last executing test programs: 2m48.635172624s ago: executing program 3 (id=1260): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000180)="a2", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x40, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x2, 0xfff1}, {0xfff3, 0xfff2}, {0x1, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40006) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x20000000) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0xa, 0xb}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000180)="a2", 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x40, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x2, 0xfff1}, {0xfff3, 0xfff2}, {0x1, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40006) (async) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) unshare(0x20000000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0xa, 0xb}}}, 0x24}}, 0x0) (async) 2m48.382508158s ago: executing program 3 (id=1263): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000040)=0xb, 0x4) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x2040}, {r0, 0x40}, {r0, 0xa003}], 0x3, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x4]}, 0x8) 2m48.287958476s ago: executing program 3 (id=1265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYRES32=r0], 0x68}, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) sendmsg$nfc_llcp(r1, &(0x7f0000001700)={&(0x7f0000000000)={0x27, r4, 0xffffffffffffffff, 0x4, 0x6, 0x1, "3bc222fbee0ef7d875b2da10f427627020373a9eab9d7aaad97a89c5ecfc75e1bf47a2e7be378d25e86f254ef006e90715ce301681c6bbe28671a09ab1ea08", 0x27}, 0x60, &(0x7f0000001540)=[{&(0x7f00000000c0)="c168ce32175550d1b04dadec45666b3bdcf214298929b54285a1", 0x1a}, {&(0x7f0000000100)="5c829b0bd2aa194294c196204383796ea7d3db6bf51207a1c3ef80e2b6bd28ba752690b208e38c8c0e28857abd3dbd92f23c262f1ba4ce87c03f22f5a2d7dc186ad29247a761aa67dfed5b6664c39dd2358ed14ddae29220ccf000ed69", 0x5d}, {&(0x7f00000001c0)}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="ee9c578864f8053fd113381cbbb685bfca3885cb9d264dacd558cb79fafda844468c39d7f5dde31ed0292b1233e2ce1cf02a0f53ef7b1d35ff1cb830b36fb62b41503f22a309e5332d45f7d7c537a97a26b49ed23faa83f26d71a2956e16817673071c0dfbfd60f0a875a6b6d22e986b0017f5361eea93d3ca1b122a80788486d79bd36c762325134737d6bf823c9ec3dd1bdb2f6487885afc5c1e9424ff383b3d2a8e754ae8f6b611db523491aac1aba13c6c3168cb2e01ce1412e9bdf9eb9f61138e0a03dbe7111b80ea0154e071b1b4d78395a4f70112", 0xd8}, {&(0x7f0000001340)="aa81faccea9a08bc0d126055075c6c95214fbe458d8395eceb3add0934e706a61088752436bd3734c7d78d51", 0x2c}, {&(0x7f0000001380)="98a60ec115366dab888aff84", 0xc}, {&(0x7f00000013c0)="e01382600ebce19dc8eef7e91eec9e1b04c19e7dd8cf407ada8ee747c21ae3d28bdd4eb473a6c176b114ca6141f21e2ae769591791a2415554b75ca15257c85da38e5893bb25cdc8aa7dcd50604019c9aa2d236e36bc097512e9e4c9e10e544513565b95c1de9ee31c62503e5a21165308cdca9bf80b1f4cc24278b14182fc554b935b00ec1a440021d6364f98891c711736e6a42d860d900a8d0ce1e2d7748ce53d0846a904809529124920dbb773cf39b0c9593d87f7b27d3077e7711e0d0a039376e9042e7e5f543963a8e267b9d255e2f3fd72154640922ea8e914b1c8c143077a8fd898a9", 0xe7}, {&(0x7f00000014c0)="51f34deb13741373b468a57b8a2f6128c888f8afac6eeb0178cf8262b0ea06e7def327916c1cb37bd1b25574e0a2e88d32450841c2ecda3bdf41e39e1d17c1ebc87e65f01dd8ec8cc091a428ae54aef9959862dd402808ba629dc26991ddaddd1b", 0x61}], 0x9, &(0x7f0000001600)={0x100, 0x84, 0x2, "054e751af49e0c157295232721167a0396aeeadfc1ad00df7d7025893e63ddcec8f36f51cc5b8f20330c39803952234c708ce5e5829774af414d225892a96740f89ef416e0d38af78e14aca5fc26a3fa15ad17890942d280ea339c1036df1504988b5f3133b4ae818fe1633141dec35e9285e9a79b0c846644e0c316b287c70c9a3b839eeb313c6316f0ea06f335ae5270cf087890dfcac2a314779824518339e5c0f0ca1d214fba2886fd30ad5345dd9ebe6c2ba47009ca2c58ec5559403417876e9b8cd5f53a40f1495dfccb7e3f0ee95ff59f939b0f9e2e81fb8a9e877021b203ac25a58899d8237ffd1535b6db"}, 0x100, 0x4008000}, 0x4048050) 2m48.185284238s ago: executing program 3 (id=1267): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r3, 0x0, 0x2}, 0x18) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88fbb37b4fe035bbb095873048000000000000", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e34", 0xc3}, {&(0x7f0000000600)="1335c6f74e16e80f8acc0d4c2098e2686df2e5cc931c00f67fd3dac05a77dc7517d9c83a468fb1fe6e378f93a74ce7f0961829df24e14f95287f3513748a838f1c427c657f2d3bf44ed2e0bf47f1365d2c67281624acdea7b1f9e90de968c7fee5", 0x61}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x24008885) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x80, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r6, &(0x7f0000000180), 0x0}, 0x20) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)=r0}, 0x20) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r12, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r12, r13, 0x0, 0xffffffff000) (async) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x2, &(0x7f0000000300)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0x4}], &(0x7f00000003c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x3, 0x5, 0xac}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000480)=[{0x3, 0x3, 0x5, 0xc}, {0x2, 0x3, 0x0, 0x9}, {0x0, 0x5, 0x6, 0xc}, {0x4, 0x2, 0x6, 0x7}, {0x1, 0x5, 0x4, 0x9}, {0x1, 0x5, 0xc, 0xc}], 0x10, 0xcbb}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x2c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x1, 0x2, 0x6, 0x1, 0x9, 0x50, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x1, 0xf, 0x5, 0x0, 0x1, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x0, 0x9, 0x2, 0x6, 0x48, 0xc}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @exit, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x6, 0x2f, &(0x7f0000000240)=""/47, 0x3e66cc06fe9211ef, 0x0, '\x00', r11, 0x0, r13, 0x8, &(0x7f0000000280)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xb, 0x0, 0x10000}, 0x10, 0xea7b, r14}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 2m47.854768511s ago: executing program 3 (id=1269): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x3) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x4, 0x0, &(0x7f0000000000)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r4 = gettid() (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r4, r5, 0x0, 0x0, 0x0}, 0x30) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x3, '\x00', 0x0, 0x0, 0x0, 0x4000}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$int_in(r3, 0x5452, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) (async, rerun: 32) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32) socketpair(0xb, 0xa, 0x4d, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) connect$can_j1939(r7, &(0x7f00000004c0)={0x1d, r8, 0x0, {0x2}}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) (async) syz_emit_ethernet(0x40, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0xa, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, @local, {[@dstopts={0x2c}], '\a\x00'}}}}}, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async, rerun: 32) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async, rerun: 32) writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000a80)="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", 0xfa}, {&(0x7f0000000080)="81395a71ac7d7ade41ff88854b9dfc9caff2e0fdff43970c8084c7d48aabb757f92d529505bc4dcee1f7", 0x2a}, {&(0x7f0000000bc0)="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", 0xfc0}, {&(0x7f0000000700)="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", 0xfa}, {&(0x7f0000000800)="68478a24b511243fe4d472f07294751f6f4edba1ef7d0231a2c820542a09e0ca9dbed5f70fce3831a963f3d5edc0643cfaf72a3e", 0x34}, {&(0x7f0000001bc0)="685fa713c3dcf286cf9083c75ddb9392a1ad47112855aa1c879bea9592c046266ec15b40b75e89754eb7eb07222fc1bde10f2c272e1025d95204460330227b4e7cf13db6cca3fae48845a00c97be343530e1f6099881108f7b13e45490d7e89a66d18ae18dee95b35549182f0d3036f692d414cdd0b1750a5dcc7798db8e8c4a66ed37406a8b617e8938f6c5dd36f84217f3ed3f03d45360cd0511be18b1b97861733f21e69e7d697147a7456b7c2395914f7bee1ff6f60dc62c99c430e191a86e4197317a312906437406ca0e66d098584d9c7b7f3e560e0353c8ea0b4a207e660a852a31dd16f8e0935dbad73a599cfdac93cbf11f12bac6273a3075c4b8131dc22d36e7911b5e2d3fb07c653b8e4bcdf041360964955ea54520d542033515d6a6e52203515dbe1467961e0e5d27f0fc3eaa96daa1c2faa80c094de258c365c1f8e1c1cb689bf1f3330d49e328d6b42870e7379c78f21944337e5b61fb1114e01167f8ece021d320cc8081b6f958645535d87fa0b589fab6a9f40915b841ac200f846f1e7cc9c406d3502f9353c5a11104852272512adb7651d727e3ef90ce8bd53b0cb60d84f1fdfdda142aa49f17d8ee87870ffdc80381a844cc5e1cfeec00b3acf57c05a233f918f69dead8e9a6f8e0d8d75f8e32695009917831f3fba5563fa74579da3b7db34333e7f5e5a154b259a1a7d3ad5bc30c5c1dd25b72f2efabf00efe2d3d1217210ae9744b302938af927d5833031fb2fbf5704ae2a8d559d14eaf4b905980c9c7edd0448a542875faaa19d59498c77c2e6242370d8b605992c55effc0e3828c9867e2005db191f50e25ebb6ae8ccdd8ecea5e4be1cdb23e14d084ab148efec1a9c7fadb37f48eb2c127228f4e96fda96f0a621341fd1fc726b17690de292bd8b1a1b01739d67623bc4d36b38044561cc94dd680510fa241934fba52c56c35b220175d6ee51724c0af81dfd38dc79dff05e1526aeb123f06e962d01475a5b01d4c9ad852fd941291c115807da6f10fffff71b0d22c762350942f204363c00dbba147cf6fae2a361299447faa19cd3a0882c4024b98af5d03c8f17a87455017cd0ab3a1884e7f07843f26df2ef4244ad843bace1a55ddd9977947c3f7895c0a632601c07eb0b3402ea76eca2f89e667831c90d7dc8eaad38f807fd54ab3aa90a7108b1d1a7266285e062691501ed39e48b3d29857c416c4aeb73c5bd248caebfb189c66c3876f197f2f55068e10a9eca407c99d3ddf6c096458a64926e0ab5411100529707069ed1c05d0475032a024d4e4bbef936ffd3c371b9e0f021c1b354a50d697b9a928c4cbb27a8756cab7857ae69e72be69f62c04d21779cbb4af9abdcc866309634477943cc2e170caff9f67c741a4ed0a3f4133a045859ff970b616d350a04326f1183554195193948e9b840d786eb35e3ef8c1e8d45035b89dbe37065cd92cf038c736f14f788a850d5399764e80ffa44d6b0838eb1b5b33975844f13a58b8f33f84d178521f2286bcc65b6db879f172ab58976e4eb44409c4631ac64f77ccc130ff85e82127a8f80e6e9c032d5e798c6556d34e1424be8d31eabf539d47e388ee4e744135958fd6677ce6f088e6496c5dc9ebcedea096e79073b391d80e289207e1040f717cddbea7288274533c37fcd1c380e263d00834b52dbc3cc7bb4d4400f24a5c0755be8ee9f42134ae2278875b67d89b36269be5c8792f42e07aaab3f8a9ed2cf5a6c862b15809c82e99a406830b9d45b253bf9af5d751097858dec38162fe81d6f905e3508c7f63aad1f253c832ab840f6b16ffca41bb9b6ae654cb83ffa843c7a8defd559dc31958c6c43e2f3fb098c163ee2f362ba0344ea17d94b7de2c1db868c24d439657b5a10c842f168f1801999582e3947767a23d27281ba8bef1dbedf9cd1143cde5dfc99b107c1f33c77663a96cf810dc7850a5b5acf894e996fa2e4219e2d80a2e7a21b89cc16286c7bb042d1febe1cba3e8b00797fcad8c705a990d2a7d4e13904368b49cd265966184e4bc2f884e4f380e926eaf9e242fc9a773b4eedbd2fde08fd41f806309afaa87b8d99d897ae40cbe9b72aae7a1db962da1c43644d16c80f8df1e5916bc5c0294751b8773b7c3690ef19f0a0ef4a0106e8c028560bfcabb0df90bc8dbffb87e9c90d91520189bdd56fa647a1b1793e5260b6536ce8445275a0e29504bf788d1bfbd935d8d971369497c612a08b6c47b737a322dedcf9ef2e2d93babbdd6eb7f72a258623303596aa856e53275474be432522c2a107e1885e011f08667146aa6c52c23b16bd07bd442b8f58c4943552517efed2e794ca952c7d1a55afa639c2182158a76b03a1cfb68d2daabdb4533ff1ada27b4dbb23c385c61a27a425444fabe0edd17eee169dae0bb3576cdd2ea7e82ab8cb43ef6eb53666c0bfb14f4f77eddcc31411fc592507ed6b7a76fb17ef0df1c48b0050660d495a4e5de08b08caa75ce38acc6b885fe590707b160f8c16b741053d92f9b3a37bd4b289bdbd17482743e95363a8d7c0683c94650c8ce4a1585f14f67fe153acf8b7873ebd582f02e1b4ca64bff47b38708d4b8dc48f4e5b4c76685f50fe5a1dc98e32168ad13530a2ec63acd23c421a76a3bb7ff2d1fd46c556ba73bb3c083bd14794838fba8f3d0f39d692bf5513ab4efc765bb0a67bcad6e6e0a20070894942c087d34bc89f4eee77ade1d65a5eddda1684f3912d990b9daebd8d7b94792d29c745709c26b5d3598af5d0b48531ade75848abe22014520e8b7dbef5bbcc648a37cccb196009a61e12c1785c41a6f3cf81b19038ffe8bf1ac20e6141a29f40c723673790af57939f40d3c3491d0a948859c3be18b9420e64382f8b5fbd948c9660ea3da16f75945503040dc287ed448c92bfbc7bf0a9a1cf6282c7009386e0cdaa249a95a7778d1ce5f8ed8e2e321f86bfe235a8db0191dd0e082eb1c6cc7ac67262dcf99a5f7792ae2edf8acd24fb0cd37ed2f5c4e24c197314b9a8dee802ea0760392ffe59e71fd2e81c8544e9dd9b878f364508f8d19db59d437b03a7895c21918b0b393397b6a02cb97b81a72de108e3285ea810467681aa8cbec0397d0b6dd140c10fd58025c324e0bdb13b23a2882a7cc510e4f9087c4da6d8a60d8faef660af1d28ca80b4c0c6946c0d6900901990815f4eb25b150cf5a91d26e6d360d9d7613662b1f0d073697964e37255cdf4ce14fbe3df493141cc117e6ce0905aa27177e36cf8fdff5209ae79664b428859c8471ac0175dcf1dde57ed314d13ab4d4260fbbb78878e8286a4c369b89ece3924ab95bd86858ee160f94de43b8b79d51dc2b0b195a8eec088d49a3a26a21b36ed78ec75a116b8a7dbc1d94e60a0cfcf6d2c801d1d098ff2c6786270af403f7e6c6cc6049fb23624c9680dd8e1e29522b64c9e640bea96682a4d37e64c181697bf561a5984700e1eff8db7d5af60bc132f7e0993d8b332da2e7cc900eaa010b6ddc412be469ae6e036e01cb5ed0c6b371bba37544de422df1f0cfbfc514c8c2542115598e3a177a562d704f546bbd117ecdc59ee8da0d2c2fecbf36c04c0e9f5cd788ecf7e5faf8e00e50dee009c1d13656a3ba1c728d437128096b00ac7e8935e639807cf07897d010f5a35dad57a4514d1a71466357080862aa984250ca56cdd8b50d47a93499ce3c84762aa8fc23560b54afd4115d652a4aa164878b3d54d93367c02c009e11e5bd8823eb6cd12f5749ee8520a0619cca59e59c692fd437f7bd92d29cedc7c02c9c71bf9616cfa541902044d91bca82f1247963ff878a277586f179ff5e8e8ae96dc13f461128a7974a8e069c1272e2cfe8a4adcc0ac442af62532ebdff2264793d75ba103c4b770f00db27c95667dcefccc2506837893ea7d50b33025eb99b0229a109385ad7e1da05d5a8920aa41946ede58bc2337c4b4404b846a34f4227d4fad9c2ce9002ecb468e78545f9412d46ebe964901b32447902a8b209acfa521ddfb26944fb9ce49426b8c628883c840017d0cb3466aef0ad66420697f8b426639a351906795d67cce13ee12d54b16b30658abb9b86874904a6ca92a36826792642316f6d8d36656b5869374f0cf5bfabcd54ecd714f16db4c9f5effbfd913e81492cf96ea3e3a95e07794a5b14d6ef2a79d20c4982f961effaebf8ac310ae1928602bc1cb725db03a1920bd48e4b9717321063a967c5977f2512e917089def9fed7c8bb8d806bb15776324ff55ff4fcc00657fae1434323edc612523edb9b37370aa516f928ab5a370bc4cf1abc53b3fd5a806cbb9c352d73bab6df092ec9411216b3f82cdf5ae43259ef6d2d77de50fa08ae76dcf9c70c8f594cceff368459b48b7473457cea3ff1c78ed904bdaec43ec9f777e0cbdf006aa8047013f0292b170672536f1772dbe73052ae0a524e31323d1f6651519b93e55ce35c7274d917a81446bc55d57bda0a860e70531ab97a12fae311cec176b4ba5d8e627c7a3c6cfa071b1992fb942bbcf3b3c5252069aa12ce26f4938fab1811414c0f390ada52baff0fdb545a5506d44a9c00a0997352c34ea8a485a0bfe0e6b61bf0b729f31559f55fccf7a971de06eaa338a79a468488489e6ba8c10fe79a84aff11c6162ceb3dbffb957eba75c25e203a41ed70abd8edd3aad8fab9003c94eabcab8036aea90114ee18f3615b9d664247806275bc7cb6cf374a4610a41096545bf5f53bf623845b9b24b947ab71a41d5d2256d058115d99207fbe9675790b4f7a4b4ae7dd15e5f6d7d155ee98f6dc521251a559498097fc2959b23dbc3276baa97a23ccf9ddece69f866801cd2126da132f0955937d63e5d486f7a1d1c0485a6994ff83c8765499f22cb8d1ac92046b016f634ca3dea06ba517481f66a9fdd6d33506796935d745e8e8a7a0c793bff64215a5fbde0ab66b8b833c8eaaf638d64d283083bd785da458187ec0765778a2b1cb01324afea98b2c11c0e84be6d65ea6301cb825b1757df7899e356e05f3f2a514e8b641a5be4a087e8fdfaa70ae57cd6c4bcf0231daa9f061fed6bda1cf9fbe4af6174de0ba64be56dd8be180af4f594f1d5214a9f94287105102261b74ba53b1f44407f788030ab058eb8588d2c9404bdb0a44c8bcae09b2097439e635574126118627b2bdebc19195a8c5d4a14943a53d3a6a6aebd77ef74e6180e1d06c8c80f809db9a68d4536f23d8cac2b5f2ca07984ef0dc34ab1a2c549ba1ee3835ebb56fecc6b516cb17ffeaa9d856124b6c4172f6fe1445c5a2968f76dedaae28b67859ea8c8c07cdaafe0260de1c62f5bd6a6236765f4f2130e9dbf92e535720db7ed3c725ed268ec04430e90c1b305fc9796fc801ea6f5b255bca03a31b2112b1f837b65a5193e5c7308450b6831ab4e635c28de1f095bbff4e24e04dee1a6e61d70480fb371b65f14a6cfce428038eab31e9276dec35b73439edfb6b4f2be3dad3f4859b9932dffc13204f7ccf6673cc1ac8212f45b68499886aceaee4a80d0a2ebb86e2319c6687036c0ab0cdd0f203c15cbf2f28c7ac03b4f3f0452b16e9caa61bf9b621392321c508f27216352c6281bcef2c60f504f80cb7cf4a6edf131421d7f0604e75542ad8c2ca15ac3eb381359c4c02ababed9c6ced829fb4a9259d129bbb7795116f1f55d34ca8559458a3da4453c77972a65412ffcf8205f77625c6bff6", 0xfc0}, {&(0x7f0000000840)="213f3bddced785c46796925ac1f958db747e6f0be2545dcab459ad633326177861c8f52139e141add113f68b193710162a699b488f546fc10b88b5d009c6ee90bf022967143e5c3b767a56fdbeb7bdda8cc785d929ab7f6d8e3cf9", 0x5b}, {&(0x7f00000008c0)="e98d8502e13fd471f57b7039e7f82fa3b063c03372c82e0ee6d189de57c5c3e6b464ffb450f83d571d38205ef02b1bb81dfd7e07344dfbb04b037fd992bcc3ffbf976d7f3115b25741feeccbdb4c0625636c8f666db6532d79c121d99be320ed304dc61677ebca9138f7c27dbd15afd2e8845f50fbc32c9bf2ad997624c7c95255459e18a522ee338e5cf4734024c327ec67f8ab02e4590b5bc9a86da1a2ff", 0x9f}], 0x8) (async) close(r0) syz_emit_ethernet(0x86, &(0x7f0000000340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @mcast2, @private2, [@dstopts={0x80, 0x1, '\x00', [@ra={0x5, 0x3a}, @ra={0x5, 0x2, 0xff}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) 2m47.358291475s ago: executing program 3 (id=1276): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x80000) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) (async, rerun: 64) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) (rerun: 64) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@remote, @netrom, @default, @remote, @null, @default]}, &(0x7f0000000000)=0x48, 0x80000) getsockname$netrom(r3, &(0x7f0000000180)={{0x3, @bcast}, [@default, @bcast, @default, @null, @netrom, @default, @remote, @default]}, &(0x7f0000000200)=0x48) 2m47.116573886s ago: executing program 32 (id=1276): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x80000) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) (async, rerun: 64) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) (rerun: 64) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@remote, @netrom, @default, @remote, @null, @default]}, &(0x7f0000000000)=0x48, 0x80000) getsockname$netrom(r3, &(0x7f0000000180)={{0x3, @bcast}, [@default, @bcast, @default, @null, @netrom, @default, @remote, @default]}, &(0x7f0000000200)=0x48) 6.064483535s ago: executing program 1 (id=2929): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000906010100000000000000000737b96f783fef14f400020073797a32000000000500010007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x488c4}, 0x800) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8050) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a7511ff}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000130000040000000000000000fe880000000000000000000000000001200100000000000000000000000000004e240000000000010a00402087000000ae44e6163a6f81ef50623434e0d9d51a5ab1652d9a30b8636b207643af4f5a4d11180a111adc9488d4cd19d17a41f8be518364a6c9e288be86c0f351ff16e097b74c98f663e494f6e3cbb7c1bebde541570bdb02a5d8d608071b2ccfab71604957e43feacdbd7e64c03e160941a95dad92a961aafb8a6cc3547ef551e5d698ac6d293f713f2d13cd11d030410999f73617c85b8a6d2542b597b3", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000007f00000000000000000000000000000000000000000000000000000000000000000000000000000080670000000000000000000000000000070000000000000000020000000000000000000000000000010000000000000005000000000100000000000200000000"], 0xb8}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x28011, r7, 0x9833b000) mmap(&(0x7f000095b000/0x4000)=nil, 0x4000, 0x2000009, 0x25813, r7, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0xffffe000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f00000006c0)={&(0x7f0000000300), 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="c8000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r4, @ANYBLOB="050002008000000014000400fc00000000000000000000000000000108000700", @ANYRESDEC=r0, @ANYRES64=r1], 0xc8}, 0x1, 0x0, 0x0, 0x4c804}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r10, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040804) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)=""/105, 0xed, 0x69, 0x0, 0x81, 0x10000, @value=r8}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r11, @ANYBLOB="0000000002000000b705000008000000850000"], &(0x7f0000000500)='GPL\x00', 0x8, 0x1003, &(0x7f0000001700)=""/4099, 0x40f00, 0x0, '\x00', 0x0, 0x0, r12}, 0x94) 5.866069788s ago: executing program 1 (id=2932): socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080003"], 0x44}}, 0x2000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xd, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x7, '\x00', r5, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) 5.552865484s ago: executing program 1 (id=2934): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x20}}, 0x4000000) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x1, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) 4.247475737s ago: executing program 1 (id=2948): r0 = socket(0x1, 0x1, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0xa, 0x5, 0x0, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8000, 0x2, 0x8}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0xc688, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34f0a87871305eb2}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000100000300000020000000", @ANYRES32, @ANYBLOB="6c0adb1a00000000010000000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRES32=r5, @ANYBLOB="6a7d2c6e95f1212d207cdfe8d98209aaab5d2f5dffb1639f37c3177b7407a80d648663f71e3aa32aba95d0542ae31b8e307a"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r6}, 0x18) sendto$inet6(r4, &(0x7f00000003c0)="44f576f604fea363034d82dbdc378f", 0xf, 0x0, &(0x7f0000000400)={0xa, 0x4e20, 0x7e, @private0, 0x7}, 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000440)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x32, r3, 0x739ef000) connect$inet6(r4, 0x0, 0xffffffffffffff69) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797ac15272de00000000000000000005000200fc00000008000900ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44851}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.177815851s ago: executing program 2 (id=2951): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="d2ff0308000000f8000000f086ddae2fecf80c9ba2717a3a835f9595dd5207970815f1984a815ecf9348993f73148c4c8f9b30322886", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x14}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) 4.051671104s ago: executing program 5 (id=2952): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/210, 0xd2}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = accept(r0, 0x0, &(0x7f00000001c0)) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x80, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) ppoll(&(0x7f00000010c0)=[{0xffffffffffffffff, 0x2000}, {r6, 0xf54a}], 0x2, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x82000800}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000308020400000000000000000700000406000240600500006addfcf60216894010b36c39ac201630faf74b29e8aa2c82324a"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000020000000000000000000001000000a022684ce37027d60000000000"], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYRES64=r4], 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001000010841000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e20020000003eab6dce41b4f17b1b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) 4.011358499s ago: executing program 2 (id=2953): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r0) poll(&(0x7f0000000000), 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) unshare(0x6a040000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x2a}, {0x0}], 0x2, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}, 0x20000810) listen(r3, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) close(0x4) 3.504890949s ago: executing program 2 (id=2957): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300), &(0x7f0000000380)=0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x300000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x10, 0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000005c0), &(0x7f0000000600)=0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0x0, r5, 0x80000000, r3}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=""/29, 0x1d}, 0xffff7fff}], 0x1, 0x20102, 0x0) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)={0x264, 0x1f, 0x20, 0x0, 0x0, "", [@nested={0x251, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="9a8aa489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @nested={0x157, 0x118, 0x0, 0x1, [@nested={0xcb, 0x9b, 0x0, 0x1, [@nested={0x4, 0x119}, @generic="1ebbc4f557542222aaf758b63bdf9dee97b5bbc858ec9146a302b126a19b34ccd08c1ff5754c747997e9ceb900a96e77087bbcf38d014010d8a6653146239086a2d464ebda82e8e183cfcadaee5be70d4f86b4ef079226b2f3d64ff67f25ff84f2ea1021aba4adc935a4aaaf310936b8aaac7726f5571a8f49bbb93774ba58c0d68e528c59c0618c22f9db95cd77491e319f32001b547a647148c29d35365325e51e374a66640f9681ddb0fed6ae96872dee2d41fc82dcc74c915ed6b9243d3501a16d"]}, @generic="c9f8052978b8ad2478e61c48021abe9a6612773a260299826d88acf7beb767c5dac3d5b61657c26ead686b8403dbaf597bcc662250278ae6c29fa31dd97015beaf0340ae6add560e", @nested={0x4, 0x83}, @generic="69bbaef03120941bb07d3e114c10", @generic="c69465778c9bf802f9185e0e51444d157b0c43801f5ca51be4ad5e3ad93671f5f08a100524f8916200df94e25c"]}]}]}, 0x264}], 0x1}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)}, 0x4088040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001408000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023"], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 3.349109693s ago: executing program 1 (id=2960): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x14, r1, 0x1, 0xfffffd, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x80) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xfff, 0xfff3, 0x60, 0xfffffffc, 0x3}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e21, 0x5, @mcast2, 0x5}}}, &(0x7f0000000080)=0x84) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e21, 0x5, @mcast2, 0x5}}}, &(0x7f0000000080)=0x84) 3.100212319s ago: executing program 0 (id=2962): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x8, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000000c0)={r10, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x401581, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x2, 0x20000000, 0xf, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f0000000280)={&(0x7f0000000380)=@isdn={0x22, 0xb6, 0x5, 0x80, 0x3}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="2764b2d060fb2f8dded9a32dd79d630a9db83a8ebfe4696e61681d7da30eb2effe912268278764e7a0dbdb68a10d43fc63bb05a186e53391d65310cbddf3eea7b21426571c490eaa1fa8e51cd2ed63f7745caad74e00497d293026b134ed306c828e01", 0x63}, {&(0x7f00000008c0)="de4d8d247a4c1bc1b9a832e6911ecaaa2c2da9bc5d692d2123c1f6bd96c93aaa90fe9d71245628b37b4e42457d9f92bef58b7eec59a0a5a080ea645c655f4dffceeb113b1aa144c086c5efe70f5525366e3dc682e821d2dd28a01839b3", 0x5d}, {&(0x7f0000000940)="38d14b8caee0544d5bf1360ab57966401358c072ea1390ed81e391c62ee7214bde1e393dca9a16ae3954b52b355282b7142ece9db2cfd86f9360f1e17137a442de491783598ff37fec2f3ab318f3aafe082d85736a20c9786d352a6d3733e6db8684", 0x62}, {&(0x7f00000009c0)="7c3af1895d3ff806f554980a66d5096bf5076dbed585292cab57d3c022ac8582ca57d077e08bba8dd3b06fd6db05cb1ad707b4189d4c5c3300530d8f7ab962ab8350f8e8ad38c71d61c72e6ee3b0e146fbb3e602e4dac338ffb0d328b6b45a40a1ce036aa934654e5ae5b2a3e8fadc5af813d62972a47cfffc425da364cdb5cc2689329559777702e09a10f5dfb4537d41de6607c8e6c330a9f068c69876eab19841bae9004f80b366ba7a2894e58d525cc6b3a3b9225165582d5c72ebdb8031416d7d68054f79fc4c6671ab1a82", 0xce}], 0x4}, 0x4810) socket$nl_netfilter(0x10, 0x3, 0xc) 3.099729322s ago: executing program 1 (id=2963): socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601ed00000000000000000a0000040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000340), &(0x7f00000002c0)=@tcp6=r6}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) 3.097737926s ago: executing program 5 (id=2964): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) unshare(0x28000600) (async, rerun: 32) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x44, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @remote}}, 0xc5, 0xd662}, &(0x7f00000000c0)=0x90) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) connect$inet(r0, 0x0, 0x0) (async, rerun: 64) r3 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000008511000000000000000000000000000000000000000000146114a55d1f8d3029bb719ba7381a3e739ef8c0c0e02d520e944fc6055abc16586fc8e06d39af4450f6060c6707c47a572beda420b7271870c2af71c9844815775ad7c77ef151fc71c2fcad24fa9b8cf8910fb415f1243b8ee5eaf134b921d6d9208b960c8646a752f6e2bc8ee03e32ea5253cbf6237bd6061020d440ce78d244dbd0ea4613f7253dfb3ec636c77b19735b3609d2729d8380ffa5cb8d4e607702c9c2a7d5273afccec230d136431011f8e9c469dc9e42b43cd12d040df7085387f05134e64dd85fa79e30e68633718e38f99db1c220b76510c5c6f1141120e5f6d277ff7a4686856a373c2311c2b27753882f5fc0d8c0e936f74c482aab20d64826a8168a52943fa1231b77143b9b0037469f347ec5a8"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r9, &(0x7f0000000440)}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r10}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2cff7f0000d8849507533e593aa281df6b0b46000000000f00000000000003e4000000000000002e00000800"], 0x2c}}, 0x4000054) 3.074938189s ago: executing program 2 (id=2965): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1a, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @generic={0x7, 0x5, 0x4, 0x3, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8001}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x42}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0xcf, &(0x7f0000000140)=""/207, 0x41000, 0xa8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x10, 0x3c6b326c, 0xfd}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{0x3, 0x4, 0x1, 0x2}, {0x2, 0x1, 0xa, 0x1}, {0x4, 0x4, 0xe, 0x9}], 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pS \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r0, r1}, 0xc) socket$nl_route(0x10, 0x3, 0x0) 2.978548156s ago: executing program 2 (id=2966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xcc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 2.895759025s ago: executing program 5 (id=2968): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003500093300000000fcdbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0900000008000000dd000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES8=0x0, @ANYBLOB="6106727491b7b2cf36f1a9a672aec5aa4ab8e9c79297aee3a822837b66900aab7d7631752be01b8b04", @ANYRESHEX=r2, @ANYRES64=r0, @ANYBLOB="ff2c8bd7d5be08adfe2189283fda4f1fb5f46ce7e10b88634e32719c07523b239b27d420bf9b5676085bbff2cdc60d78abefac21ac863dcde68e5b47909856bb6f2a017fca51d41a82d03a7f7b8032c8ce2fd08fd3bd5e990575ab6b8bb667055d4ccfcdff5ca6cd57c62250a234b036f90e05ee8795c57226e60b0ecd3d76435389b825ce44ee4043a2f5d922159ce6a29fea1e11dc57919d55f98cdd1663", @ANYRESDEC=r1], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRESHEX=r6, @ANYBLOB="01f50500c015200000300012800b0001006765800500040000ebffffff00"/39], 0x50}, 0x1, 0x0, 0x0, 0x20004055}, 0x20000084) sendmmsg$inet(r10, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) socket$packet(0x11, 0x2, 0x300) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8080) bind$bt_hci(r14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000071123100000000009500", @ANYRESHEX=r9, @ANYRESHEX=r7], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13, 0x24}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000280)=[@window={0x3, 0xe}, @window={0x3, 0x7, 0x1}, @sack_perm, @timestamp, @mss={0x2, 0x4}, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0x3}], 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 2.70045869s ago: executing program 2 (id=2969): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x40000000015, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x60a6c0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x37}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r3], 0x18}}, 0x2080) 2.193226965s ago: executing program 4 (id=2973): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000180)='syzkaller\x00', 0x401, 0x79, &(0x7f0000000200)=""/121, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xd, 0x7fffffff, 0x2626c531}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x5, 0x3, 0xd, 0x5}, {0x3, 0x3, 0xf, 0x8}, {0x3, 0x5, 0xa, 0xb}], 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='mr_dereg\x00', r0, 0x0, 0x550}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in=@rand_addr=0xffffffff, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x671}, {0x800, 0x0, 0x4}, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}}, 0xc5) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000080)="cebcdbb0aedacc282a331e9b03e4f15d0a3f8e6c72fcca8e74cd19dfc05754ce3666f218b7ac36ef2f26cb3e3ff5d335c7c47ce546a896437efabb061e3196f9992b3e26fbb9c570a0fb61a1bc0075d307a8d8ac497657cd3f547037f5815a41686ecd30f394a286e422e28c5e52ead2345fc736ccaf306cba7cb5df2829a1b9313e72a42b858968f96b55bbb080822d6f3c05508d98a8e7c65e870a2ef2787c5e46827a1ada6722", &(0x7f0000000140)=@udp6=r1, 0x4}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000004c0)=0x2) 2.055262627s ago: executing program 4 (id=2974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) close(0x3) r2 = socket$kcm(0x2, 0xa, 0x2) unshare(0x8040600) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000000)=0x7f, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x5f]}}, 0x0, 0x27}, 0x28) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000002bbbbbbbbbbaaaaaaaaaaba0800451c001c006520000132"], 0x2e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001801400019d080000020c0002800500010000000000240002800c00028005004d72cf5d00001400018008000100ac1e000108000200e000000208000724000000000c0005800800010052415300db224f0b07f8b389a3155d00"/123], 0x70}}, 0x0) 1.915784527s ago: executing program 0 (id=2975): syz_emit_ethernet(0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004503005e00000000002f907800000000e0000001248022eb000000000000000078e5780008000000000086dd080088be00000000100000000100000000000000080022eb00000000551cd90a4a7820000051c6fc874075ba2d0b949bf89c4bf800020000000000000000400000080065580000"], 0x0) unshare(0x24020400) r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000280)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x5f501}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) 1.665901026s ago: executing program 0 (id=2976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x1, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) socket$inet(0x2, 0x2, 0x1) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendto$packet(r1, &(0x7f0000000280)="656686a9bfe67e65807f33d2d8384b8166d9919263a915e215d4", 0x1a, 0x1, &(0x7f0000000300)={0x11, 0x11, r7, 0x1, 0xed, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x77f, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000480)=[{r3, 0x2799}], 0x1, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=@ipv6_newrule={0x38, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80}, [@FRA_DST={0x14, 0x1, @private0}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x7}]}, 0x38}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) splice(r1, &(0x7f0000000340)=0xc, r2, &(0x7f0000000380)=0x3, 0x2, 0x4) accept4(r0, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000180)=0x80, 0x800) 1.466799656s ago: executing program 4 (id=2977): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r1, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x401, 0xc32}, 0xc) r2 = socket$inet6(0xa, 0x1, 0x2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r1, 0x9e4, 0x1000, 0xfce0, 0x6a8, 0xa}, &(0x7f0000000140)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_newaddrlabel={0x44, 0x48, 0x10, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x8, 0x0, r5, 0x4}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x8080) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r6) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10010040}, 0x20000014) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1bb080, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000580)={'pimreg\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = epoll_create1(0x80000) r10 = getuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x4e22, 0x8000, 0x4e24, 0x7f, 0x2, 0x20, 0x20, 0x7f, r5, r10}, {0x23, 0x7e, 0x7ff, 0x100, 0x9, 0x5, 0x6, 0xfff}, {0x6d, 0x8001, 0x0, 0x1000}, 0x8, 0x6e6bb6, 0x2, 0x0, 0x2, 0x3}, {{@in=@broadcast, 0x4d3, 0x2b}, 0xa, @in=@private=0xa010102, 0x3506, 0x4, 0x0, 0x9, 0xeb8a, 0xfffffffa, 0x100}}, 0xe8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r11, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xf3aa0911f6b82438}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xec, 0xb, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x42}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x200}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xf7}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x80000001}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xec}, 0x1, 0x0, 0x0, 0x810}, 0xc92aa242c1ebecf4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000880)={0x8001, 0x2, 0xa, 0x8, 0x1, 0x4, 0xc, 0x0, r3}, &(0x7f00000008c0)=0x20) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b40)='blkio.throttle.io_serviced\x00', 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001b80)={0x0}, &(0x7f0000001bc0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001c00)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private1}}, &(0x7f0000001d00)=0xe8) r15 = getgid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001d40)=0x0) r17 = getgid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001d80)=0x0) r19 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000000900)=@kern={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000001b00)=[{&(0x7f0000000940)={0x118c, 0x25, 0x2, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x1004, 0x12d, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x7b, 0x0, 0x0, @u32=0x8}, @generic="133cfd3330bf1ec28caf67f5614b34d56ab7ee32e7034fbae7fa8d1d7a43515f4dde892d11c79af0ee5f41982621561ff9b93ad6ba1714fa3b41b9e8726c11aa408a8ce27895f56c87d283ca87812ec9f8c1e14876200545895777c9d2460a152f16948f8b24648889c944737096d278a8028b8f4b15ffaffc45d46aebba3f47e9c58a6c2a", @generic="daa53be1d75a27727aa665d8fae52306b7229b92743a2d29c03d095fe1cb88d93bdc8cdf534a60155a0c9ae017fab7ed8db7681b8c5623b3aa8fe48bd547c628b9df464820e784c14aaa0e0dcef338d7fa1bbf49677be2e184e980b98f2cbc2216eab85e205ee34fce7a1ca5e092112c9852adadead6598e20d04d9359ac974fc07f283f303314ee8cc4bf9cba7bfb1adea97817a811f642e6fb41062ea391c42415ca191edfe4d237f852caa9938449b04960fc5cd494f99adb09242550ac1613692398cc6c183e3c522471ef5d74236f384550ae6d4e903e10f1602d86530da7de25f9fa089a0fc461bc"]}, 0x118c}], 0x1, &(0x7f0000001e80)=[@rights={{0x2c, 0x1, 0x1, [r9, r12, r9, r8, r11, r2, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r11, r0, r0, r11, r0, r8, r2, r11, r2]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r10, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r10, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r19, r0, r4, r9, r2, r8, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10}}}], 0x118, 0x8180}, 0x0) 1.080686274s ago: executing program 4 (id=2978): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r1, 0x0, 0x3}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="005b6e4ab3875028348704eef6000800f495a115570b59d300", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.071153763s ago: executing program 4 (id=2979): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a000008001500", @ANYRES32=0x0, @ANYBLOB="e5215128", @ANYRES32, @ANYBLOB="04000280"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000005000100070000000900020073797a30000000001400078008001240fffffffe080013000000ffff050004000000000010000300686173683a69702c6d616300050005000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x9, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7800, 0xffffff81, 0x5f3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'gre0\x00', r3, 0x0, 0x40, 0x0, 0x0, {{0xf, 0x4, 0x1, 0x5, 0x3c, 0x67, 0x0, 0x6, 0x0, 0x0, @local, @private=0xa010102, {[@rr={0x7, 0x3, 0xa7}, @timestamp_prespec={0x44, 0x24, 0x95, 0x3, 0x2, [{@multicast1, 0x8}, {@empty, 0xffffff01}, {@rand_addr=0x64010102}, {@broadcast, 0x2}]}]}}}}}) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4054}, 0x4048008) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='>\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022ebd7000fedbdf250100000008000600", @ANYRES32=r3, @ANYBLOB="05002f000000000005002a0001000000050030000100000008000600", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x4080) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private2, @in=@empty}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000440)=0xe8) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000480)={0x565, 0x8, 0x979}, 0xc) 942.968453ms ago: executing program 5 (id=2980): socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d3"}]}], {0x14}}, 0x70}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080003"], 0x44}}, 0x2000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xd, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x7, '\x00', r5, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) 702.151658ms ago: executing program 5 (id=2981): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x4f) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r6 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r6}, 0x20) r7 = accept4(r4, &(0x7f0000000000)=@in={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80000) r8 = accept4$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x80800) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) write(r4, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) getsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000300)=0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="ac0028bd7000ffdbdf251b000000080001004d000000"], 0x1c}, 0x1, 0x0, 0x0, 0x88}, 0x4004) 643.803952ms ago: executing program 0 (id=2982): r0 = socket$inet6(0xa, 0x3, 0x3c) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000), 0x2, 0x0, 0x0, 0x900}}], 0x40000000000001f, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x6}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 602.073799ms ago: executing program 0 (id=2983): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES8=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d1e14d526622757933515a8722807f2fcbabf21167549477f61961075d3e25f906a12586166a282004cadf739bccc84406d6e1fbbea5d16563492a9dd0a19b62ca683ceb79804463431a815d2f50db18c511f1b80941f15d0e1cf6", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r2, @ANYRESHEX=r6, @ANYRES8=r3, @ANYRES16=r1, @ANYRES8=0x0, @ANYRES8, @ANYRES16=r6], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r7 = socket(0x1e, 0x805, 0x0) connect$tipc(r7, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, r11, 0x30d}, 0x14}}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r13, @ANYBLOB="1400020000090000000000000000000000000001d6422d5825d70897cf0886731f3b8bb8fe26aa21d84aba38b6a776e2a5827844b18ff7a653ef8bac501dd797cbfa5d762f1744199369002b48a9"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x4) r14 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000280)={0x9, 0x0, 0x3, 0x6}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000180)={r8, r8, 0x8, 0x0, 0x0, 0x82, 0x4b, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) 526.026774ms ago: executing program 5 (id=2984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f00000008c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24040040}, 0x44040) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) recvmmsg$unix(r1, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x1000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'erspan0\x00', r5, 0x8, 0x10, 0x8, 0x3, {{0xd, 0x4, 0x2, 0x10, 0x34, 0x65, 0x0, 0x2, 0x2f, 0x0, @remote, @empty, {[@noop, @generic={0x83, 0x8, "01bb2b699202"}, @timestamp_addr={0x44, 0x14, 0x7b, 0x1, 0x8, [{@multicast2, 0x9dc8}, {@empty, 0x63}]}]}}}}}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000080)) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r4) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r11, @ANYBLOB="020029bd7080fedbdf25090000001c000180080003000100000008000100", @ANYRES32=r6, @ANYBLOB="080003000300000080000180080003000200000014000200766574683100000000000000000000001400020070696d7265673100000000000000000014000200697036746e6c30000000000000000000140002007669a5c66600666a69304072745f77696669300000000000000800030002000000080003000200000014000200766c616e3000000000000000000000002000018008000300000000001400020064766d72703000"/177], 0xd0}, 0x1, 0x0, 0x0, 0x20004100}, 0x801) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r14 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r14, &(0x7f0000000340)={&(0x7f0000000380)={0xa, 0x4c21, 0x7, @loopback, 0x263f}, 0x1c, 0x0}, 0x810) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r12, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/90, 0x5a}, {&(0x7f0000000700)=""/120, 0x78}, {&(0x7f0000000800)=""/188, 0xbc}, {&(0x7f00000009c0)=""/76, 0x4c}], 0x7}, 0x5d}], 0x1, 0x10022, 0x0) 32.167391ms ago: executing program 0 (id=2985): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) (async, rerun: 32) unshare(0x400) (rerun: 32) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r1}, 0x18) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) 0s ago: executing program 4 (id=2986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) close(r1) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="c33c76bf8aff9fdde338dc15a7180200218be52d9e2c53340008000000850000001700"/45], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) kernel console output (not intermixed with test programs): ink_sendmsg+0x10/0x10 [ 509.399458][T11132] ? aa_sock_msg_perm+0xf1/0x1b0 [ 509.399481][T11132] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 509.399497][T11132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.399521][T11132] __sock_sendmsg+0x21c/0x270 [ 509.399549][T11132] ____sys_sendmsg+0x505/0x820 [ 509.399576][T11132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.399605][T11132] ? import_iovec+0x74/0xa0 [ 509.399629][T11132] ___sys_sendmsg+0x21f/0x2a0 [ 509.399653][T11132] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.399709][T11132] ? __fget_files+0x2a/0x420 [ 509.399728][T11132] ? __fget_files+0x3a0/0x420 [ 509.399758][T11132] __x64_sys_sendmsg+0x19b/0x260 [ 509.399782][T11132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.399809][T11132] ? __pfx_ksys_write+0x10/0x10 [ 509.399834][T11132] do_syscall_64+0xec/0xf80 [ 509.399854][T11132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.399870][T11132] ? trace_irq_disable+0x37/0x100 [ 509.399890][T11132] ? clear_bhb_loop+0x60/0xb0 [ 509.399910][T11132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.399926][T11132] RIP: 0033:0x7f614278f749 [ 509.399942][T11132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.399956][T11132] RSP: 002b:00007f61436f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.399974][T11132] RAX: ffffffffffffffda RBX: 00007f61429e5fa0 RCX: 00007f614278f749 [ 509.399987][T11132] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 509.399998][T11132] RBP: 00007f61436f2090 R08: 0000000000000000 R09: 0000000000000000 [ 509.400008][T11132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.400018][T11132] R13: 00007f61429e6038 R14: 00007f61429e5fa0 R15: 00007ffed42a6938 [ 509.400047][T11132] [ 509.660763][T11059] debugfs: 'hsr0' already exists in 'hsr' [ 509.666626][T11059] Cannot create hsr debugfs directory [ 509.706695][T11135] netlink: 'syz.2.1302': attribute type 33 has an invalid length. [ 509.826508][T11138] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 510.086397][T11059] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 510.228919][T11059] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 510.272197][T11059] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 510.292197][T11151] syzkaller1: entered promiscuous mode [ 510.297730][T11151] syzkaller1: entered allmulticast mode [ 510.315703][T11059] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 510.465525][T11059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.486719][T11059] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.499838][ T9938] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.507054][ T9938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.521366][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.528574][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.600255][ T9935] net_ratelimit: 15 callbacks suppressed [ 510.600275][ T9935] bond2: (slave macvlan2): failed to get link speed/duplex [ 510.702381][T11059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.720913][ T1091] bond2: (slave macvlan2): failed to get link speed/duplex [ 510.849440][ T3451] bond2: (slave macvlan2): failed to get link speed/duplex [ 510.900412][T11059] veth0_vlan: entered promiscuous mode [ 510.912974][T11059] veth1_vlan: entered promiscuous mode [ 510.942669][T11059] veth0_macvtap: entered promiscuous mode [ 510.953481][T11059] veth1_macvtap: entered promiscuous mode [ 510.971188][T11059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.986360][T11059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.993995][ T1091] bond2: (slave macvlan2): failed to get link speed/duplex [ 511.010714][ T9935] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.021655][ T9935] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.032478][ T9935] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.041910][ T9935] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.139825][ T3451] bond2: (slave macvlan2): failed to get link speed/duplex [ 511.311689][ T9935] bond2: (slave macvlan2): failed to get link speed/duplex [ 511.312245][T11186] __nla_validate_parse: 7 callbacks suppressed [ 511.312259][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'. [ 511.341355][ T6085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.363601][ T6085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.383909][T11186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1315'. [ 511.405400][ T5829] Bluetooth: hci4: command tx timeout [ 511.426693][T11186] netlink: 'syz.2.1315': attribute type 18 has an invalid length. [ 511.438177][T11189] netlink: 'syz.4.1313': attribute type 13 has an invalid length. [ 511.446259][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.470461][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.979604][T11204] bond0: (slave rose0): Releasing backup interface [ 512.004823][ T9938] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.019954][ T9938] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.028621][ T9938] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.041121][ T9938] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.075127][ T9938] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.117553][ T9938] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.140784][ T9938] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.161665][ T9938] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.251081][ T3451] bond2: (slave macvlan2): failed to get link speed/duplex [ 512.398413][ T1091] bond2: (slave macvlan2): failed to get link speed/duplex [ 512.425147][T11227] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20002 [ 512.454574][T11227] netlink: 'syz.1.1321': attribute type 1 has an invalid length. [ 512.730713][ T5091] bond2: (slave macvlan2): failed to get link speed/duplex [ 512.820281][T11237] SET target dimension over the limit! [ 512.864611][ T3451] bond2: (slave macvlan2): failed to get link speed/duplex [ 512.957579][T11240] bridge5: entered promiscuous mode [ 512.967086][T11240] bridge5: entered allmulticast mode [ 512.976933][T11240] team0: Port device bridge5 added [ 512.983740][T11245] netlink: 'syz.4.1326': attribute type 1 has an invalid length. [ 512.993542][T11240] bridge0: port 3(team0) entered blocking state [ 513.002225][T11240] bridge0: port 3(team0) entered disabled state [ 513.010360][T11240] team0: entered allmulticast mode [ 513.015918][T11240] team_slave_0: entered allmulticast mode [ 513.023730][T11240] team_slave_1: entered allmulticast mode [ 513.035431][T11240] team0: entered promiscuous mode [ 513.064250][T11240] team_slave_0: entered promiscuous mode [ 513.095612][T11240] team_slave_1: entered promiscuous mode [ 513.226218][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1328'. [ 513.237213][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1328'. [ 513.425311][T11264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1333'. [ 513.446021][T11264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1333'. [ 513.467214][T11266] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 513.482889][ T5829] Bluetooth: hci4: command tx timeout [ 513.520408][T11266] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 513.585064][T11272] tipc: Enabled bearer , priority 0 [ 513.636420][T11273] tipc: Resetting bearer [ 513.682393][T11272] syzkaller0: entered promiscuous mode [ 513.746582][T11272] tipc: Resetting bearer [ 513.773401][T11272] tipc: Disabling bearer [ 513.936660][T11283] trusted_key: syz.0.1339 sent an empty control message without MSG_MORE. [ 514.196205][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 514.763086][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1346'. [ 515.522705][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1354'. [ 515.559862][ T5829] Bluetooth: hci4: command tx timeout [ 515.619420][ T74] net_ratelimit: 14 callbacks suppressed [ 515.619440][ T74] bond2: (slave macvlan2): failed to get link speed/duplex [ 515.664461][T11361] sctp: [Deprecated]: syz.5.1355 (pid 11361) Use of int in max_burst socket option deprecated. [ 515.664461][T11361] Use struct sctp_assoc_value instead [ 515.749409][ T1091] bond2: (slave macvlan2): failed to get link speed/duplex [ 515.859763][ T4494] bond2: (slave macvlan2): failed to get link speed/duplex [ 516.025287][T11371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1358'. [ 516.059817][ T3451] bond2: (slave macvlan2): failed to get link speed/duplex [ 516.104756][T11375] netlink: 'syz.1.1358': attribute type 3 has an invalid length. [ 516.188315][ T6085] bond2: (slave macvlan2): failed to get link speed/duplex [ 516.339872][ T6085] bond2: (slave macvlan2): failed to get link speed/duplex [ 516.459901][ T1091] bond2: (slave macvlan2): failed to get link speed/duplex [ 516.569999][ T3451] bond2: (slave macvlan2): failed to get link speed/duplex [ 516.663758][T11406] syzkaller0: entered promiscuous mode [ 516.678993][T11406] syzkaller0: entered allmulticast mode [ 516.696433][T11408] netlink: 'syz.4.1369': attribute type 4 has an invalid length. [ 516.705003][T11408] __nla_validate_parse: 1 callbacks suppressed [ 516.705019][T11408] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.1369'. [ 516.721819][ T3451] bond2: (slave macvlan2): failed to get link speed/duplex [ 516.798215][T11417] sctp: [Deprecated]: syz.5.1370 (pid 11417) Use of int in maxseg socket option. [ 516.798215][T11417] Use struct sctp_assoc_value instead [ 516.834801][T11419] netlink: 212320 bytes leftover after parsing attributes in process `syz.2.1372'. [ 516.902974][T11419] team0: Device gtp0 is of different type [ 517.000472][ T1954] bond2: (slave macvlan2): failed to get link speed/duplex [ 517.082058][T11431] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1373'. [ 517.392942][T11451] netlink: 'syz.2.1381': attribute type 8 has an invalid length. [ 517.420810][T11451] sch_fq: defrate 0 ignored. [ 517.816438][T11453] tc_dump_action: action bad kind [ 517.938151][T11475] netem: change failed [ 518.412566][T11506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1392'. [ 518.459518][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1392'. [ 518.532520][T11518] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 4, id = 0 [ 518.746111][T11531] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1401'. [ 518.827271][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1400'. [ 518.895998][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1400'. [ 519.021742][T11538] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1403'. [ 519.094124][T11542] netlink: 'syz.5.1404': attribute type 5 has an invalid length. [ 519.739705][T11568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1411'. [ 519.759944][T11568] netlink: 'syz.1.1411': attribute type 2 has an invalid length. [ 519.903146][T11575] netlink: 'syz.1.1413': attribute type 2 has an invalid length. [ 519.940921][T11575] netlink: 'syz.1.1413': attribute type 2 has an invalid length. [ 519.972543][T11575] netlink: 'syz.1.1413': attribute type 2 has an invalid length. [ 520.902130][ T4494] net_ratelimit: 17 callbacks suppressed [ 520.902149][ T4494] bond2: (slave macvlan2): failed to get link speed/duplex [ 520.984656][T11618] IPVS: Error connecting to the multicast addr [ 521.079050][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.095429][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.149944][ T6085] bond2: (slave macvlan2): failed to get link speed/duplex [ 521.175507][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.201692][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.380196][ T6085] bond2: (slave macvlan2): failed to get link speed/duplex [ 521.599455][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 521.661463][T11637] netlink: 'syz.2.1427': attribute type 1 has an invalid length. [ 521.736710][T11639] gretap2: entered allmulticast mode [ 521.748063][T11639] bond3: (slave gretap2): making interface the new active one [ 521.757789][T11639] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 521.800144][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 521.920792][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 521.953482][T11644] __nla_validate_parse: 3 callbacks suppressed [ 521.953497][T11644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1430'. [ 522.219358][ T5091] bond2: (slave macvlan2): failed to get link speed/duplex [ 522.330186][ T6085] bond2: (slave macvlan2): failed to get link speed/duplex [ 522.363655][ T6533] IPVS: starting estimator thread 0... [ 522.454485][T11665] netlink: 'syz.5.1437': attribute type 10 has an invalid length. [ 522.466057][T11660] IPVS: using max 26 ests per chain, 62400 per kthread [ 522.480413][ T6085] bond2: (slave macvlan2): failed to get link speed/duplex [ 522.480815][T11665] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1437'. [ 522.749472][ T5091] bond2: (slave macvlan2): failed to get link speed/duplex [ 522.757543][T11669] netlink: 'syz.1.1438': attribute type 16 has an invalid length. [ 523.048597][T11674] bond0: (slave rose0): Enslaving as an active interface with an up link [ 523.232790][T11683] netlink: 'syz.1.1441': attribute type 1 has an invalid length. [ 523.237854][T11682] xt_nat: multiple ranges no longer supported [ 523.851681][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1448'. [ 524.226385][T11707] xt_l2tp: v2 tid > 0xffff: 37482740 [ 524.655113][T11718] bridge_slave_1: left allmulticast mode [ 524.661550][T11718] bridge_slave_1: left promiscuous mode [ 524.668882][T11718] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.693190][T11718] bridge_slave_0: left allmulticast mode [ 524.699062][T11718] bridge_slave_0: left promiscuous mode [ 524.708443][T11718] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.434799][T11741] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1461'. [ 525.548314][T11749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1465'. [ 525.581637][T11749] netlink: 'syz.0.1465': attribute type 2 has an invalid length. [ 525.624304][T11749] : entered promiscuous mode [ 525.635757][T11751] netlink: 'syz.5.1466': attribute type 13 has an invalid length. [ 525.763771][T11765] bond0: (slave bond_slave_1): Releasing backup interface [ 525.778190][T11767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1471'. [ 525.794371][T11769] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 525.831168][T11769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1469'. [ 525.841786][T11769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1469'. [ 525.949695][ T5091] net_ratelimit: 26 callbacks suppressed [ 525.949713][ T5091] bond2: (slave macvlan2): failed to get link speed/duplex [ 525.983492][T11777] sctp: [Deprecated]: syz.4.1474 (pid 11777) Use of int in maxseg socket option. [ 525.983492][T11777] Use struct sctp_assoc_value instead [ 526.079368][ T5091] bond2: (slave macvlan2): failed to get link speed/duplex [ 526.189642][ T4494] bond2: (slave macvlan2): failed to get link speed/duplex [ 526.216289][T11799] FAULT_INJECTION: forcing a failure. [ 526.216289][T11799] name failslab, interval 1, probability 0, space 0, times 0 [ 526.237887][T11788] delete_channel: no stack [ 526.287407][T11799] CPU: 1 UID: 0 PID: 11799 Comm: syz.1.1482 Not tainted syzkaller #0 PREEMPT(full) [ 526.287433][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 526.287444][T11799] Call Trace: [ 526.287452][T11799] [ 526.287461][T11799] dump_stack_lvl+0xe8/0x150 [ 526.287496][T11799] should_fail_ex+0x414/0x560 [ 526.287529][T11799] should_failslab+0xa8/0x100 [ 526.287551][T11799] __kmalloc_node_track_caller_noprof+0xe2/0x820 [ 526.287573][T11799] ? nf_ct_ext_add+0x1b6/0x460 [ 526.287595][T11799] ? nf_ct_ext_add+0x1b6/0x460 [ 526.287614][T11799] krealloc_node_align_noprof+0x1ae/0x3a0 [ 526.287638][T11799] nf_ct_ext_add+0x1b6/0x460 [ 526.287665][T11799] ctnetlink_new_conntrack+0x10e3/0x20a0 [ 526.287687][T11799] ? ctnetlink_new_conntrack+0x6d3/0x20a0 [ 526.287714][T11799] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 526.287731][T11799] ? trace_contention_end+0x39/0x100 [ 526.287753][T11799] ? __mutex_lock+0x335/0x1350 [ 526.287784][T11799] ? nfnetlink_rcv_msg+0x9dc/0x1130 [ 526.287831][T11799] nfnetlink_rcv_msg+0xb4d/0x1130 [ 526.287853][T11799] ? __lock_acquire+0x6b6/0x2cf0 [ 526.287869][T11799] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 526.287909][T11799] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 526.287962][T11799] ? __lock_acquire+0x6b6/0x2cf0 [ 526.287983][T11799] ? __lock_acquire+0x6b6/0x2cf0 [ 526.288009][T11799] netlink_rcv_skb+0x208/0x470 [ 526.288031][T11799] ? unwind_next_frame+0xa5/0x23d0 [ 526.288052][T11799] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 526.288075][T11799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 526.288110][T11799] ? bpf_lsm_capable+0x9/0x20 [ 526.288128][T11799] ? security_capable+0x7e/0x2e0 [ 526.288157][T11799] nfnetlink_rcv+0x282/0x2590 [ 526.288179][T11799] ? is_bpf_text_address+0x26/0x2b0 [ 526.288206][T11799] ? kernel_text_address+0xa5/0xe0 [ 526.288231][T11799] ? unwind_get_return_address+0x4d/0x90 [ 526.288250][T11799] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 526.288274][T11799] ? arch_stack_walk+0xfc/0x150 [ 526.288306][T11799] ? __lock_acquire+0x6b6/0x2cf0 [ 526.288326][T11799] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 526.288348][T11799] ? stack_depot_save_flags+0x33/0x810 [ 526.288369][T11799] ? __lock_acquire+0x6b6/0x2cf0 [ 526.288395][T11799] ? __lock_acquire+0x6b6/0x2cf0 [ 526.288423][T11799] ? __netlink_lookup+0xbd/0x8a0 [ 526.288463][T11799] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.288492][T11799] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.288522][T11799] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.288552][T11799] netlink_unicast+0x82f/0x9e0 [ 526.288583][T11799] ? __pfx_netlink_unicast+0x10/0x10 [ 526.288607][T11799] ? netlink_sendmsg+0x642/0xb30 [ 526.288627][T11799] ? skb_put+0x11b/0x210 [ 526.288651][T11799] netlink_sendmsg+0x805/0xb30 [ 526.288689][T11799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.288716][T11799] ? aa_sock_msg_perm+0xf1/0x1b0 [ 526.288739][T11799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 526.288755][T11799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.288779][T11799] __sock_sendmsg+0x21c/0x270 [ 526.288806][T11799] ____sys_sendmsg+0x505/0x820 [ 526.288828][T11799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.288859][T11799] ? import_iovec+0x74/0xa0 [ 526.288883][T11799] ___sys_sendmsg+0x21f/0x2a0 [ 526.288906][T11799] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.288964][T11799] ? __fget_files+0x2a/0x420 [ 526.288984][T11799] ? __fget_files+0x3a0/0x420 [ 526.289015][T11799] __x64_sys_sendmsg+0x19b/0x260 [ 526.289039][T11799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 526.289071][T11799] ? __pfx_ksys_write+0x10/0x10 [ 526.289099][T11799] do_syscall_64+0xec/0xf80 [ 526.289120][T11799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.289136][T11799] ? trace_irq_disable+0x37/0x100 [ 526.289156][T11799] ? clear_bhb_loop+0x60/0xb0 [ 526.289177][T11799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.289191][T11799] RIP: 0033:0x7f6ddc78f749 [ 526.289205][T11799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.289217][T11799] RSP: 002b:00007f6ddd5ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.289234][T11799] RAX: ffffffffffffffda RBX: 00007f6ddc9e5fa0 RCX: 00007f6ddc78f749 [ 526.289246][T11799] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 526.289256][T11799] RBP: 00007f6ddd5ba090 R08: 0000000000000000 R09: 0000000000000000 [ 526.289267][T11799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.289278][T11799] R13: 00007f6ddc9e6038 R14: 00007f6ddc9e5fa0 R15: 00007fff9328c678 [ 526.289311][T11799] [ 526.343604][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1481'. [ 526.345248][ T5091] bond2: (slave macvlan2): failed to get link speed/duplex [ 526.850085][ T3451] bond2: (slave macvlan2): failed to get link speed/duplex [ 526.960966][ T3451] bond2: (slave macvlan2): failed to get link speed/duplex [ 527.071027][T11835] netlink: 'syz.4.1486': attribute type 11 has an invalid length. [ 527.080522][ T4494] bond2: (slave macvlan2): failed to get link speed/duplex [ 527.257611][ T4494] bond2: (slave macvlan2): failed to get link speed/duplex [ 527.318231][T11858] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1493'. [ 527.371644][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 527.415309][T11863] syzkaller1: entered promiscuous mode [ 527.439295][T11863] syzkaller1: entered allmulticast mode [ 527.499850][ T5091] bond2: (slave macvlan2): failed to get link speed/duplex [ 527.592185][T11869] netlink: 'syz.1.1495': attribute type 13 has an invalid length. [ 527.632211][T11869] netlink: 'syz.1.1495': attribute type 27 has an invalid length. [ 528.051940][T11882] netlink: 'syz.2.1497': attribute type 13 has an invalid length. [ 528.256716][T11882] veth1_vlan: left allmulticast mode [ 528.382712][T11886] veth6: entered allmulticast mode [ 528.422017][ T5091] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.459842][ T5091] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.468867][ T5091] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.518031][ T5091] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.528172][T11891] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1500'. [ 528.541977][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1500'. [ 528.552380][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'. [ 528.563801][T11891] netlink: 'syz.1.1500': attribute type 12 has an invalid length. [ 528.573663][T11891] netlink: 'syz.1.1500': attribute type 11 has an invalid length. [ 528.812230][T11914] syzkaller0: entered promiscuous mode [ 528.823730][T11914] syzkaller0: entered allmulticast mode [ 529.091975][T11945] lo: Caught tx_queue_len zero misconfig [ 530.165009][T11983] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1525'. [ 530.174991][T11983] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1525'. [ 530.194491][T11983] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1525'. [ 530.222577][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'. [ 530.266662][T11987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.338184][T11992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1527'. [ 530.685820][T12003] x_tables: ip_tables: ah match: only valid for protocol 51 [ 530.898130][T12010] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 531.246823][T12029] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004 [ 531.552151][T12047] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 531.874978][T12061] netlink: 'syz.4.1543': attribute type 89 has an invalid length. [ 531.913275][T12061] lo speed is unknown, defaulting to 1000 [ 531.928393][T12061] lo speed is unknown, defaulting to 1000 [ 531.947327][T12061] lo speed is unknown, defaulting to 1000 [ 532.003088][T12061] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 532.055775][T12061] lo speed is unknown, defaulting to 1000 [ 532.134933][T12061] lo speed is unknown, defaulting to 1000 [ 532.216066][T12061] lo speed is unknown, defaulting to 1000 [ 532.251642][T12061] lo speed is unknown, defaulting to 1000 [ 532.278208][T12061] lo speed is unknown, defaulting to 1000 [ 532.290691][T12061] lo speed is unknown, defaulting to 1000 [ 532.439812][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'. [ 532.468900][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1547'. [ 532.591803][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1548'. [ 532.607093][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1548'. [ 532.630680][T12081] macsec1: entered promiscuous mode [ 532.635930][T12081] erspan0: entered promiscuous mode [ 532.646398][T12081] macsec1: entered allmulticast mode [ 532.654218][T12081] erspan0: entered allmulticast mode [ 533.297615][T12109] IPVS: set_ctl: invalid protocol: 47 172.30.1.1:20001 [ 533.383931][T12112] netlink: 'syz.2.1557': attribute type 10 has an invalid length. [ 533.413203][T12112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.468357][T12112] team0: Device bond0 failed to register rx_handler [ 534.022643][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1562'. [ 535.084673][T12173] syzkaller0: entered promiscuous mode [ 535.100539][T12173] syzkaller0: entered allmulticast mode [ 535.158636][T12176] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1570'. [ 535.948590][T12191] netlink: 'syz.5.1573': attribute type 11 has an invalid length. [ 536.041917][T12200] netlink: 'syz.1.1574': attribute type 3 has an invalid length. [ 536.211585][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 536.245486][T12206] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1576'. [ 536.252351][T12207] netlink: 'syz.5.1577': attribute type 10 has an invalid length. [ 536.291318][T12207] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 536.306875][T12210] netlink: 'syz.5.1577': attribute type 13 has an invalid length. [ 536.342805][T12210] gretap0: refused to change device tx_queue_len [ 536.358064][T12210] net_ratelimit: 2 callbacks suppressed [ 536.358082][T12210] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 536.391679][T12212] netlink: 'syz.2.1579': attribute type 10 has an invalid length. [ 536.400327][T12212] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1579'. [ 536.616767][T12220] netlink: 'syz.2.1581': attribute type 12 has an invalid length. [ 536.626712][T12220] netlink: 'syz.2.1581': attribute type 4 has an invalid length. [ 536.638621][T12223] netlink: 'syz.5.1584': attribute type 10 has an invalid length. [ 536.656891][T12223] team0: Device veth0_macvtap failed to register rx_handler [ 536.786759][T12226] tipc: Started in network mode [ 536.792788][T12226] tipc: Node identity eee027e1871, cluster identity 4711 [ 536.801411][T12226] tipc: Enabled bearer , priority 0 [ 536.887176][T12226] syzkaller0: entered promiscuous mode [ 536.894442][T12226] syzkaller0: entered allmulticast mode [ 536.901365][T12226] tipc: Resetting bearer [ 536.921052][T12225] tipc: Resetting bearer [ 538.264278][T12225] tipc: Disabling bearer [ 538.273150][T12233] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1588'. [ 538.296756][ T48] tipc: Node number set to 1777346529 [ 538.418472][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1590'. [ 538.427829][T12246] x_tables: unsorted underflow at hook 2 [ 538.760018][T12280] sctp: [Deprecated]: syz.1.1595 (pid 12280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 538.760018][T12280] Use struct sctp_sack_info instead [ 538.795432][T12279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1601'. [ 539.044164][T12294] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1606'. [ 539.074303][T12294] gretap0: entered promiscuous mode [ 539.151586][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'. [ 539.343040][T12310] gretap0: left promiscuous mode [ 539.395503][T12311] xt_limit: Overflow, try lower: 271964/0 [ 539.423584][T12312] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1608'. [ 539.451034][T12310] bridge0: port 3(erspan0) entered blocking state [ 539.457646][T12310] bridge0: port 3(erspan0) entered forwarding state [ 539.478634][T12310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.488031][T12310] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.493409][T12314] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1610'. [ 539.496782][T12315] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1609'. [ 539.517613][T12310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.657176][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1612'. [ 539.680517][T12326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1609'. [ 540.231205][T12363] lo speed is unknown, defaulting to 1000 [ 540.424345][T12371] netlink: 'syz.0.1622': attribute type 1 has an invalid length. [ 540.866566][T12382] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 540.930725][T12382] bond2 (unregistering): Released all slaves [ 541.122569][T12398] lo speed is unknown, defaulting to 1000 [ 541.343473][ T30] audit: type=1804 audit(1768650755.606:7): pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1632" name="memory.events" dev="tmpfs" ino=1571 res=1 errno=0 [ 541.383492][T12409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.420395][T12409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.427722][ T30] audit: type=1800 audit(1768650755.606:8): pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1632" name="memory.events" dev="tmpfs" ino=1571 res=0 errno=0 [ 541.495447][T12409] batadv0 (unregistering): left promiscuous mode [ 541.914864][T12447] bond0: Caught tx_queue_len zero misconfig [ 542.064077][T12453] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 542.573983][T12478] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 542.942392][T12492] netlink: 'syz.0.1653': attribute type 1 has an invalid length. [ 542.965496][T12492] netlink: 'syz.0.1653': attribute type 8 has an invalid length. [ 542.988169][T12492] netlink: 'syz.0.1653': attribute type 9 has an invalid length. [ 543.033093][T12492] netlink: 'syz.0.1653': attribute type 10 has an invalid length. [ 543.061321][T12492] netlink: 'syz.0.1653': attribute type 11 has an invalid length. [ 543.313010][T12505] geneve3: entered promiscuous mode [ 543.321496][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.366719][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.394849][T12510] tipc: Enabled bearer , priority 0 [ 543.409343][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.428976][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.289162][T12506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.592714][T12525] __nla_validate_parse: 14 callbacks suppressed [ 545.592732][T12525] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1659'. [ 546.007564][T12510] tipc: Disabling bearer [ 546.029137][ T5893] tipc: Node number set to 633598928 [ 546.081977][T12506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.206867][T12537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.229021][T12506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.406744][T12506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.406880][T12546] netlink: 212356 bytes leftover after parsing attributes in process `syz.5.1664'. [ 546.520662][ T3451] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.553912][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.566512][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1664'. [ 546.608391][ T5091] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.671716][ T5091] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.748796][T12556] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1665'. [ 546.868221][T12558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1666'. [ 546.882480][T12557] delete_channel: no stack [ 546.931969][T12564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.018428][T12567] netlink: 'syz.0.1669': attribute type 21 has an invalid length. [ 547.116418][T12575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1672'. [ 547.195245][T12580] veth0: entered promiscuous mode [ 547.195279][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1673'. [ 547.228459][T12584] netlink: 'syz.5.1674': attribute type 1 has an invalid length. [ 547.237229][T12583] veth0 (unregistering): left promiscuous mode [ 547.324775][T12586] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 547.336639][T12586] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 547.347967][T12584] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1674'. [ 547.375538][T12588] netlink: 'syz.1.1675': attribute type 1 has an invalid length. [ 547.385457][T12584] ieee802154 phy1 wpan1: encryption failed: -22 [ 547.401672][T12584] macvlan2: entered promiscuous mode [ 547.407015][T12584] macvlan2: entered allmulticast mode [ 547.413523][T12584] bond2: entered promiscuous mode [ 547.419036][T12584] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 547.424599][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 547.443688][T12584] bond2: left promiscuous mode [ 547.637841][T12608] netlink: 'syz.1.1679': attribute type 13 has an invalid length. [ 547.690645][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1679'. [ 547.924792][T12623] ieee802154 phy1 wpan1: encryption failed: -22 [ 547.982491][T12626] netlink: 'syz.5.1683': attribute type 1 has an invalid length. [ 548.006991][T12626] netlink: 'syz.5.1683': attribute type 10 has an invalid length. [ 548.034823][T12626] team0: Device veth0_macvtap failed to register rx_handler [ 548.085525][T12632] geneve3: entered promiscuous mode [ 548.104390][T12639] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 548.125278][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.134879][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.144402][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.154127][T12635] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 548.169750][T12639] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 548.177634][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.746294][T12677] macsec2: entered promiscuous mode [ 548.783814][T12677] dummy0: entered promiscuous mode [ 548.832826][T12677] dummy0: left promiscuous mode [ 548.897526][T12679] openvswitch: netlink: Missing key (keys=40, expected=100) [ 548.933657][T12684] netlink: 'syz.1.1702': attribute type 1 has an invalid length. [ 548.970471][T12679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.989684][T12679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.021158][T12679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.036567][T12679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.105454][T12688] openvswitch: netlink: IP tunnel dst address not specified [ 549.497138][T12714] netlink: 'syz.4.1711': attribute type 2 has an invalid length. [ 549.521230][T12714] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 549.916718][T12742] lo speed is unknown, defaulting to 1000 [ 549.975557][T12745] syzkaller0: entered promiscuous mode [ 549.981848][T12745] syzkaller0: entered allmulticast mode [ 550.172791][T12748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.504713][T12751] tipc: Enabled bearer , priority 0 [ 550.513878][T12752] tipc: Enabling of bearer rejected, already enabled [ 550.610002][T12768] openvswitch: netlink: Key type 7430 is out of range max 32 [ 550.681268][T12752] tipc: Disabling bearer [ 551.374806][T12790] syzkaller0: entered promiscuous mode [ 551.403655][T12790] syzkaller0: entered allmulticast mode [ 551.414966][T12798] tipc: Started in network mode [ 551.420782][T12798] tipc: Node identity fffffffa, cluster identity 4711 [ 551.427698][T12798] tipc: Node number set to 4294967290 [ 552.875003][T12805] IPv6: sit1: Disabled Multicast RS [ 553.006001][T12781] tipc: Enabled bearer , priority 0 [ 553.178593][T12780] tipc: Resetting bearer [ 554.708169][T12780] tipc: Disabling bearer [ 554.717125][T12817] lo speed is unknown, defaulting to 1000 [ 555.248824][T12889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.290915][T12889] netlink: 'syz.5.1747': attribute type 1 has an invalid length. [ 555.401895][T12894] atomic_op ffff88802e0a8198 conn xmit_atomic 0000000000000000 [ 555.448874][T12866] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 555.520813][T12899] __nla_validate_parse: 13 callbacks suppressed [ 555.520830][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'. [ 556.026609][T12919] block nbd1: not configured, cannot reconfigure [ 556.194434][T12932] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1759'. [ 556.205162][T12931] syzkaller1: entered promiscuous mode [ 556.217775][T12931] syzkaller1: entered allmulticast mode [ 556.385594][T12937] syzkaller0: entered promiscuous mode [ 556.409426][T12937] syzkaller0: entered allmulticast mode [ 556.420100][T12942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1761'. [ 556.831273][T12965] syzkaller1: entered promiscuous mode [ 556.837140][T12965] syzkaller1: entered allmulticast mode [ 557.138988][T12975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1772'. [ 557.265533][T12989] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1773'. [ 557.481968][T12997] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1774'. [ 557.512603][T12997] syzkaller0: entered promiscuous mode [ 557.518115][T12997] syzkaller0: entered allmulticast mode [ 557.904087][T13012] hsr0: entered promiscuous mode [ 557.920171][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1779'. [ 557.956002][T13012] hsr_slave_0: left promiscuous mode [ 557.968753][T13012] hsr_slave_1: left promiscuous mode [ 557.978980][T13014] xt_time: unknown flags 0xf4 [ 558.026803][T13012] hsr0 (unregistering): left promiscuous mode [ 558.244182][T13034] sctp: [Deprecated]: syz.0.1783 (pid 13034) Use of int in maxseg socket option. [ 558.244182][T13034] Use struct sctp_assoc_value instead [ 558.281644][T13034] xt_hashlimit: size too large, truncated to 1048576 [ 558.350901][T13036] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1783'. [ 558.611680][T13059] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1788'. [ 558.942618][T13071] lo speed is unknown, defaulting to 1000 [ 559.244933][T13088] Cannot find add_set index 2 as target [ 559.317098][T13085] lo speed is unknown, defaulting to 1000 [ 559.447897][T13094] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1796'. [ 559.684126][T13105] netlink: 'syz.0.1800': attribute type 10 has an invalid length. [ 559.738771][T13105] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.764057][T13105] team0: entered promiscuous mode [ 559.774325][T13105] team_slave_0: entered promiscuous mode [ 559.784587][T13105] team_slave_1: entered promiscuous mode [ 559.797333][T13105] bond0: (slave team0): Enslaving as an active interface with an up link [ 559.817159][T13101] syzkaller0: entered promiscuous mode [ 559.827343][T13101] syzkaller0: entered allmulticast mode [ 559.928678][T13111] sctp: [Deprecated]: syz.1.1801 (pid 13111) Use of int in max_burst socket option deprecated. [ 559.928678][T13111] Use struct sctp_assoc_value instead [ 560.054346][T13115] netlink: 'syz.1.1802': attribute type 1 has an invalid length. [ 560.152712][T13115] bond6: entered promiscuous mode [ 560.159114][T13115] 8021q: adding VLAN 0 to HW filter on device bond6 [ 560.196490][T13115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 560.205178][T13115] IPv6: NLM_F_CREATE should be set when creating new route [ 560.212541][T13115] IPv6: NLM_F_CREATE should be set when creating new route [ 560.273044][T13115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 560.331422][T13121] 8021q: adding VLAN 0 to HW filter on device bond6 [ 560.338360][T13121] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 560.362862][T13121] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 560.424200][T13121] bond6: (slave wireguard0): making interface the new active one [ 560.436924][T13121] wireguard0: entered promiscuous mode [ 560.445574][T13121] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 560.488795][T13115] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 560.523571][T13115] bond6: (slave wireguard1): Enslaving as a backup interface with an up link [ 560.742055][T13150] tipc: Enabled bearer , priority 0 [ 560.749101][T13153] syzkaller0: entered promiscuous mode [ 560.776870][T13153] syzkaller0: entered allmulticast mode [ 560.924400][T13156] netlink: 'syz.4.1810': attribute type 10 has an invalid length. [ 560.924750][T13150] tipc: Disabling bearer [ 561.007867][T13156] veth0_vlan: left promiscuous mode [ 561.031622][T13156] veth0_vlan: entered promiscuous mode [ 561.040009][T13156] team0: Device veth0_vlan failed to register rx_handler [ 561.151732][T13162] lo speed is unknown, defaulting to 1000 [ 561.415365][T13179] __nla_validate_parse: 1 callbacks suppressed [ 561.415382][T13179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1818'. [ 561.457303][T13175] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1817'. [ 561.473426][T13180] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1817'. [ 561.805394][T13196] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1822'. [ 561.944548][T13208] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 562.023335][T13216] bridge0: port 3(erspan0) entered blocking state [ 562.030736][T13216] bridge0: port 3(erspan0) entered disabled state [ 562.050267][T13216] bridge0: port 3(erspan0) entered blocking state [ 562.065072][T13216] bridge0: port 3(erspan0) entered disabled state [ 562.095322][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1828'. [ 562.165425][T13220] bridge0: port 1(veth9) entered blocking state [ 562.174058][T13220] bridge0: port 1(veth9) entered disabled state [ 562.180975][T13220] veth9: entered allmulticast mode [ 562.187387][T13220] veth9: entered promiscuous mode [ 562.252761][T13230] bridge0: port 2(veth0_to_bond) entered blocking state [ 562.290601][T13230] bridge0: port 2(veth0_to_bond) entered disabled state [ 562.297786][T13230] veth0_to_bond: entered allmulticast mode [ 562.300387][T13233] netlink: 'syz.1.1833': attribute type 5 has an invalid length. [ 562.321414][T13230] veth0_to_bond: entered promiscuous mode [ 562.362326][T13235] bridge0: port 3(veth11) entered blocking state [ 562.401154][T13235] bridge0: port 3(veth11) entered disabled state [ 562.406214][T13238] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1834'. [ 562.421994][T13235] veth11: entered allmulticast mode [ 562.430835][T13235] veth11: entered promiscuous mode [ 562.537593][T13248] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1837'. [ 562.558464][T13248] netlink: 'syz.1.1837': attribute type 1 has an invalid length. [ 562.570000][T13248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1837'. [ 562.685915][T13258] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1841'. [ 562.746859][T13266] netlink: 'syz.1.1844': attribute type 5 has an invalid length. [ 562.788999][T13258] sctp: [Deprecated]: syz.2.1841 (pid 13258) Use of int in max_burst socket option deprecated. [ 562.788999][T13258] Use struct sctp_assoc_value instead [ 562.824141][T13273] netlink: 'syz.0.1845': attribute type 15 has an invalid length. [ 562.930004][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.733596][T13293] netlink: 'syz.1.1850': attribute type 1 has an invalid length. [ 563.778210][T13293] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 563.790724][T13293] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 563.857501][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1850'. [ 563.905424][T13293] bond7: (slave bridge9): Enslaving as an active interface with a down link [ 564.148169][T13312] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a86c:85ff:fecf:5051 error=-28 [ 564.185643][T13310] lo speed is unknown, defaulting to 1000 [ 564.538179][T13312] infiniband !yz!: set down [ 564.546171][T13312] infiniband !yz!: added team_slave_0 [ 564.718011][T13312] RDS/IB: !yz!: added [ 564.723717][T13312] smc: adding ib device !yz! with port count 1 [ 564.730826][T13312] smc: ib device !yz! port 1 has no pnetid [ 564.977999][T13342] macvtap2: entered promiscuous mode [ 565.285481][T13352] sctp: [Deprecated]: syz.1.1867 (pid 13352) Use of int in max_burst socket option. [ 565.285481][T13352] Use struct sctp_assoc_value instead [ 565.304225][T13351] bond0: entered promiscuous mode [ 565.309935][T13351] bond_slave_0: entered promiscuous mode [ 565.315792][T13351] dummy0: entered promiscuous mode [ 565.330310][T13351] bridge_slave_1: entered promiscuous mode [ 565.389890][T13351] bond0: left promiscuous mode [ 565.394711][T13351] bond_slave_0: left promiscuous mode [ 565.432026][T13351] dummy0: left promiscuous mode [ 565.437131][T13351] bridge_slave_1: left promiscuous mode [ 565.954929][T13385] netlink: 'syz.2.1875': attribute type 58 has an invalid length. [ 565.984941][T13378] syzkaller0: entered promiscuous mode [ 565.991906][T13378] syzkaller0: entered allmulticast mode [ 566.067610][T13390] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 566.079895][T13390] bond3 (unregistering): Released all slaves [ 567.491240][T13394] __nla_validate_parse: 6 callbacks suppressed [ 567.491260][T13394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1877'. [ 567.570394][T13397] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1878'. [ 567.645658][T13399] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 567.658249][T13402] netlink: 'syz.5.1880': attribute type 29 has an invalid length. [ 567.667660][T13402] netlink: 'syz.5.1880': attribute type 29 has an invalid length. [ 567.687597][T13402] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1880'. [ 567.711524][T13399] bridge0: port 4(veth0_to_bridge) entered blocking state [ 567.718778][T13399] bridge0: port 4(veth0_to_bridge) entered disabled state [ 567.738986][T13399] veth0_to_bridge: entered allmulticast mode [ 567.792200][T13399] veth0_to_bridge: entered promiscuous mode [ 567.848051][T13413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1882'. [ 567.869006][T13402] syzkaller0: entered promiscuous mode [ 567.891515][T13402] syzkaller0: entered allmulticast mode [ 567.924861][T13409] tipc: Enabled bearer , priority 0 [ 567.934379][T13410] netlink: 'syz.2.1882': attribute type 3 has an invalid length. [ 567.942758][T13410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1882'. [ 567.953853][T13402] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1880'. [ 567.963998][T13402] block nbd0: not configured, cannot reconfigure [ 567.999951][T13401] tipc: Resetting bearer [ 568.071598][T13401] tipc: Disabling bearer [ 568.437917][T13442] xt_connbytes: Forcing CT accounting to be enabled [ 568.445816][T13442] Cannot find add_set index 4 as target [ 568.703103][T13446] vlan2: entered allmulticast mode [ 568.722269][T13446] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 569.392356][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'. [ 569.698528][T13496] vti0: entered promiscuous mode [ 569.724709][T13496] vti0: entered allmulticast mode [ 569.888708][T13506] netlink: 'syz.0.1908': attribute type 142 has an invalid length. [ 569.914971][T13507] netlink: 'syz.0.1908': attribute type 1 has an invalid length. [ 570.133983][T13516] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1910'. [ 570.182455][T13519] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 570.483233][T13547] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1918'. [ 570.489491][T13546] lo speed is unknown, defaulting to 1000 [ 570.860728][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 571.355402][T13594] lo speed is unknown, defaulting to 1000 [ 571.392926][T13595] netlink: 'syz.5.1926': attribute type 5 has an invalid length. [ 571.673003][T13598] 0{X: renamed from gretap0 [ 571.682585][T13598] 0{X: entered allmulticast mode [ 571.701787][T13598] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 571.938853][T13618] netlink: 'syz.2.1930': attribute type 282 has an invalid length. [ 572.132840][T13629] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 572.559932][ T5091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.575844][ T5091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.614585][T13626] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.637824][T13645] xfrm0: left promiscuous mode [ 572.644072][T13645] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 572.651168][T13645] vlan2: left promiscuous mode [ 572.655957][T13645] geneve1: left promiscuous mode [ 572.663663][T13645] veth3: left promiscuous mode [ 572.668658][T13645] vcan1: left promiscuous mode [ 572.752975][T13626] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.832871][T13658] netlink: 'syz.2.1939': attribute type 1 has an invalid length. [ 572.833325][T13626] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.890794][T13660] __nla_validate_parse: 1 callbacks suppressed [ 572.890812][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 572.916064][T13658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 572.946386][T13626] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.308011][T13660] bond5 (unregistering): Released all slaves [ 573.384000][T13665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1939'. [ 573.458886][T13669] geneve4: entered promiscuous mode [ 573.466715][T13669] geneve4: entered allmulticast mode [ 573.548086][ T62] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.599089][ T62] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.683165][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.717324][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.010964][T13689] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1943'. [ 574.891415][T13696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1949'. [ 574.986240][T13704] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1951'. [ 575.032969][ T6532] lo speed is unknown, defaulting to 1000 [ 575.176176][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1954'. [ 575.272170][T13720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1954'. [ 575.284411][T13720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1954'. [ 575.294286][T13720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1954'. [ 575.304679][T13720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1954'. [ 575.339472][T13726] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 575.348628][T13726] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 575.382268][T13723] lo speed is unknown, defaulting to 1000 [ 575.413028][T13728] syzkaller0: entered promiscuous mode [ 575.418586][T13728] syzkaller0: entered allmulticast mode [ 575.487387][T13730] lo: entered promiscuous mode [ 575.498431][T13730] tunl0: entered promiscuous mode [ 575.505841][T13730] gre0: entered promiscuous mode [ 575.514946][T13730] gretap0: entered promiscuous mode [ 575.524985][T13730] ip_vti0: entered promiscuous mode [ 575.532380][T13730] ip6_vti0: entered promiscuous mode [ 575.541494][T13730] sit0: entered promiscuous mode [ 575.552996][T13730] ip6tnl0: entered promiscuous mode [ 575.563734][T13730] ip6gre0: entered promiscuous mode [ 575.571532][T13730] ip6gretap0: entered promiscuous mode [ 575.580354][T13730] bridge0: entered promiscuous mode [ 575.587000][T13730] vcan0: entered promiscuous mode [ 575.596140][T13730] team0: entered promiscuous mode [ 575.602007][T13730] team_slave_0: entered promiscuous mode [ 575.602492][T13732] Cannot find add_set index 3 as target [ 575.608058][T13730] team_slave_1: entered promiscuous mode [ 575.623897][T13730] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.632811][T13730] dummy0: entered promiscuous mode [ 575.641198][T13730] nlmon0: entered promiscuous mode [ 575.648287][T13730] caif0: entered promiscuous mode [ 575.654282][T13730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.671645][ T24] lo speed is unknown, defaulting to 1000 [ 575.677432][ T24] syz2: Port: 1 Link ACTIVE [ 575.814331][T13736] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 577.466882][T13796] sctp: [Deprecated]: syz.5.1976 (pid 13796) Use of int in maxseg socket option. [ 577.466882][T13796] Use struct sctp_assoc_value instead [ 577.948106][T13824] __nla_validate_parse: 211 callbacks suppressed [ 577.948123][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1985'. [ 577.963575][T13824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1985'. [ 577.992755][T13828] 8021q: VLANs not supported on syzkaller1 [ 578.198299][T13832] atomic_op ffff888069e1b198 conn xmit_atomic 0000000000000000 [ 578.374501][T13832] netlink: 'syz.5.1987': attribute type 9 has an invalid length. [ 578.382488][T13832] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1987'. [ 578.644699][T13861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1995'. [ 578.654291][T13861] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1995'. [ 579.460448][T13892] netlink: 'syz.0.2006': attribute type 10 has an invalid length. [ 579.510259][T13891] netlink: 'syz.0.2006': attribute type 10 has an invalid length. [ 579.545737][T13891] dummy0: entered promiscuous mode [ 579.563653][T13891] team0: Port device dummy0 added [ 579.583411][T13892] dummy0: left promiscuous mode [ 579.590229][T13892] team0: Port device dummy0 removed [ 579.597602][T13892] dummy0: entered promiscuous mode [ 579.601100][T13899] netlink: 'syz.5.2008': attribute type 3 has an invalid length. [ 579.604094][T13892] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 579.824870][T13905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2007'. [ 580.170001][T13912] pimreg: entered allmulticast mode [ 580.451590][T13923] syzkaller1: entered promiscuous mode [ 580.457182][T13923] syzkaller1: entered allmulticast mode [ 580.868059][T13936] bridge6: entered promiscuous mode [ 580.951230][T13937] lo speed is unknown, defaulting to 1000 [ 581.040612][T13945] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2021'. [ 581.080476][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 581.580240][T13975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2028'. [ 581.630140][T13975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2028'. [ 581.657067][T13975] netlink: 'syz.4.2028': attribute type 12 has an invalid length. [ 581.667008][T13975] netlink: 'syz.4.2028': attribute type 29 has an invalid length. [ 581.675882][T13975] netlink: 'syz.4.2028': attribute type 2 has an invalid length. [ 581.966157][T13987] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 582.104549][T13992] netlink: 'syz.1.2033': attribute type 10 has an invalid length. [ 582.140036][T13994] tipc: Enabled bearer , priority 0 [ 582.153897][T13994] syzkaller0: entered promiscuous mode [ 582.179752][T13994] syzkaller0: entered allmulticast mode [ 582.224337][T13994] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 582.336350][T14002] netlink: 'syz.4.2034': attribute type 13 has an invalid length. [ 582.625926][T14006] 0{X: renamed from gretap0 (while UP) [ 582.638262][T14006] 0{X: entered allmulticast mode [ 582.647919][T14006] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 582.696708][T13994] tipc: Resetting bearer [ 582.782885][T13993] tipc: Resetting bearer [ 582.805415][T13993] tipc: Disabling bearer [ 583.010870][T14035] __nla_validate_parse: 13 callbacks suppressed [ 583.010888][T14035] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2043'. [ 583.095597][T14048] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2043'. [ 583.290366][T14054] netlink: 'syz.5.2047': attribute type 1 has an invalid length. [ 583.382849][T14054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 583.487051][T14058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 583.500625][T14058] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 583.511730][T14058] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 583.531613][T14061] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 583.541800][T14061] bond3: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 583.574780][T14076] xt_hashlimit: size too large, truncated to 1048576 [ 583.684337][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2049'. [ 583.834965][T14072] syzkaller0: entered promiscuous mode [ 583.840771][T14072] syzkaller0: entered allmulticast mode [ 583.864542][T14087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2053'. [ 583.881593][T14087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2053'. [ 583.902394][T14087] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2053'. [ 583.924428][T14092] syzkaller0: entered promiscuous mode [ 583.949732][T14092] syzkaller0: entered allmulticast mode [ 583.986508][T14077] lo speed is unknown, defaulting to 1000 [ 583.993805][T14090] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 584.164145][T14110] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2061'. [ 584.205985][T14111] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2061'. [ 584.341668][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2064'. [ 584.355294][T14125] bridge0: port 4(veth0_to_bridge) entered blocking state [ 584.380961][T14125] bridge0: port 4(veth0_to_bridge) entered disabled state [ 584.388360][T14125] veth0_to_bridge: entered allmulticast mode [ 584.400612][T14125] veth0_to_bridge: entered promiscuous mode [ 584.466864][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2064'. [ 586.833064][T14184] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 587.180532][ T30] audit: type=1800 audit(1768650801.436:9): pid=14211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2087" name="memory.events" dev="tmpfs" ino=2381 res=0 errno=0 [ 587.553673][T14231] syzkaller0: entered promiscuous mode [ 587.575269][T14231] syzkaller0: entered allmulticast mode [ 587.586229][T14235] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 587.598386][T14235] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 589.023020][T14279] __nla_validate_parse: 4 callbacks suppressed [ 589.023041][T14279] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2105'. [ 589.069928][T14279] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 589.197923][T14295] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2109'. [ 589.616660][T14313] syzkaller0: entered promiscuous mode [ 589.622477][T14313] syzkaller0: entered allmulticast mode [ 589.660785][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2116'. [ 589.765258][T14319] syzkaller0: entered promiscuous mode [ 589.774769][T14319] syzkaller0: entered allmulticast mode [ 590.020311][T14334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2123'. [ 590.042560][T14337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2124'. [ 590.541751][T14364] netlink: 'syz.1.2133': attribute type 89 has an invalid length. [ 590.552206][T14365] netlink: 'syz.0.2134': attribute type 31 has an invalid length. [ 590.586328][T14365] netlink: 'syz.0.2134': attribute type 1 has an invalid length. [ 590.736354][T14380] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 590.761654][T14368] lo speed is unknown, defaulting to 1000 [ 590.855695][T14349] lo speed is unknown, defaulting to 1000 [ 591.819162][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2148'. [ 591.946464][T14428] sctp: [Deprecated]: syz.1.2149 (pid 14428) Use of int in maxseg socket option. [ 591.946464][T14428] Use struct sctp_assoc_value instead [ 591.970580][T14428] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2149'. [ 592.116783][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2150'. [ 592.168504][T14433] "syz.5.2151" (14433) uses obsolete ecb(arc4) skcipher [ 592.192927][T14439] bridge_slave_1: left allmulticast mode [ 592.228467][T14439] bridge_slave_1: left promiscuous mode [ 592.244616][T14439] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.313245][T14439] bridge_slave_0: left allmulticast mode [ 592.342254][T14439] bridge_slave_0: left promiscuous mode [ 592.348083][T14439] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.382698][T14453] sctp: [Deprecated]: syz.1.2154 (pid 14453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 592.382698][T14453] Use struct sctp_sack_info instead [ 592.496079][T14460] netlink: 'syz.5.2156': attribute type 64 has an invalid length. [ 592.508428][T14460] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2156'. [ 592.525154][T14463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2157'. [ 592.592590][T14454] lo speed is unknown, defaulting to 1000 [ 593.267437][T14479] lo speed is unknown, defaulting to 1000 [ 593.524871][ T30] audit: type=1800 audit(1768650807.786:10): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2164" name="memory.events" dev="tmpfs" ino=847 res=0 errno=0 [ 593.670580][T14503] x_tables: duplicate underflow at hook 1 [ 593.690831][T14504] x_tables: duplicate underflow at hook 3 [ 593.733661][T14505] sctp: [Deprecated]: syz.1.2169 (pid 14505) Use of int in max_burst socket option. [ 593.733661][T14505] Use struct sctp_assoc_value instead [ 594.592866][T14534] __nla_validate_parse: 4 callbacks suppressed [ 594.592879][T14534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2177'. [ 594.718132][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2178'. [ 594.990196][T14558] netlink: 'syz.1.2184': attribute type 13 has an invalid length. [ 594.999927][T14558] netlink: 'syz.1.2184': attribute type 17 has an invalid length. [ 595.057470][T14558] erspan0: left promiscuous mode [ 595.217049][T14558] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.230916][T14558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 595.292339][T14542] lo speed is unknown, defaulting to 1000 [ 595.424021][T14572] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 595.435274][T14573] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 595.885180][T14584] lo speed is unknown, defaulting to 1000 [ 596.035324][T14592] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 596.246905][T14598] syzkaller0: entered promiscuous mode [ 596.252765][T14598] syzkaller0: entered allmulticast mode [ 596.364230][T14602] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2196'. [ 596.487642][T14606] sctp: [Deprecated]: syz.2.2198 (pid 14606) Use of int in maxseg socket option. [ 596.487642][T14606] Use struct sctp_assoc_value instead [ 597.115327][T14640] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2203'. [ 597.322823][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2200'. [ 598.188757][T14645] bpq0: entered promiscuous mode [ 598.302882][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2204'. [ 599.176027][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2214'. [ 599.418929][T14705] netlink: 'syz.0.2217': attribute type 1 has an invalid length. [ 599.462148][T14705] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2217'. [ 599.481186][T14705] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2217'. [ 599.553575][T14707] openvswitch: netlink: Message has 4 unknown bytes. [ 599.599973][T14712] openvswitch: netlink: Flow key attr not present in new flow. [ 599.607742][T14713] netlink: 'syz.0.2220': attribute type 1 has an invalid length. [ 599.742944][T14713] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 599.965338][T14740] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 600.032441][T14740] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2225'. [ 600.375983][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2228'. [ 600.395553][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2228'. [ 600.612382][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2234'. [ 600.683384][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2234'. [ 600.808067][T14792] netlink: 'syz.2.2236': attribute type 1 has an invalid length. [ 600.850921][T14792] netlink: 'syz.2.2236': attribute type 1 has an invalid length. [ 600.927504][T14799] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2239'. [ 601.076888][T14806] netlink: 732 bytes leftover after parsing attributes in process `syz.4.2242'. [ 601.094144][T14806] netlink: 732 bytes leftover after parsing attributes in process `syz.4.2242'. [ 601.239571][T14818] netlink: 'syz.0.2245': attribute type 1 has an invalid length. [ 601.247373][T14818] netlink: 'syz.0.2245': attribute type 2 has an invalid length. [ 601.257203][T14815] syzkaller0: entered promiscuous mode [ 601.263749][T14815] syzkaller0: entered allmulticast mode [ 601.284644][T14818] netlink: 'syz.0.2245': attribute type 1 has an invalid length. [ 601.299042][T14818] netlink: 'syz.0.2245': attribute type 3 has an invalid length. [ 601.609837][ T6546] IPVS: starting estimator thread 0... [ 601.611826][T14840] tipc: Enabled bearer , priority 0 [ 601.634806][T14840] syzkaller0: entered promiscuous mode [ 601.641236][T14840] syzkaller0: entered allmulticast mode [ 601.643308][T14846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 601.660272][T14843] tipc: Resetting bearer [ 601.666186][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.685726][T14850] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2253'. [ 601.708352][T14839] tipc: Resetting bearer [ 601.739853][T14848] IPVS: using max 39 ests per chain, 93600 per kthread [ 601.754448][T14839] tipc: Disabling bearer [ 601.857738][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2256'. [ 602.155007][T14878] tipc: Enabled bearer , priority 0 [ 602.179473][T14878] syzkaller0: entered promiscuous mode [ 602.192800][T14878] syzkaller0: entered allmulticast mode [ 602.231322][T14878] tipc: Resetting bearer [ 602.249997][T14876] tipc: Resetting bearer [ 602.303431][T14876] tipc: Disabling bearer [ 603.167132][T14923] lo speed is unknown, defaulting to 1000 [ 603.535814][T14947] netlink: 'syz.0.2285': attribute type 1 has an invalid length. [ 603.545991][T14942] lo: Caught tx_queue_len zero misconfig [ 603.701806][T14948] lo speed is unknown, defaulting to 1000 [ 604.041478][T14973] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 604.071602][T14973] bond5 (unregistering): Released all slaves [ 604.405126][T15004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.547077][T15002] syzkaller0: entered promiscuous mode [ 604.552773][T15002] syzkaller0: entered allmulticast mode [ 604.799796][T15014] syzkaller0: entered promiscuous mode [ 604.805303][T15014] syzkaller0: entered allmulticast mode [ 605.052914][T15031] tipc: Enabling of bearer rejected, failed to enable media [ 605.063967][T15031] __nla_validate_parse: 209 callbacks suppressed [ 605.063985][T15031] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2306'. [ 605.150965][T15036] lo speed is unknown, defaulting to 1000 [ 605.284417][T15035] lo speed is unknown, defaulting to 1000 [ 607.024168][T15053] tipc: Enabling of bearer rejected, failed to enable media [ 607.193219][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2313'. [ 607.305995][T15079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.361210][T15083] netlink: 'syz.0.2315': attribute type 61 has an invalid length. [ 607.401672][T15083] netlink: 'syz.0.2315': attribute type 62 has an invalid length. [ 607.550246][T15083] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2315'. [ 607.712737][T15098] netlink: 'syz.0.2319': attribute type 13 has an invalid length. [ 607.792198][T15103] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 608.037880][T15114] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2323'. [ 608.412078][T15138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2331'. [ 608.421929][T15137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2330'. [ 608.443191][T15137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2330'. [ 608.476095][T15137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2330'. [ 608.486069][T15137] netlink: 'syz.0.2330': attribute type 3 has an invalid length. [ 608.562141][T15146] 8021q: adding VLAN 0 to HW filter on device bond4 [ 608.576227][T15139] lo speed is unknown, defaulting to 1000 [ 608.735946][T15157] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2335'. [ 608.754213][T15157] netlink: 'syz.5.2335': attribute type 1 has an invalid length. [ 608.765643][T15157] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2335'. [ 608.819959][T15165] xt_connbytes: Forcing CT accounting to be enabled [ 609.578172][T15203] 8021q: adding VLAN 0 to HW filter on device bond5 [ 609.629932][T15208] macsec1: entered promiscuous mode [ 609.652670][T15208] bond5: entered promiscuous mode [ 609.673317][T15208] macsec1: entered allmulticast mode [ 609.683230][T15208] bond5: entered allmulticast mode [ 609.705123][T15213] netlink: 'syz.0.2354': attribute type 14 has an invalid length. [ 609.713691][T15208] bond5: left allmulticast mode [ 609.721856][T15208] bond5: left promiscuous mode [ 609.816348][T15213] bond0: option xmit_hash_policy: invalid value (8) [ 609.953321][T15223] lo speed is unknown, defaulting to 1000 [ 610.269811][T15233] netlink: 'syz.2.2360': attribute type 1 has an invalid length. [ 610.336258][T15233] __nla_validate_parse: 6 callbacks suppressed [ 610.336277][T15233] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2360'. [ 610.831741][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2367'. [ 610.863219][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2365'. [ 610.872188][T15248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2365'. [ 610.911998][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.935008][T15248] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2365'. [ 610.949902][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.958117][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.994328][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.049507][T15261] tipc: Enabling of bearer rejected, failed to enable media [ 611.384291][T15284] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2375'. [ 611.394179][T15284] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2375'. [ 611.429505][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2375'. [ 611.495157][ T5829] block nbd0: Receive control failed (result -1) [ 612.405355][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2386'. [ 612.415233][T15320] lo speed is unknown, defaulting to 1000 [ 613.391696][T15349] netlink: 'syz.5.2390': attribute type 39 has an invalid length. [ 613.421651][T15351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.209073][T15377] lo speed is unknown, defaulting to 1000 [ 614.349423][T15386] syzkaller0: entered promiscuous mode [ 614.375250][T15386] syzkaller0: entered allmulticast mode [ 614.416401][T15386] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2404'. [ 614.445790][T15386] netlink: 'syz.1.2404': attribute type 6 has an invalid length. [ 614.463882][T15386] netlink: 'syz.1.2404': attribute type 5 has an invalid length. [ 614.513842][T15390] Cannot find del_set index 3 as target [ 615.055361][T15404] openvswitch: netlink: IP tunnel TTL not specified. [ 615.536971][T15413] __nla_validate_parse: 4 callbacks suppressed [ 615.536990][T15413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2415'. [ 615.622585][T15416] pimreg3: entered allmulticast mode [ 615.889939][T15432] geneve2: entered promiscuous mode [ 616.006760][T15432] lo speed is unknown, defaulting to 1000 [ 616.240112][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2424'. [ 616.599297][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 616.680268][T15465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2429'. [ 616.705144][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2426'. [ 616.739431][T15457] veth1_macvtap: left promiscuous mode [ 616.780562][T15467] sctp: [Deprecated]: syz.1.2429 (pid 15467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.780562][T15467] Use struct sctp_sack_info instead [ 617.390206][T15477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2433'. [ 617.413599][T15477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2433'. [ 617.460862][T15483] netlink: 'syz.0.2434': attribute type 1 has an invalid length. [ 617.642939][T15489] netlink: 'syz.1.2436': attribute type 1 has an invalid length. [ 617.796142][T15500] bond8: (slave geneve3): making interface the new active one [ 617.839026][T15500] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 617.879847][ T4048] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 617.888160][ T4048] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 617.903469][ T4048] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 617.931132][ T4048] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 617.992246][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2440'. [ 618.231010][T15521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 618.434756][T15529] tipc: Enabled bearer , priority 0 [ 618.454008][T15529] syzkaller0: entered promiscuous mode [ 618.472957][T15529] syzkaller0: entered allmulticast mode [ 618.641388][T15528] tipc: Resetting bearer [ 618.693733][T15528] tipc: Disabling bearer [ 618.893673][T15554] netlink: 'syz.5.2453': attribute type 1 has an invalid length. [ 619.089766][T15573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2458'. [ 619.146863][T15563] bond9: option lacp_active: invalid value (8) [ 619.157333][T15563] bond9 (unregistering): Released all slaves [ 619.181590][T15579] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2461'. [ 619.480155][T15585] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2462'. [ 619.755923][T15599] geneve3: entered promiscuous mode [ 619.912913][T15611] ip6gretap1: entered promiscuous mode [ 619.942921][T15614] lo speed is unknown, defaulting to 1000 [ 620.248943][T15629] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 620.255531][T15629] dvmrp1: linktype set to 804 [ 620.537412][T15634] bond0: entered promiscuous mode [ 620.551877][T15634] bond_slave_0: entered promiscuous mode [ 620.562200][T15634] dummy0: entered promiscuous mode [ 620.573903][T15634] bridge_slave_1: entered promiscuous mode [ 620.588517][T15634] bond0: left promiscuous mode [ 620.640010][T15634] bond_slave_0: left promiscuous mode [ 620.649826][T15634] dummy0: left promiscuous mode [ 620.658311][T15634] bridge_slave_1: left promiscuous mode [ 621.167701][T15677] __nla_validate_parse: 6 callbacks suppressed [ 621.167720][T15677] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2488'. [ 621.168379][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2486'. [ 621.202996][T15663] bridge_slave_1: left allmulticast mode [ 621.208938][T15663] bridge_slave_1: left promiscuous mode [ 621.214912][T15663] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.238236][T15663] bridge_slave_0: left allmulticast mode [ 621.244091][T15663] bridge_slave_0: left promiscuous mode [ 621.259643][T15663] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.302341][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'. [ 621.477913][T15684] syzkaller0: entered promiscuous mode [ 621.485711][T15684] syzkaller0: entered allmulticast mode [ 621.500573][T15697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2493'. [ 621.558325][T15695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2492'. [ 621.703465][T15704] team_slave_0: entered promiscuous mode [ 621.709520][T15704] team_slave_1: entered promiscuous mode [ 621.719038][T15704] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 621.744872][T15706] netlink: 'syz.2.2496': attribute type 2 has an invalid length. [ 621.777430][T15706] : entered promiscuous mode [ 621.855291][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e701400: rx timeout, send abort [ 621.865577][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e700c00: rx timeout, send abort [ 621.981588][T15724] netlink: 'syz.1.2501': attribute type 1 has an invalid length. [ 621.995934][T15720] netlink: 'syz.1.2501': attribute type 10 has an invalid length. [ 622.015664][T15724] netlink: 'syz.1.2501': attribute type 10 has an invalid length. [ 622.024955][T15721] lo speed is unknown, defaulting to 1000 [ 622.029020][T15720] team0: left allmulticast mode [ 622.035952][T15728] netlink: 'syz.2.2503': attribute type 5 has an invalid length. [ 622.044392][T15720] team_slave_0: left allmulticast mode [ 622.064383][T15720] team_slave_1: left allmulticast mode [ 622.083798][T15720] team0: left promiscuous mode [ 622.088604][T15720] team_slave_0: left promiscuous mode [ 622.094328][T15720] team_slave_1: left promiscuous mode [ 622.100431][T15720] bridge0: port 3(team0) entered disabled state [ 622.111884][T15720] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.130352][T15720] bond0: (slave team0): Enslaving as an active interface with an up link [ 622.156489][T15734] can: request_module (can-proto-0) failed. [ 622.223735][T15730] lo speed is unknown, defaulting to 1000 [ 622.304035][T15744] nbd: must specify at least one socket [ 622.313471][T15744] netlink: 'syz.1.2506': attribute type 3 has an invalid length. [ 622.364916][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e701400: abort rx timeout. Force session deactivation [ 622.378667][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e700c00: abort rx timeout. Force session deactivation [ 622.412201][T15746] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2507'. [ 622.562095][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 622.981768][T15772] atomic_op ffff888055771198 conn xmit_atomic 0000000000000000 [ 623.015112][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 623.695004][T15809] netlink: 'syz.4.2523': attribute type 29 has an invalid length. [ 623.704910][T15809] netlink: 'syz.4.2523': attribute type 29 has an invalid length. [ 623.793105][T15809] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2523'. [ 623.860460][T15821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'. [ 624.189451][T15835] bridge_slave_1: entered promiscuous mode [ 624.199321][T15835] bridge_slave_1: entered allmulticast mode [ 624.293895][T15835] lo speed is unknown, defaulting to 1000 [ 624.365579][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.527357][T15843] lo speed is unknown, defaulting to 1000 [ 624.830273][T15861] netlink: 'syz.1.2538': attribute type 2 has an invalid length. [ 624.838179][T15861] netlink: 'syz.1.2538': attribute type 1 has an invalid length. [ 624.912657][T15867] x_tables: duplicate underflow at hook 1 [ 625.064338][T15875] netlink: 'syz.1.2543': attribute type 33 has an invalid length. [ 625.094198][T15870] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.122390][T15875] `: renamed from team0 [ 625.155560][T15874] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20001 [ 625.165865][T15874] netlink: ct family unspecified [ 625.172849][T15874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.196380][T15870] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.417183][T15885] team1: entered promiscuous mode [ 625.433035][T15885] team1: entered allmulticast mode [ 625.443394][T15889] netlink: 'syz.4.2545': attribute type 12 has an invalid length. [ 625.492724][T15870] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.579866][T15894] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 625.605920][T15870] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.678239][T15904] netlink: 'syz.1.2550': attribute type 1 has an invalid length. [ 625.719957][T15904] netlink: 'syz.1.2550': attribute type 1 has an invalid length. [ 625.859053][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.885498][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.930412][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.961026][T15925] block nbd2: shutting down sockets [ 626.042013][ T4494] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.109441][ T30] audit: type=1800 audit(1768650840.356:11): pid=15931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2556" name="memory.events" dev="tmpfs" ino=1273 res=0 errno=0 [ 626.375658][T15943] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.390062][T15947] __nla_validate_parse: 8 callbacks suppressed [ 626.390077][T15947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2561'. [ 626.448553][T15943] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.522219][T15943] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.548693][T15954] lo: left promiscuous mode [ 626.560827][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2562'. [ 626.572206][T15954] tunl0: left promiscuous mode [ 626.577462][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2562'. [ 626.595291][T15954] gre0: left promiscuous mode [ 626.600663][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2562'. [ 626.610950][T15954] gretap0: left promiscuous mode [ 626.616425][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2562'. [ 626.626091][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2562'. [ 626.635757][T15954] ip_vti0: left promiscuous mode [ 626.641310][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2562'. [ 626.656145][T15954] ip6_vti0: left promiscuous mode [ 626.664269][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2562'. [ 626.674800][T15954] sit0: left promiscuous mode [ 626.685614][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2562'. [ 626.700956][T15954] ip6tnl0: left promiscuous mode [ 626.712026][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2562'. [ 626.724033][T15954] ip6gre0: left promiscuous mode [ 626.732082][T15954] ip6gretap0: left promiscuous mode [ 626.738107][T15954] vcan0: left promiscuous mode [ 626.744476][T15954] team0: left promiscuous mode [ 626.751337][T15954] team_slave_0: left promiscuous mode [ 626.757138][T15954] team_slave_1: left promiscuous mode [ 626.764724][T15954] dummy0: left promiscuous mode [ 626.771771][T15954] nlmon0: left promiscuous mode [ 626.783094][T15954] caif0: left promiscuous mode [ 626.791518][T15954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 626.810488][T15943] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.953584][T15967] netlink: 'syz.4.2567': attribute type 1 has an invalid length. [ 627.101593][T15971] bpq0: left promiscuous mode [ 627.526665][T15984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.747535][T15990] lo speed is unknown, defaulting to 1000 [ 627.793189][ T4494] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.837469][ T4494] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.884351][ T4494] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.899971][T15996] syzkaller0: entered promiscuous mode [ 627.910369][T15996] syzkaller0: entered allmulticast mode [ 627.979735][ T62] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.536130][T16034] netlink: 'syz.2.2585': attribute type 29 has an invalid length. [ 628.560307][T16034] netlink: 'syz.2.2585': attribute type 17 has an invalid length. [ 628.571144][T16032] vlan2: entered promiscuous mode [ 628.576269][T16034] netlink: 'syz.2.2585': attribute type 5 has an invalid length. [ 628.585057][T16032] geneve1: entered promiscuous mode [ 628.644717][T16033] vlan2: entered promiscuous mode [ 629.860852][T16085] syzkaller0: entered promiscuous mode [ 629.877866][T16085] syzkaller0: entered allmulticast mode [ 629.884333][T16086] validate_nla: 2 callbacks suppressed [ 629.884350][T16086] netlink: 'syz.1.2599': attribute type 13 has an invalid length. [ 630.007619][ T74] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 630.023473][ T74] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 630.072619][ T74] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 630.082889][ T74] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 630.352943][T16101] xt_hashlimit: size too large, truncated to 1048576 [ 631.090775][T16134] veth5: entered promiscuous mode [ 631.145426][T16149] bridge0: entered promiscuous mode [ 631.162023][T16149] bridge0: entered allmulticast mode [ 631.191778][T16149] team0: Port device bridge0 added [ 631.341495][T16161] pim6reg1: entered promiscuous mode [ 631.346845][T16161] pim6reg1: entered allmulticast mode [ 631.468548][T16170] lo speed is unknown, defaulting to 1000 [ 632.227574][T16204] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.362528][T16213] __nla_validate_parse: 89 callbacks suppressed [ 632.362556][T16213] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2637'. [ 632.430615][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2637'. [ 632.449412][T16213] netlink: 'syz.5.2637': attribute type 21 has an invalid length. [ 632.568472][T16228] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2640'. [ 632.655881][T16233] netlink: 'syz.0.2641': attribute type 1 has an invalid length. [ 632.672993][T16234] netlink: 'syz.0.2641': attribute type 1 has an invalid length. [ 632.720123][T16233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2641'. [ 632.733562][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2643'. [ 632.884935][T16251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.898563][T16247] lo speed is unknown, defaulting to 1000 [ 632.991986][T16257] netlink: 'syz.4.2648': attribute type 1 has an invalid length. [ 633.001079][T16257] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2648'. [ 633.041146][T16260] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 633.072385][T16261] lo speed is unknown, defaulting to 1000 [ 633.269539][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2652'. [ 633.424797][T16277] netlink: 'syz.1.2652': attribute type 10 has an invalid length. [ 633.444672][T16274] netlink: 'syz.1.2652': attribute type 3 has an invalid length. [ 633.452608][T16274] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2652'. [ 633.510669][T16280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2655'. [ 633.563272][T16281] netlink: 'syz.4.2655': attribute type 1 has an invalid length. [ 633.571576][T16281] netlink: 'syz.4.2655': attribute type 2 has an invalid length. [ 633.579450][T16281] netlink: 'syz.4.2655': attribute type 1 has an invalid length. [ 633.587481][T16281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2655'. [ 635.002610][T16340] erspan0: left allmulticast mode [ 635.007785][T16340] erspan0: left promiscuous mode [ 635.013734][T16340] bridge0: port 3(erspan0) entered disabled state [ 635.023022][T16340] bridge_slave_1: left allmulticast mode [ 635.028686][T16340] bridge_slave_1: left promiscuous mode [ 635.080063][T16340] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.116647][T16340] bridge_slave_0: left allmulticast mode [ 635.127132][T16340] bridge_slave_0: left promiscuous mode [ 635.156642][T16340] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.276618][T16348] tipc: Enabled bearer , priority 0 [ 635.310805][T16350] syzkaller0: entered promiscuous mode [ 635.316520][T16350] syzkaller0: entered allmulticast mode [ 635.322736][T16350] tipc: Resetting bearer [ 635.347132][T16347] tipc: Resetting bearer [ 636.916284][T16347] tipc: Disabling bearer [ 636.930957][ T6532] tipc: Node number set to 1779952344 [ 636.954571][T16371] lo speed is unknown, defaulting to 1000 [ 637.131016][T16405] netlink: zone id is out of range [ 637.136221][T16405] netlink: zone id is out of range [ 637.149571][T16405] netlink: zone id is out of range [ 637.154730][T16405] netlink: zone id is out of range [ 637.182062][T16408] syzkaller1: entered promiscuous mode [ 637.187825][T16405] netlink: zone id is out of range [ 637.193329][T16405] netlink: zone id is out of range [ 637.201911][T16405] netlink: zone id is out of range [ 637.204453][T16408] syzkaller1: entered allmulticast mode [ 637.207232][T16405] netlink: zone id is out of range [ 637.265136][T16408] syzkaller0: entered promiscuous mode [ 637.290656][T16408] syzkaller0: entered allmulticast mode [ 637.325911][T16411] netlink: 'syz.2.2689': attribute type 2 has an invalid length. [ 637.346345][T16411] 9: entered promiscuous mode [ 637.980712][T16435] __nla_validate_parse: 6 callbacks suppressed [ 637.980729][T16435] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2695'. [ 638.050350][T16437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2696'. [ 638.340322][T16438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2696'. [ 638.855698][T16460] netlink: 'syz.4.2701': attribute type 1 has an invalid length. [ 639.005793][T16464] can: request_module (can-proto-0) failed. [ 640.315743][T16456] lo speed is unknown, defaulting to 1000 [ 640.462331][T16469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2704'. [ 640.630980][T16479] syzkaller0: entered promiscuous mode [ 640.646780][T16479] syzkaller0: entered allmulticast mode [ 640.867282][T16489] syzkaller0: entered promiscuous mode [ 640.872969][T16489] syzkaller0: entered allmulticast mode [ 640.917485][T16489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2711'. [ 641.252259][T16505] lo speed is unknown, defaulting to 1000 [ 641.742727][T16530] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 641.900166][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2723'. [ 641.987546][T16542] 8021q: adding VLAN 0 to HW filter on device bond6 [ 642.311040][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2730'. [ 642.413664][T16553] netlink: 'syz.4.2729': attribute type 39 has an invalid length. [ 642.474184][T16562] atomic_op ffff888055701998 conn xmit_atomic 0000000000000000 [ 642.786672][T16561] erspan0: entered promiscuous mode [ 642.822469][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2731'. [ 643.299684][T16596] xt_TCPMSS: Only works on TCP SYN packets [ 643.524129][T16588] lo speed is unknown, defaulting to 1000 [ 643.765095][T16607] bond7: Removing last arp target with arp_interval on [ 643.790716][T16612] netlink: 'syz.4.2743': attribute type 4 has an invalid length. [ 643.840212][ T48] lo speed is unknown, defaulting to 1000 [ 643.859286][ T48] syz2: Port: 1 Link DOWN [ 643.905656][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2743'. [ 643.987612][T16626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2749'. [ 644.032375][T16623] lo speed is unknown, defaulting to 1000 [ 644.097065][T16630] tipc: Enabling of bearer rejected, failed to enable media [ 644.393476][T16643] netlink: 'syz.4.2752': attribute type 4 has an invalid length. [ 644.402945][T16643] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2752'. [ 644.890887][T16656] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2755'. [ 644.900919][T16656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2755'. [ 644.991381][T16658] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2757'. [ 645.024516][T16658] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2757'. [ 645.077230][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2758'. [ 645.447919][T16671] bond5: entered allmulticast mode [ 645.453722][T16671] 8021q: adding VLAN 0 to HW filter on device bond5 [ 645.543006][T16678] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2763'. [ 645.689879][T16692] ip6tnl0: Caught tx_queue_len zero misconfig [ 645.903599][T16711] syzkaller0: entered promiscuous mode [ 645.915537][T16711] syzkaller0: entered allmulticast mode [ 646.062627][T16723] tipc: Enabling of bearer rejected, failed to enable media [ 646.073254][T16723] netlink: 'syz.5.2777': attribute type 32 has an invalid length. [ 646.089344][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2777'. [ 646.128291][T16723] bond6: option coupled_control: invalid value (84) [ 646.140854][T16723] bond6 (unregistering): Released all slaves [ 646.363105][T16742] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 646.369721][T16742] syzkaller0: linktype set to 780 [ 646.474003][T16745] siw: device registration error -23 [ 646.666430][T16738] lo speed is unknown, defaulting to 1000 [ 646.872153][T16754] lo speed is unknown, defaulting to 1000 [ 646.910518][T11062] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 646.921957][T11062] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 646.931761][T11062] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 646.948136][T11062] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 646.957104][T11062] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 647.034295][T16758] lo speed is unknown, defaulting to 1000 [ 647.619092][T16769] lo speed is unknown, defaulting to 1000 [ 647.663310][T16771] netlink: 'syz.2.2792': attribute type 298 has an invalid length. [ 647.961963][ T74] veth0_to_bridge: left allmulticast mode [ 647.976727][ T74] veth0_to_bridge: left promiscuous mode [ 647.991859][ T74] bridge0: port 4(veth0_to_bridge) entered disabled state [ 648.016331][ T74] bridge_slave_1: left allmulticast mode [ 648.032787][ T74] bridge_slave_1: left promiscuous mode [ 648.049021][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.074798][ T74] bridge_slave_0: left allmulticast mode [ 648.081520][ T74] bridge_slave_0: left promiscuous mode [ 648.087691][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.384134][ T74] bond8 (unregistering): (slave geneve3): Releasing active interface [ 648.652475][ T74] `: Port device bridge5 removed [ 648.860394][ T74] bond7 (unregistering): (slave bridge9): Releasing active interface [ 648.979997][ T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.990016][ T74] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 648.999361][ T5829] Bluetooth: hci5: command tx timeout [ 649.006423][ T74] bond0 (unregistering): (slave `): Releasing backup interface [ 649.016259][ T74] bond0 (unregistering): Released all slaves [ 649.112316][ T74] bond1 (unregistering): Released all slaves [ 649.124557][ T74] bond2 (unregistering): Released all slaves [ 649.136500][ T74] bond3 (unregistering): Released all slaves [ 649.236416][ T74] bond4 (unregistering): Released all slaves [ 649.249887][ T74] bond5 (unregistering): Released all slaves [ 649.347758][ T74] bond6 (unregistering): (slave wireguard0): Releasing backup interface [ 649.356300][ T74] wireguard0: left promiscuous mode [ 649.362596][ T74] bond6 (unregistering): (slave wireguard1): Releasing backup interface [ 649.371442][ T74] bond6 (unregistering): Released all slaves [ 649.384611][ T74] bond7 (unregistering): Released all slaves [ 649.396679][ T74] bond8 (unregistering): Released all slaves [ 649.518035][ T74] hmac(sha224: left promiscuous mode [ 649.602256][ T74] tipc: Left network mode [ 649.826706][T16774] lo speed is unknown, defaulting to 1000 [ 651.086338][ T5829] Bluetooth: hci5: command tx timeout [ 651.093273][ T74] hsr_slave_0: left promiscuous mode [ 651.136030][ T74] hsr_slave_1: left promiscuous mode [ 651.155774][ T74] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.181378][ T74] pimreg3 (unregistering): left allmulticast mode [ 651.181638][T16799] __nla_validate_parse: 1 callbacks suppressed [ 651.181652][T16799] netlink: 163504 bytes leftover after parsing attributes in process `syz.0.2798'. [ 651.900295][ T74] ` (unregistering): Port device team_slave_1 removed [ 651.956916][ T74] ` (unregistering): Port device team_slave_0 removed [ 652.431810][T16758] chnl_net:caif_netlink_parms(): no params data found [ 652.638448][T16828] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2804'. [ 652.639140][T16758] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.655701][T16758] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.663038][T16758] bridge_slave_0: entered allmulticast mode [ 652.681052][T16828] netlink: 'syz.5.2804': attribute type 3 has an invalid length. [ 652.692752][T16758] bridge_slave_0: entered promiscuous mode [ 652.694510][T16828] netlink: 'syz.5.2804': attribute type 1 has an invalid length. [ 652.704626][T16758] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.713670][T16828] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.2804'. [ 652.713736][T16758] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.730508][T16758] bridge_slave_1: entered allmulticast mode [ 652.737840][T16758] bridge_slave_1: entered promiscuous mode [ 652.811635][T16758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.847164][T16758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.937653][T16758] team0: Port device team_slave_0 added [ 652.960598][T16758] team0: Port device team_slave_1 added [ 653.031747][T16758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.040013][T16758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.076941][T16758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.136502][T16758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.151525][T16758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.162313][ T5829] Bluetooth: hci5: command tx timeout [ 653.209047][T16758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.443214][T16758] hsr_slave_0: entered promiscuous mode [ 653.447653][T16849] netlink: 'syz.4.2809': attribute type 13 has an invalid length. [ 653.470316][T16758] hsr_slave_1: entered promiscuous mode [ 653.476748][T16758] debugfs: 'hsr0' already exists in 'hsr' [ 653.504267][T16758] Cannot create hsr debugfs directory [ 653.972258][T16866] lo speed is unknown, defaulting to 1000 [ 654.201323][T16874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2815'. [ 654.379485][T16887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.407128][T16881] netdevsim netdevsim2: Direct firmware load for r failed with error -2 [ 654.429365][T16881] netdevsim netdevsim2: Falling back to sysfs fallback for: r [ 654.452925][T16890] netlink: 'syz.0.2819': attribute type 10 has an invalid length. [ 654.464404][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2818'. [ 654.475993][T16891] netpci0: tun_chr_ioctl cmd 1074025677 [ 654.488158][T16891] netpci0: linktype set to 6 [ 654.493397][T16892] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2818'. [ 654.499272][T16890] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2819'. [ 654.509332][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2818'. [ 654.539303][T16892] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2818'. [ 654.556073][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2818'. [ 654.861212][T16758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 654.891828][T16910] Unsupported ieee802154 address type: 0 [ 654.897586][T16758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 654.911335][T16910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.944065][T16758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 654.985033][T16758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 655.167628][T16758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.222897][T16758] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.231159][T16927] netlink: 'syz.4.2827': attribute type 16 has an invalid length. [ 655.239583][ T5829] Bluetooth: hci5: command tx timeout [ 655.241383][T16927] netlink: 'syz.4.2827': attribute type 17 has an invalid length. [ 655.281313][ T9938] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.288489][ T9938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.477254][T16927] erspan0: left allmulticast mode [ 655.498971][T16931] lo: Caught tx_queue_len zero misconfig [ 655.533476][ T6085] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.548679][ T6085] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.573990][ T9938] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.581223][ T9938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.593330][ T6085] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.602002][ T6085] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.621721][ T6085] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.630778][ T6085] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.659944][ T6085] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.675318][ T6085] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.198690][T16758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.347384][T16758] veth0_vlan: entered promiscuous mode [ 656.406330][T16758] veth1_vlan: entered promiscuous mode [ 656.509551][T16758] veth0_macvtap: entered promiscuous mode [ 656.538790][T16758] veth1_macvtap: entered promiscuous mode [ 656.558990][T16970] __nla_validate_parse: 3 callbacks suppressed [ 656.559008][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2837'. [ 656.584531][T16758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.626175][T16758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.658882][ T9938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.684778][ T9938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.735707][ T9938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.758901][ T9938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.821227][T16978] lo speed is unknown, defaulting to 1000 [ 656.830391][T16975] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2839'. [ 657.017247][ T6085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.039275][ T6085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.125375][ T9938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.148978][ T9938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.828228][T17012] netlink: 'syz.5.2847': attribute type 13 has an invalid length. [ 657.953630][T17019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2848'. [ 657.997940][T17020] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2847'. [ 657.998625][T17012] team_slave_0: left promiscuous mode [ 658.015847][T17012] team_slave_1: left promiscuous mode [ 658.308754][T17028] tipc: Enabling of bearer rejected, failed to enable media [ 658.318407][ T62] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.337727][ T62] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.367042][ T62] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.391666][ T62] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.472435][T17033] netlink: 'syz.2.2852': attribute type 10 has an invalid length. [ 658.508793][T17033] bond0: (slave dummy0): Releasing backup interface [ 658.528945][T17033] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 658.539170][T17033] team0: Failed to send options change via netlink (err -105) [ 658.546812][T17033] team0: Port device dummy0 added [ 658.587485][T17039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.718750][T17044] dummy0: entered promiscuous mode [ 658.746856][T17043] dummy0: left promiscuous mode [ 658.871187][T17051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2857'. [ 658.898452][T17051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2857'. [ 658.968773][T17055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2858'. [ 659.010075][T17049] tipc: Resetting bearer [ 659.093806][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2860'. [ 659.150933][T17061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.180329][ T4494] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.188744][ T4494] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.198517][ T4494] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.208892][ T4494] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.236512][T17060] lo speed is unknown, defaulting to 1000 [ 659.293339][T17068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2862'. [ 659.364152][T17073] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 659.552645][T17075] IPv6: sit1: Disabled Multicast RS [ 659.678823][T17083] x_tables: duplicate underflow at hook 2 [ 659.698747][T17083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2869'. [ 660.044970][T17101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 660.090486][T17101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 660.098471][T17101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 660.110621][T17101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 660.114256][T17095] team0: entered promiscuous mode [ 660.123456][T17101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 660.149401][T17095] team_slave_0: entered promiscuous mode [ 660.188809][T17095] team_slave_1: entered promiscuous mode [ 660.195432][T17095] dummy0: entered promiscuous mode [ 660.245484][T17095] batadv_slave_0: entered promiscuous mode [ 660.254063][T17095] batadv_slave_0: left promiscuous mode [ 660.260217][T17095] team0: left promiscuous mode [ 660.266171][T17095] team_slave_0: left promiscuous mode [ 660.280790][T17095] team_slave_1: left promiscuous mode [ 660.286476][T17095] dummy0: left promiscuous mode [ 660.437449][T17099] lo speed is unknown, defaulting to 1000 [ 660.720183][T17126] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 660.928317][T17138] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 660.954966][T17133] lo speed is unknown, defaulting to 1000 [ 661.388043][ T62] bond4 (unregistering): (slave ip6gretap2): Releasing backup interface [ 661.502025][ T62] bond1 (unregistering): (slave erspan1): Releasing active interface [ 661.510211][ T62] erspan1 (unregistering): left promiscuous mode [ 662.039408][T17101] Bluetooth: hci5: command 0x0405 tx timeout [ 662.096263][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.105169][ T62] bond_slave_0: left promiscuous mode [ 662.111786][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.122649][ T62] bond_slave_1: left promiscuous mode [ 662.128402][ T62] bond0 (unregistering): Released all slaves [ 662.201649][ T5829] Bluetooth: hci1: command tx timeout [ 662.238203][ T62] bond1 (unregistering): Released all slaves [ 662.250932][ T62] bond2 (unregistering): Released all slaves [ 662.262741][ T62] bond3 (unregistering): Released all slaves [ 662.362891][ T62] bond4 (unregistering): Released all slaves [ 662.464726][ T62] bond5 (unregistering): Released all slaves [ 662.476667][ T62] bond6 (unregistering): Released all slaves [ 662.491682][T17161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.518666][T17161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.564441][T17166] erspan0: entered promiscuous mode [ 662.575091][T17166] __nla_validate_parse: 3 callbacks suppressed [ 662.575109][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'. [ 662.632757][ T62] tipc: Left network mode [ 662.954703][T17187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2893'. [ 662.981413][T17190] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2894'. [ 663.349588][T17192] tipc: Enabling of bearer rejected, failed to enable media [ 663.551076][T17099] chnl_net:caif_netlink_parms(): no params data found [ 664.042158][T17228] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2903'. [ 664.111979][T17099] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.131798][T17099] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.158608][T17099] bridge_slave_0: entered allmulticast mode [ 664.166995][T17099] bridge_slave_0: entered promiscuous mode [ 664.182991][T17099] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.207076][T17099] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.235960][T17099] bridge_slave_1: entered allmulticast mode [ 664.252926][T17099] bridge_slave_1: entered promiscuous mode [ 664.283401][ T5829] Bluetooth: hci1: command tx timeout [ 664.307733][T17236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2904'. [ 664.635729][T17099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.669939][T17099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.761801][T17258] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2909'. [ 664.889708][T17253] lo speed is unknown, defaulting to 1000 [ 664.913221][T17099] team0: Port device team_slave_0 added [ 664.944941][T17099] team0: Port device team_slave_1 added [ 664.962142][T17261] sctp: [Deprecated]: syz.0.2910 (pid 17261) Use of int in maxseg socket option. [ 664.962142][T17261] Use struct sctp_assoc_value instead [ 665.007314][T17261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2910'. [ 665.059875][T17099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.077129][T17099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.129831][T17099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.142763][T17099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.159557][T17099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.200332][T17099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.239795][T17267] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2911'. [ 665.505508][T17271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2912'. [ 665.524644][T17099] hsr_slave_0: entered promiscuous mode [ 665.546495][T17099] hsr_slave_1: entered promiscuous mode [ 665.560099][T17271] netlink: 'syz.0.2912': attribute type 5 has an invalid length. [ 665.591593][T17099] debugfs: 'hsr0' already exists in 'hsr' [ 665.597348][T17099] Cannot create hsr debugfs directory [ 665.788869][ T62] hsr_slave_0: left promiscuous mode [ 665.800419][ T62] hsr_slave_1: left promiscuous mode [ 666.359838][ T5829] Bluetooth: hci1: command tx timeout [ 666.833145][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2918'. [ 666.913101][ T62] team0 (unregistering): Port device team_slave_1 removed [ 666.962528][ T62] team0 (unregistering): Port device team_slave_0 removed [ 667.480711][T17301] IPv6: sit2: Disabled Multicast RS [ 667.827753][ T62] IPVS: stop unused estimator thread 0... [ 668.100222][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2928'. [ 668.156703][T17341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2929'. [ 668.294977][ T24] IPVS: starting estimator thread 0... [ 668.313748][T17345] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 668.353159][T17099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 668.367601][T17099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 668.388040][T17099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 668.407960][T17346] IPVS: using max 28 ests per chain, 67200 per kthread [ 668.426102][T17099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 668.441150][ T5829] Bluetooth: hci1: command tx timeout [ 668.652821][T17099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.691983][T17099] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.714249][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.721471][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.756682][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.763886][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.134153][T17378] netlink: 'syz.2.2938': attribute type 3 has an invalid length. [ 669.163179][T17378] netlink: 'syz.2.2938': attribute type 3 has an invalid length. [ 669.216899][T17099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.298420][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2940'. [ 669.312296][T17386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2940'. [ 669.427645][T17386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2940'. [ 669.432534][ T6532] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 669.447891][T17386] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma? [ 669.550081][ T6532] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 669.601309][T17399] netlink: 'syz.5.2943': attribute type 1 has an invalid length. [ 669.672042][T17406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.686270][T17406] bond6: (slave batadv0): making interface the new active one [ 669.695271][T17406] bond6: (slave batadv0): Enslaving as an active interface with an up link [ 669.709387][T17404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2945'. [ 669.718615][T17404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2945'. [ 669.728539][T17404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2945'. [ 669.784822][T17099] veth0_vlan: entered promiscuous mode [ 669.801654][T17099] veth1_vlan: entered promiscuous mode [ 669.845888][T17099] veth0_macvtap: entered promiscuous mode [ 669.865291][T17099] veth1_macvtap: entered promiscuous mode [ 669.888905][T17099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.920805][T17099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.977953][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.001133][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.034037][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.050276][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.125874][T17427] netlink: 'syz.5.2952': attribute type 29 has an invalid length. [ 670.144137][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.163104][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.174050][T17427] netlink: 'syz.5.2952': attribute type 29 has an invalid length. [ 670.185252][T17427] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2952'. [ 670.204737][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 670.205382][T17427] unsupported nla_type 58 [ 670.229058][ T1954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.239797][ T1954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.376879][T17432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2952'. [ 670.885279][T17449] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 671.431444][ T1954] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 671.469573][ T1954] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 671.551928][ T6546] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 671.717658][T17495] x_tables: duplicate underflow at hook 2 [ 672.005461][T17101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 672.014902][T17101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 672.023690][T17101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 672.042511][T17101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 672.052282][T17101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 672.374486][T17506] geneve4: entered promiscuous mode [ 672.498707][ T4494] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.518015][ T4494] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.536100][ T4494] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.553662][ T4494] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.107483][T17525] openvswitch: netlink: Message has 8 unknown bytes. [ 673.189495][T17499] chnl_net:caif_netlink_parms(): no params data found [ 673.512942][T17499] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.529568][T17499] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.549483][T17499] bridge_slave_0: entered allmulticast mode [ 673.556475][T17499] bridge_slave_0: entered promiscuous mode [ 673.591214][T17499] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.598467][T17499] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.619455][T17499] bridge_slave_1: entered allmulticast mode [ 673.631308][T17499] bridge_slave_1: entered promiscuous mode [ 673.671475][T17543] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 673.733032][T17499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.760117][T17499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.119465][T17101] Bluetooth: hci3: command tx timeout [ 674.294535][T17499] team0: Port device team_slave_0 added [ 675.065771][T17499] team0: Port device team_slave_1 added [ 675.799752][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 676.182593][T17499] [ 676.184954][T17499] ====================================================== [ 676.191965][T17499] WARNING: possible circular locking dependency detected [ 676.198992][T17499] syzkaller #0 Not tainted [ 676.203400][T17499] ------------------------------------------------------ [ 676.210420][T17499] syz-executor/17499 is trying to acquire lock: [ 676.211048][T17101] Bluetooth: hci3: command tx timeout [ 676.216651][T17499] ffff888055ee4040 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0 [ 676.233495][T17499] [ 676.233495][T17499] but task is already holding lock: [ 676.240862][T17499] ffff888055ee4338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 676.249755][T17499] [ 676.249755][T17499] which lock already depends on the new lock. [ 676.249755][T17499] [ 676.260244][T17499] [ 676.260244][T17499] the existing dependency chain (in reverse order) is: [ 676.269257][T17499] [ 676.269257][T17499] -> #1 (&conn->lock#2){+.+.}-{4:4}: [ 676.276738][T17499] __mutex_lock+0x187/0x1350 [ 676.281849][T17499] l2cap_info_timeout+0x60/0xa0 [ 676.287218][T17499] process_scheduled_works+0xad1/0x1770 [ 676.293355][T17499] worker_thread+0x8a0/0xda0 [ 676.298453][T17499] kthread+0x711/0x8a0 [ 676.303030][T17499] ret_from_fork+0x510/0xa50 [ 676.308132][T17499] ret_from_fork_asm+0x1a/0x30 [ 676.313410][T17499] [ 676.313410][T17499] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}: [ 676.323649][T17499] __lock_acquire+0x15a6/0x2cf0 [ 676.329011][T17499] lock_acquire+0x107/0x340 [ 676.334017][T17499] __flush_work+0x6b8/0xbc0 [ 676.339025][T17499] __cancel_work_sync+0xbe/0x110 [ 676.344467][T17499] l2cap_conn_del+0x402/0x5b0 [ 676.349655][T17499] hci_conn_hash_flush+0x10d/0x260 [ 676.355274][T17499] hci_dev_close_sync+0x821/0x1100 [ 676.360887][T17499] hci_unregister_dev+0x21a/0x5b0 [ 676.366420][T17499] vhci_release+0x152/0x1a0 [ 676.371431][T17499] __fput+0x44c/0xa70 [ 676.375924][T17499] task_work_run+0x1d4/0x260 [ 676.381027][T17499] do_exit+0x694/0x22f0 [ 676.385694][T17499] do_group_exit+0x21c/0x2d0 [ 676.390798][T17499] get_signal+0x1285/0x1340 [ 676.395803][T17499] arch_do_signal_or_restart+0x9a/0x7a0 [ 676.401858][T17499] exit_to_user_mode_loop+0x87/0x4e0 [ 676.407650][T17499] do_syscall_64+0x2c1/0xf80 [ 676.412748][T17499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.419148][T17499] [ 676.419148][T17499] other info that might help us debug this: [ 676.419148][T17499] [ 676.429354][T17499] Possible unsafe locking scenario: [ 676.429354][T17499] [ 676.436785][T17499] CPU0 CPU1 [ 676.442135][T17499] ---- ---- [ 676.447478][T17499] lock(&conn->lock#2); [ 676.451713][T17499] lock((work_completion)(&(&conn->info_timer)->work)); [ 676.461237][T17499] lock(&conn->lock#2); [ 676.467986][T17499] lock((work_completion)(&(&conn->info_timer)->work)); [ 676.474992][T17499] [ 676.474992][T17499] *** DEADLOCK *** [ 676.474992][T17499] [ 676.483120][T17499] 5 locks held by syz-executor/17499: [ 676.488469][T17499] #0: ffff88804c178ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 676.498380][T17499] #1: ffff88804c1780c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 676.508028][T17499] #2: ffffffff8f484cc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 676.518019][T17499] #3: ffff888055ee4338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 676.527320][T17499] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0 [ 676.536446][T17499] [ 676.536446][T17499] stack backtrace: [ 676.542326][T17499] CPU: 1 UID: 0 PID: 17499 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 676.542344][T17499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 676.542354][T17499] Call Trace: [ 676.542361][T17499] [ 676.542368][T17499] dump_stack_lvl+0xe8/0x150 [ 676.542387][T17499] print_circular_bug+0x2e2/0x300 [ 676.542406][T17499] check_noncircular+0x12e/0x150 [ 676.542425][T17499] __lock_acquire+0x15a6/0x2cf0 [ 676.542440][T17499] ? do_raw_spin_lock+0x121/0x290 [ 676.542462][T17499] ? __flush_work+0xd2/0xbc0 [ 676.542476][T17499] lock_acquire+0x107/0x340 [ 676.542488][T17499] ? __flush_work+0xd2/0xbc0 [ 676.542507][T17499] ? __flush_work+0xd2/0xbc0 [ 676.542521][T17499] __flush_work+0x6b8/0xbc0 [ 676.542535][T17499] ? __flush_work+0xd2/0xbc0 [ 676.542551][T17499] ? __flush_work+0xd2/0xbc0 [ 676.542565][T17499] ? __pfx___flush_work+0x10/0x10 [ 676.542580][T17499] ? __pfx_wq_barrier_func+0x10/0x10 [ 676.542601][T17499] ? __cancel_work_sync+0x5c/0x110 [ 676.542618][T17499] __cancel_work_sync+0xbe/0x110 [ 676.542634][T17499] l2cap_conn_del+0x402/0x5b0 [ 676.542650][T17499] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 676.542663][T17499] hci_conn_hash_flush+0x10d/0x260 [ 676.542680][T17499] hci_dev_close_sync+0x821/0x1100 [ 676.542695][T17499] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 676.542707][T17499] ? up_write+0x1ac/0x410 [ 676.542722][T17499] ? rcu_is_watching+0x15/0xb0 [ 676.542741][T17499] hci_unregister_dev+0x21a/0x5b0 [ 676.542759][T17499] vhci_release+0x152/0x1a0 [ 676.542779][T17499] ? __pfx_vhci_release+0x10/0x10 [ 676.542797][T17499] __fput+0x44c/0xa70 [ 676.542817][T17499] task_work_run+0x1d4/0x260 [ 676.542836][T17499] ? __pfx_task_work_run+0x10/0x10 [ 676.542853][T17499] ? kmem_cache_free+0x197/0x620 [ 676.542866][T17499] ? do_exit+0x68f/0x22f0 [ 676.542885][T17499] do_exit+0x694/0x22f0 [ 676.542904][T17499] ? __pfx_do_exit+0x10/0x10 [ 676.542925][T17499] do_group_exit+0x21c/0x2d0 [ 676.542942][T17499] ? _raw_spin_unlock_irq+0x23/0x50 [ 676.542959][T17499] get_signal+0x1285/0x1340 [ 676.542978][T17499] arch_do_signal_or_restart+0x9a/0x7a0 [ 676.542999][T17499] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 676.543024][T17499] exit_to_user_mode_loop+0x87/0x4e0 [ 676.543038][T17499] ? rcu_is_watching+0x15/0xb0 [ 676.543054][T17499] do_syscall_64+0x2c1/0xf80 [ 676.543070][T17499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.543084][T17499] ? clear_bhb_loop+0x60/0xb0 [ 676.543098][T17499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.543117][T17499] RIP: 0033:0x7f5ab1fb7e80 [ 676.543129][T17499] Code: Unable to access opcode bytes at 0x7f5ab1fb7e56. [ 676.543136][T17499] RSP: 002b:00007ffffe790878 EFLAGS: 00000293 [ 676.543148][T17499] RAX: 0000000000000000 RBX: 00007f5ab2d14620 RCX: 00007f5ab1f915dc [ 676.543158][T17499] RDX: 00007ffffe790880 RSI: 00007ffffe7909b0 RDI: 0000000000000021 [ 676.543168][T17499] RBP: 0000000000000000 R08: 00007ffffe790e74 R09: 000000000000000c [ 676.543177][T17499] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 676.543185][T17499] R13: 0000000000000000 R14: 00007f5ab2d14670 R15: 0000000000000000 [ 676.543200][T17499] [ 677.024031][T17469] Set syz1 is full, maxelem 65536 reached [ 677.087653][ T4494] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.133258][ T4494] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.215985][ T4494] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.273394][ T4494] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.364260][ T4494] bridge_slave_1: left allmulticast mode [ 677.370021][ T4494] bridge_slave_1: left promiscuous mode [ 677.375694][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.383804][ T4494] bridge_slave_0: left allmulticast mode [ 677.390181][ T4494] bridge_slave_0: left promiscuous mode [ 677.395816][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.495387][ T4494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.506510][ T4494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.516034][ T4494] bond0 (unregistering): Released all slaves [ 677.734443][ T4494] hsr_slave_0: left promiscuous mode [ 677.756002][ T4494] hsr_slave_1: left promiscuous mode [ 677.770297][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.779629][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.787262][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.794754][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.804368][ T4494] veth1_macvtap: left promiscuous mode [ 677.810006][ T4494] veth0_macvtap: left promiscuous mode [ 677.815886][ T4494] veth1_vlan: left promiscuous mode [ 677.821222][ T4494] veth0_vlan: left promiscuous mode [ 677.944418][ T4494] team0 (unregistering): Port device team_slave_1 removed [ 677.965478][ T4494] team0 (unregistering): Port device team_slave_0 removed [ 684.519391][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 685.802056][ T1302] ieee802154 phy1 wpan1: encryption failed: -22