(0x7f0000000200)=""/4096, 0x1, 0x0, 0x21, 0x35, &(0x7f0000001200)="f7f761e9c4e1fc3a7555351d5bcb0569b11421c4e5050b2e50878e1cf84c72b660", &(0x7f00000012c0)="6d895d06668f804b3b275f8994471d89d411c96cc0de38637160084ff54ced4064206ae835a3511cf0b0dd1a15abc6f23d15d957d4", 0x4, 0x0, 0x3}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000480)=""/129, 0x81, 0x0, &(0x7f0000000540)=""/232, 0xe8}}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000007c0)={r0, &(0x7f00000006c0)='\x00', 0x10400, &(0x7f0000000700)={@_ha_fsid={[0x8]}, {0x2, 0x7, 0xa, 0xfff}}, 0x1, &(0x7f0000000740), &(0x7f0000000780)=0x3ff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r12, &(0x7f00000000c0)="185a22", &(0x7f0000000180)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000cc0)={'ip6tnl0\x00', &(0x7f0000000c00)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x2, 0x10000, 0x23, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x8, 0x5, 0x1}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xec1e}, [@alu={0x7, 0x1, 0x9, 0x5, 0x7, 0x8, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x0, 0x0, 0xa, 0x4, 0x7, 0xfffffffffffffffe, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_val={0x18, 0x1, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000b80)='syzkaller\x00', 0xffffffff, 0x19, &(0x7f0000000bc0)=""/25, 0x40f00, 0x10, '\x00', r13, 0x1b, r1, 0x8, &(0x7f0000000d00)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x4, 0xd, 0x5, 0x3}, 0x10, r10, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x7, 0x8}, 0xc) 3.280027606s ago: executing program 1 (id=3280): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2a0027bd7000fbdbdf250f0000000c00990008000000770000003c001b80040002000400e0ff040003000500010011000000050001002400000005000100350000000400020001001c00000004000300040002000800a100ff0000000800a100010000800500a300010000000000"], 0x74}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007500)=ANY=[@ANYBLOB="2c0000003e0007012bbd700000000000017c00000400fc800a000180356ee80200000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) 3.014581003s ago: executing program 0 (id=3281): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0xd) sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x200, @ipv4={'\x00', '\xff\xff', @local}, 0xa, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000400)="83", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0xc88c4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) listen(r1, 0xd) (async) sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x200, @ipv4={'\x00', '\xff\xff', @local}, 0xa, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000400)="83", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0xc88c4) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) 2.996279919s ago: executing program 1 (id=3282): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'macvtap0\x00', {0x2}, 0x9}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'macvtap0\x00', {0x2}, 0x9}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x100, 0xc8, 0x8, 0x100, 0x5803, 0x210, 0x2e8, 0x2e8, 0x210, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xffffffff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x1, 0x4}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x69, 0x5}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x100, 0xc8, 0x8, 0x100, 0x5803, 0x210, 0x2e8, 0x2e8, 0x210, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xffffffff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x1, 0x4}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x69, 0x5}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}}, 0x4000000) write$nci(0xffffffffffffffff, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x4, 0x1}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000500)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) sendmsg$inet(r11, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000100003042bbd7000fedbdf25000003007f618ebdd7e20eea6a7abb56dd533cbcce47ac635d27bbcc2b995d6ad0e67f2ab931262aa089a6a4779d6eb86228436d0e90148d59c4adeaa047c699ab0f4b83171e5e1519a414ddc8d450d46259d7dbf83b2d6e3a2b85d72f643412b34a6181a3b038ec4e2ed24deb04f5b28472eca5f86649e454ac16320d715d6254e3bd9ec7aba4b4f3b7910a5047b621a64bb4e11ff79ee524ec5ed500b86e954fe3ea0889fa01d659aaf7b9e420623bb02cad2f9a4e2e3b745b979a5a228c13f5ccf9c1ae7f9a5ca22c9aa0fba1479fbf6df486a95c3f9b1be4f9cf6a5f904a2ba57f17eb94d6a145a497", @ANYRES32=0x0, @ANYBLOB="2010000000000000200012800b00010067656e65766500001000028004000e0005000a0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x40080) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000100003042bbd7000fedbdf25000003007f618ebdd7e20eea6a7abb56dd533cbcce47ac635d27bbcc2b995d6ad0e67f2ab931262aa089a6a4779d6eb86228436d0e90148d59c4adeaa047c699ab0f4b83171e5e1519a414ddc8d450d46259d7dbf83b2d6e3a2b85d72f643412b34a6181a3b038ec4e2ed24deb04f5b28472eca5f86649e454ac16320d715d6254e3bd9ec7aba4b4f3b7910a5047b621a64bb4e11ff79ee524ec5ed500b86e954fe3ea0889fa01d659aaf7b9e420623bb02cad2f9a4e2e3b745b979a5a228c13f5ccf9c1ae7f9a5ca22c9aa0fba1479fbf6df486a95c3f9b1be4f9cf6a5f904a2ba57f17eb94d6a145a497", @ANYRES32=0x0, @ANYBLOB="2010000000000000200012800b00010067656e65766500001000028004000e0005000a0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x40080) 2.876376253s ago: executing program 4 (id=3283): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) getsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc}]}, &(0x7f0000000640)=0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdfd45c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) unshare(0x26020480) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f00000005c0)={0x2, 0x4e21, @multicast1}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1002}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000202c0007012bbd7000ffdbdf25047c0000"], 0x14}}, 0xc010) socket$nl_generic(0x10, 0x3, 0x10) 2.571569113s ago: executing program 1 (id=3284): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc) (async) r1 = socket(0x22, 0xa, 0xfffffffc) bind$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x10) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r0}) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x0, 0x4, 0xd62c, 0x1}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x400a0c1) (async) ppoll(&(0x7f0000000200)=[{r2, 0x280}, {r2, 0x4000}, {r0}, {r2, 0x664}], 0x4, &(0x7f0000000240), &(0x7f0000000280)={[0x6]}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}}, 0x20004880) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r5) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r6, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040001}, 0x40084) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x7, 0x700, 0x80, 0x9, {{0xc, 0x4, 0x3, 0x9, 0x30, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast1, @remote, {[@rr={0x7, 0x1b, 0x5, [@remote, @private=0xa010101, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x16}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000740)={'ip_vti0\x00', r7, 0x7, 0x1, 0x0, 0x3, {{0x15, 0x4, 0x3, 0x8, 0x54, 0x65, 0x0, 0x8f, 0x29, 0x0, @multicast2, @loopback, {[@end, @ssrr={0x89, 0x13, 0xdd, [@rand_addr=0x64010101, @private=0xa010102, @empty, @loopback]}, @rr={0x7, 0x2b, 0x81, [@multicast1, @remote, @private=0xa010101, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}, @remote, @empty, @multicast1, @empty]}]}}}}}) (async) syz_emit_ethernet(0x36, &(0x7f0000000800)={@remote, @link_local, @val={@val={0x88a8, 0x2, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x2}}, {@arp={0x806, @generic={0x304, 0x86dd, 0x6, 0x5, 0x8, @remote, "a84b039cbb", @remote, "48f185939d231a"}}}}, 0x0) (async) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000840)=0xcefd) (async) recvmsg$unix(r2, &(0x7f0000000a40)={&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000900)=""/7, 0x7}], 0x1, &(0x7f0000000980)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000a80), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8983, &(0x7f0000000b00)={0x2, 'wlan0\x00', {0x1}, 0x7f}) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r9, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008000) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r13) (async) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000c80)=0xfffffff9, 0x4) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r11, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2d, 0x6c}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x400) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000dc0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000e40)=""/43, 0x2b}, {&(0x7f0000000e80)=""/42, 0x2a}, {&(0x7f0000000ec0)}, {&(0x7f0000000f00)=""/161, 0xa1}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f0000001040)}, {&(0x7f0000001080)=""/110, 0x6e}], 0x7}, 0x40003142) 2.359882349s ago: executing program 2 (id=3285): socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x400101a0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES16], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x40880) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r8, @in6={{0xa, 0x4e23, 0x80000000, @local, 0xa}}, 0x0, 0x3ff}, 0x90) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x110, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB='/\x00'/12, @ANYRES32=r2, @ANYBLOB="deb3af21db8f556e326ac2dde24c350bc3ae962be84cdd948af293aa2dad00cc8c09605e71e87579b288ab23a6198fa4623f1beea18a2c7dea19067a17df9d737f62fb0977bdfcfdc4f2f270304aee8f47062a77767cd9edbea3577e7722d30fd3f8bda7d755f5", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="1800000072006bcd9e3fe3de6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="f6413d5c9479dbf564f91a0d481aff84b1847ba20f316e8ac441c0d61954e358558085adac8c24bdbbd4bcda", @ANYRES32=r10, @ANYBLOB="04020de9e71fdc8392fd055847e83de395ddac0b185a68f3558dc4b75dc36c658cdf5af4028d576e3c4e17d7fc4899f57536eb2bfd7ca4205b32974d4663050b39f81921a87e7aff292dab0bd0dab08f5d2192714ea21f32124ad22308a48eb653d5f61bb5fa2854a8ae64b38804c9dd6be29270aa4be8b2b36addfa30118a344c5db3029e0c77303dcf6b7980466d4d9bb871ca1bebf2ef3c439de6294d401f7647f8c22c37fd0fb0aff7ee8b51ae7bd845a478c8e207d002441ae22e1684c413f1fa0e7c02c6579345f1b07e8556a141d6aff1e6c278b73201c4a795f5d19619eb8f39ea5cbe02910f1f", @ANYRESHEX=r6], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20040054) 2.227659845s ago: executing program 1 (id=3286): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x38) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x28040014}, 0x40) sendmmsg$sock(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000340)="8ca16f83", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x60}}], 0x18}}], 0x2, 0x4000804) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x4e}, 0x28) unshare(0x400) r7 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000000300)={{r6, &(0x7f0000000000)='\x00', 0x1400, &(0x7f0000000180)={@align, {0x2, 0x86b, 0x8001, 0x9}}, 0x5, &(0x7f00000001c0), &(0x7f0000000280)=0x6e0000}, {[0xcc1, 0xa76, 0x401, 0x13]}, 0x2, 0x5, &(0x7f00000002c0)=""/5}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x84}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x404000c}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_delrule={0x58, 0x21, 0x300, 0x70bd2d, 0x25dfdbff, {0x2, 0x0, 0x10, 0xfb, 0x42, 0x0, 0x0, 0x3, 0xc}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x800}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}, @FRA_DST={0x8, 0x1, @private=0xa010100}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_FLOW={0x8, 0xb, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x94, &(0x7f00000000c0)=""/148}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) (async) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) sendfile(r3, r4, 0x0, 0x38) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x28040014}, 0x40) (async) sendmmsg$sock(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000340)="8ca16f83", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x60}}], 0x18}}], 0x2, 0x4000804) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x4e}, 0x28) (async) unshare(0x400) (async) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000000300)={{r6, &(0x7f0000000000)='\x00', 0x1400, &(0x7f0000000180)={@align, {0x2, 0x86b, 0x8001, 0x9}}, 0x5, &(0x7f00000001c0), &(0x7f0000000280)=0x6e0000}, {[0xcc1, 0xa76, 0x401, 0x13]}, 0x2, 0x5, &(0x7f00000002c0)=""/5}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x84}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x404000c}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_delrule={0x58, 0x21, 0x300, 0x70bd2d, 0x25dfdbff, {0x2, 0x0, 0x10, 0xfb, 0x42, 0x0, 0x0, 0x3, 0xc}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x800}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}, @FRA_DST={0x8, 0x1, @private=0xa010100}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_FLOW={0x8, 0xb, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x94, &(0x7f00000000c0)=""/148}, 0x80) (async) 2.227287551s ago: executing program 0 (id=3287): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514000cc0080002003f00020006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r6 = accept4(r5, 0x0, 0x0, 0x800) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x140f, 0x2, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(camellia))\x00'}, 0x58) (async) close(0x3) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) sendmmsg$alg(r6, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000700)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="000000000000000017010000040000000400000000000000000000000000000017010000030000000080f8d7dfc02617c6000000000000001701000002000000000000008db6ba8669d9e3af339c99b7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c3ebcfd79105451a741dd41b329d3c414c29fa063ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab561f4ca2941b64022d67061ec8e2b1fa1eed6e9d400000000"], 0x0, 0x4044884}], 0x2, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0009"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r12, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x24080040}, 0x24000000) (async) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001000010800000000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="00000000011000000c002b8088000100", @ANYRES32=r4, @ANYBLOB], 0x2c}}, 0x0) r13 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r13, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000000), 0x1000000000000175}, 0x8041) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000a80)="0cf2e153a074a59ae15c1863473bbce6798a60e9000000000000000000", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 2.028569026s ago: executing program 2 (id=3288): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91109a000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) r1 = socket(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000040)) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) (async) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r11, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) (async, rerun: 32) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) (async) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x840, 0x4) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async, rerun: 64) socket$unix(0x1, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 1.92995055s ago: executing program 1 (id=3289): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000) mmap$xdp(&(0x7f00003b7000/0x4000)=nil, 0x4000, 0x7000000, 0x10, 0xffffffffffffffff, 0x2000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) unshare(0x20000400) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, 0x0, 0x0}, 0x20) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (async) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000) (async) mmap$xdp(&(0x7f00003b7000/0x4000)=nil, 0x4000, 0x7000000, 0x10, 0xffffffffffffffff, 0x2000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) (async) unshare(0x20000400) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, 0x0, 0x0}, 0x20) (async) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) (async) 1.839813757s ago: executing program 0 (id=3290): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x54, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x48, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6730}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xb34}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001800090f0a19349d18c915960b0e256b09006cbd7000000000000000"], 0x1c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000300)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2405c090}, 0x200088c5) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r6, &(0x7f0000000000)="0a000000010001", 0x7) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000084) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @empty}, &(0x7f0000000040)=0xc) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x83}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r8, &(0x7f0000003d00)=ANY=[@ANYBLOB="080000f50600060005001400006400000b04"], 0xfcf) sendmmsg$inet6(r7, &(0x7f00000013c0), 0x0, 0x48d5) (async) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fedbdf250100d8b8c1a47a9a0900000e0001006e65342f6c32636170000000080002000500000008"], 0x34}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ac00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="080026bd7000ffdbdf25010000000800040001000000080007000000000000000000000001140005011801000800000000000001000000000142a1759fd3720900010073797a31000000000800"], 0x60}}, 0x14040000) 1.696341649s ago: executing program 2 (id=3291): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x220, 0x2f0, 0xfeffffff, 0xf8, 0x2f0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x40, 0x6}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_vlan\x00', 0x0}) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xffffffff) socket$key(0xf, 0x3, 0x2) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$netlink(r6, &(0x7f0000000800)={0x0, 0xd, &(0x7f0000000540)=[{&(0x7f0000000ac0)={0x10, 0x2a, 0x800, 0x70bd27, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async) sendmmsg$alg(r6, &(0x7f000000c600)=[{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000000)='L', 0x1}], 0x1, 0x0, 0x0, 0x4000080}], 0x1, 0x4008010) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) (async) close(r6) (async) write$bt_hci(r6, &(0x7f0000000640)={0x1, @pin_code_reply={{0x40d, 0x17}, {@any, 0x4, "be2e7a9074e19761502288ee8ebcc32c"}}}, 0x1b) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffde}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4000000}], 0x32, 0x400c0) (async) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/124, 0x7c}, {0x0}, {&(0x7f0000000800)=""/88, 0x58}, {&(0x7f00000002c0)=""/41, 0x29}], 0x4}, 0x40000001) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltfilter={0x3c, 0x2d, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xd, 0x10}, {0x6, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x10}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc800) (async) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @empty}, 0x3ff, 0x0, 0x2}}, 0x2e) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000019200)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) 1.580192243s ago: executing program 1 (id=3292): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB="a85883f8eedd7765addc08460d08fe1bc5ca05350d2b657aafb3d75b13fd6f2f187b9abf61429f10513f788ab3757d6211e31ac4d1502f6b8c7e4c17329bd1f22cd6b58a265a9b838fc2bc9e7720fd22e95178352872d7b6160e73d5f44e5c65a760f6537695ee04d75d5b0e573193cb6e032e39ede722c7dd5348dd8eac8567b84e7e36bebadc1a73854c244d102971fa7de95347b10565ca5a250eb33042824ff252f0b752dce253360ab4920ecf35db3d48ca4d04cdd01f4b1e8ac69ecb951f711328d3b3cfbf7508d9fde099a4d620a63f2be3", @ANYRESDEC=r1], 0x128}, 0xc010) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r10 = socket(0x1e, 0x3, 0x3) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000ffff263d7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100580a05002c00128009000100766c616e000000001c0002800600010004000000100003800c000100bf0000000400000008000500", @ANYRES32=r12, @ANYBLOB="0500ff4f0100000083522f9bbd6c8acbc11b511ca95d518fc8c04a1c964af566119fc6c7d1905d22afd04fbe15250b685acccb3537ec4217c6536b036a3d2d258cbe618861d9b7e97ac288f0ce694bd6074e1db71bf2629c67634d59ed6d26ee2de7e10208e3d51e26bc7f3448ff4ee8ce77be4f4c3c5ab35d4d1ae53df14a4efab12f5c31ee728808ad3fb865c4a8809a99fd14f9a66a"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x45d06774e0dd60c2) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 403.563µs ago: executing program 2 (id=3293): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0xffffffff, 0xd7c7, 0x401}, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x78, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYRES8=0x0, @ANYRES32=r4, @ANYBLOB="000000000000000014002b800800e8b64b498ca543f2714ebb5403197376cb11e6c8ee49bb717ad618aa4453769e34e06d475325d8d66c5e3f11b5bafcb40c8e3bd19f47f2622f3885d11d1011dba9a2f6391381a29386e8e73f877c8bc242341e6b0483e18cd4", @ANYBLOB="a96fbee93f822072166777570eed5406ea05a5ba2e6870f593561e39a23179bf39376089a0c10ae547d45c555a559bc1311fe6385d9a60d51cf06a5e4f94ed6d2b591e6cec7a5b5d"], 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001540)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) unshare(0x2c020400) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, 0x0, 0x0) r11 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r11, 0x10f, 0x81, &(0x7f0000000480), 0x4) write$nci(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="40ed"], 0x4) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000b0000000000000008000ac0b3c60000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="180100002e00010000000000ffdbdf250501f2800c00180008ac0f000000000014000a0000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff8"], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000100)) 0s ago: executing program 4 (id=3294): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x14004001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) unshare(0x22020400) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r2, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f00000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r3, &(0x7f0000002940), 0x0}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)={0x20, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}]}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): y.db.p7s [ 281.289040][T12961] pim6reg: entered allmulticast mode [ 281.317739][T12961] pim6reg: left allmulticast mode [ 281.351409][T12934] bond6 (unregistering): Released all slaves [ 281.516852][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 281.535740][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 282.091921][T13010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 282.449632][T13025] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1865'. [ 282.473964][T13025] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1865'. [ 282.511061][T13028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1865'. [ 282.746206][T13044] vlan6: entered promiscuous mode [ 282.760677][T13044] macvlan0: entered promiscuous mode [ 282.863146][T13043] block nbd2: server does not support multiple connections per device. [ 282.884321][T13043] block nbd2: shutting down sockets [ 283.088423][T13061] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 284.036794][T13079] netlink: 'syz.0.1881': attribute type 8 has an invalid length. [ 284.173645][T13081] netlink: 'syz.4.1882': attribute type 1 has an invalid length. [ 284.274029][T13081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.308684][T13083] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.347338][T13083] bond0: (slave team0): Enslaving as a backup interface with a down link [ 284.759760][T13103] netlink: 'syz.4.1891': attribute type 1 has an invalid length. [ 284.878783][T13103] bond6: entered promiscuous mode [ 284.915991][T13103] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.014234][T13111] ipvlan2: entered allmulticast mode [ 285.032874][T13111] bond6: entered allmulticast mode [ 285.103580][T13103] ipvlan3: entered allmulticast mode [ 285.196069][T13116] bond6: (slave bridge7): making interface the new active one [ 285.227567][T13116] bridge7: entered promiscuous mode [ 285.249130][T13116] bridge7: entered allmulticast mode [ 285.278250][T13116] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 285.311034][T13121] syzkaller0: entered promiscuous mode [ 285.321826][T13121] syzkaller0: entered allmulticast mode [ 285.336557][T13115] tipc: Enabled bearer , priority 0 [ 285.367323][T13114] tipc: Resetting bearer [ 285.384713][T13114] tipc: Disabling bearer [ 285.654373][T13123] tipc: Enabled bearer , priority 0 [ 285.685079][T13123] syzkaller0: entered promiscuous mode [ 285.710804][T13123] syzkaller0: entered allmulticast mode [ 285.739148][T13123] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 285.784584][T13123] tipc: Resetting bearer [ 285.869315][T13122] tipc: Resetting bearer [ 285.877875][T13131] __nla_validate_parse: 3 callbacks suppressed [ 285.877896][T13131] netlink: 480 bytes leftover after parsing attributes in process `syz.0.1896'. [ 285.883082][ C0] bridge0: port 1(veth0_virt_wifi) entered learning state [ 285.900841][T13131] netlink: 480 bytes leftover after parsing attributes in process `syz.0.1896'. [ 285.933851][T13122] tipc: Disabling bearer [ 286.156863][T13135] tipc: Trying to set illegal importance in message [ 286.187560][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 286.212880][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1897'. [ 286.304489][T13137] geneve4: entered promiscuous mode [ 286.331889][T13137] geneve4: entered allmulticast mode [ 286.375478][T13140] vti0: entered promiscuous mode [ 286.387005][T13140] vti0: entered allmulticast mode [ 286.403626][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.455626][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.500962][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.539644][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.623949][T13154] xt_hashlimit: size too large, truncated to 1048576 [ 286.709585][T13156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1901'. [ 286.855800][T13161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.388822][T13174] netlink: 'syz.3.1907': attribute type 4 has an invalid length. [ 287.418166][T13180] netlink: 'syz.1.1909': attribute type 10 has an invalid length. [ 287.466682][T13180] team0: Device vxcan1 is of different type [ 287.583236][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'. [ 288.043591][T13206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1915'. [ 289.368343][T13189] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 289.376250][T13189] ip6tnl3: left allmulticast mode [ 289.381937][T13189] macsec2: left promiscuous mode [ 289.393678][T13189] ipvlan3: left allmulticast mode [ 289.399309][T13189] bond4: left allmulticast mode [ 289.405727][T13189] ip6gre1: left promiscuous mode [ 289.413858][T13189] ip6gre1: left allmulticast mode [ 289.421907][T13189] team1: left promiscuous mode [ 289.428773][T13189] team1: left allmulticast mode [ 289.436374][T13189] team2: left promiscuous mode [ 289.441268][T13189] team2: left allmulticast mode [ 289.450940][T13189] bridge0: left promiscuous mode [ 289.456386][T13189] bridge0: left allmulticast mode [ 289.463609][T13189] vlan4: left allmulticast mode [ 289.468946][T13189] bond0: left allmulticast mode [ 289.660188][T13227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1921'. [ 289.688880][T13229] tipc: Enabled bearer , priority 0 [ 289.720508][T13229] syzkaller0: entered promiscuous mode [ 289.752839][T13229] syzkaller0: entered allmulticast mode [ 289.776793][T13229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1922'. [ 289.844385][T13226] tipc: Resetting bearer [ 289.905272][T13226] tipc: Disabling bearer [ 290.047580][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1927'. [ 290.546714][T13276] netlink: 'syz.2.1934': attribute type 1 has an invalid length. [ 290.566880][T13282] syzkaller0: entered promiscuous mode [ 290.574600][T13276] netlink: 'syz.2.1934': attribute type 2 has an invalid length. [ 290.579882][T13282] syzkaller0: entered allmulticast mode [ 290.910415][T13279] syzkaller0: entered promiscuous mode [ 290.916767][T13279] syzkaller0: entered allmulticast mode [ 290.928005][T13304] x_tables: duplicate underflow at hook 2 [ 291.026786][T13312] __nla_validate_parse: 3 callbacks suppressed [ 291.026835][T13312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1943'. [ 291.056854][T13273] netlink: 'syz.3.1932': attribute type 6 has an invalid length. [ 291.086916][T13273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1932'. [ 291.202230][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1945'. [ 291.235660][T13326] openvswitch: netlink: Invalid VLAN frame [ 291.424139][T13336] tipc: Enabled bearer , priority 0 [ 291.482012][T13336] syzkaller0: entered promiscuous mode [ 291.501814][T13336] syzkaller0: entered allmulticast mode [ 291.511272][T13347] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 291.527026][T13349] netlink: 'syz.1.1952': attribute type 12 has an invalid length. [ 291.547902][T13336] tipc: Resetting bearer [ 291.606911][T13332] tipc: Resetting bearer [ 291.630626][T13332] tipc: Disabling bearer [ 291.670634][T13352] vlan0: entered allmulticast mode [ 291.676398][T13352] veth0_vlan: entered allmulticast mode [ 292.281354][T13404] netlink: 'syz.0.1961': attribute type 6 has an invalid length. [ 292.324148][T13404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1961'. [ 292.365217][T13403] tipc: Enabled bearer , priority 0 [ 292.412021][T13402] tipc: Enabling of bearer rejected, already enabled [ 292.440591][T13403] syzkaller0: entered promiscuous mode [ 292.460648][T13403] syzkaller0: entered allmulticast mode [ 292.507697][T13403] tipc: Resetting bearer [ 292.550015][T13401] tipc: Resetting bearer [ 292.569961][T13401] tipc: Disabling bearer [ 292.693317][T13388] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1959'. [ 292.765995][T13422] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1971'. [ 292.778795][T13422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1971'. [ 292.798445][T13422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1971'. [ 292.808725][T13398] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1959'. [ 292.881549][T13418] ip6gre2: entered promiscuous mode [ 292.903983][T13418] ip6gre2: entered allmulticast mode [ 293.033705][T13438] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.1973'. [ 293.355757][T13453] netlink: 'syz.1.1981': attribute type 2 has an invalid length. [ 293.379115][T13450] tipc: Enabled bearer , priority 0 [ 293.410336][T13459] netlink: 'syz.3.1982': attribute type 1 has an invalid length. [ 293.428315][T13462] netlink: 'syz.2.1980': attribute type 6 has an invalid length. [ 293.539474][T13461] syzkaller0: entered promiscuous mode [ 293.569100][T13461] syzkaller0: entered allmulticast mode [ 293.613367][T13459] 8021q: adding VLAN 0 to HW filter on device bond4 [ 293.628002][T13450] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 293.656184][T13474] tipc: Resetting bearer [ 293.664385][T13473] tunl0: Caught tx_queue_len zero misconfig [ 293.707271][T13453] syzkaller0: entered promiscuous mode [ 293.713101][T13453] syzkaller0: entered allmulticast mode [ 293.724412][T13448] tipc: Resetting bearer [ 293.735811][T13448] tipc: Disabling bearer [ 293.760550][T13473] netlink: 'syz.0.1984': attribute type 10 has an invalid length. [ 293.823328][T13473] veth0_to_bond: entered allmulticast mode [ 293.990039][ T30] audit: type=1804 audit(1781873614.539:6): pid=13483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1986" name="/newroot/389/memory.events" dev="tmpfs" ino=2016 res=1 errno=0 [ 294.119952][T13496] tipc: Enabled bearer , priority 0 [ 294.170340][T13487] syzkaller0: entered promiscuous mode [ 294.190838][T13487] syzkaller0: entered allmulticast mode [ 294.238232][T13487] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 294.272247][T13487] tipc: Resetting bearer [ 294.314577][T13486] tipc: Resetting bearer [ 294.327951][T13486] tipc: Disabling bearer [ 294.989867][T13546] netlink: 'syz.3.1999': attribute type 6 has an invalid length. [ 295.438915][T13545] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.463110][ T6890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 295.564392][T13545] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 295.594691][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.601860][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.641203][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.648906][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.773371][ T6984] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 295.820055][T13573] gretap0: entered promiscuous mode [ 295.863026][T13573] gretap0: left promiscuous mode [ 296.026762][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 296.116628][ T6991] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 296.194059][T13607] hmac(sha224): entered promiscuous mode [ 296.210237][T13605] __nla_validate_parse: 13 callbacks suppressed [ 296.210269][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2014'. [ 296.277840][T13605] nbd: must specify a size in bytes for the device [ 296.341953][T13611] validate_nla: 1 callbacks suppressed [ 296.341973][T13611] netlink: 'syz.2.2017': attribute type 1 has an invalid length. [ 296.439812][T13611] 8021q: adding VLAN 0 to HW filter on device bond7 [ 296.485804][T13617] bond7: (slave syz_tun): unknown ethtool speed (8) for port 1 (set it to 0) [ 296.497985][T13617] bond7: (slave syz_tun): speed changed to 0 on port 1 [ 296.506697][T13617] bond7: (slave syz_tun): Enslaving as a backup interface with an up link [ 296.516581][T13622] netdevsim netdevsim4: Direct firmware load for á failed with error -2 [ 296.525374][T13622] netdevsim netdevsim4: Falling back to sysfs fallback for: á [ 296.705568][T13631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.869789][T13642] xt_TCPMSS: Only works on TCP SYN packets [ 297.091188][ T5968] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 297.116780][ T5968] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 297.143433][T13659] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2029'. [ 297.248110][T13664] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 297.280896][T13638] netlink: 'syz.1.2024': attribute type 6 has an invalid length. [ 297.297167][T13664] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 297.310193][T13638] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2024'. [ 297.326685][T13664] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 297.361386][T13670] netlink: 'syz.2.2031': attribute type 9 has an invalid length. [ 297.434645][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'. [ 297.584336][T13674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2033'. [ 297.676940][T13680] block nbd4: not configured, cannot reconfigure [ 297.846217][T13698] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2038'. [ 297.953566][ T6890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 297.982823][T11211] udevd[11211]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 298.044194][T11224] udevd[11224]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 298.137312][T13712] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20000 [ 298.423913][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 298.490635][T13738] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2045'. [ 298.510560][T13742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2043'. [ 298.542786][T13738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2045'. [ 298.611768][T13746] 8021q: adding VLAN 0 to HW filter on device .` [ 298.716150][T13746] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 298.838251][T13750] ip6gre3: entered promiscuous mode [ 298.863258][T13750] ip6gre3: entered allmulticast mode [ 298.898915][T13738] xfrm1: entered allmulticast mode [ 299.062831][T13731] netlink: 'syz.0.2044': attribute type 6 has an invalid length. [ 299.384666][ T6892] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 299.793316][ T186] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 299.817083][ T186] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 299.879056][T13799] ˙: entered promiscuous mode [ 299.899585][T13799] ˙: entered allmulticast mode [ 300.223830][ T5968] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 33550 - 0 [ 300.269080][ T5968] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 300.295942][T13829] ieee802154 phy0 wpan0: encryption failed: -90 [ 300.316003][ T5968] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 33550 - 0 [ 300.357439][ T5968] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 300.409398][T13827] veth1_macvtap: entered allmulticast mode [ 300.464234][ T5968] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 33550 - 0 [ 300.510812][ T5968] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 300.558957][ T5968] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 33550 - 0 [ 300.599351][ T5968] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 301.184556][T13826] netlink: 'syz.0.2066': attribute type 6 has an invalid length. [ 301.218577][T13826] __nla_validate_parse: 6 callbacks suppressed [ 301.218596][T13826] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2066'. [ 301.473163][ C1] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 301.473184][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 301.745642][T13904] netlink: 'syz.2.2084': attribute type 8 has an invalid length. [ 301.845267][T13908] tipc: Enabling of bearer rejected, failed to enable media [ 301.974117][T13916] sctp: [Deprecated]: syz.3.2085 (pid 13916) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.974117][T13916] Use struct sctp_sack_info instead [ 302.133229][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2086'. [ 302.175770][T13925] netlink: 'syz.2.2089': attribute type 13 has an invalid length. [ 302.230394][T13925] netlink: 'syz.2.2089': attribute type 17 has an invalid length. [ 302.273029][T13930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2091'. [ 302.543860][ T6892] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 302.601716][T13925] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 302.680116][T13935] tipc: Enabled bearer , priority 2 [ 302.953797][ T6890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.001584][T13961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2095'. [ 303.163807][T13972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2098'. [ 303.191283][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'. [ 303.205835][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2097'. [ 303.220853][T13967] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2095'. [ 303.237585][T13971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2097'. [ 303.249288][T13967] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2095'. [ 303.448657][ T62] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.498083][ T62] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.573648][T13981] netlink: 'syz.2.2100': attribute type 1 has an invalid length. [ 303.630325][T13979] dvmrp8: entered allmulticast mode [ 303.637031][ T6890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.672093][T13981] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 303.757209][T13949] netlink: 'syz.3.2092': attribute type 6 has an invalid length. [ 303.792884][ T6890] tipc: Node number set to 3143966094 [ 304.186281][T14003] syzkaller0: entered promiscuous mode [ 304.209735][T14003] syzkaller0: entered allmulticast mode [ 304.272665][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 304.790057][T14028] ip6tnl3: entered allmulticast mode [ 305.104711][T14050] netlink: 'syz.3.2116': attribute type 6 has an invalid length. [ 305.550124][T14082] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 305.554547][ T6890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 305.652026][T14082] bond8: entered allmulticast mode [ 305.658401][T14082] 8021q: adding VLAN 0 to HW filter on device bond8 [ 305.832426][T14091] tipc: Enabled bearer , priority 0 [ 305.840559][T14091] syzkaller0: entered promiscuous mode [ 305.847186][T14091] syzkaller0: entered allmulticast mode [ 305.856103][T14091] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 305.871340][T14091] tipc: Resetting bearer [ 305.891468][T14086] netlink: 'syz.0.2125': attribute type 12 has an invalid length. [ 306.055116][T14089] tipc: Resetting bearer [ 306.070490][T14089] tipc: Disabling bearer [ 306.224037][ T6892] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 306.247510][T14105] xt_hashlimit: size too large, truncated to 1048576 [ 306.489803][T14119] __nla_validate_parse: 8 callbacks suppressed [ 306.489826][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2134'. [ 306.618366][T14124] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2135'. [ 306.656106][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2136'. [ 306.756636][T14126] 8021q: adding VLAN 0 to HW filter on device bond9 [ 306.833185][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'. [ 306.842790][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2139'. [ 306.862329][T14134] ipvlan2: entered allmulticast mode [ 306.884586][T14134] bond9: entered allmulticast mode [ 306.911198][T14141] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2139'. [ 307.105959][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'. [ 307.139176][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'. [ 307.458791][T14162] syzkaller0: entered promiscuous mode [ 307.466523][T14162] syzkaller0: entered allmulticast mode [ 307.557077][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2148'. [ 307.688839][T14195] netlink: 'syz.3.2153': attribute type 4 has an invalid length. [ 307.760865][T14196] netlink: 'syz.3.2153': attribute type 4 has an invalid length. [ 307.872751][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.962150][T14201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2157'. [ 308.105178][T14201] syzkaller1: entered promiscuous mode [ 308.128282][T14201] syzkaller1: entered allmulticast mode [ 308.307449][T14221] syzkaller0: entered promiscuous mode [ 308.329738][T14221] syzkaller0: entered allmulticast mode [ 308.426711][T14230] smc: net device wlan0 applied user defined pnetid SYZ0 [ 308.509835][T14233] netlink: 'syz.1.2166': attribute type 10 has an invalid length. [ 308.608519][T14241] netlink: 'syz.1.2166': attribute type 10 has an invalid length. [ 309.390402][T14280] syzkaller1: entered promiscuous mode [ 309.410821][T14280] syzkaller1: entered allmulticast mode [ 310.166920][T14332] netlink: 'syz.4.2194': attribute type 2 has an invalid length. [ 310.195355][T14332] nbd: socks must be embedded in a SOCK_ITEM attr [ 310.776014][T14363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.880740][T14375] tipc: Enabled bearer , priority 0 [ 310.890794][T14374] tipc: Disabling bearer [ 311.170069][T14391] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 311.179941][T14381] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 311.275663][T14381] x_tables: duplicate underflow at hook 2 [ 311.348044][T14398] batadv_slave_0: Caught tx_queue_len zero misconfig [ 311.383106][T14402] gre1: entered allmulticast mode [ 311.511219][T14407] __nla_validate_parse: 18 callbacks suppressed [ 311.511239][T14407] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2218'. [ 311.693063][T14414] syzkaller0: entered allmulticast mode [ 311.986711][T14432] syzkaller0: entered promiscuous mode [ 312.000827][T14432] syzkaller0: entered allmulticast mode [ 312.069612][T14438] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 312.397714][T14455] tipc: Enabled bearer , priority 0 [ 312.416162][T14452] syzkaller0: entered promiscuous mode [ 312.435400][T14452] syzkaller0: entered allmulticast mode [ 312.491039][T14460] netlink: 207 bytes leftover after parsing attributes in process `syz.0.2234'. [ 312.500588][T14460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2234'. [ 312.509805][T14460] netlink: 'syz.0.2234': attribute type 2 has an invalid length. [ 312.518369][T14460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2234'. [ 312.630317][T14470] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2235'. [ 312.791976][T14480] netlink: 'syz.3.2236': attribute type 4 has an invalid length. [ 312.837734][T14483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2237'. [ 312.856344][T14484] netlink: 'syz.3.2236': attribute type 4 has an invalid length. [ 313.003428][T14493] PKCS7: Unknown OID: [4] (bad) [ 313.008531][T14493] PKCS7: Only support pkcs7_signedData type [ 313.064352][T14440] tipc: Resetting bearer [ 313.082877][T14440] tipc: Disabling bearer [ 313.118126][T14497] ip6_vti0: Caught tx_queue_len zero misconfig [ 313.170064][T14500] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2242'. [ 313.385343][T14510] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2243'. [ 313.393115][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 313.583233][T14517] netlink: 'syz.4.2246': attribute type 2 has an invalid length. [ 313.616172][T14517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2246'. [ 313.654069][T14508] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2242'. [ 314.107336][T14538] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 314.135682][T14538] geneve3: left promiscuous mode [ 314.142221][T14538] bond6: left promiscuous mode [ 314.148222][T14538] bridge7: left promiscuous mode [ 314.161018][T14538] ipvlan2: left allmulticast mode [ 314.181959][T14538] ipvlan3: left allmulticast mode [ 314.199042][T14538] bond6: left allmulticast mode [ 314.215144][T14538] bridge7: left allmulticast mode [ 314.235195][T14538] geneve4: left promiscuous mode [ 314.248829][T14538] geneve4: left allmulticast mode [ 314.255107][T14538] gre1: left allmulticast mode [ 314.643043][T14557] netlink: 'syz.4.2258': attribute type 83 has an invalid length. [ 315.319728][T14606] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 315.774860][T14634] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 315.801858][T14634] bond11 (unregistering): Released all slaves [ 316.252656][T14647] netlink: 'syz.3.2278': attribute type 13 has an invalid length. [ 316.592590][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 316.638002][T14675] __nla_validate_parse: 7 callbacks suppressed [ 316.638035][T14675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2287'. [ 316.699200][T14679] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2288'. [ 316.717770][T14679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2288'. [ 316.859980][T14689] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2289'. [ 317.165543][T14707] veth1_to_bond: entered promiscuous mode [ 317.176587][T14707] veth1_to_bond: entered allmulticast mode [ 317.185869][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2294'. [ 317.200842][T14707] veth1_to_bond (unregistering): left promiscuous mode [ 317.214227][T14707] veth1_to_bond (unregistering): left allmulticast mode [ 317.236462][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.243532][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.377261][T14715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2297'. [ 317.387906][T14715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2297'. [ 317.610808][T14729] netlink: 'syz.4.2302': attribute type 10 has an invalid length. [ 317.626332][T14729] bond0: (slave team0): Releasing backup interface [ 317.646499][T14729] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.656957][T14729] .`: (slave team0): Enslaving as an active interface with an up link [ 317.661871][T14731] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2301'. [ 317.721477][T14731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2301'. [ 317.787499][T14731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2301'. [ 317.984631][T14758] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 318.344331][T14783] xt_l2tp: invalid flags combination: 8 [ 318.388391][T14782] xt_l2tp: invalid flags combination: 8 [ 318.627991][T14807] syzkaller1: entered promiscuous mode [ 318.642984][T14807] syzkaller1: entered allmulticast mode [ 318.674930][T14806] xt_CT: No such helper "snmp_trap" [ 318.934882][T14813] netlink: 'syz.4.2320': attribute type 39 has an invalid length. [ 318.972686][T14814] netlink: 'syz.4.2320': attribute type 39 has an invalid length. [ 319.129223][T14831] netlink: 'syz.0.2325': attribute type 1 has an invalid length. [ 319.217134][T14831] bond11: entered promiscuous mode [ 319.224158][T14831] 8021q: adding VLAN 0 to HW filter on device bond11 [ 319.237591][T14838] netlink: 'syz.4.2326': attribute type 4 has an invalid length. [ 319.254920][T14831] bond11: (slave bridge8): making interface the new active one [ 319.262777][T14831] bridge8: entered promiscuous mode [ 319.269259][T14831] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 319.746266][T14874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.044928][T14893] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 320.114550][T14903] syzkaller1: entered promiscuous mode [ 320.130657][T14903] syzkaller1: entered allmulticast mode [ 320.526387][T14913] gretap0: entered promiscuous mode [ 321.132087][T14941] veth0_macvtap: Caught tx_queue_len zero misconfig [ 321.256421][T14935] ip6erspan0: entered allmulticast mode [ 321.484140][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.513523][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.541611][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.561136][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.775392][T14972] netlink: 'syz.3.2366': attribute type 3 has an invalid length. [ 321.900293][T14980] netlink: 'syz.1.2368': attribute type 4 has an invalid length. [ 321.934950][T14980] netlink: 'syz.1.2368': attribute type 4 has an invalid length. [ 322.228693][T14991] tipc: Enabled bearer , priority 0 [ 322.265536][T14991] syzkaller0: entered promiscuous mode [ 322.279205][T14991] syzkaller0: entered allmulticast mode [ 322.304998][T14991] tipc: Resetting bearer [ 322.351723][T14990] tipc: Resetting bearer [ 322.375537][T14990] tipc: Disabling bearer [ 322.699865][T15010] __nla_validate_parse: 15 callbacks suppressed [ 322.699886][T15010] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2378'. [ 322.720755][T15012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2379'. [ 322.960832][T15012] syzkaller0: entered promiscuous mode [ 322.977152][T15012] syzkaller0: entered allmulticast mode [ 323.149920][T15034] syzkaller0: entered promiscuous mode [ 323.168435][T15034] syzkaller0: entered allmulticast mode [ 323.216332][T15035] tipc: Enabled bearer , priority 0 [ 323.302005][T15045] netlink: 'syz.2.2389': attribute type 4 has an invalid length. [ 323.312818][T15045] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2389'. [ 323.451461][T15050] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 323.586150][T15032] tipc: Resetting bearer [ 323.603503][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2388'. [ 323.990948][T15068] can: request_module (can-proto-0) failed. [ 324.161211][T15032] tipc: Disabling bearer [ 324.477911][T15082] nbd: must specify a size in bytes for the device [ 324.488773][T15082] block nbd0: NBD_DISCONNECT [ 324.498189][T15082] block nbd0: Send disconnect failed -111 [ 324.512650][T15082] block nbd0: shutting down sockets [ 324.529954][T15088] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2396'. [ 324.566167][T15088] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2396'. [ 324.726992][T15101] lo: entered allmulticast mode [ 324.732209][T15101] lo: left allmulticast mode [ 325.131369][T15123] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2403'. [ 325.146588][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2403'. [ 325.156632][T15115] netlink: 'syz.1.2400': attribute type 1 has an invalid length. [ 325.156655][T15115] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2400'. [ 325.195459][T15123] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2403'. [ 325.532867][T15140] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 325.614916][T15143] .`: (slave team0): Releasing backup interface [ 325.655353][T15143] .`: (slave dummy0): Releasing backup interface [ 325.707300][T15143] bond2: (slave erspan1): Releasing active interface [ 325.760660][T15143] bond4: (slave bridge3): Releasing backup interface [ 325.817570][T15143] bond5: (slave bridge4): Releasing backup interface [ 325.855339][T15143] bond6: (slave bridge7): Releasing backup interface [ 325.924164][T15144] team0: Mode changed to "loadbalance" [ 325.951280][T15150] xt_bpf: check failed: parse error [ 326.100681][T15156] team0: Port device syz_tun added [ 326.449275][T15172] nbd: must specify an index to disconnect [ 326.621203][T15178] syzkaller0: entered promiscuous mode [ 326.633729][T15178] syzkaller0: entered allmulticast mode [ 326.657158][T15178] TC_ACT_REPEAT abuse ? [ 326.663082][T15186] nftables ruleset with unbound chain [ 326.918930][T15206] openvswitch: netlink: Actions may not be safe on all matching packets [ 327.025273][T15213] IPVS: set_ctl: invalid protocol: 94 172.30.1.1:20000 [ 327.043476][T15215] IPVS: set_ctl: invalid protocol: 94 172.30.1.1:20000 [ 327.560473][T15238] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 327.828089][T15258] __nla_validate_parse: 3 callbacks suppressed [ 327.828110][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2434'. [ 328.319157][T15275] syzkaller1: entered promiscuous mode [ 328.326083][T15275] syzkaller1: entered allmulticast mode [ 328.627385][T15283] netlink: 'syz.0.2443': attribute type 1 has an invalid length. [ 328.704006][T15283] bond12: entered promiscuous mode [ 328.724288][T15283] 8021q: adding VLAN 0 to HW filter on device bond12 [ 329.018510][T15306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.123410][T15315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2453'. [ 329.684216][T15342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2461'. [ 329.713938][T15342] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2461'. [ 329.974647][T15350] sctp: [Deprecated]: syz.2.2462 (pid 15350) Use of int in maxseg socket option. [ 329.974647][T15350] Use struct sctp_assoc_value instead [ 330.033363][ T12] tipc: Subscription rejected, illegal request [ 330.602913][T15376] netlink: 'syz.2.2467': attribute type 13 has an invalid length. [ 330.813566][ T29] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 330.917692][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2469'. [ 330.968866][T15377] sch_tbf: burst 6 is lower than device gretap0 mtu (32783) ! [ 331.281996][T15397] netlink: 'syz.1.2472': attribute type 1 has an invalid length. [ 331.378251][T15397] bond6: entered promiscuous mode [ 331.385062][T15397] 8021q: adding VLAN 0 to HW filter on device bond6 [ 331.399556][T15401] veth1_to_bond: Caught tx_queue_len zero misconfig [ 331.426999][T15407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'. [ 331.475169][T15407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2474'. [ 331.537740][T15410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2475'. [ 331.563796][T15407] geneve3: entered promiscuous mode [ 331.579973][T15407] geneve3: entered allmulticast mode [ 331.597602][ T3302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.624765][ T3302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.655730][ T3302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.706841][ T3302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.748665][T15417] tipc: Enabled bearer , priority 0 [ 331.773407][T15417] syzkaller0: entered promiscuous mode [ 331.781589][T15417] syzkaller0: entered allmulticast mode [ 331.794818][ T6892] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 331.807814][T15417] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 331.825723][T15417] tipc: Resetting bearer [ 331.842232][T15423] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 331.850272][T15416] tipc: Resetting bearer [ 331.870771][T15416] tipc: Disabling bearer [ 331.953145][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 332.018060][T15432] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2481'. [ 332.591456][T15463] gretap1: entered promiscuous mode [ 332.600790][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2491'. [ 332.765976][T15469] netlink: 'syz.3.2495': attribute type 1 has an invalid length. [ 332.918538][T15469] macvtap1: entered allmulticast mode [ 332.932702][T15476] tipc: Enabled bearer , priority 0 [ 332.987120][T15469] bond5: (slave bridge9): making interface the new active one [ 333.022823][T15469] bond5: (slave bridge9): Enslaving as an active interface with an up link [ 333.035111][T15473] syzkaller0: entered promiscuous mode [ 333.044357][T15473] syzkaller0: entered allmulticast mode [ 333.054902][T15476] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 333.121754][T15473] tipc: Resetting bearer [ 333.138786][T15471] tipc: Resetting bearer [ 333.157308][T15471] tipc: Disabling bearer [ 333.394361][T15505] netlink: 840 bytes leftover after parsing attributes in process `syz.0.2504'. [ 333.419263][T15505] xt_connbytes: Forcing CT accounting to be enabled [ 333.438669][T15507] xt_TPROXY: Can be used only with -p tcp or -p udp [ 333.473439][T15507] xt_bpf: check failed: parse error [ 333.499347][T15507] netlink: 'syz.2.2503': attribute type 10 has an invalid length. [ 333.548773][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2505'. [ 333.559213][T15510] netlink: 'syz.2.2503': attribute type 10 has an invalid length. [ 333.577413][T15509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2505'. [ 333.598153][T15507] bond4: (slave dummy0): Releasing backup interface [ 333.625379][T15507] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 333.651404][T15507] team0: Failed to send options change via netlink (err -105) [ 333.672604][T15507] team0: Port device dummy0 added [ 333.734991][T15510] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 333.765722][T15510] team0: Failed to send options change via netlink (err -105) [ 333.774290][T15510] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 333.793296][T15510] team0: Port device dummy0 removed [ 333.814022][T15514] tipc: Enabled bearer , priority 0 [ 333.814924][T15523] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 333.838203][T15521] syzkaller0: entered promiscuous mode [ 333.844473][T15523] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 333.859901][T15521] syzkaller0: entered allmulticast mode [ 333.872605][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 333.887921][T15523] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 333.911915][T15514] tipc: Resetting bearer [ 333.986442][T15529] netlink: 2980 bytes leftover after parsing attributes in process `syz.4.2509'. [ 334.004030][T15530] netlink: 2980 bytes leftover after parsing attributes in process `syz.4.2509'. [ 334.069059][T15511] tipc: Resetting bearer [ 334.081616][T15511] tipc: Disabling bearer [ 334.145564][T15534] bond10: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 334.156786][T15534] bond10 (unregistering): Released all slaves [ 334.239984][T15540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2510'. [ 334.455758][T15556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2515'. [ 334.486941][T15556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2515'. [ 334.521608][T15553] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 334.543063][T15553] syzkaller1: Refused to change device type [ 334.666282][T15556] netlink: 'syz.2.2515': attribute type 1 has an invalid length. [ 334.703313][T15561] block nbd0: not configured, cannot reconfigure [ 334.762297][T15567] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2518'. [ 335.128141][T15584] netlink: 41 bytes leftover after parsing attributes in process `syz.3.2527'. [ 335.414954][T15601] bond10: Unable to set up delay as MII monitoring is disabled [ 335.425726][T15601] bond10 (unregistering): Released all slaves [ 335.526361][T15608] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 335.535658][T15608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.792142][T15621] bond0 (unregistering): Released all slaves [ 335.802096][T15623] lo: Caught tx_queue_len zero misconfig [ 335.903254][ T6984] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 335.938203][T15629] netlink: 'syz.0.2541': attribute type 3 has an invalid length. [ 336.194045][T15640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.207222][T15638] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 336.242206][T15638] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 336.298488][T15645] bond7: (slave syz_tun): Removing an active aggregator [ 336.313375][ T5968] bond7: Warning: Found an uninitialized port [ 336.331542][T15645] bond7: (slave syz_tun): Releasing backup interface [ 336.402341][T15645] bridge_slave_0: left allmulticast mode [ 336.415219][ T6890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 336.434182][T15645] bridge_slave_0: left promiscuous mode [ 336.455372][T15645] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.462272][T15654] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 336.481889][T15645] bridge_slave_1: left allmulticast mode [ 336.493758][T15645] bridge_slave_1: left promiscuous mode [ 336.508365][T15645] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.557931][T15645] team0: Port device team_slave_0 removed [ 336.588807][T15645] team0: Port device team_slave_1 removed [ 336.604905][T15645] team0: Port device netdevsim1 removed [ 336.615258][T15645] bond2: (slave veth3): Releasing active interface [ 336.629841][T15645] team0: Port device bridge5 removed [ 336.638593][T15645] bond0: (slave bridge6): Releasing active interface [ 336.893319][T15683] ip6tnl0: Caught tx_queue_len zero misconfig [ 337.003937][ T6890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 337.198617][T15708] tipc: Enabling of bearer rejected, failed to enable media [ 337.329123][T15713] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 337.344229][T15713] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 337.668053][T15721] syzkaller0: entered promiscuous mode [ 337.692627][T15721] syzkaller0: entered allmulticast mode [ 338.414497][T15764] 8021q: VLANs not supported on lo [ 338.451791][T15769] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 338.550792][T15778] __nla_validate_parse: 14 callbacks suppressed [ 338.550813][T15778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2578'. [ 338.624193][T15778] veth5: entered allmulticast mode [ 338.634145][T15778] bond7: (slave veth5): Enslaving as an active interface with an up link [ 338.820411][T15790] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 338.906475][T15791] syzkaller0: entered promiscuous mode [ 338.924816][T15791] syzkaller0: entered allmulticast mode [ 339.444988][ T30] audit: type=1804 audit(1781873659.999:7): pid=15826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2590" name="/newroot/485/cgroup.controllers" dev="tmpfs" ino=2500 res=1 errno=0 [ 339.515075][ T30] audit: type=1800 audit(1781873659.999:8): pid=15826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2590" name="cgroup.controllers" dev="tmpfs" ino=2500 res=0 errno=0 [ 339.564464][T15831] vxcan1: entered allmulticast mode [ 340.150144][T15833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2591'. [ 340.566281][T15868] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2602'. [ 340.582791][T15868] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2602'. [ 340.770291][T15879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2606'. [ 341.007029][T15898] netlink: 'syz.4.2610': attribute type 1 has an invalid length. [ 341.047875][T15898] bond7: option mode: invalid value (7) [ 341.061005][T15898] bond7 (unregistering): Released all slaves [ 341.290649][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2612'. [ 341.324640][T15918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2612'. [ 341.379242][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2612'. [ 341.414864][T15924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2612'. [ 341.464116][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2612'. [ 341.495969][T15920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.541683][T15920] openvswitch: netlink: Flow actions attr not present in new flow. [ 341.614524][T15933] xt_l2tp: missing protocol rule (udp|l2tpip) [ 341.686910][T15929] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ůŕ^!‚Y‡°”őËí [ 341.686910][T15929] 3ěUH†5rşBnśŹć [ 341.725285][T15937] bond1: (slave lo): Releasing backup interface [ 341.735337][T15937] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 341.773003][T15937] bridge_slave_0: left allmulticast mode [ 341.794327][T15937] bridge_slave_0: left promiscuous mode [ 341.806571][T15937] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.836268][T15937] bridge_slave_1: left allmulticast mode [ 341.849578][T15937] bridge_slave_1: left promiscuous mode [ 341.856296][T15937] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.880406][T15937] team0: Port device team_slave_0 removed [ 341.910718][T15937] team0: Port device team_slave_1 removed [ 341.933658][T15937] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 342.236332][T15966] syzkaller1: entered promiscuous mode [ 342.248582][T15966] syzkaller1: entered allmulticast mode [ 342.351920][T15973] syzkaller0: entered promiscuous mode [ 342.364760][T15973] syzkaller0: entered allmulticast mode [ 342.470824][T15980] tipc: Enabled bearer , priority 0 [ 342.493382][T15980] syzkaller0: entered promiscuous mode [ 342.512283][T15980] syzkaller0: entered allmulticast mode [ 342.593400][T15990] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 342.639930][T15980] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 342.727372][T15980] tipc: Resetting bearer [ 342.776303][T15979] tipc: Resetting bearer [ 342.836873][T15979] tipc: Disabling bearer [ 342.852147][T16004] netlink: zone id is out of range [ 342.866608][T16005] block nbd0: not configured, cannot reconfigure [ 342.873408][T16004] netlink: zone id is out of range [ 342.879070][T16004] netlink: zone id is out of range [ 342.893862][T16004] netlink: zone id is out of range [ 342.899792][T16004] netlink: zone id is out of range [ 342.905923][T16004] netlink: zone id is out of range [ 342.911579][T16004] netlink: zone id is out of range [ 342.917705][T16004] netlink: zone id is out of range [ 343.127133][T16016] syzkaller0: entered promiscuous mode [ 343.151591][T16016] syzkaller0: entered allmulticast mode [ 343.543210][T16032] netlink: 'syz.2.2641': attribute type 11 has an invalid length. [ 343.556134][T16036] __nla_validate_parse: 8 callbacks suppressed [ 343.556152][T16036] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2644'. [ 343.576988][T16026] ipip2: entered promiscuous mode [ 343.584929][T16026] ipip2: entered allmulticast mode [ 343.800519][T16048] netlink: 'syz.2.2645': attribute type 1 has an invalid length. [ 343.810512][T16048] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2645'. [ 343.835431][T16044] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2645'. [ 343.846323][T16044] tc_dump_action: action bad kind [ 344.057575][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2648'. [ 344.332106][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2652'. [ 344.354386][T16071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'. [ 344.846116][T16099] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 344.888957][T16062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 344.933952][T16062] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2649'. [ 344.967945][T16106] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2661'. [ 345.002260][T16106] Cannot find add_set index 0 as target [ 345.246448][T16118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2665'. [ 345.908376][T16138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.920932][T16138] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.960781][T16138] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.971218][T16138] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.703589][ T29] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 346.807861][T16184] net_ratelimit: 307 callbacks suppressed [ 346.807883][T16184] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 347.053358][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 347.076228][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 347.192648][ T6890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 347.341236][T16224] pimreg: entered allmulticast mode [ 347.373513][T16222] pimreg: left allmulticast mode [ 347.779851][T16253] netlink: 'syz.1.2705': attribute type 1 has an invalid length. [ 347.882295][T16253] 8021q: adding VLAN 0 to HW filter on device bond8 [ 347.967999][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 348.291075][T16274] tipc: Enabled bearer , priority 10 [ 348.637727][T16297] netlink: 'syz.3.2715': attribute type 1 has an invalid length. [ 349.056335][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 349.063837][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 349.071660][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 349.080856][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.088513][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.153880][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 349.164310][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 349.174949][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 349.193870][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.202955][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.750744][T16343] ip6tnl0: entered promiscuous mode [ 349.788880][T16343] ip6tnl0: entered allmulticast mode [ 349.829251][T16343] __nla_validate_parse: 15 callbacks suppressed [ 349.829340][T16343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2726'. [ 349.987075][T16345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2726'. [ 350.519686][T16316] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.557011][T16316] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.596967][T16316] bridge_slave_0: entered allmulticast mode [ 350.608526][T16316] bridge_slave_0: entered promiscuous mode [ 350.637187][T16316] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.656299][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2734'. [ 350.671441][T16316] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.694854][T16316] bridge_slave_1: entered allmulticast mode [ 350.717849][T16316] bridge_slave_1: entered promiscuous mode [ 350.849639][T16316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.893924][T16316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.959602][T16399] block nbd0: not configured, cannot reconfigure [ 350.992715][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 351.006655][T16316] team0: Port device team_slave_0 added [ 351.021736][T16316] team0: Port device team_slave_1 added [ 351.033718][T16394] syzkaller0: entered promiscuous mode [ 351.042340][T16394] syzkaller0: entered allmulticast mode [ 351.092209][T16395] tipc: Enabled bearer , priority 0 [ 351.140790][T16316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.157007][T16316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.184480][T16316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.201088][T16316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.210609][T16316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.238728][ T5618] Bluetooth: hci5: command tx timeout [ 351.257047][T16316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.275638][T16395] tipc: Resetting bearer [ 351.315942][T16395] tipc: Disabling bearer [ 351.372080][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2742'. [ 351.454753][T16316] hsr_slave_0: entered promiscuous mode [ 351.462808][T16316] hsr_slave_1: entered promiscuous mode [ 351.482589][T16412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2742'. [ 351.605038][T16421] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2744'. [ 351.671075][T16421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2744'. [ 351.707922][T16421] netlink: 'syz.3.2744': attribute type 4 has an invalid length. [ 351.747249][T16316] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.831330][T11211] udevd[11211]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 351.848496][T16316] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.861771][T14603] udevd[14603]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 351.950060][T16316] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.961413][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2749'. [ 352.089030][T16443] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.098690][T16443] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.107518][T16443] bridge_slave_0: entered allmulticast mode [ 352.118490][T16443] bridge_slave_0: entered promiscuous mode [ 352.127819][T16443] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.135526][T16443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.166727][T16316] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.384222][T16316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 352.434107][T16316] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.443428][T16438] IPVS: length: 35 != 24 [ 352.449884][T16316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.473828][T16316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.490272][T16316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.553918][T16316] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.570624][T16316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 352.636555][T16316] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.947177][T16316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.966515][T16316] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.978152][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.985367][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.007880][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.015091][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.219644][T16490] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 353.251818][T16490] nft_compat: unsupported protocol 0 [ 353.313157][ T5618] Bluetooth: hci5: command tx timeout [ 353.531620][T16316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.568664][T16466] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 353.582152][T16468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.619478][T16316] veth0_vlan: entered promiscuous mode [ 353.677725][T16316] veth1_vlan: entered promiscuous mode [ 353.781391][T16316] veth0_macvtap: entered promiscuous mode [ 353.810197][T16316] veth1_macvtap: entered promiscuous mode [ 353.817497][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'. [ 353.842952][T16504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2762'. [ 353.886918][T16507] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 353.896378][T16316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.908660][T16504] netlink: 'syz.1.2762': attribute type 4 has an invalid length. [ 353.923467][T16507] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 353.933010][T16316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.962030][ T5967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.986113][ T5967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.014747][ T5967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.046375][ T5967] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.159147][ T5968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.188902][ T5968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.261446][ T5968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.270782][ T5968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.351112][T16524] "syz.0.2721" (16524) uses obsolete ecb(arc4) skcipher [ 354.604286][T16528] SET target dimension over the limit! [ 355.170994][T16544] __nla_validate_parse: 3 callbacks suppressed [ 355.171042][T16544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2771'. [ 355.209419][ T5968] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.220542][T16544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2771'. [ 355.225898][T16546] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 355.241273][T16546] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 355.249468][T16546] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 355.259433][T16546] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 355.267666][T16546] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 355.287371][T16546] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 355.307245][T16546] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 355.340217][T16546] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 355.373387][T16546] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 355.393836][ T5618] Bluetooth: hci5: command tx timeout [ 355.422028][T16542] tipc: Enabling of bearer rejected, failed to enable media [ 355.496768][ T3302] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.509298][ T3302] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.528887][T16546] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 355.547282][ T3302] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.870318][T16581] tipc: Started in network mode [ 355.888110][T16581] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 355.898200][T16581] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 355.914992][T16581] tipc: Enabled bearer , priority 10 [ 356.124618][T16591] sctp: [Deprecated]: syz.4.2781 (pid 16591) Use of int in max_burst socket option. [ 356.124618][T16591] Use struct sctp_assoc_value instead [ 356.427884][T16607] TC_ACT_REPEAT abuse ? [ 356.547095][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2793'. [ 356.762174][T16627] bond0: Unable to set down delay as MII monitoring is disabled [ 357.022800][ T5727] tipc: Node number set to 1 [ 357.078391][T16653] bridge0: port 1(dummy0) entered blocking state [ 357.100615][T16653] bridge0: port 1(dummy0) entered disabled state [ 357.108426][T16653] dummy0: entered allmulticast mode [ 357.120446][T16653] dummy0: left allmulticast mode [ 357.165958][T16653] syzkaller0: entered promiscuous mode [ 357.183600][T16653] syzkaller0: entered allmulticast mode [ 357.472793][ T5618] Bluetooth: hci5: command tx timeout [ 357.501959][T16670] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2803'. [ 357.548543][T16678] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2804'. [ 357.560318][T16671] bond10: option downdelay: invalid value (18446744073709551487) [ 357.580943][T16671] bond10: option downdelay: allowed values 0 - 2147483647 [ 357.591692][T16671] bond10 (unregistering): Released all slaves [ 357.639710][T16678] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2804'. [ 358.137821][T16716] FAULT_INJECTION: forcing a failure. [ 358.137821][T16716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.192323][T16716] CPU: 1 UID: 0 PID: 16716 Comm: syz.4.2813 Not tainted syzkaller #0 PREEMPT(full) [ 358.192355][T16716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.192373][T16716] Call Trace: [ 358.192417][T16716] [ 358.192491][T16716] dump_stack_lvl+0xe8/0x150 [ 358.192657][T16716] should_fail_ex+0x40c/0x560 [ 358.192751][T16716] _copy_to_user+0x31/0xb0 [ 358.192830][T16716] bpf_verifier_vlog+0x3a2/0x900 [ 358.192888][T16716] __btf_verifier_log+0xe2/0x140 [ 358.192920][T16716] ? __pfx___btf_verifier_log+0x10/0x10 [ 358.192982][T16716] ? btf_parse_hdr+0x1da/0x810 [ 358.193015][T16716] btf_parse_hdr+0x313/0x810 [ 358.193039][T16716] btf_new_fd+0x38a/0xd40 [ 358.193060][T16716] ? apparmor_capable+0x126/0x170 [ 358.193140][T16716] ? __pfx_btf_new_fd+0x10/0x10 [ 358.193164][T16716] ? bpf_token_put+0x143/0x160 [ 358.193185][T16716] ? bpf_btf_load+0x128/0x190 [ 358.193234][T16716] __sys_bpf+0x4e5/0x950 [ 358.193262][T16716] ? __pfx___sys_bpf+0x10/0x10 [ 358.193307][T16716] ? ksys_write+0x242/0x270 [ 358.193366][T16716] ? __pfx_ksys_write+0x10/0x10 [ 358.193396][T16716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.193434][T16716] __x64_sys_bpf+0x7c/0x90 [ 358.193467][T16716] do_syscall_64+0x174/0x580 [ 358.193590][T16716] ? trace_irq_disable+0x3b/0x140 [ 358.193618][T16716] ? clear_bhb_loop+0x40/0x90 [ 358.193641][T16716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.193661][T16716] RIP: 0033:0x7f8f6539ce59 [ 358.193716][T16716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.193761][T16716] RSP: 002b:00007f8f6616e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 358.193812][T16716] RAX: ffffffffffffffda RBX: 00007f8f65615fa0 RCX: 00007f8f6539ce59 [ 358.193828][T16716] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 358.193841][T16716] RBP: 00007f8f6616e090 R08: 0000000000000000 R09: 0000000000000000 [ 358.193854][T16716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.193865][T16716] R13: 00007f8f65616038 R14: 00007f8f65615fa0 R15: 00007ffff03fad38 [ 358.193891][T16716] [ 358.476561][T16722] x_tables: duplicate underflow at hook 1 [ 358.560535][T16734] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2817'. [ 358.613863][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2817'. [ 358.631401][T16719] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.651151][T16719] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.673166][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2817'. [ 358.831288][T16722] hsr0: entered promiscuous mode [ 359.150528][T16757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2820'. [ 359.474199][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 360.030142][T16805] FAULT_INJECTION: forcing a failure. [ 360.030142][T16805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.083395][T16805] CPU: 1 UID: 0 PID: 16805 Comm: syz.2.2827 Not tainted syzkaller #0 PREEMPT(full) [ 360.083426][T16805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 360.083444][T16805] Call Trace: [ 360.083455][T16805] [ 360.083464][T16805] dump_stack_lvl+0xe8/0x150 [ 360.083493][T16805] should_fail_ex+0x40c/0x560 [ 360.083518][T16805] _copy_to_user+0x31/0xb0 [ 360.083548][T16805] bpf_verifier_vlog+0x3a2/0x900 [ 360.083585][T16805] __btf_verifier_log+0xe2/0x140 [ 360.083618][T16805] ? __pfx___btf_verifier_log+0x10/0x10 [ 360.083651][T16805] ? btf_parse_hdr+0x1da/0x810 [ 360.083675][T16805] btf_parse_hdr+0x33f/0x810 [ 360.083699][T16805] btf_new_fd+0x38a/0xd40 [ 360.083727][T16805] ? __pfx_btf_new_fd+0x10/0x10 [ 360.083757][T16805] ? bpf_btf_load+0x128/0x190 [ 360.083790][T16805] __sys_bpf+0x4e5/0x950 [ 360.083819][T16805] ? __pfx___sys_bpf+0x10/0x10 [ 360.083855][T16805] ? ksys_write+0x242/0x270 [ 360.083884][T16805] ? __pfx_ksys_write+0x10/0x10 [ 360.083913][T16805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.083955][T16805] __x64_sys_bpf+0x7c/0x90 [ 360.083980][T16805] do_syscall_64+0x174/0x580 [ 360.084009][T16805] ? clear_bhb_loop+0x40/0x90 [ 360.084032][T16805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.084053][T16805] RIP: 0033:0x7f3a2819ce59 [ 360.084072][T16805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.084089][T16805] RSP: 002b:00007f3a29100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.084112][T16805] RAX: ffffffffffffffda RBX: 00007f3a28415fa0 RCX: 00007f3a2819ce59 [ 360.084127][T16805] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 360.084140][T16805] RBP: 00007f3a29100090 R08: 0000000000000000 R09: 0000000000000000 [ 360.084152][T16805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.084164][T16805] R13: 00007f3a28416038 R14: 00007f3a28415fa0 R15: 00007ffee4647e28 [ 360.084204][T16805] [ 360.222643][T16803] tc action pedit offset must be on 32 bit boundaries [ 360.449744][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2828'. [ 360.511262][T16809] Cannot find add_set index 0 as target [ 360.582314][T16826] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2831'. [ 363.479572][T16833] syzkaller0: entered promiscuous mode [ 363.485815][T16833] syzkaller0: entered allmulticast mode [ 363.636165][T16853] Timeout policy `syz1' can only be used by L3 protocol number 52415 [ 363.988586][T16865] "syz.2.2838" (16865) uses obsolete ecb(arc4) skcipher [ 364.026877][T16868] FAULT_INJECTION: forcing a failure. [ 364.026877][T16868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.081899][T16868] CPU: 1 UID: 0 PID: 16868 Comm: syz.0.2839 Not tainted syzkaller #0 PREEMPT(full) [ 364.081928][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 364.081942][T16868] Call Trace: [ 364.081951][T16868] [ 364.081959][T16868] dump_stack_lvl+0xe8/0x150 [ 364.081987][T16868] should_fail_ex+0x40c/0x560 [ 364.082012][T16868] _copy_to_user+0x31/0xb0 [ 364.082040][T16868] bpf_verifier_vlog+0x3a2/0x900 [ 364.082083][T16868] __btf_verifier_log+0xe2/0x140 [ 364.082115][T16868] ? __pfx___btf_verifier_log+0x10/0x10 [ 364.082148][T16868] ? btf_parse_hdr+0x1da/0x810 [ 364.082173][T16868] btf_parse_hdr+0x36b/0x810 [ 364.082198][T16868] btf_new_fd+0x38a/0xd40 [ 364.082221][T16868] ? apparmor_capable+0x126/0x170 [ 364.082251][T16868] ? __pfx_btf_new_fd+0x10/0x10 [ 364.082275][T16868] ? bpf_token_put+0x143/0x160 [ 364.082295][T16868] ? bpf_btf_load+0x128/0x190 [ 364.082325][T16868] __sys_bpf+0x4e5/0x950 [ 364.082354][T16868] ? __pfx___sys_bpf+0x10/0x10 [ 364.082399][T16868] ? ksys_write+0x242/0x270 [ 364.082427][T16868] ? __pfx_ksys_write+0x10/0x10 [ 364.082456][T16868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.082478][T16868] __x64_sys_bpf+0x7c/0x90 [ 364.082502][T16868] do_syscall_64+0x174/0x580 [ 364.082530][T16868] ? trace_irq_disable+0x3b/0x140 [ 364.082557][T16868] ? clear_bhb_loop+0x40/0x90 [ 364.082580][T16868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.082601][T16868] RIP: 0033:0x7f054df9ce59 [ 364.082619][T16868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.082637][T16868] RSP: 002b:00007f054ee2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 364.082659][T16868] RAX: ffffffffffffffda RBX: 00007f054e215fa0 RCX: 00007f054df9ce59 [ 364.082674][T16868] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 364.082687][T16868] RBP: 00007f054ee2f090 R08: 0000000000000000 R09: 0000000000000000 [ 364.082699][T16868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.082711][T16868] R13: 00007f054e216038 R14: 00007f054e215fa0 R15: 00007ffe882ea5d8 [ 364.082735][T16868] [ 364.567597][T16894] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2843'. [ 364.580065][T16894] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2843'. [ 364.590812][T16892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2844'. [ 364.625876][T16892] bond7: entered promiscuous mode [ 364.631962][T16892] 8021q: adding VLAN 0 to HW filter on device bond7 [ 364.672017][T16892] 8021q: adding VLAN 0 to HW filter on device bond7 [ 364.753779][T16892] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 364.846119][T16892] bond7: (slave ip6gre1): Error -95 calling set_mac_address [ 364.998980][ T5283] netdevsim netdevsim3 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 365.044368][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 365.104545][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'. [ 365.223773][T16921] bond8: entered allmulticast mode [ 365.238046][T16921] macvlan3: entered promiscuous mode [ 365.243609][T16921] macvlan3: entered allmulticast mode [ 365.250040][T16921] bond8: entered promiscuous mode [ 365.255862][T16921] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 365.307915][T16921] bond8: left promiscuous mode [ 365.411798][T16932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2849'. [ 365.467895][T16932] validate_nla: 9 callbacks suppressed [ 365.467946][T16932] netlink: 'syz.4.2849': attribute type 1 has an invalid length. [ 365.543038][T16932] nbd: error processing sock list [ 365.574348][T16935] syzkaller0: entered promiscuous mode [ 365.593851][T16935] syzkaller0: entered allmulticast mode [ 365.613674][T16934] netlink: 'syz.0.2851': attribute type 4 has an invalid length. [ 365.771871][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2853'. [ 365.860502][T16943] xt_hashlimit: size too large, truncated to 1048576 [ 365.868269][T16946] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2854'. [ 365.898508][T16950] "syz.0.2856" (16950) uses obsolete ecb(arc4) skcipher [ 366.180246][T16967] 8021q: VLANs not supported on wg2 [ 366.513998][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 366.530703][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2862'. [ 366.599970][T16995] xt_hashlimit: size too large, truncated to 1048576 [ 366.645717][T16999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2864'. [ 366.666051][T16999] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 366.704193][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2862'. [ 366.716797][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2862'. [ 366.727005][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2862'. [ 366.742877][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2862'. [ 366.779400][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2862'. [ 366.841739][T17008] netlink: 'syz.0.2866': attribute type 89 has an invalid length. [ 366.864730][T17009] netlink: 'syz.2.2865': attribute type 1 has an invalid length. [ 366.867556][T17008] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2866'. [ 376.112984][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 378.674962][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.681779][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.331371][T17063] bond1: option miimon: invalid value (18446744073709551607) [ 386.341834][T17063] bond1: option miimon: allowed values 0 - 2147483647 [ 386.363982][T17063] bond1 (unregistering): Released all slaves [ 386.437853][T17082] __nla_validate_parse: 3 callbacks suppressed [ 386.437873][T17082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2870'. [ 386.484017][T17069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2871'. [ 386.578851][T17088] xt_hashlimit: size too large, truncated to 1048576 [ 386.632788][T17091] "syz.4.2876" (17091) uses obsolete ecb(arc4) skcipher [ 387.010379][T17120] netlink: get zone limit has 4 unknown bytes [ 387.035234][T17120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.049451][T17123] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2880'. [ 387.101939][T17123] team0 (unregistering): Port device bridge0 removed [ 387.195453][T17127] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2883'. [ 387.611296][T17149] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 387.629973][T17152] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2890'. [ 387.641644][T17149] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.650121][T17152] unsupported nlmsg_type 40 [ 387.879057][T17164] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 387.912271][T17172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2894'. [ 387.931786][T17164] bridge8: entered allmulticast mode [ 388.028810][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2892'. [ 388.311477][T17189] xt_hashlimit: size too large, truncated to 1048576 [ 388.760724][T17215] "syz.1.2900" (17215) uses obsolete ecb(arc4) skcipher [ 388.894857][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2901'. [ 389.227031][T17227] x_tables: duplicate underflow at hook 1 [ 389.453703][T17236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 389.463041][T17236] netlink: 'syz.2.2905': attribute type 5 has an invalid length. [ 389.471998][T17236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2905'. [ 389.539168][T17236] geneve4: entered promiscuous mode [ 389.545291][T17236] geneve4: entered allmulticast mode [ 389.553128][ T5967] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 56509 - 0 [ 389.587635][ T5967] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 56509 - 0 [ 389.624166][ T5967] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 56509 - 0 [ 389.730889][ T5967] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 56509 - 0 [ 389.855541][T17251] vlan2: entered promiscuous mode [ 389.905722][T17263] xt_hashlimit: size too large, truncated to 1048576 [ 389.944929][T17264] netlink: 'syz.1.2913': attribute type 9 has an invalid length. [ 390.434257][T17292] netlink: 'syz.3.2917': attribute type 1 has an invalid length. [ 390.458466][T17292] 8021q: adding VLAN 0 to HW filter on device bond9 [ 390.567526][T17292] bond9: (slave geneve4): making interface the new active one [ 390.586363][T17292] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 390.721424][T17301] "syz.2.2919" (17301) uses obsolete ecb(arc4) skcipher [ 390.736736][T17304] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 391.078838][T17324] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 391.450341][T17345] xt_hashlimit: size too large, truncated to 1048576 [ 391.801208][T17359] __nla_validate_parse: 4 callbacks suppressed [ 391.801230][T17359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2933'. [ 392.337140][T17371] bond1: option xmit_hash_policy: invalid value (10) [ 392.349724][T17371] bond1 (unregistering): Released all slaves [ 392.598208][T17376] gtp0: entered promiscuous mode [ 392.615329][T17376] gtp0: entered allmulticast mode [ 392.637447][T17377] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2937'. [ 392.681412][T17381] netlink: 'syz.2.2938': attribute type 1 has an invalid length. [ 392.737680][T17381] netlink: 'syz.2.2938': attribute type 4 has an invalid length. [ 392.755113][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2940'. [ 392.766643][T17385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2939'. [ 392.771552][T17384] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2940'. [ 392.787933][T17384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2940'. [ 392.803644][T17386] netlink: 'syz.2.2938': attribute type 4 has an invalid length. [ 392.821750][T17385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2939'. [ 392.864407][T17385] IPv6: NLM_F_CREATE should be specified when creating new route [ 392.906464][T17394] "syz.4.2942" (17394) uses obsolete ecb(arc4) skcipher [ 393.042313][T17401] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 393.058991][T17401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.216050][T17407] xt_hashlimit: size too large, truncated to 1048576 [ 393.249859][T17413] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2948'. [ 393.278458][T17413] sch_tbf: burst 2797 is lower than device lo mtu (11337746) ! [ 393.298230][T17413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2948'. [ 393.645999][T17418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2949'. [ 393.734348][T17424] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.831893][T17427] netlink: 'syz.1.2951': attribute type 6 has an invalid length. [ 393.858075][T17424] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.891348][T17427] tc action pedit offset must be on 32 bit boundaries [ 393.973335][T17424] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.994334][T17431] syzkaller0: entered promiscuous mode [ 394.006507][T17431] syzkaller0: entered allmulticast mode [ 394.054137][T17424] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.311056][ T5967] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.371835][ T5967] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.411355][ T5967] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.489633][ T186] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.582936][T17458] "syz.3.2963" (17458) uses obsolete ecb(arc4) skcipher [ 394.657537][T17447] syzkaller0: entered promiscuous mode [ 394.696689][T17463] xt_hashlimit: size too large, truncated to 1048576 [ 394.704163][T17447] syzkaller0: entered allmulticast mode [ 395.014429][T17477] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 395.279866][T17487] tipc: Enabling of bearer rejected, failed to enable media [ 395.392951][ T5618] Bluetooth: hci5: command tx timeout [ 395.816383][T17525] "syz.2.2975" (17525) uses obsolete ecb(arc4) skcipher [ 395.998163][T17538] netlink: 'syz.1.2979': attribute type 1 has an invalid length. [ 396.471719][T17540] bond9: (slave bridge9): making interface the new active one [ 396.480438][T17540] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 396.510140][ T5965] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.528023][ T5965] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.554507][T17557] geneve5: entered promiscuous mode [ 396.571198][ T5965] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.609430][ T5965] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.648750][ T5965] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.701197][ T5965] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.880663][T17570] xt_hashlimit: size too large, truncated to 1048576 [ 396.903721][T17570] xt_hashlimit: max too large, truncated to 1048576 [ 396.940211][T17549] xt_hashlimit: size too large, truncated to 1048576 [ 397.013734][T17571] block nbd0: not configured, cannot reconfigure [ 397.158549][T17582] tipc: Enabling of bearer rejected, failed to enable media [ 397.694285][T17603] __nla_validate_parse: 3 callbacks suppressed [ 397.694306][T17603] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2991'. [ 398.076616][T17624] veth1_to_team: Caught tx_queue_len zero misconfig [ 398.091604][T17624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2997'. [ 398.122282][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2997'. [ 398.167271][T17628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2999'. [ 398.318535][T17635] xt_hashlimit: size too large, truncated to 1048576 [ 398.358089][T17639] block nbd0: not configured, cannot reconfigure [ 398.576690][T17647] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 398.589660][T17647] batman_adv: batadv0: Adding interface: gretap1 [ 398.596570][T17647] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.637533][T17647] batman_adv: batadv0: Interface activated: gretap1 [ 398.839805][T17652] macsec2: entered promiscuous mode [ 398.861875][T17652] bridge0: entered promiscuous mode [ 398.980425][T17671] netlink: 'syz.1.3009': attribute type 21 has an invalid length. [ 399.009346][T17671] netlink: 'syz.1.3009': attribute type 22 has an invalid length. [ 399.034222][T17671] netlink: 'syz.1.3009': attribute type 23 has an invalid length. [ 399.065561][T17671] netlink: 'syz.1.3009': attribute type 25 has an invalid length. [ 399.098159][T17671] netlink: 'syz.1.3009': attribute type 26 has an invalid length. [ 399.139693][T17671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3009'. [ 399.219042][T17684] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3012'. [ 399.487197][T17703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.570379][T17705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.888483][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3021'. [ 400.086330][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 400.095234][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 400.105266][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 400.113675][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 400.121876][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 400.303816][T17737] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3025'. [ 400.331180][T17737] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3025'. [ 400.387386][T17737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3025'. [ 401.147197][ T5618] block nbd0: Receive control failed (result -32) [ 401.154599][ T5622] block nbd0: Receive control failed (result -32) [ 401.279674][T17727] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.288576][T17727] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.296153][T17727] bridge_slave_0: entered allmulticast mode [ 401.303632][T17727] bridge_slave_0: entered promiscuous mode [ 401.312204][T17727] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.322812][T17727] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.331471][T17727] bridge_slave_1: entered allmulticast mode [ 401.339707][T17727] bridge_slave_1: entered promiscuous mode [ 401.434542][T17727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.453586][T17727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.545005][T17727] team0: Port device team_slave_0 added [ 401.596965][T17817] netlink: 'syz.0.3044': attribute type 142 has an invalid length. [ 401.610608][T17817] netlink: 'syz.0.3044': attribute type 24 has an invalid length. [ 401.622715][T17727] team0: Port device team_slave_1 added [ 401.654782][T17727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.662646][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.692411][T17727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.736430][T17727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.776289][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.837600][T17727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.867730][T17822] netlink: 'syz.1.3046': attribute type 13 has an invalid length. [ 401.909418][T17823] tipc: Enabled bearer , priority 0 [ 401.946550][T17823] syzkaller0: entered promiscuous mode [ 401.955272][T17828] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 401.970311][T17823] syzkaller0: entered allmulticast mode [ 401.983765][T17822] syzkaller0: entered promiscuous mode [ 401.989362][T17822] syzkaller0: entered allmulticast mode [ 402.000753][T17727] hsr_slave_0: entered promiscuous mode [ 402.009561][T17727] hsr_slave_1: entered promiscuous mode [ 402.016493][T17727] debugfs: 'hsr0' already exists in 'hsr' [ 402.022881][T17727] Cannot create hsr debugfs directory [ 402.029382][T17826] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 402.088907][T17823] tipc: Resetting bearer [ 402.192566][ T5618] Bluetooth: hci1: command tx timeout [ 402.213472][T17821] tipc: Resetting bearer [ 402.239067][T17821] tipc: Disabling bearer [ 402.485504][T17847] netlink: 'syz.0.3054': attribute type 1 has an invalid length. [ 402.505186][T17847] netlink: 'syz.0.3054': attribute type 2 has an invalid length. [ 402.537519][T17727] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.560416][T17727] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56509 - 0 [ 402.640068][T17727] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.666748][T17727] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56509 - 0 [ 402.742865][T17727] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.758410][T17727] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56509 - 0 [ 402.781667][T17862] syzkaller1: entered promiscuous mode [ 402.788197][T17862] syzkaller1: entered allmulticast mode [ 402.877815][T17727] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.914646][T17727] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56509 - 0 [ 403.129997][T17727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 403.151371][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 403.179675][T17727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 403.220552][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.255641][T17727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 403.300959][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.314304][T17727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.341592][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.544074][T17727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.563113][T17892] netlink: 'syz.3.3062': attribute type 1 has an invalid length. [ 403.618338][T17892] bond10: entered promiscuous mode [ 403.624483][T17892] 8021q: adding VLAN 0 to HW filter on device bond10 [ 403.632066][T17897] __nla_validate_parse: 9 callbacks suppressed [ 403.632086][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3062'. [ 403.648031][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3062'. [ 403.670431][T17727] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.711747][T17892] bond10: (slave bridge10): making interface the new active one [ 403.720480][T17892] bridge10: entered promiscuous mode [ 403.727845][T17892] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 403.778668][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.786407][ T6536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.813228][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.820942][ T6536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.273370][ T5618] Bluetooth: hci1: command tx timeout [ 404.378743][T17936] RDS: rds_bind could not find a transport for ::ffff:172.30.3.5, load rds_tcp or rds_rdma? [ 404.541896][T17942] tipc: Enabled bearer , priority 0 [ 404.584718][T17942] syzkaller0: entered promiscuous mode [ 404.598559][T17942] syzkaller0: entered allmulticast mode [ 404.617214][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3077'. [ 404.639519][T17946] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 404.661001][T17949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.681064][T17942] tipc: Resetting bearer [ 404.789492][T17942] tipc: Resetting bearer [ 404.812906][T17942] tipc: Disabling bearer [ 404.862133][T17727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.996484][T17961] netlink: 'syz.4.3082': attribute type 46 has an invalid length. [ 405.029687][T17727] veth0_vlan: entered promiscuous mode [ 405.074896][T17727] veth1_vlan: entered promiscuous mode [ 405.119706][T17965] xt_hashlimit: size too large, truncated to 1048576 [ 405.198280][T17727] veth0_macvtap: entered promiscuous mode [ 405.230699][T17727] veth1_macvtap: entered promiscuous mode [ 405.294719][T17727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.335460][T17727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.365801][ T5967] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.415957][ T5967] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.428917][ T5967] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.460046][ T5967] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.617963][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.641543][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.768135][ T3302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.785829][ T3302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.794009][T17995] xt_hashlimit: size too large, truncated to 1048576 [ 406.354282][ T5618] Bluetooth: hci1: command tx timeout [ 406.379222][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3020'. [ 406.700387][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.709923][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.717755][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.725984][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.734031][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.860660][T18024] 8021q: adding VLAN 0 to HW filter on device eth0 [ 406.883400][T18024] 8021q: adding VLAN 0 to HW filter on device eth1 [ 406.945030][T18024] 8021q: adding VLAN 0 to HW filter on device eth2 [ 406.964791][T18024] 8021q: adding VLAN 0 to HW filter on device eth3 [ 407.010662][T18026] bond1: entered allmulticast mode [ 407.021499][ T5635] team0: Port device syz_tun removed [ 407.128584][T18052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.144347][T18048] bond11: option mode: invalid value (254) [ 407.156599][T18048] bond11 (unregistering): Released all slaves [ 407.174423][T18054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3101'. [ 407.189430][T18055] netlink: 'syz.1.3100': attribute type 1 has an invalid length. [ 407.220480][T18054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3101'. [ 407.231523][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3102'. [ 407.323345][T18055] bond10: entered promiscuous mode [ 407.346426][T18055] 8021q: adding VLAN 0 to HW filter on device bond10 [ 407.359721][T18060] veth0_macvtap: left promiscuous mode [ 407.475151][T18071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3104'. [ 407.579466][T18071] bond11: entered promiscuous mode [ 407.585192][T18071] 8021q: adding VLAN 0 to HW filter on device bond11 [ 407.634362][T18071] 8021q: adding VLAN 0 to HW filter on device bond11 [ 407.644646][T18071] bond11: (slave sit2): The slave device specified does not support setting the MAC address [ 407.660176][T18071] bond11: (slave sit2): Error -95 calling set_mac_address [ 407.821001][T18089] netlink: 'syz.0.3108': attribute type 1 has an invalid length. [ 407.847161][T18089] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3108'. [ 407.953830][T18099] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 407.982323][T18098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3107'. [ 407.993439][T18099] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 408.041408][T18098] netlink: 'syz.2.3107': attribute type 1 has an invalid length. [ 408.355265][T18028] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.363282][T18028] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.370835][T18028] bridge_slave_0: entered allmulticast mode [ 408.378881][T18028] bridge_slave_0: entered promiscuous mode [ 408.387345][T18028] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.395316][T18028] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.416696][T18028] bridge_slave_1: entered allmulticast mode [ 408.432714][ T5618] Bluetooth: hci1: command tx timeout [ 408.441632][T18028] bridge_slave_1: entered promiscuous mode [ 408.595609][T18028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.631553][T18028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.731708][T18028] team0: Port device team_slave_0 added [ 408.758135][T18028] team0: Port device team_slave_1 added [ 408.764832][ T5618] Bluetooth: hci0: command tx timeout [ 408.811779][T18124] tipc: Enabling of bearer rejected, failed to enable media [ 408.864394][T18126] veth1_to_team: entered allmulticast mode [ 408.911106][T18028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.932676][T18028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.995314][T18028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.031080][T18028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.063581][T18028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.148849][T18028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.392839][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 409.437305][T18028] hsr_slave_0: entered promiscuous mode [ 409.447470][T18157] __nla_validate_parse: 3 callbacks suppressed [ 409.447508][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3121'. [ 409.468950][T18028] hsr_slave_1: entered promiscuous mode [ 409.498128][T18028] debugfs: 'hsr0' already exists in 'hsr' [ 409.514176][T18028] Cannot create hsr debugfs directory [ 409.551254][T18157] netlink: 'syz.0.3121': attribute type 13 has an invalid length. [ 409.576021][T18157] netlink: 'syz.0.3121': attribute type 17 has an invalid length. [ 409.614520][T18160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3123'. [ 409.650082][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3123'. [ 409.744962][T18157] hsr0: left promiscuous mode [ 409.947140][T18157] bond1: left allmulticast mode [ 409.955735][T18157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.135242][T18179] geneve0: entered promiscuous mode [ 410.149587][T18179] geneve0: left promiscuous mode [ 410.294656][T18185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3128'. [ 410.366195][T18185] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3128'. [ 410.833375][ T5618] Bluetooth: hci0: command tx timeout [ 410.842954][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3135'. [ 410.852148][T18208] pim6reg: entered allmulticast mode [ 410.869548][T18028] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 410.880043][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.888532][T18028] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 410.898101][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.906594][T18028] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 410.918108][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.940542][T18200] pim6reg: left allmulticast mode [ 410.958662][T18028] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 410.970398][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 411.097692][T18221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.194221][T18028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.256447][T18028] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.274797][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.282002][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.334302][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.341485][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.518116][T18239] veth0: entered promiscuous mode [ 411.576394][T18239] veth0: left promiscuous mode [ 411.902189][ T8124] dummy0: entered promiscuous mode [ 412.219688][T18263] infiniband uyz0: set active [ 412.224794][T18263] infiniband uyz0: added bridge_slave_1 [ 412.241704][T18263] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 412.257268][T18263] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 412.282711][T18263] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 412.323152][T18263] RDS/IB: uyz0: added [ 412.329028][T18263] smc: adding ib device uyz0 with port count 1 [ 412.335684][T18263] smc: ib device uyz0 port 1 has no pnetid [ 412.411995][T18028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.690500][T18028] veth0_vlan: entered promiscuous mode [ 412.704664][T18028] veth1_vlan: entered promiscuous mode [ 412.736612][T18028] veth0_macvtap: entered promiscuous mode [ 412.746679][T18028] veth1_macvtap: entered promiscuous mode [ 412.768703][T18028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.785208][T18028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.800185][ T5965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.815495][ T5965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.825919][ T5965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.838135][ T5965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.923923][ T5618] Bluetooth: hci0: command tx timeout [ 413.567351][T18288] netlink: 271 bytes leftover after parsing attributes in process `syz.0.3144'. [ 413.582165][T18288] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 414.008783][T18221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.138576][ T3302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.179734][ T3302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.221744][T18294] 8021q: VLANs not supported on dvmrp1 [ 414.286256][ T6536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.321945][ T6536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.942371][T18331] xt_hashlimit: size too large, truncated to 1048576 [ 415.003653][ T5618] Bluetooth: hci0: command tx timeout [ 415.099289][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.108560][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.116012][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.125881][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.135783][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 415.221293][T18349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3156'. [ 415.543590][T18363] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3159'. [ 415.622750][ T4938] block nbd3: Receive control failed (result -32) [ 415.638147][ T5622] block nbd3: Receive control failed (result -32) [ 415.638160][ T5618] block nbd3: Receive control failed (result -32) [ 415.921567][T18371] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3161'. [ 415.956727][T18371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3161'. [ 415.987702][T18371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3161'. [ 416.513611][T18401] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 416.612754][T18401] pimreg: entered allmulticast mode [ 416.763911][T18414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3171'. [ 416.848341][T18414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.877802][T18414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.901179][T18414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.919129][T18414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.976784][T18422] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 417.002635][T18422] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 417.025489][T18422] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 417.057503][T18428] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 417.075491][T18428] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3173'. [ 417.084614][ T5618] Bluetooth: hci0: command tx timeout [ 417.243551][ T5618] Bluetooth: hci4: command tx timeout [ 417.331639][T18433] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 417.647692][T18340] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.670497][T18340] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.696860][T18340] bridge_slave_0: entered allmulticast mode [ 417.727474][T18340] bridge_slave_0: entered promiscuous mode [ 417.753944][T18340] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.780882][T18340] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.806654][T18340] bridge_slave_1: entered allmulticast mode [ 417.827561][T18340] bridge_slave_1: entered promiscuous mode [ 417.984307][T18340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.018126][T18340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.169063][T18340] team0: Port device team_slave_0 added [ 418.199304][T18466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3182'. [ 418.227355][T18340] team0: Port device team_slave_1 added [ 418.308985][T18477] netlink: 'syz.3.3185': attribute type 1 has an invalid length. [ 418.336680][T18340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.339141][T18477] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3185'. [ 418.361469][T18340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.391222][T18340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.461996][T18340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.471587][T18340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.517631][T18340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.534498][T18486] netlink: 'syz.3.3185': attribute type 10 has an invalid length. [ 418.566587][T18489] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3188'. [ 418.592892][T18477] netlink: 'syz.3.3185': attribute type 10 has an invalid length. [ 418.607740][T18486] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 418.617080][T18486] team0: Port device netdevsim1 added [ 418.629381][T18340] hsr_slave_0: entered promiscuous mode [ 418.636316][T18340] hsr_slave_1: entered promiscuous mode [ 418.644220][T18340] debugfs: 'hsr0' already exists in 'hsr' [ 418.650130][T18340] Cannot create hsr debugfs directory [ 418.659124][T18477] team0: Port device netdevsim1 removed [ 419.004255][T18340] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.057887][T18514] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 419.083642][T18340] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.166886][T18340] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.317365][ T5618] Bluetooth: hci4: command tx timeout [ 419.341867][T18340] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.661244][T18340] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 419.706978][T18340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 419.750196][T18340] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 419.762200][T18547] netlink: 'syz.2.3201': attribute type 15 has an invalid length. [ 419.789226][T18340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.804215][T18340] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 419.831603][T18340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.863428][T18340] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 419.871575][T18547] netlink: 'syz.2.3201': attribute type 15 has an invalid length. [ 419.891671][T18340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.908514][ T5967] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 419.924276][ T5967] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 419.948173][ T5965] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 419.984974][ T5965] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 420.280241][T18340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.364454][T18561] veth1_to_hsr: entered promiscuous mode [ 420.375007][T18561] __nla_validate_parse: 7 callbacks suppressed [ 420.375043][T18561] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3204'. [ 420.393000][T18561] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 420.603257][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3205'. [ 420.648107][T18340] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.701611][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.709421][ T3302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.735574][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.743259][ T3302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.128339][ T5627] IPVS: starting estimator thread 0... [ 421.232959][T18592] IPVS: using max 37 ests per chain, 88800 per kthread [ 421.374724][T18598] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3211'. [ 421.393737][ T5618] Bluetooth: hci4: command tx timeout [ 421.602079][T18599] syzkaller0: entered promiscuous mode [ 421.624419][T18599] syzkaller0: entered allmulticast mode [ 421.641487][ T5622] block nbd4: Receive control failed (result -32) [ 421.646253][ T5618] block nbd4: Receive control failed (result -32) [ 421.868717][ T5618] Bluetooth: hci5: link tx timeout [ 421.876476][ T5618] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 421.888771][ T5618] Bluetooth: hci5: link tx timeout [ 421.896042][ T5618] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 422.241955][T18635] netlink: 'syz.3.3218': attribute type 30 has an invalid length. [ 422.315581][T18635] bond12: option arp_missed_max: invalid value (0) [ 422.348658][T18635] bond12: option arp_missed_max: allowed values 1 - 255 [ 422.365440][T18635] bond12 (unregistering): Released all slaves [ 422.385229][T18340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.506842][T18340] veth0_vlan: entered promiscuous mode [ 422.530353][T18340] veth1_vlan: entered promiscuous mode [ 422.606469][T18340] veth0_macvtap: entered promiscuous mode [ 422.618539][T18340] veth1_macvtap: entered promiscuous mode [ 422.645453][T18340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.656977][T18340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.701813][ T6536] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.749383][ T6536] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.779448][ T6536] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.828398][ T6536] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.990925][T18650] netlink: 'syz.2.3223': attribute type 1 has an invalid length. [ 423.012849][T18650] nbd: illegal input index -1426887320 [ 423.020778][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.044374][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.147094][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.183369][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.404957][T18666] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3226'. [ 423.446405][T18666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.475255][ T5618] Bluetooth: hci4: command tx timeout [ 423.540767][T18666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.584003][T18666] bond0 (unregistering): Released all slaves [ 423.805697][ T8124] IPVS: starting estimator thread 0... [ 423.853203][T18682] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 423.924014][T18681] IPVS: using max 44 ests per chain, 105600 per kthread [ 423.947054][T18686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3231'. [ 423.965081][ T5618] Bluetooth: hci5: command 0x0406 tx timeout [ 423.996077][ T4938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 424.005787][ T4938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 424.016737][ T4938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 424.031248][ T4938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 424.040065][ T4938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 424.826047][T18720] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3236'. [ 424.841705][T18720] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3236'. [ 424.853528][T18720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3236'. [ 425.009081][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 425.019784][T18727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3238'. [ 425.314674][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.324647][T18739] pim6reg1: entered promiscuous mode [ 425.336532][T18739] pim6reg1: entered allmulticast mode [ 425.394929][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.403935][ T6988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.780117][T18760] __nla_validate_parse: 1 callbacks suppressed [ 425.780137][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3247'. [ 425.836711][T18765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3247'. [ 425.880312][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3247'. [ 425.989685][T18769] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3248'. [ 426.011243][T18769] C: renamed from veth1_to_team (while UP) [ 426.035250][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.046220][ T5622] Bluetooth: hci5: command 0x0406 tx timeout [ 426.113023][ T5622] Bluetooth: hci3: command tx timeout [ 426.173243][T18775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3249'. [ 426.353442][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.663933][T18688] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.672262][T18688] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.682156][T18688] bridge_slave_0: entered allmulticast mode [ 426.691531][T18688] bridge_slave_0: entered promiscuous mode [ 426.701975][T18688] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.709816][T18688] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.720767][T18688] bridge_slave_1: entered allmulticast mode [ 426.730033][T18688] bridge_slave_1: entered promiscuous mode [ 426.875060][T18688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.891458][T18688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.004111][T18688] team0: Port device team_slave_0 added [ 427.041229][T18688] team0: Port device team_slave_1 added [ 427.181190][T18688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.202124][T18688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.289291][T18688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.312828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.334215][T18688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.368868][T18688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.403219][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.499931][T18688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.146757][T18688] hsr_slave_0: entered promiscuous mode [ 428.169023][T18688] hsr_slave_1: entered promiscuous mode [ 428.189599][T18688] debugfs: 'hsr0' already exists in 'hsr' [ 428.193369][ T5622] Bluetooth: hci3: command tx timeout [ 428.210299][T18688] Cannot create hsr debugfs directory [ 428.433108][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.441746][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.495253][T18870] syzkaller0: entered promiscuous mode [ 428.517638][T18870] syzkaller0: entered allmulticast mode [ 428.617950][T18866] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 428.660424][T18877] "syz.0.3267" (18877) uses obsolete ecb(arc4) skcipher [ 429.185744][T18897] syz_tun: entered allmulticast mode [ 429.233749][T18897] dvmrp6: entered allmulticast mode [ 429.297574][T18894] syz_tun: left allmulticast mode [ 429.473171][ T6890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.569990][T18912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3276'. [ 429.651543][T18688] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.701774][T18688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.734716][T18688] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.789892][T18688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.923505][T18688] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.942184][T18688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.964189][T18688] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.978150][T18688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.011343][T18924] 5nč: entered promiscuous mode [ 430.210173][T18947] --map-set only usable from mangle table [ 430.225895][T18940] --map-set only usable from mangle table [ 430.249064][T18940] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3282'. [ 430.273443][ T5622] Bluetooth: hci3: command tx timeout [ 430.279374][T18940] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.287322][T18940] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.353823][T18940] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3282'. [ 430.387831][T18943] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3282'. [ 430.513452][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.547015][T18688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.614128][T18688] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.656641][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.663878][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.737276][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.744488][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.007574][T18983] netlink: 'syz.0.3287': attribute type 2 has an invalid length. [ 431.031516][T18983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3287'. [ 431.513576][ T6988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.530651][T19015] xt_TCPMSS: Only works on TCP SYN packets [ 432.990716][T19001] Bluetooth: MGMT ver 1.23 [ 432.996116][T19000] netlink: 'syz.0.3290': attribute type 1 has an invalid length. [ 433.008238][ T5622] Bluetooth: hci3: command tx timeout [ 433.054564][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.066897][T19025] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3292'. [ 439.837745][ T8124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.839325][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 439.881102][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.921763][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.968824][ T4938] Bluetooth: hci0: command tx timeout [ 440.000756][ T8124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.073946][ T8124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.817597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.839353][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.851724][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.860209][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.868823][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.876996][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.892727][ T8124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.905552][ T8124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.914265][ T8124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.924650][ T8124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.974989][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 545.002373][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 545.009402][ C0] rcu: 1-...!: (3 ticks this GP) idle=3534/1/0x4000000000000000 softirq=90963/90963 fqs=4 [ 545.019419][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19028/1:b.el [ 545.027457][ C0] rcu: (detected by 0, t=10503 jiffies, g=80641, q=1590 ncpus=2) [ 545.035315][ C0] Sending NMI from CPU 0 to CPUs 1: [ 545.035349][ C1] NMI backtrace for cpu 1 [ 545.035366][ C1] CPU: 1 UID: 0 PID: 17108 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 545.035386][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 545.035397][ C1] RIP: 0010:lock_release+0x4/0x3c0 [ 545.035500][ C1] Code: 00 e9 4f fe ff ff 41 bf 2f 00 00 00 e9 06 ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 [ 545.035517][ C1] RSP: 0018:ffffc90000a08db8 EFLAGS: 00000086 [ 545.035532][ C1] RAX: 1ffff1100b03c469 RBX: 0000000000000046 RCX: ffff888030b2dd00 [ 545.035545][ C1] RDX: 0000000000010000 RSI: ffffffff81b2abdf RDI: ffff8880b87281d8 [ 545.035557][ C1] RBP: ffff8880581e2300 R08: ffff8880581e2327 R09: 0000000000000000 [ 545.035569][ C1] R10: ffff8880581e2318 R11: ffffed100b03c465 R12: ffff8880b87281c0 [ 545.035583][ C1] R13: ffffffff89b610a0 R14: ffff8880b87281c0 R15: 1ffff110170e5062 [ 545.035596][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 545.035610][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.035622][ C1] CR2: 00007fa519383e80 CR3: 000000000e746000 CR4: 00000000003526f0 [ 545.035638][ C1] Call Trace: [ 545.035650][ C1] [ 545.035660][ C1] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 545.035768][ C1] __hrtimer_run_queues+0x2bf/0xa10 [ 545.035807][ C1] hrtimer_interrupt+0x448/0x910 [ 545.035840][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 545.035876][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 545.035926][ C1] [ 545.035932][ C1] [ 545.035939][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 545.035975][ C1] RIP: 0010:__might_resched+0x101/0x4d0 [ 545.036001][ C1] Code: 35 6c 21 a5 11 4d 8d a6 c4 04 00 00 4d 89 e7 49 c1 ef 03 41 0f b6 04 2f 84 c0 0f 85 9b 02 00 00 41 8b 04 24 c1 e0 08 44 01 e8 <39> d8 75 48 9c 58 a9 00 02 00 00 74 3f 4d 8d 6e 2c 4c 89 e8 48 c1 [ 545.036015][ C1] RSP: 0018:ffffc90004def588 EFLAGS: 00000246 [ 545.036029][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888030b2dd00 [ 545.036040][ C1] RDX: 0000000000000000 RSI: 00000000000007e7 RDI: ffffffff8bda1ea0 [ 545.036051][ C1] RBP: dffffc0000000000 R08: ffff888031f46de3 R09: 1ffff110063e8dbc [ 545.036064][ C1] R10: dffffc0000000000 R11: ffffed10063e8dbd R12: ffff888030b2e1c4 [ 545.036077][ C1] R13: 0000000000000000 R14: ffff888030b2dd00 R15: 1ffff11006165c38 [ 545.036097][ C1] ? __might_resched+0x71/0x4d0 [ 545.036128][ C1] __zap_vma_range+0x45f3/0x4c70 [ 545.036190][ C1] ? mas_next_node+0xbd1/0xe50 [ 545.036237][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 545.036266][ C1] ? mas_find+0xab1/0xcf0 [ 545.036319][ C1] unmap_vmas+0x390/0x550 [ 545.036347][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 545.036383][ C1] exit_mmap+0x293/0x9f0 [ 545.036406][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 545.036437][ C1] ? __pfx_exit_aio+0x10/0x10 [ 545.036477][ C1] ? arch_uprobe_clear_state+0x1c8/0x240 [ 545.036495][ C1] ? uprobe_clear_state+0x2ac/0x3e0 [ 545.036536][ C1] __mmput+0x118/0x420 [ 545.036567][ C1] exit_mm+0x221/0x2d0 [ 545.036584][ C1] do_exit+0x6cd/0x2360 [ 545.036604][ C1] ? __pfx_do_exit+0x10/0x10 [ 545.036619][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 545.036644][ C1] ? rcu_is_watching+0x15/0xb0 [ 545.036661][ C1] ? trace_irq_enable+0x3b/0x140 [ 545.036693][ C1] do_group_exit+0x22d/0x2f0 [ 545.036710][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.036727][ C1] __x64_sys_exit_group+0x3f/0x40 [ 545.036745][ C1] x64_sys_call+0x221a/0x2240 [ 545.036777][ C1] do_syscall_64+0x174/0x580 [ 545.036800][ C1] ? trace_irq_disable+0x3b/0x140 [ 545.036822][ C1] ? clear_bhb_loop+0x40/0x90 [ 545.036841][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.036858][ C1] RIP: 0033:0x7fa518cf16c5 [ 545.036873][ C1] Code: Unable to access opcode bytes at 0x7fa518cf169b. [ 545.036910][ C1] RSP: 002b:00007ffdce7b9708 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 545.036927][ C1] RAX: ffffffffffffffda RBX: 00005653c62ba190 RCX: 00007fa518cf16c5 [ 545.036939][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 545.036956][ C1] RBP: 00005653c6293910 R08: 0000000000000000 R09: 0000000000000000 [ 545.036967][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.036977][ C1] R13: 00007ffdce7b9750 R14: 0000000000000000 R15: 0000000000000000 [ 545.036997][ C1] [ 545.037345][ C0] task:syz.2.3293 state:R running task stack:25744 pid:19028 tgid:19028 ppid:17727 task_flags:0x40044c flags:0x00080002 [ 545.483823][ C0] Call Trace: [ 545.487121][ C0] [ 545.490076][ C0] __schedule+0x17d9/0x56c0 [ 545.494628][ C0] ? rcu_is_watching+0x15/0xb0 [ 545.499434][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 545.505816][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 545.510867][ C0] ? __pfx___schedule+0x10/0x10 [ 545.515766][ C0] ? rcu_is_watching+0x15/0xb0 [ 545.520561][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 545.525971][ C0] preempt_schedule_common+0x82/0xd0 [ 545.531295][ C0] preempt_schedule_thunk+0x16/0x40 [ 545.536535][ C0] _raw_spin_unlock+0x3f/0x50 [ 545.541255][ C0] __zap_vma_range+0x3e40/0x4c70 [ 545.546253][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 545.551574][ C0] ? unmap_vmas+0x1b9/0x550 [ 545.556113][ C0] ? rcu_is_watching+0x15/0xb0 [ 545.560904][ C0] ? rcu_is_watching+0x15/0xb0 [ 545.565698][ C0] ? lock_release+0x4b/0x3c0 [ 545.570321][ C0] ? __asan_memset+0x22/0x50 [ 545.574976][ C0] unmap_vmas+0x390/0x550 [ 545.579342][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 545.584272][ C0] exit_mmap+0x293/0x9f0 [ 545.588554][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 545.593363][ C0] ? __pfx_exit_aio+0x10/0x10 [ 545.598077][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 545.603737][ C0] ? uprobe_clear_state+0x2ac/0x3e0 [ 545.608972][ C0] __mmput+0x118/0x420 [ 545.613070][ C0] exit_mm+0x221/0x2d0 [ 545.617168][ C0] do_exit+0x6cd/0x2360 [ 545.621351][ C0] ? __pfx_do_exit+0x10/0x10 [ 545.625965][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 545.631023][ C0] ? rcu_is_watching+0x15/0xb0 [ 545.635818][ C0] do_group_exit+0x22d/0x2f0 [ 545.640435][ C0] ? trace_irq_enable+0x3b/0x140 [ 545.645416][ C0] get_signal+0x121b/0x12c0 [ 545.649970][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 545.655615][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 545.661818][ C0] ? rcu_is_watching+0x15/0xb0 [ 545.666614][ C0] exit_to_user_mode_loop+0x104/0x730 [ 545.672023][ C0] ? rcu_is_watching+0x15/0xb0 [ 545.676816][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.682906][ C0] do_syscall_64+0x353/0x580 [ 545.687706][ C0] ? trace_irq_disable+0x3b/0x140 [ 545.692761][ C0] ? clear_bhb_loop+0x40/0x90 [ 545.697480][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.703405][ C0] RIP: 0033:0x7ff760b9ce59 [ 545.707847][ C0] RSP: 002b:00007fff080c9698 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 545.716294][ C0] RAX: ffffffffffffff92 RBX: 0000000000069b2c RCX: 00007ff760b9ce59 [ 545.724295][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff760e15fac [ 545.732293][ C0] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 545.740290][ C0] R10: 00007fff080c97a0 R11: 0000000000000246 R12: 00007fff080c97c0 [ 545.748285][ C0] R13: 00007ff760e15fac R14: 0000000000069b5e R15: 00007fff080c97a0 [ 545.756382][ C0] [ 545.759420][ C0] rcu: rcu_preempt kthread starved for 7623 jiffies! g80641 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 545.770557][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 545.780542][ C0] rcu: RCU grace-period kthread stack dump: [ 545.786452][ C0] task:rcu_preempt state:R running task stack:28040 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 545.799981][ C0] Call Trace: [ 545.803278][ C0] [ 545.806228][ C0] __schedule+0x17d9/0x56c0 [ 545.810766][ C0] ? rcu_is_watching+0x15/0xb0 [ 545.815563][ C0] ? rcu_is_watching+0x15/0xb0 [ 545.820353][ C0] ? __pfx___schedule+0x10/0x10 [ 545.825225][ C0] ? schedule+0x90/0x360 [ 545.829499][ C0] ? rcu_is_watching+0x15/0xb0 [ 545.834285][ C0] ? lock_release+0x4b/0x3c0 [ 545.838913][ C0] schedule+0x164/0x360 [ 545.843095][ C0] schedule_timeout+0x152/0x2c0 [ 545.847975][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 545.853375][ C0] ? __pfx_process_timeout+0x10/0x10 [ 545.858696][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 545.864539][ C0] ? prepare_to_swait_event+0x322/0x350 [ 545.870114][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 545.875004][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 545.881180][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 545.886495][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 545.891743][ C0] ? trace_irq_enable+0x3b/0x140 [ 545.896739][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 545.901408][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 545.906652][ C0] ? __kthread_parkme+0x71/0x1f0 [ 545.911665][ C0] ? __kthread_parkme+0x196/0x1f0 [ 545.916735][ C0] kthread+0x388/0x470 [ 545.920830][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 545.926062][ C0] ? __pfx_kthread+0x10/0x10 [ 545.930676][ C0] ret_from_fork+0x514/0xb70 [ 545.935291][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 545.940424][ C0] ? __switch_to+0xc89/0x1420 [ 545.945138][ C0] ? __pfx_kthread+0x10/0x10 [ 545.949754][ C0] ret_from_fork_asm+0x1a/0x30 [ 545.954554][ C0] [ 545.957594][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 545.963939][ C0] CPU: 0 UID: 0 PID: 18021 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 545.972904][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 545.982979][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x40 [ 545.989173][ C0] Code: 48 8d 3d a3 de 8c 04 48 c7 c6 72 64 fa 8d 67 48 0f b9 3a 90 eb ca cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 31 c0 83 3d 93 4d 89 04 00 74 1d 83 3d 6a 7f 89 04 00 [ 546.008804][ C0] RSP: 0018:ffffc90000007da0 EFLAGS: 00000246 [ 546.014899][ C0] RAX: ffffffff89b54fbf RBX: ffffffff89b54e26 RCX: ffff888032133e00 [ 546.022892][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.030886][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 546.038879][ C0] R10: 0000000000000001 R11: ffffffff89b54e00 R12: 0000000000000000 [ 546.046868][ C0] R13: dffffc0000000000 R14: ffff8880250f9000 R15: ffff88805af40000 [ 546.054863][ C0] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 546.063817][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.070423][ C0] CR2: 00007fa519383e80 CR3: 000000000e746000 CR4: 00000000003526f0 [ 546.078418][ C0] Call Trace: [ 546.081723][ C0] [ 546.084591][ C0] taprio_dequeue+0x1c7/0x540 [ 546.089441][ C0] __qdisc_run+0x24c/0x1620 [ 546.094020][ C0] net_tx_action+0x7cb/0xc30 [ 546.098687][ C0] ? net_tx_action+0x5bb/0xc30 [ 546.103480][ C0] handle_softirqs+0x225/0x840 [ 546.108281][ C0] ? __irq_exit_rcu+0xca/0x220 [ 546.113084][ C0] __irq_exit_rcu+0xca/0x220 [ 546.117721][ C0] irq_exit_rcu+0x9/0x30 [ 546.122000][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 546.127669][ C0] [ 546.130623][ C0] [ 546.133580][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 546.139582][ C0] RIP: 0010:smp_call_function_many_cond+0x10b0/0x14b0 [ 546.146400][ C0] Code: c0 75 73 41 8b 1e 89 de 83 e6 01 31 ff e8 98 02 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 44 fe 0b 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 29 fe 0b [ 546.166068][ C0] RSP: 0018:ffffc90003f0f6a0 EFLAGS: 00000293 [ 546.172181][ C0] RAX: ffffffff81b9f7f7 RBX: dffffc0000000000 RCX: ffff888032133e00 [ 546.180176][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 546.188172][ C0] RBP: ffffc90003f0f7c8 R08: ffffffff903116f7 R09: 1ffffffff20622de [ 546.196168][ C0] R10: dffffc0000000000 R11: fffffbfff20622df R12: 1ffff110170e8199 [ 546.204166][ C0] R13: ffff8880b863c2c8 R14: ffff8880b8740cc8 R15: 0000000000000001 [ 546.212168][ C0] ? smp_call_function_many_cond+0x10c7/0x14b0 [ 546.218398][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 546.223663][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 546.230029][ C0] ? pfn_valid+0xba/0x480 [ 546.234399][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 546.239640][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 546.244792][ C0] flush_tlb_mm_range+0x5c4/0x1090 [ 546.249962][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 546.255022][ C0] tlb_flush_mmu+0x1af/0xa30 [ 546.259648][ C0] tlb_finish_mmu+0xf4/0x220 [ 546.264275][ C0] free_ldt_pgtables+0x192/0x360 [ 546.269246][ C0] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 546.274748][ C0] ? down_read+0x2be/0x330 [ 546.279201][ C0] exit_mmap+0x1bf/0x9f0 [ 546.283479][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 546.288295][ C0] ? __pfx_exit_aio+0x10/0x10 [ 546.293006][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 546.298665][ C0] ? uprobe_clear_state+0x2ac/0x3e0 [ 546.303904][ C0] __mmput+0x118/0x420 [ 546.308004][ C0] exit_mm+0x221/0x2d0 [ 546.312098][ C0] do_exit+0x6cd/0x2360 [ 546.316282][ C0] ? __pfx_do_exit+0x10/0x10 [ 546.320899][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 546.325953][ C0] ? rcu_is_watching+0x15/0xb0 [ 546.330747][ C0] ? trace_irq_enable+0x3b/0x140 [ 546.335716][ C0] do_group_exit+0x22d/0x2f0 [ 546.340360][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.346455][ C0] __x64_sys_exit_group+0x3f/0x40 [ 546.351502][ C0] x64_sys_call+0x221a/0x2240 [ 546.356206][ C0] do_syscall_64+0x174/0x580 [ 546.360831][ C0] ? clear_bhb_loop+0x40/0x90 [ 546.365543][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.371464][ C0] RIP: 0033:0x7fa518cf16c5 [ 546.375906][ C0] Code: Unable to access opcode bytes at 0x7fa518cf169b. [ 546.382977][ C0] RSP: 002b:00007ffdce7b9708 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 546.391416][ C0] RAX: ffffffffffffffda RBX: 00005653c62c43d0 RCX: 00007fa518cf16c5 [ 546.399417][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 546.407410][ C0] RBP: 00005653c6293910 R08: 0000000000000000 R09: 0000000000000000 [ 546.415404][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.423488][ C0] R13: 00007ffdce7b9750 R14: 0000000000000000 R15: 0000000000000000 [ 546.431497][ C0]