last executing test programs: 2.977437884s ago: executing program 3 (id=3590): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x28, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x2, 0x211, 0xa}], 0x10, 0xfffffffb}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x28, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x2, 0x211, 0xa}], 0x10, 0xfffffffb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0xf, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xff, 0x0, 0x0, 0x0, 0x66}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x400}], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 2.81060403s ago: executing program 3 (id=3592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x2a8, 0x258, 0x258, 0x2a8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xff], [], 'netpci0\x00', 'macvlan1\x00', {}, {0xff}, 0x2f}, 0x0, 0x130, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xffffffff}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "60db95d3e03de39c926015d8d54dcaf4804a3bfef1a2ab80f6f9c8224ca8"}}, {{@ipv6={@local, @empty, [0xff, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xff000000, 0xff, 0xff], 'veth1\x00', 'wlan1\x00', {0xff}, {}, 0x32, 0x4c, 0x5, 0x40}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@inet=@dscp={{0x28}}, @common=@mh={{0x28}, {"d05d", 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xd, 0x2c, "e016c3e591de7472ff050d72c9c2d406b39b1b6d463aaa174fdfac6da101"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f80)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x7800, 0x1, 0x75, 0x7, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x66, 0x0, 0x4, 0x4, 0x0, @local, @remote, {[@lsrr={0x83, 0x2b, 0xcc, [@empty, @broadcast, @multicast1, @loopback, @private=0xa010102, @loopback, @rand_addr=0x64010101, @private=0xa010101, @private=0xa010101, @local]}, @timestamp_addr={0x44, 0x34, 0xf6, 0x1, 0x5, [{@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@empty, 0x401}, {@multicast1, 0xe3d}, {@multicast1}, {@remote, 0x7}]}, @timestamp_prespec={0x44, 0x44, 0xa, 0x3, 0x1, [{@private=0xa010101, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x1}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010102, 0x10}]}, @ssrr={0x89, 0x1b, 0x1a, [@multicast1, @empty, @multicast1, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x1b}]}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000ffffff7f00000000", @ANYRES32, @ANYBLOB="000002000000000000400000000000004a29d05e6d2600800000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="01000000010000000400"/28], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) socket$inet(0x2, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r10, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r11}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r9, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r14 = bpf$ITER_CREATE(0xb, &(0x7f00000010c0)={r13}, 0x8) close(r14) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x3, 0x0, &(0x7f00000011c0), 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.70279908s ago: executing program 0 (id=3594): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='\x00', 0x800, &(0x7f0000000040)={@align=0xc, {0x7651, 0x100, 0xfffff863, 0x8}}, 0x5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x1}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1808000005200102000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000004509020000030000852000000f500300b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32, @ANYRES16=r1], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.559769137s ago: executing program 0 (id=3595): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0xfffffffe, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001014d9ec26bd7020fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004c00000b"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010081000000fcdbdf250300000024000180120001006574683a6c6f0000340002800800010014000000080002000b0000000b47858d5fb484f399ef9a3c92df0efbeafde511139a1512d15dabc78f32f9c8bc7c59c82964aa7de43e4dd01685139e12a5483390cf8b8fccac418683d88224b89841c7b4f0ad10bc010b0cc1ff96d2466a299867e93dd4417862497ee7efb360ea8414d480ef2acb46ae20379b2220f54174dc74fba70bb28069cbf0c9127d232a41beac0b2b7c374c542a2988a9a015bd99a90961b8ee270ac9e51080e30dceb6a7da6a933fb8a41e1a53c660cd"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b0f, &(0x7f0000000300)={'wlan1\x00', @random="02000000000a"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r8 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r8, &(0x7f00000003c0)={0xa, 0xe64, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000}, 0x1c) connect$inet6(r8, &(0x7f0000000400)={0xa, 0x4e22, 0x7ff, @empty, 0x4cae}, 0x1c) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC=r2, @ANYRESHEX, @ANYBLOB="a1fe018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="17ad189c0f07697a0fe655022b9192066ff8191b989a34d1a6b54baecd57d588446455a038d656c37bb329bd4286a1db0e38e8ffa5c2e4b4ddb3cf63ace98b705fc8db62daca7e1474332dac5a7b7dbae108a50c1fad0b392559ca8d7a111f71e788aff30ebb22af052eb75749d3612dacccc89da9df45d6098048a6480c7f2131735244a31e23aeb2ac45"], 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x850) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0xfffffffe, 0x4) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001014d9ec26bd7020fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004c00000b"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010081000000fcdbdf250300000024000180120001006574683a6c6f0000340002800800010014000000080002000b0000000b47858d5fb484f399ef9a3c92df0efbeafde511139a1512d15dabc78f32f9c8bc7c59c82964aa7de43e4dd01685139e12a5483390cf8b8fccac418683d88224b89841c7b4f0ad10bc010b0cc1ff96d2466a299867e93dd4417862497ee7efb360ea8414d480ef2acb46ae20379b2220f54174dc74fba70bb28069cbf0c9127d232a41beac0b2b7c374c542a2988a9a015bd99a90961b8ee270ac9e51080e30dceb6a7da6a933fb8a41e1a53c660cd"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b0f, &(0x7f0000000300)={'wlan1\x00', @random="02000000000a"}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000380)=0x9, 0x4) (async) bind$inet6(r8, &(0x7f00000003c0)={0xa, 0xe64, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000400)={0xa, 0x4e22, 0x7ff, @empty, 0x4cae}, 0x1c) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC=r2, @ANYRESHEX, @ANYBLOB="a1fe018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="17ad189c0f07697a0fe655022b9192066ff8191b989a34d1a6b54baecd57d588446455a038d656c37bb329bd4286a1db0e38e8ffa5c2e4b4ddb3cf63ace98b705fc8db62daca7e1474332dac5a7b7dbae108a50c1fad0b392559ca8d7a111f71e788aff30ebb22af052eb75749d3612dacccc89da9df45d6098048a6480c7f2131735244a31e23aeb2ac45"], 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x850) (async) 2.352429333s ago: executing program 3 (id=3597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'syzkaller1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000800)={{r2}, "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"}) 2.123375281s ago: executing program 4 (id=3598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r4) getsockname$packet(r4, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, 0x0, 0x4804) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)=""/144, 0x90}, {&(0x7f0000000c40)=""/217, 0xd9}, {&(0x7f0000000d40)=""/69, 0x45}, {&(0x7f0000000dc0)=""/4103, 0x1007}, {&(0x7f0000001e00)=""/141, 0x8d}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r4) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000001f00)=0x2, 0x4) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000002000)={0x68, r7, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8e5, 0x74}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x68}}, 0xe48633b1f0fc192a) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, 0x0, &(0x7f0000002080)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=ANY=[@ANYBLOB="14000000320001ff7f0000000000000001"], 0x14}}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003e0007010000000005000000017c00000400fc680c000180062106003b0000000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x4076cbba9945d516, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r11, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r11, @ANYBLOB="24200400858d0000380012800e00010069703665727370616e00000024000280050016000100000014000700fc000000000000000000000000000001040012"], 0x58}, 0x1, 0x0, 0x0, 0x40400c5}, 0x0) r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r13, 0x800448d2, &(0x7f0000000600)={0x4, &(0x7f0000000380)=[{}, {}, {@none}, {}]}) sendmsg$nl_generic(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000003e0007010000000005000000027c00000400fc680c000180062106"], 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 2.062333343s ago: executing program 1 (id=3599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70010000100033060040000000000001fc0000000000000000000000000045030000000000000000000049eaf1f973fbde72000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2100000000ac1414aa0000000000000000000000001c0004000200000000000000ac1e010100"/296], 0x170}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='c 75:'], 0x5d) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000054c0)=@newtfilter={0x70, 0x2c, 0xd3f, 0x12bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x20000000, 0x0, 0x13a9, 0x8, 0x277c, {0x17, 0x1, 0x0, 0xdb9, 0x3}, {0x8, 0x0, 0xa, 0x3, 0xff, 0x1}, 0x100, 0x7, 0xb}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 1.881662164s ago: executing program 2 (id=3600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newqdisc={0x7c, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1, 0xffe0}}, [@TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfd, 0x85, 0x7ff, 0x7, 0x0, 0x5, 0x7, 0x4}}, {0xc, 0x2, [0x3ea, 0x3, 0x1, 0xfff]}}, {{0x1c, 0x1, {0x1, 0x4c, 0x8, 0xffff0000, 0x2, 0x800, 0x3, 0x5}}, {0xe, 0x2, [0x7bc, 0x3, 0x4, 0x67f2, 0x9]}}]}]}, 0x7c}}, 0x4000090) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x10, 0x1409, 0x1, 0x70bd26, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4084}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r5, 0x1, 0x70bd2a, 0x65dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x0, 0xc31, 0x0, 0xf}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x20000) 1.868949671s ago: executing program 2 (id=3601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001780)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x2, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth0_to_hsr\x00'}}, 0x1e) 1.867523461s ago: executing program 3 (id=3602): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000b06010000000000000000000000000205000100070000000900020073797a3000000000090007"], 0x34}}, 0x0) listen(r1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000052000101fcffffffffffffff0a00"], 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000074) 1.804568682s ago: executing program 1 (id=3603): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380), 0x1) (async) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000240)='0', 0x1}, {&(0x7f0000000340)="89c718f606d7", 0x6}], 0x2) (async) recvfrom(r0, &(0x7f0000000040)=""/251, 0xfb, 0x40010000, &(0x7f0000000140)=@caif=@rfm={0x25, 0x401, "f218dd1e5c747ed311bd930235175aad"}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000001400)="e0b9cc0d0fc6b3c372f5ad9c4a90", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1d0, 0x1170, 0x1398, 0x0, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth0_to_hsr\x00', {}, {}, 0x53}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21, 0x1}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [0xff000000, 0xff, 0xff, 0xffffffff], @ipv4=@broadcast, [0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0xff, 0xffffff00, 0xffffff00, 0xff], 0x4, 0x100, 0x6922a4bc93354ea2, 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x410, 0x300}, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x6, 0x1, 'netbios-ns\x00'}}}, {{@ipv6={@empty, @mcast2, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) (async) syz_emit_ethernet(0x86, &(0x7f0000000800)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100200086dd60f70000004c2c00fe8000000000000000000000000000aaff020000e03ab1456d000000000000010c0604038940110300000000000000000000ffffe0000002ff020000000000a9c394a3001c000001fc02000000000000000000000000000187009078000000000000000000000000000000015e1011fa18"], 0x0) 1.625502786s ago: executing program 1 (id=3604): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x9f50add122b3b3a2, 0x0) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f00000000c0)=0x1, 0x4) close(0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000e0000113000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100200000009500000000000000b7020000000000007b9af8ff00000000b509020001000000dbaaf8ff50000000bf8200000000000004080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff760000b93e980000000000005608f2ff0201000b8500000007000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.624802059s ago: executing program 2 (id=3605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000700)={@local, 0x1, 0x2, 0xff, 0x0, 0x100}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENT(r5, 0x84, 0x7f, &(0x7f0000000600)={0x1, 0x8004}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000680)={r7, 0x7f}, &(0x7f00000006c0)=0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4e}, [@call={0x85, 0x0, 0x0, 0x6b}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000000)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001a00010000000000000000000a"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0x601, 0x20000000, 0x200, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xc, 0xffff}, {0x4, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000700)={@local, 0x1, 0x2, 0xff, 0x0, 0x100}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_EVENT(r5, 0x84, 0x7f, &(0x7f0000000600)={0x1, 0x8004}, &(0x7f0000000640)=0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000680)={r7, 0x7f}, &(0x7f00000006c0)=0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4e}, [@call={0x85, 0x0, 0x0, 0x6b}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000000)=0x7f, 0x4) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001a00010000000000000000000a"], 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0x601, 0x20000000, 0x200, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xc, 0xffff}, {0x4, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) 1.619430965s ago: executing program 0 (id=3606): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000003e001d2f102eaedc391b0500017c0000040042800c00018006010000000a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc0d0) 1.593717353s ago: executing program 4 (id=3607): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000180)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)="8000e8beec9dbc13", 0x8}], 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000001"], 0x30}, 0x4004000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) 1.485286881s ago: executing program 4 (id=3608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x801c, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x3}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048841}, 0x2c020004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x7, 0x7, 0x7, 0x5, 0x6, 0x7, 0x1, 0xb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4c000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0xc201}) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000004640)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004600)={&(0x7f0000004440)={0x1b0, 0x0, 0x1, 0x200, 0x0, 0x0, {0x5}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xbdb4}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xf8}]}}, @CTA_TUPLE_ORIG={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x1, 0x6]}, @CTA_TUPLE_ORIG={0xd4, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x8}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x8800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newlink={0x70, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x232bd, 0x51a81}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x800, @random="f6000eb73dc4"}}]}]}, @IFLA_ADDRESS={0xa, 0x1, @random="8edf24dbb740"}]}, 0x70}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) write$tun(r5, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfbc, 0x66, 0x0, 0xb, 0x67, 0x0, @rand_addr=0x64010102, @broadcast, {[@end]}}, "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"}}, 0xfca) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xff, 0x0, 0xff, 0x100fffe00], [0xffffffff, 0xffffffff, 0xff], 'team_slave_0\x00', 'nr0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x1, 'syz0\x00', 0xfe}}, @common=@unspec=@cpu={{0x28}, {0xffffffff, 0x1f}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x52e0, 0xb3b}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x31}, 0x48d0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}}, 0x24}}, 0x4048090) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r11, @ANYBLOB="0100000002"], 0x40) r13 = socket$can_raw(0x1d, 0x3, 0x1) socket$l2tp(0x2, 0x2, 0x73) setsockopt$CAN_RAW_FILTER(r13, 0x65, 0x1, &(0x7f00000002c0)=[{{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x4}, {0x4, 0x1, 0x1, 0x1}}], 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r12, &(0x7f0000000240), 0x0}, 0x20) socket$kcm(0x2, 0x3, 0x2) 1.412418624s ago: executing program 0 (id=3609): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x12) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x88100}, 0xc, &(0x7f00000016c0)={&(0x7f0000000b80)={0xb0c, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x3d8, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @private0, 0x1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x244, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2e95620ac76e61156544e11792f6f72a58ecf7eca9e98aaf20b6cf39e3712fdb"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0xe4}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4e2d65f8723f1df362fdff029a55a63de04f5bc9b6a6296a7962fa14b6a2a221"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @empty, 0x8}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20000}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @mcast1, 0xd5}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0e93d8ab0b395380ef15b1d3cea71c68d4283830464730782d91485ea02222b1"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x6e4, 0x8, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3f7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}]}, {0x158, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x8c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xbea}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @empty, 0xe5}}]}, {0x4e4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x330, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xd97, @mcast1, 0x2}}, @WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x4}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}]}, 0xb0c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffffffffffffffba, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r5, 0x25, 0x16, @void}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, 0x0, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x53b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040880}, 0x40050) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000880)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000a40)=@generic={0x0, r10}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r9, 0x0, 0x0}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r12) getsockname$packet(r12, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r13, @ANYBLOB="280012800900010076657468"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@gettfilter={0x5c, 0x2e, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0x8}, {0x0, 0xfff1}, {0x7, 0xf}}, [{0x8, 0xb, 0x89e}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xfff}, {0x8}, {0x8, 0xb, 0x21c}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x3}]}, 0x5c}}, 0x0) 1.385864265s ago: executing program 2 (id=3610): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) (async) socket(0x2d, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000600000000000000030000009310000001"], 0x0, 0x5}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000280)={{[0x4, 0x8, 0x7, 0x1]}, 0x0, 0x0, 0x6, 0x0, &(0x7f00000002c0)=[{{@_ha_fsid={[0xeb, 0x4cfc]}, {0x2, 0x8, 0x3, 0x6}}, 0x9, 0x0, '\\\x00'}, {{@align=0x9, {0x45bd, 0xfff7, 0x5, 0x4}}, 0xa9, 0x0, 'syztnl0\x00'}, {{@_ha_fsid={[0x10000, 0x5]}, {0x101, 0xe27, 0x6, 0x401}}, 0x0, 0x0, '\x00'}]}) (async) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) (async) sendmsg$nl_route(r3, 0x0, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="58000000020601060000000000000000000000080c00078008001240ec05000211000300686173683a6e65742c6e657400000000050005000200000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x11, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xa, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f00000009c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c}, 0x94) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r9, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)}, 0x20) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000d80)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) write(r11, &(0x7f0000000dc0)="120000001c0000010011223344556600060101010101010101010101010101010100", 0x22) (async, rerun: 64) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f0000000f40)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000fc0)='GPL\x00', 0x4, 0x7, &(0x7f0000001000)=""/4101, 0x0, 0xc}, 0x94) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002040)={&(0x7f0000002080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x4, 0x6000000}]}, @enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x8}]}, {0x0, [0x0, 0x30, 0x30, 0x0, 0x2e, 0x61]}}, &(0x7f00000020c0)=""/4089, 0x40, 0xff9, 0x1}, 0x28) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x400, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x44) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 1.166906111s ago: executing program 4 (id=3611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003000fef493b4cf210eff00000000000007000001040003800900020073797a32000000000900010073797a3000000000140000001000010000000000000000000084000a"], 0x78}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001a000100000000000000000081800000000000001000000014000200"], 0x30}, 0x1, 0x0, 0x0, 0x4000c95}, 0x40000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000a40)=0x3, 0x4) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000b00)=0x800, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000640)={r1, &(0x7f00000002c0)='[/\x00', 0x2800, &(0x7f0000000340)={@_ha_fsid={[0x7, 0x701b]}, {0x101, 0x8, 0xe7, 0x8}}, 0xfffffffa, &(0x7f0000000380), &(0x7f00000003c0)=0x9}) r5 = socket$kcm(0x2b, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000b40), 0x45) close(r5) accept4$x25(r4, &(0x7f0000000680)={0x9, @remote}, &(0x7f00000006c0)=0x12, 0x80000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x110, 0xb, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x400}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}, @IPSET_ATTR_COMMENT={0x9, 0x1a, '@:{-\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x40001) r7 = socket$alg(0x26, 0x5, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000060000000000000700000000020000000000001201000000002e5f00000030dc30"], 0x0, 0x3a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0xf, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a80)='GPL\x00', 0xb, 0x0, 0x0, 0x40f01, 0x30, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000ac0)=[{0x0, 0x2, 0x8, 0x7}], 0x10, 0xfff}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x14, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) bind$alg(r7, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x7, &(0x7f0000000780)="f5ffffff", 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 973.347037ms ago: executing program 0 (id=3612): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x3, &(0x7f0000000a80)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x1, 0x71, 0x10, 0x1a}}, &(0x7f0000000ac0)='syzkaller\x00', 0x9}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x101, 0x800, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x67, 0x0, 0x19, 0x4, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x78, 0x3, 0x3, [{@remote, 0x3ff}]}, @timestamp={0x44, 0x10, 0x62, 0x0, 0x9, [0x8, 0x2, 0x0]}, @timestamp={0x44, 0xc, 0x57, 0x0, 0x6, [0x4, 0x7]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x90, [@private=0xa010102, @loopback, @broadcast, @local, @local]}, @ra={0x94, 0x4}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x42, 0x0, &(0x7f00000005c0)) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000002c0), 0x10) syz_emit_ethernet(0xc2, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000c40), 0x181000, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000c80)={0x10}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000cc0)={0x0, 0x10, &(0x7f0000000d00)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000d40)=0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000d80)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f0000000dc0)={0x0, 0xfffffffc}, 0x8) sendmmsg$sock(r7, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)}}], 0x1, 0x24040040) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000e80)=@assoc_value={0x0}, &(0x7f0000000ec0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000f00)={r8, @in6={{0xa, 0x4e24, 0x3, @mcast1, 0x9554}}}, &(0x7f0000000fc0)=0x84) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000001000)={0x20000001}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000001100)={&(0x7f0000001140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r10, 0x6, 0xd, &(0x7f0000001180), 0x3b) 972.456822ms ago: executing program 4 (id=3613): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000006c0), &(0x7f0000000700)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000300000000000095"], 0x0, 0x28, 0x0, 0x9, 0x1}, 0x28) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40241, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000740)={0x1, @in6={{0xa, 0x4e23, 0x3ff, @remote, 0xfff}}}, &(0x7f0000000800)=0x84) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000740)={0x1, @in6={{0xa, 0x4e23, 0x3ff, @remote, 0xfff}}}, &(0x7f0000000800)=0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000003100)=@newqdisc={0x210, 0x24, 0x20, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xc}, {0xe, 0x1}, {0x4, 0xfff8}}, [@TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x10, 0x6, 0x6, 0x2, 0xfffffffa, 0x7, 0x5}}, {0xe, 0x2, [0x4, 0x101, 0xc, 0x5, 0xfffd]}}, {{0x1c, 0x1, {0xa, 0x2, 0x3, 0x4, 0x0, 0x1, 0x1, 0x4}}, {0xc, 0x2, [0xfffc, 0x800, 0xbac1, 0x1]}}, {{0x1c, 0x1, {0xe7, 0x4, 0xfff9, 0x3, 0x1, 0x8, 0xb2d, 0x3}}, {0xa, 0x2, [0x7, 0xb, 0x5]}}, {{0x1c, 0x1, {0x5, 0x80, 0x0, 0x4, 0x1, 0x2, 0x8, 0x3}}, {0xa, 0x2, [0x1, 0x7fff, 0x53]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x99b}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x324d5186}]}}, @TCA_STAB={0x108, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x400, 0x5646, 0x1, 0x7, 0x2, 0x2}}, {0x8, 0x2, [0x800, 0x0]}}, {{0x1c, 0x1, {0x3, 0xa, 0x1ff, 0x7, 0x2, 0xb, 0x1, 0x5}}, {0xe, 0x2, [0x0, 0xffff, 0x5, 0xc1, 0x100]}}, {{0x1c, 0x1, {0x8e, 0x2, 0x1ff, 0x0, 0x0, 0x3, 0x101, 0x8}}, {0x14, 0x2, [0x10, 0xfffd, 0x1ff, 0x4000, 0x8, 0x2, 0x3, 0x2]}}, {{0x1c, 0x1, {0x7, 0x0, 0x0, 0x10001, 0x1, 0xffff, 0x1, 0x5}}, {0xe, 0x2, [0x6, 0x7fff, 0x1, 0xb, 0xc]}}, {{0x1c, 0x1, {0x5, 0x90, 0x0, 0x5, 0x3, 0xa3ea, 0x1000, 0xa}}, {0x18, 0x2, [0x4, 0x6b9a, 0x7, 0x3, 0x800, 0xa, 0x8, 0x81, 0x30d9, 0x6]}}, {{0x1c, 0x1, {0x9, 0x7, 0x0, 0x400, 0x2, 0x0, 0x2, 0x2}}, {0x8, 0x2, [0xfffd, 0x0]}}]}, @qdisc_kind_options=@q_drr={0x8}]}, 0x210}}, 0x4044005) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000009c0)={0x3, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x700, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0xff, 0xc0, 0x0, @in6={0xa, 0x4e23, 0xd5a, @private0, 0xa}}]}, 0x38}, 0x1, 0x7}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000001f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$ITER_CREATE(0xb, &(0x7f0000001fc0), 0x0) (async) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000001fc0), 0x0) close(r11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x3, 0xd, &(0x7f00000020c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000007000000095"], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x3, 0xd, &(0x7f00000020c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000007000000095"], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002180)={@map=r11, r10, 0x2f}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0xc, 0xe, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000003000)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003040)={r12, 0x18000000000002a0, 0x24, 0x4a, &(0x7f00000030c0)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) 876.054452ms ago: executing program 3 (id=3614): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000000329bd7000fcdbdf2500000000", @ANYRESOCT=r0, @ANYBLOB="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"], 0x50}}, 0x2004040) 730.673793ms ago: executing program 3 (id=3615): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f00000001c0)={'wlan1\x00', @random="000010000b00"}) r3 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x6, 0x4, 0xffffffffffffffff, 0x800000000000004, 0xda, 0xe, 0x282f, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 621.839309ms ago: executing program 1 (id=3616): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018190000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES64=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x4c, 0x0, 0x0, 0x40, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000008100"/15, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008008000b7040000000000008500000033000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_emit_ethernet(0x5e, &(0x7f00000008c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000e86dd68d82b0600288900fe8000000000000000000000000000bbff02000000000000000000000000000100030000000000004c1888a907735e57847404fa694301d44ab0de5d057765e174db3c000000000000"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r6, 0x0, 0x25, 0x4, @val=@uprobe_multi={&(0x7f0000000500)='./file0\x00', &(0x7f0000000940)=[0x96, 0x2, 0x1, 0x6, 0x7, 0x8, 0x2, 0x7ff, 0x7ff], 0x0, 0xfffffffffffffff1, 0x9, 0x1}}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="6400000002060300000000000000000006000002050005000200000005080400000000000c00078008001240001000000900020073797a310000000012000300686173683a6e65742c706f727400000013000300686173683a6e65742c69666163650000"], 0x64}}, 0x4000000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x1, 0x1c26}, &(0x7f00000000c0)=0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r8], 0x100}}, 0x0) setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r9, 0x84, 0x82, &(0x7f0000000400)={r10, 0xd}, 0x8) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYRESOCT], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x4044814) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYRESHEX=r7, @ANYBLOB="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", @ANYBLOB="0000000000000000b72400000001000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r16, @ANYRES64], 0x2c}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r14, @ANYBLOB='\x00'/12], 0x28}}, 0x880) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r5], 0x34}}, 0x4008000) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x401}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 382.888412ms ago: executing program 1 (id=3617): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000030000008500000011000000180100002020782500000000002020b77b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b000000850000009b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae91bef25a74da67, 0x0, 0x7fff}, 0x2) 335.344416ms ago: executing program 4 (id=3618): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000500), 0xffffffc1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000010000000000000000850000009700000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000000840)='syzkaller\x00'}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000010000000000000000850000009700000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000000840)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}]}, {0x0, [0x30]}}, 0x0, 0x2b, 0x0, 0x1, 0x6}, 0x28) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r2, 0x0) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r2, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000440)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b40)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x40040) write$nci(r4, &(0x7f0000000d40)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, '\x00\x00\x00'}}, 0x8) write$nci(r4, &(0x7f0000000d80)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1, 0x4}, 0x4) (async) write$nci(r4, &(0x7f0000000d80)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1, 0x4}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a00)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x44, r10, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6d}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x2000c050) (async) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x44, r10, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6d}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x2000c050) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, r10, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x51) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x26, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000007000000000000000d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000088520000f0ffffff181a0000", @ANYRES32=r2, @ANYBLOB="0000000000000000059801000800000042980400ffffffffb7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000852000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000600000000000000000000000000b70200000100fb968500000084000000b7000000000000006e36702e2c8606650b58e61cf1300cf439637df0898294a9af6ded76e19cff7ad9bf6b2cf6f2b54eac34cca65a54abec7fc6779bf5300a482a4bf7902f0000000000000000"], &(0x7f0000000480)='GPL\x00', 0xa, 0xb1, &(0x7f0000000c80)=""/177, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r12, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000580), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x26, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000007000000000000000d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000088520000f0ffffff181a0000", @ANYRES32=r2, @ANYBLOB="0000000000000000059801000800000042980400ffffffffb7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000852000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000600000000000000000000000000b70200000100fb968500000084000000b7000000000000006e36702e2c8606650b58e61cf1300cf439637df0898294a9af6ded76e19cff7ad9bf6b2cf6f2b54eac34cca65a54abec7fc6779bf5300a482a4bf7902f0000000000000000"], &(0x7f0000000480)='GPL\x00', 0xa, 0xb1, &(0x7f0000000c80)=""/177, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r12, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000580), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) 266.174152ms ago: executing program 2 (id=3619): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="01000000000000000000150005230500000008000900030000001400200040000000000000000000e1ffa800000108000a00200000000600020000000014001f00432ff1890de6efeeea09b718da7aebe77fe73041bd6f153a2d9939db1bac397045c5611e34b1d8e8ad92b28e1551128b9c257a0f3298c255d2752f25e77e0236ba38f1599a3332b83f463dc4c97e3a049db59a84f7d980e381963a678ee026ad4b66f7fadf52dae75ffe78ebf32508b6721b6836cf3c1198"], 0x5c}, 0x1, 0x6c}, 0x0) 265.655455ms ago: executing program 1 (id=3620): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, 0x0, 0x4040840) (async) sendmsg$IEEE802154_LIST_PHY(r2, 0x0, 0x4040840) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000c40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x34, r4, 0x307fd3c255191db1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x34, r4, 0x307fd3c255191db1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000e40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x48010}, 0x8010) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000e40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x48010}, 0x8010) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f00000009c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000a00)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000b00), 0x36c}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0xbfff8000}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f00000004c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r12, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) sendmmsg(r12, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x8080, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x8080, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c0001000000000000000000"], 0x100}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c0001000000000000000000"], 0x100}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[], 0x6c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[], 0x6c}}, 0x0) r13 = socket$rds(0x15, 0x5, 0x0) bind$rds(r13, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r13, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@rdma_args={0x45, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f0000000140)=[{&(0x7f0000000180)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000b40)=0x8000, 0x4) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'}) 210.747403ms ago: executing program 2 (id=3621): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x4, 0x61, 0x11, 0x34}, [@initr0]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002e00000095"], &(0x7f0000000700)='GPL\x00'}, 0x94) 0s ago: executing program 0 (id=3622): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x82) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[], 0x48) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="14000000100000"], 0x14}}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{0x0}], 0x1}, 0x1050) (async) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@bloom_filter={0x1e, 0x0, 0xfd, 0x20000027}, 0x50) (async) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) (async, rerun: 32) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) (rerun: 32) sendmsg$inet(r2, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300068c1) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000e40)=[{&(0x7f0000000e80)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0), 0x0, 0x10, &(0x7f0000000b00), 0xfffffffffffffd00}, 0x48) kernel console output (not intermixed with test programs): lt+0x6a/0xc0 [ 360.304391][T17311] asm_exc_page_fault+0x26/0x30 [ 360.304427][T17311] RIP: 0033:0x7f63bd86c6cc [ 360.304445][T17311] Code: ee 8f ee 00 e8 03 00 00 48 8d 1d ef 98 3b 00 e8 7a 3f 13 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 360.304460][T17311] RSP: 002b:00007ffd09b97280 EFLAGS: 00010202 [ 360.304477][T17311] RAX: 0000000000000000 RBX: 00007f63bdc26090 RCX: 0000555587c9a808 [ 360.304489][T17311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.304499][T17311] RBP: 00007f63bdc27da0 R08: 0000000000000000 R09: 0000000000000000 [ 360.304509][T17311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000057f6d [ 360.304520][T17311] R13: 00007f63bdc2627c R14: 0000000000057d2c R15: 00007f63bdc26270 [ 360.304553][T17311] [ 360.304565][T17311] memory: usage 307200kB, limit 307200kB, failcnt 734 [ 360.304577][T17311] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 360.304589][T17311] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 360.304599][T17311] Memory cgroup stats for /syz3: [ 360.304781][T17311] cache 0 [ 360.304788][T17311] rss 0 [ 360.304794][T17311] rss_huge 0 [ 360.304800][T17311] shmem 0 [ 360.304806][T17311] mapped_file 0 [ 360.304811][T17311] dirty 0 [ 360.304817][T17311] writeback 0 [ 360.304823][T17311] workingset_refault_anon 9 [ 360.304830][T17311] workingset_refault_file 47 [ 360.304836][T17311] swap 212992 [ 360.304841][T17311] swapcached 20480 [ 360.304848][T17311] pgpgin 86166 [ 360.304853][T17311] pgpgout 86161 [ 360.304859][T17311] pgfault 147463 [ 360.304865][T17311] pgmajfault 7 [ 360.304871][T17311] inactive_anon 4096 [ 360.304877][T17311] active_anon 0 [ 360.304883][T17311] inactive_file 0 [ 360.304888][T17311] active_file 0 [ 360.304895][T17311] unevictable 0 [ 360.304900][T17311] hierarchical_memory_limit 314572800 [ 360.304907][T17311] hierarchical_memsw_limit 9223372036854771712 [ 360.304914][T17311] total_cache 0 [ 360.304920][T17311] total_rss 0 [ 360.304926][T17311] total_rss_huge 0 [ 360.304932][T17311] total_shmem 0 [ 360.304938][T17311] total_mapped_file 0 [ 360.304944][T17311] total_dirty 0 [ 360.304950][T17311] total_writeback 0 [ 360.304956][T17311] total_workingset_refault_anon 9 [ 360.304962][T17311] total_workingset_refault_file 47 [ 360.304969][T17311] total_swap 212992 [ 360.304975][T17311] total_swapcached 20480 [ 360.304981][T17311] total_pgpgin 86166 [ 360.304987][T17311] total_pgpgout 86161 [ 360.304993][T17311] total_pgfault 147463 [ 360.304999][T17311] total_pgmajfault 7 [ 360.305005][T17311] total_inactive_anon 4096 [ 360.305011][T17311] total_active_anon 0 [ 360.305017][T17311] total_inactive_file 0 [ 360.305023][T17311] total_active_file 0 [ 360.305029][T17311] total_unevictable 0 [ 360.305036][T17311] anon_cost 0 [ 360.305041][T17311] file_cost 0 [ 360.305047][T17311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2797,pid=17311,uid=0 [ 360.306471][T17311] Memory cgroup out of memory: Killed process 17311 (syz.3.2797) total-vm:106784kB, anon-rss:1268kB, file-rss:27084kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 360.876410][ T5635] Bluetooth: hci5: command tx timeout [ 361.613340][T17279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.655464][T17111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 361.687931][T17111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.689443][T17111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 361.765076][T17111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.772357][T17111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 361.803599][T17111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.842592][T17111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.853693][T17111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.973504][T17338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2802'. [ 362.176520][T17111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.207847][T17111] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.223794][T13488] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.223888][T13488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.247058][T13488] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.247186][T13488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.282799][T17328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2800'. [ 362.282937][T17328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2800'. [ 362.283065][T17328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2800'. [ 362.283222][T17328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2800'. [ 362.283351][T17328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2800'. [ 362.283474][T17328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2800'. [ 362.283602][T17328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2800'. [ 362.719563][T17367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.958333][ T5635] Bluetooth: hci5: command tx timeout [ 363.206920][T17111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.551481][T17111] veth0_vlan: entered promiscuous mode [ 363.566143][T17111] veth1_vlan: entered promiscuous mode [ 363.595014][T17111] veth0_macvtap: entered promiscuous mode [ 363.604404][T17111] veth1_macvtap: entered promiscuous mode [ 363.642574][T17111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.679196][T17111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.764492][ T8476] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.765249][T15097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.777978][ T8476] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.778016][ T8476] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.795298][T17379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.032065][ T8058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.032084][ T8058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.033103][T17421] __nla_validate_parse: 65 callbacks suppressed [ 366.033117][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2819'. [ 366.092804][T17421] IPv6: NLM_F_CREATE should be specified when creating new route [ 366.092905][T17421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.092914][T17421] IPv6: NLM_F_CREATE should be set when creating new route [ 366.092952][T17421] IPv6: NLM_F_CREATE should be set when creating new route [ 366.092974][T17421] IPv6: NLM_F_CREATE should be set when creating new route [ 366.101537][T17421] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2819'. [ 366.160187][ T8058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.160205][ T8058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.307329][T17433] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2822'. [ 366.342810][ T30] audit: type=1800 audit(1794159689.510:14): pid=17419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2818" name="f" dev="tmpfs" ino=2684 res=0 errno=-22 [ 366.650485][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2824'. [ 366.706640][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2825'. [ 366.706665][T17452] openvswitch: netlink: Invalid VLAN frame [ 366.758146][T17452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2825'. [ 366.783962][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2826'. [ 366.859150][T17458] ip_tables: iptables: counters copy to user failed while replacing table [ 366.883368][T17455] xt_cgroup: path and classid specified [ 366.917521][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'. [ 367.053590][T17463] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 367.094423][T17465] netlink: 548 bytes leftover after parsing attributes in process `syz.1.2828'. [ 367.222520][T17477] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2831'. [ 368.519329][T17497] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 368.604987][T17497] hsr_slave_1 (unregistering): left promiscuous mode [ 370.120123][T17469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.344402][T17507] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 370.500221][T17528] sctp: [Deprecated]: syz.2.2848 (pid 17528) Use of int in max_burst socket option. [ 370.500221][T17528] Use struct sctp_assoc_value instead [ 370.831469][T17550] netlink: 'syz.4.2851': attribute type 1 has an invalid length. [ 371.538104][T17562] bridge_slave_0: left allmulticast mode [ 371.538129][T17562] bridge_slave_0: left promiscuous mode [ 371.538330][T17562] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.569310][T17562] bridge_slave_1: left allmulticast mode [ 371.569333][T17562] bridge_slave_1: left promiscuous mode [ 371.569461][T17562] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.593340][T17571] __nla_validate_parse: 5 callbacks suppressed [ 371.593355][T17571] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2856'. [ 371.618728][T17562] bond0: (slave bond_slave_0): Releasing backup interface [ 371.638072][T17562] bond0: (slave bond_slave_1): Releasing backup interface [ 371.670205][T17575] xt_TCPMSS: Only works on TCP SYN packets [ 371.673364][T17562] team0: Port device team_slave_0 removed [ 371.697846][T17562] team0: Port device team_slave_1 removed [ 371.698809][T17562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.698821][T17562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.702692][T17562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.702709][T17562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.714364][T17562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.846095][T17577] vlan0: entered promiscuous mode [ 371.852702][T17577] team0: Port device vlan0 added [ 371.970019][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2858'. [ 372.057454][T17590] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2860'. [ 372.165127][T17592] xt_hashlimit: size too large, truncated to 1048576 [ 372.304937][T17617] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 372.922052][T17624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2867'. [ 373.074622][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'. [ 373.074642][T17628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2868'. [ 375.063374][T17596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.233817][T17631] geneve2: entered allmulticast mode [ 375.303836][T17637] ieee802154 phy0 wpan0: encryption failed: -126 [ 375.484325][T17653] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2871'. [ 375.487096][T17653] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2871'. [ 375.773416][T17674] tc_dump_action: action bad kind [ 376.426815][T17708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2886'. [ 378.553509][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.553570][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.096456][T17692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.377304][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2894'. [ 379.533003][T17758] IPVS: length: 117 != 24 [ 379.534374][T17758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2898'. [ 379.617093][T17771] netlink: 'syz.4.2900': attribute type 1 has an invalid length. [ 379.697770][T17774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2900'. [ 379.751965][T17771] bond1 (unregistering): Released all slaves [ 379.851594][T17782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.853248][T17782] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 379.904094][T17787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2905'. [ 379.971287][T17792] ip_tables: iptables: counters copy to user failed while replacing table [ 380.152295][T17798] syzkaller0: entered promiscuous mode [ 380.152314][T17798] syzkaller0: entered allmulticast mode [ 380.167787][T17800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2907'. [ 380.231287][T17807] xt_hashlimit: size too large, truncated to 1048576 [ 380.344670][T17814] ip_tables: iptables: counters copy to user failed while replacing table [ 380.370103][T17813] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.579661][T17813] netlink: 'syz.0.2908': attribute type 16 has an invalid length. [ 380.579680][T17813] netlink: 'syz.0.2908': attribute type 17 has an invalid length. [ 380.610494][T17813] ±ÿ: left promiscuous mode [ 380.612729][T17813] tunl0: left promiscuous mode [ 380.614084][T17813] gre0: left promiscuous mode [ 380.641163][T17813] erspan0: left promiscuous mode [ 380.650642][T17813] ip_vti0: left promiscuous mode [ 380.651988][T17813] ip6_vti0: left promiscuous mode [ 380.669080][T17813] sit0: left promiscuous mode [ 380.674796][T17813] ip6tnl0: left promiscuous mode [ 380.676309][T17813] ip6gre0: left promiscuous mode [ 380.697032][T17813] ip6gretap0: left promiscuous mode [ 380.699087][T17813] bridge0: left promiscuous mode [ 380.707545][T17813] vcan0: left promiscuous mode [ 380.708914][T17813] team0: left promiscuous mode [ 380.710018][T17813] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.712402][T17813] nlmon0: left promiscuous mode [ 380.713718][T17813] batadv0: left promiscuous mode [ 380.714717][T17813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.718044][T17813] vxcan0: left promiscuous mode [ 380.719210][T17813] vxcan1: left promiscuous mode [ 380.720274][T17813] veth0: left promiscuous mode [ 380.721587][T17813] veth1: left promiscuous mode [ 380.727556][T17813] wg0: left promiscuous mode [ 380.732858][T17813] wg1: left promiscuous mode [ 380.739109][T17813] wg2: left promiscuous mode [ 380.740453][T17813] veth1_to_bridge: left promiscuous mode [ 380.749349][T17813] veth0_to_bond: left promiscuous mode [ 380.750329][T17813] bond_slave_0: left promiscuous mode [ 380.750846][T17813] veth1_to_bond: left promiscuous mode [ 380.751806][T17813] bond_slave_1: left promiscuous mode [ 380.752335][T17813] veth0_to_team: left promiscuous mode [ 380.753280][T17813] team_slave_0: left promiscuous mode [ 380.754063][T17813] veth0_to_batadv: left promiscuous mode [ 380.755272][T17813] batadv_slave_0: left promiscuous mode [ 380.758904][T17813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.759172][T17813] xfrm0: left promiscuous mode [ 380.760807][T17813] veth0_to_hsr: left promiscuous mode [ 380.762302][T17813] veth1_to_hsr: left promiscuous mode [ 380.763779][T17813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.763795][T17813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.763841][T17813] hsr0: left promiscuous mode [ 380.764986][T17813] veth1_virt_wifi: left promiscuous mode [ 380.766027][T17813] veth0_virt_wifi: left promiscuous mode [ 380.780980][T17813] virt_wifi0: left promiscuous mode [ 380.782240][T17813] veth1_macvtap: left promiscuous mode [ 380.783398][T17813] veth0_macvtap: left promiscuous mode [ 380.784427][T17813] veth0_macvtap: entered promiscuous mode [ 380.784622][T17813] macvtap0: left promiscuous mode [ 380.791045][T17813] veth1_macvtap: entered promiscuous mode [ 380.791269][T17813] macsec0: left promiscuous mode [ 380.792734][T17813] geneve0: left promiscuous mode [ 380.794806][T17813] geneve1: left promiscuous mode [ 380.796774][T17813] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 380.797740][T17813] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 380.854936][T17813] batman_adv: batadv0: Interface activated: syzkaller0 [ 380.855777][T17813] bridge1: left promiscuous mode [ 380.857260][T17813] xfrm1: left promiscuous mode [ 380.858563][T17813] veth2: left promiscuous mode [ 380.861157][T17813] veth3: left promiscuous mode [ 380.875759][T17813] mac80211_hwsim hwsim14 wlan2: left promiscuous mode [ 380.878124][T17813] mac80211_hwsim hwsim15 wlan3: left promiscuous mode [ 380.880780][T17813] mac80211_hwsim hwsim16 wlan4: left promiscuous mode [ 380.903504][T17813] mac80211_hwsim hwsim17 wlan5: left promiscuous mode [ 380.906294][T17813] mac80211_hwsim hwsim18 wlan6: left promiscuous mode [ 380.920930][T17813] mac80211_hwsim hwsim19 wlan7: left promiscuous mode [ 380.923183][T17813] mac80211_hwsim hwsim20 wlan8: left promiscuous mode [ 380.925927][T17813] mac80211_hwsim hwsim21 wlan9: left promiscuous mode [ 380.927190][T17813] mac80211_hwsim hwsim22 wlan10: left promiscuous mode [ 380.963266][T17813] mac80211_hwsim hwsim23 wlan11: left promiscuous mode [ 380.964530][T17813] mac80211_hwsim hwsim24 wlan12: left promiscuous mode [ 380.968142][T17813] mac80211_hwsim hwsim25 wlan13: left promiscuous mode [ 380.969415][T17813] mac80211_hwsim hwsim26 wlan14: left promiscuous mode [ 380.974003][T17813] mac80211_hwsim hwsim27 wlan15: left promiscuous mode [ 380.975242][T17813] mac80211_hwsim hwsim28 wlan16: left promiscuous mode [ 380.976455][T17813] mac80211_hwsim hwsim29 wlan17: left promiscuous mode [ 380.977652][T17813] mac80211_hwsim hwsim30 wlan18: left promiscuous mode [ 380.980208][T17813] mac80211_hwsim hwsim31 wlan19: left promiscuous mode [ 380.987107][T17813] mac80211_hwsim hwsim32 wlan20: left promiscuous mode [ 380.988352][T17813] mac80211_hwsim hwsim33 wlan21: left promiscuous mode [ 380.991045][T17813] mac80211_hwsim hwsim34 wlan22: left promiscuous mode [ 381.004979][T17813] bond1: left promiscuous mode [ 381.005362][T17813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.005903][T17813] bond2: left promiscuous mode [ 381.006254][T17813] 8021q: adding VLAN 0 to HW filter on device bond2 [ 381.007010][T17813] mac80211_hwsim hwsim38 wlan23: left promiscuous mode [ 381.008010][T17813] : left promiscuous mode [ 381.009196][T17813] gtp0: left promiscuous mode [ 381.010818][T17813] vxlan0: left promiscuous mode [ 381.036860][T17813] bond0: left promiscuous mode [ 381.037379][T17813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.037989][T17813] ip6gretap1: left promiscuous mode [ 381.039342][T17813] syztnl0: left promiscuous mode [ 381.040487][T17813] sit1: left promiscuous mode [ 381.047841][T15097] bond0: (slave ip6gretap1): link status up again after 0 ms [ 381.069188][T15097] bond0: (slave ip6gretap1): link status up again after 0 ms [ 381.090667][ T43] bond0: (slave ip6gretap1): link status up again after 0 ms [ 381.112719][T13493] bond0: (slave ip6gretap1): link status up again after 0 ms [ 381.124234][ T43] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 381.133222][ T43] bond0: (slave ip6gretap1): link status up again after 0 ms [ 381.149692][T17813] bond3: left promiscuous mode [ 381.150212][T17813] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.154337][ T43] bond0: (slave ip6gretap1): link status up again after 0 ms [ 381.155470][T17813] bridge2: left promiscuous mode [ 381.156872][T17813] bridge3: left promiscuous mode [ 381.157731][T17813] batadv1: left promiscuous mode [ 381.158157][T17813] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 381.161225][T17813] ip6gre1: left promiscuous mode [ 381.161240][T17813] ip6gre1: left allmulticast mode [ 381.162563][T17813] geneve2: left promiscuous mode [ 381.181970][T17813] vlan2: left promiscuous mode [ 381.181989][T17813] 0ªX¹¦Dö»: left promiscuous mode [ 381.191640][T17813] bond4: left promiscuous mode [ 381.192028][T17813] 8021q: adding VLAN 0 to HW filter on device bond4 [ 381.192815][T17813] bond5: left promiscuous mode [ 381.193172][T17813] 8021q: adding VLAN 0 to HW filter on device bond5 [ 381.193910][T17813] ip6gretap2: left promiscuous mode [ 381.198075][T17813] 0ªX¹¦Dö»: entered promiscuous mode [ 381.198232][T17813] macvlan2: left promiscuous mode [ 381.200050][T17813] ip6erspan0: left promiscuous mode [ 381.201955][T17813] bridge4: left promiscuous mode [ 381.210071][T17813] geneve3: left promiscuous mode [ 381.210087][T17813] geneve3: left allmulticast mode [ 381.211924][T17813] bridge5: left promiscuous mode [ 381.214328][T17813] netdevsim netdevsim0 eth0: left promiscuous mode [ 381.214741][T17813] 8021q: adding VLAN 0 to HW filter on device eth0 [ 381.219611][T17813] netdevsim netdevsim0 eth1: left promiscuous mode [ 381.219985][T17813] 8021q: adding VLAN 0 to HW filter on device eth1 [ 381.221835][T17813] netdevsim netdevsim0 eth2: left promiscuous mode [ 381.222202][T17813] 8021q: adding VLAN 0 to HW filter on device eth2 [ 381.224023][T17813] netdevsim netdevsim0 eth3: left promiscuous mode [ 381.234927][T17813] 8021q: adding VLAN 0 to HW filter on device eth3 [ 381.236867][T17813] bridge6: left promiscuous mode [ 381.243566][T17813] bond6: left promiscuous mode [ 381.243958][T17813] 8021q: adding VLAN 0 to HW filter on device bond6 [ 381.246278][T17813] mac80211_hwsim hwsim43 wlan24: left promiscuous mode [ 381.252697][T17813] mac80211_hwsim hwsim44 wlan25: left promiscuous mode [ 381.254069][T17813] mac80211_hwsim hwsim45 wlan26: left promiscuous mode [ 381.255444][T17813] mac80211_hwsim hwsim46 wlan27: left promiscuous mode [ 381.256780][T17813] mac80211_hwsim hwsim47 wlan28: left promiscuous mode [ 381.258085][T17813] mac80211_hwsim hwsim48 wlan29: left promiscuous mode [ 381.262914][T17813] mac80211_hwsim hwsim49 wlan30: left promiscuous mode [ 381.264233][T17813] mac80211_hwsim hwsim50 wlan31: left promiscuous mode [ 381.266772][T17813] mac80211_hwsim hwsim51 wlan32: left promiscuous mode [ 381.278113][T17813] mac80211_hwsim hwsim52 wlan33: left promiscuous mode [ 381.279303][T17813] bond7: left promiscuous mode [ 381.282825][T17813] 8021q: adding VLAN 0 to HW filter on device bond7 [ 381.284575][T17813] bond8: left promiscuous mode [ 381.284930][T17813] 8021q: adding VLAN 0 to HW filter on device bond8 [ 381.285529][T17813] gretap0: left promiscuous mode [ 381.288135][T17813] ip6_vti1: left promiscuous mode [ 381.289332][T17813] vsockmon0: left promiscuous mode [ 381.294424][T17813] bond9: left promiscuous mode [ 381.294440][T17813] dummy0: left promiscuous mode [ 381.295080][T17813] 8021q: adding VLAN 0 to HW filter on device bond9 [ 381.296865][T17813] gre1: left promiscuous mode [ 381.296879][T17813] gre1: left allmulticast mode [ 381.297993][T17813] geneve4: left promiscuous mode [ 381.299880][T17813] bridge7: left promiscuous mode [ 381.337520][T17813] gretap1: left promiscuous mode [ 381.339754][T17813] bond10: left promiscuous mode [ 381.340219][T17813] 8021q: adding VLAN 0 to HW filter on device bond10 [ 381.341994][T17813] bond10: entered allmulticast mode [ 381.342007][T17813] bridge8: entered allmulticast mode [ 381.342058][T17813] bond10: entered promiscuous mode [ 381.342615][T17813] macvtap1: left promiscuous mode [ 381.342628][T17813] bond10: left promiscuous mode [ 381.342966][T17813] macvtap1: left allmulticast mode [ 381.342978][T17813] bond10: left allmulticast mode [ 381.342988][T17813] bridge8: left allmulticast mode [ 381.343353][T17813] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 381.351422][T17813] bond10: entered allmulticast mode [ 381.351436][T17813] bridge8: entered allmulticast mode [ 381.351552][T17813] bond10: entered promiscuous mode [ 381.352069][T17813] macvtap2: left promiscuous mode [ 381.352081][T17813] bond10: left promiscuous mode [ 381.352356][T17813] macvtap2: left allmulticast mode [ 381.352367][T17813] bond10: left allmulticast mode [ 381.352376][T17813] bridge8: left allmulticast mode [ 381.353856][T17813] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 381.354752][T17813] bridge8: left promiscuous mode [ 381.360726][T17813] bridge8: entered promiscuous mode [ 381.361075][T17813] mac80211_hwsim hwsim55 wlan34: left promiscuous mode [ 381.400730][T13488] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.400827][T13488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.704897][T17835] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2913'. [ 381.721512][ T43] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.721540][ T43] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.721560][ T43] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 381.722580][ T43] bond0: (slave ip6gretap1): link status definitely down, disabling slave [ 381.724282][ T43] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.724305][ T43] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.724325][ T43] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 381.725032][ T43] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.725056][ T43] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.725075][ T43] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 381.725148][ T43] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.725169][ T43] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.725188][ T43] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 381.862274][ T7219] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 381.872606][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2913'. [ 381.973176][ T8058] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 381.987113][T17840] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2914'. [ 382.868566][ T7213] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 383.031799][ T8476] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 383.032027][ T8476] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 383.064196][T17798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.359242][ T6013] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 383.559527][T17848] netlink: 'syz.0.2916': attribute type 16 has an invalid length. [ 383.559546][T17848] netlink: 'syz.0.2916': attribute type 17 has an invalid length. [ 383.741116][T17868] netlink: 'syz.1.2923': attribute type 5 has an invalid length. [ 384.092366][T17886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2926'. [ 384.138415][T17890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2925'. [ 384.658704][T17910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2931'. [ 384.761959][T17916] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2929'. [ 384.767934][T17919] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2933'. [ 384.767952][T17919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2933'. [ 384.928897][T13488] net_ratelimit: 49 callbacks suppressed [ 384.928916][T13488] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 385.038450][T13488] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 385.156312][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2940'. [ 385.156335][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2940'. [ 385.482396][T17940] pimreg: port 1(syz_tun) entered disabled state [ 385.583319][T17961] netlink: 'syz.2.2945': attribute type 3 has an invalid length. [ 385.583340][T17961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2945'. [ 385.583355][T17961] netlink: 'syz.2.2945': attribute type 3 has an invalid length. [ 385.583365][T17961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2945'. [ 385.679152][T17961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2945'. [ 385.766068][T17940] tipc: Resetting bearer [ 386.252452][T17940] bond12: left allmulticast mode [ 386.252475][T17940] bond12: left promiscuous mode [ 386.355779][T15097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 386.462027][T13488] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 386.569830][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 386.733971][T17994] netlink: 'syz.4.2954': attribute type 10 has an invalid length. [ 386.774739][T17980] tipc: Enabling of bearer rejected, failed to enable media [ 386.865904][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 386.868325][T17994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.871984][T17994] team0: Port device netdevsim1 added [ 386.888896][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 386.998730][T15097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 387.045389][T18004] x_tables: duplicate underflow at hook 1 [ 387.086964][T18007] netlink: ct family unspecified [ 387.117852][T15097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 387.135699][T18007] netlink: 'syz.0.2957': attribute type 49 has an invalid length. [ 387.235169][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 387.349939][T18021] sctp: [Deprecated]: syz.4.2963 (pid 18021) Use of int in max_burst socket option. [ 387.349939][T18021] Use struct sctp_assoc_value instead [ 387.630395][ T4951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 387.634024][ T4951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 387.635052][ T4951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 387.646707][ T4951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 387.664651][ T4951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.375457][T13488] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 388.683991][T18028] rxe_eth0 speed is unknown, defaulting to 1000 [ 388.849696][T18028] lo speed is unknown, defaulting to 1000 [ 388.967682][T18028] wg0 speed is unknown, defaulting to 1000 [ 389.302817][T18028] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.303047][T18028] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.303413][T18028] bridge_slave_0: entered allmulticast mode [ 389.305003][T18028] bridge_slave_0: entered promiscuous mode [ 389.308964][T18028] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.309115][T18028] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.309227][T18028] bridge_slave_1: entered allmulticast mode [ 389.310816][T18028] bridge_slave_1: entered promiscuous mode [ 389.355120][T18028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.361335][T18028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.395928][T18028] team0: Port device team_slave_0 added [ 389.397651][T18028] team0: Port device team_slave_1 added [ 389.426843][T18028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.426856][T18028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.426877][T18028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.428211][T18028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.428223][T18028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.428243][T18028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.473007][T18028] hsr_slave_0: entered promiscuous mode [ 389.473985][T18028] hsr_slave_1: entered promiscuous mode [ 389.474677][T18028] debugfs: 'hsr0' already exists in 'hsr' [ 389.474690][T18028] Cannot create hsr debugfs directory [ 389.694768][T18028] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.694789][T18028] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.694802][T18028] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 389.765929][ T4951] Bluetooth: hci4: command tx timeout [ 389.768558][T18028] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.768576][T18028] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.768588][T18028] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 389.830818][T18028] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.830850][T18028] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.830871][T18028] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 389.894002][T18028] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.894034][T18028] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.894056][T18028] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 389.936246][ T8476] net_ratelimit: 18 callbacks suppressed [ 389.936284][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 390.048623][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 390.156245][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 390.266144][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 390.376189][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 390.486218][T15097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 390.596120][T15097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 390.711046][T15097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 390.816242][T15097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 390.922102][T18058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.968773][T18051] kthread_run failed with err -4 [ 391.002363][T18028] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 391.036532][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.037571][T18028] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 391.056376][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.063497][T18028] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 391.103406][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.108738][T13488] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 391.117265][T18028] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 391.131131][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 391.392134][T18028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.393600][T18138] netlink: 'syz.4.2982': attribute type 1 has an invalid length. [ 391.393616][T18138] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.2982'. [ 391.450536][T18139] syzkaller0: entered promiscuous mode [ 391.450556][T18139] syzkaller0: entered allmulticast mode [ 391.474615][T18028] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.521636][T13493] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.521740][T13493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.525466][T13493] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.525563][T13493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.686616][T18150] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2985'. [ 391.734617][T18143] netlink: 'syz.3.2984': attribute type 66 has an invalid length. [ 391.836838][ T4951] Bluetooth: hci4: command tx timeout [ 392.010594][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2988'. [ 392.120955][T18165] ip6tnl1: entered allmulticast mode [ 392.616668][T18187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2994'. [ 392.664727][T18028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.850681][T18028] veth0_vlan: entered promiscuous mode [ 392.894021][T18028] veth1_vlan: entered promiscuous mode [ 393.013846][T18028] veth0_macvtap: entered promiscuous mode [ 393.018756][T18028] veth1_macvtap: entered promiscuous mode [ 393.051645][T18028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.072997][T18028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.093703][T18194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2996'. [ 393.094349][T18194] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2996'. [ 393.116731][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.117178][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.117213][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.117244][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.120545][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2996'. [ 393.295513][ T8058] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 393.296249][ T8058] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 393.328362][ T6013] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 393.448117][ T8058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.450418][ T8058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.583587][T15097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.583608][T15097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.796856][ T6004] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 393.911289][ T4951] Bluetooth: hci4: command tx timeout [ 393.938589][ T6004] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 394.079857][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3004'. [ 394.312179][T18239] dvmrp0: entered allmulticast mode [ 394.473578][T18261] netlink: 'syz.3.3008': attribute type 2 has an invalid length. [ 394.473598][T18261] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3008'. [ 394.555771][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 394.753965][T18269] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3010'. [ 394.762676][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 394.780068][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 394.787467][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 394.791562][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.792118][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 395.028016][ T8058] net_ratelimit: 27 callbacks suppressed [ 395.028036][ T8058] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 395.138363][T15097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 395.330786][T18284] macsec1: entered promiscuous mode [ 395.359367][T15097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 395.363617][T18290] netlink: 'syz.3.3012': attribute type 6 has an invalid length. [ 395.363644][T18290] nbd: must specify an index to disconnect [ 395.467107][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 395.554162][T13488] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.554193][T13488] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 395.554215][T13488] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 395.554236][T13488] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 395.656598][ T8058] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 395.723858][T13488] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.723889][T13488] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 395.723908][T13488] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 395.723928][T13488] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 395.809486][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 395.858984][T13488] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.859014][T13488] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 395.859034][T13488] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 395.859054][T13488] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 395.874928][T18312] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.875367][T18312] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.875493][T18312] bridge_slave_0: entered allmulticast mode [ 395.880493][T18312] bridge_slave_0: entered promiscuous mode [ 395.923419][ T8058] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 395.988758][ T5635] Bluetooth: hci4: command tx timeout [ 395.991991][T13488] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.992017][T13488] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 395.992038][T13488] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 395.992066][T13488] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 396.031844][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 396.092642][T18268] rxe_eth0 speed is unknown, defaulting to 1000 [ 396.140147][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 396.313601][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 396.582809][T13488] lo: left allmulticast mode [ 396.609590][T13488] tipc: Resetting bearer [ 396.610149][T13488] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 396.800820][ T6004] page_pool_release_retry() stalled pool shutdown: id 134, 1 inflight 60 sec [ 396.876732][ T5635] Bluetooth: hci1: command tx timeout [ 397.178237][T13488] gretap0 (unregistering): left promiscuous mode [ 397.200533][T13488] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 397.260224][T13488] bond8 (unregistering): (slave geneve3): Releasing active interface [ 397.296037][T13488] tipc: Disabling bearer [ 397.296862][T13488] batman_adv: batadv0: Removing interface: syzkaller0 [ 397.317006][T18362] __nla_validate_parse: 5 callbacks suppressed [ 397.317020][T18362] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3024'. [ 397.337483][T13488] bond9 (unregistering): (slave bridge1): Releasing backup interface [ 397.337504][T13488] bridge1 (unregistering): left promiscuous mode [ 397.501357][T13488] bond0 (unregistering): left promiscuous mode [ 397.501785][T13488] bond0 (unregistering): Released all slaves [ 397.523203][T13488] bond1 (unregistering): Released all slaves [ 397.576571][T13488] bond2 (unregistering): (slave bond3): Releasing backup interface [ 397.577771][T13488] bond2 (unregistering): (slave bond4): Releasing backup interface [ 397.578454][T13488] bond2 (unregistering): Released all slaves [ 397.597608][T13488] bond3 (unregistering): Released all slaves [ 397.597770][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 397.625069][T13488] bond4 (unregistering): Released all slaves [ 397.650082][T13488] bond5 (unregistering): (slave lo): Releasing backup interface [ 397.650585][T13488] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 397.679780][T13488] bond5 (unregistering): Released all slaves [ 397.710086][T13488] bond6 (unregistering): Released all slaves [ 397.730675][T13488] bond7 (unregistering): Released all slaves [ 397.763357][T13488] bond8 (unregistering): Released all slaves [ 397.801357][T13488] bond9 (unregistering): Released all slaves [ 397.819135][T13488] bond10 (unregistering): Released all slaves [ 397.826860][T13488] bond11 (unregistering): Released all slaves [ 397.843145][T13488] bond12 (unregistering): Released all slaves [ 397.877255][T13488] bond13 (unregistering): (slave bond14): Releasing backup interface [ 397.877305][T13488] bond14 (unregistering): left promiscuous mode [ 397.878435][T13488] bond13 (unregistering): Released all slaves [ 397.901308][T13488] bond14 (unregistering): Released all slaves [ 397.933310][T13488] bond15 (unregistering): Released all slaves [ 397.951520][T13488] bond16 (unregistering): Released all slaves [ 397.990411][T18268] lo speed is unknown, defaulting to 1000 [ 398.001084][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 398.134903][T18365] syzkaller1: entered promiscuous mode [ 398.134917][T18365] syzkaller1: entered allmulticast mode [ 398.192302][T13488] ovs-dp0: left promiscuous mode [ 398.401155][T18394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3029'. [ 398.514574][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'. [ 398.565921][T13488] tipc: Left network mode [ 398.633186][T18268] wg0 speed is unknown, defaulting to 1000 [ 398.640130][T13488] IPVS: stopping backup sync thread 10396 ... [ 398.822736][T18416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3032'. [ 398.822898][T18416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3032'. [ 398.823034][T18416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3032'. [ 398.823170][T18416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3032'. [ 398.823305][T18416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3032'. [ 398.823441][T18416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3032'. [ 398.823574][T18416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3032'. [ 398.956554][ T5635] Bluetooth: hci1: command tx timeout [ 399.600117][ T6004] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 399.858904][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 400.157298][ T6007] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 400.180674][T18474] hsr0: entered allmulticast mode [ 400.180693][T18474] hsr_slave_0: entered allmulticast mode [ 400.180707][T18474] hsr_slave_1: entered allmulticast mode [ 400.370150][ T8476] IPVS: starting estimator thread 0... [ 400.457130][T18490] IPVS: using max 33 ests per chain, 79200 per kthread [ 400.506373][ T43] net_ratelimit: 6 callbacks suppressed [ 400.506393][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 400.788535][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 400.908780][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 401.036639][ T5635] Bluetooth: hci1: command tx timeout [ 401.428554][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5 [ 401.449481][T18473] hsr0: left allmulticast mode [ 401.449501][T18473] hsr_slave_0: left allmulticast mode [ 401.449525][T18473] hsr_slave_1: left allmulticast mode [ 401.514276][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 401.882789][T18545] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 401.903619][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 401.903794][T18545] tipc: Enabling of bearer rejected, failed to enable media [ 402.171135][T18268] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.171234][T18268] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.174535][T18268] bridge_slave_0: entered allmulticast mode [ 402.202850][T18268] bridge_slave_0: entered promiscuous mode [ 402.409361][T18564] netlink: 'syz.4.3055': attribute type 29 has an invalid length. [ 402.428235][T18268] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.428345][T18268] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.428490][T18268] bridge_slave_1: entered allmulticast mode [ 402.501523][T18268] bridge_slave_1: entered promiscuous mode [ 402.885315][T18582] ip_tables: iptables: counters copy to user failed while replacing table [ 402.995022][ T5295] 8021q: adding VLAN 0 to HW filter on device eth6 [ 403.031712][T13488] dummy0: left promiscuous mode [ 403.101706][T13488] veth1_vlan: left promiscuous mode [ 403.101798][T13488] veth0_vlan: left promiscuous mode [ 403.120498][ T5635] Bluetooth: hci1: command tx timeout [ 403.671693][T18571] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 403.677701][T18268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.729399][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 403.744964][T18268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.811587][T18268] team0: Port device team_slave_0 added [ 403.814311][T18268] team0: Port device team_slave_1 added [ 403.861992][T18268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.862009][T18268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.862040][T18268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.864932][T18268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.864945][T18268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.864965][T18268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.036558][T18268] hsr_slave_0: entered promiscuous mode [ 404.037536][T18268] hsr_slave_1: entered promiscuous mode [ 404.039184][T18268] debugfs: 'hsr0' already exists in 'hsr' [ 404.039197][T18268] Cannot create hsr debugfs directory [ 404.248365][T13492] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 404.269423][T18602] ip_tables: iptables: counters copy to user failed while replacing table [ 404.496591][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 404.720009][T13488] IPVS: stop unused estimator thread 0... [ 404.834521][T18626] __nla_validate_parse: 29 callbacks suppressed [ 404.834538][T18626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3064'. [ 405.588530][T13488] net_ratelimit: 4 callbacks suppressed [ 405.588551][T13488] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 405.764209][T18660] ip_tables: iptables: counters copy to user failed while replacing table [ 405.856295][T13488] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 405.966568][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 406.066181][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 406.075750][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 406.188734][T13492] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 406.401415][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 406.490179][T18268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 406.514309][T18268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.515378][T18268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 406.547743][T18268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.548576][T18268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 406.570402][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3078'. [ 406.587733][T18268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.650039][T18268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.698524][T18268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.758284][T18687] rxe_eth0 speed is unknown, defaulting to 1000 [ 406.845899][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 406.946716][ T4951] Bluetooth: hci1: command tx timeout [ 406.955898][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 407.218234][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 407.254984][T18268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.394704][T18268] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.442805][T18687] lo speed is unknown, defaulting to 1000 [ 407.468698][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.468854][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.553012][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.553181][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.821051][T18741] netlink: 'syz.4.3084': attribute type 11 has an invalid length. [ 408.213741][T18752] sctp: [Deprecated]: syz.0.3086 (pid 18752) Use of int in max_burst socket option. [ 408.213741][T18752] Use struct sctp_assoc_value instead [ 408.370222][T18752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3086'. [ 408.646987][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'. [ 408.754073][T18687] wg0 speed is unknown, defaulting to 1000 [ 408.931661][ T4951] Bluetooth: hci5: link tx timeout [ 408.931679][ T4951] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 409.019470][T18768] netlink: 'syz.0.3089': attribute type 1 has an invalid length. [ 409.113404][T18768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.194145][T18770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.194809][T18770] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 409.202675][T18770] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 409.300319][ T30] audit: type=1804 audit(1794159732.470:15): pid=18770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3089" name="/newroot/26/cgroup.controllers" dev="tmpfs" ino=152 res=1 errno=0 [ 409.301633][ T30] audit: type=1800 audit(1794159732.470:16): pid=18770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3089" name="cgroup.controllers" dev="tmpfs" ino=152 res=0 errno=-22 [ 409.906653][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 409.913895][T18268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.148276][T18268] veth0_vlan: entered promiscuous mode [ 410.190094][T18268] veth1_vlan: entered promiscuous mode [ 410.431891][T18268] veth0_macvtap: entered promiscuous mode [ 410.459538][T18268] veth1_macvtap: entered promiscuous mode [ 410.490229][T18268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.524175][T18268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.636407][T13493] net_ratelimit: 22 callbacks suppressed [ 410.636443][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 410.636612][ T8476] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.673174][ T8476] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.677207][T13493] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.677759][T13493] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.801069][ T87] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 410.905810][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 411.039725][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 411.136598][T13492] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 411.452635][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.452656][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.804431][T18838] IPVS: Error connecting to the multicast addr [ 411.818539][T13488] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 411.818688][T13488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.818702][T13488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.927417][ T87] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 412.002476][T18841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3102'. [ 412.018228][T18849] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3104'. [ 412.039068][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 412.166465][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 412.197989][T18840] NFSD: Failed to start, no listeners configured. [ 412.285119][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 412.337519][T18858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3106'. [ 412.337542][T18858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3106'. [ 412.407799][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 412.551129][T18867] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3007'. [ 412.702183][T18871] vlan0: entered promiscuous mode [ 412.702203][T18871] bridge0: entered promiscuous mode [ 413.127803][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3114'. [ 413.217508][ T4951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 413.222157][ T4951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 413.222988][ T4951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 413.223935][ T4951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 413.224532][ T4951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 414.177077][ T5634] syz_tun (unregistering): left allmulticast mode [ 414.177101][ T5634] syz_tun (unregistering): left promiscuous mode [ 414.177196][ T5634] pimreg: port 1(syz_tun) entered disabled state [ 414.320786][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3117'. [ 414.530020][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3115'. [ 414.603376][T18931] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3120'. [ 414.603400][T18931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3120'. [ 414.603413][T18931] netlink: 'syz.4.3120': attribute type 1 has an invalid length. [ 414.604333][T18931] netlink: 'syz.4.3120': attribute type 1 has an invalid length. [ 414.663360][T18894] rxe_eth0 speed is unknown, defaulting to 1000 [ 414.994959][T18894] lo speed is unknown, defaulting to 1000 [ 415.345806][ T5635] Bluetooth: hci3: command tx timeout [ 415.392996][T18946] dvmrp0: entered allmulticast mode [ 415.416489][T18949] dvmrp0: left allmulticast mode [ 415.479935][T18894] wg0 speed is unknown, defaulting to 1000 [ 415.617458][T18954] netlink: 'syz.0.3123': attribute type 1 has an invalid length. [ 415.684115][T18955] dvmrp0: entered allmulticast mode [ 415.701459][ T43] net_ratelimit: 14 callbacks suppressed [ 415.701506][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 415.728343][T18945] x_tables: duplicate underflow at hook 2 [ 415.959047][T18961] bond2 (unregistering): Released all slaves [ 416.219530][T18969] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 416.452959][T18969] bond1 (unregistering): Released all slaves [ 416.590480][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 416.749976][T18991] x_tables: duplicate entry at hook 3 [ 416.852407][T18993] syzkaller0: entered promiscuous mode [ 416.852430][T18993] syzkaller0: entered allmulticast mode [ 416.994339][T19000] wireguard0: entered promiscuous mode [ 417.017431][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 417.097670][T19008] __nla_validate_parse: 3 callbacks suppressed [ 417.097690][T19008] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3134'. [ 417.102734][T19009] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3135'. [ 417.168541][ T87] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 417.254923][T19013] netlink: 'syz.0.3138': attribute type 1 has an invalid length. [ 417.254944][T19013] netlink: 5268 bytes leftover after parsing attributes in process `syz.0.3138'. [ 417.254973][T19013] netlink: 'syz.0.3138': attribute type 1 has an invalid length. [ 417.301740][T19013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3138'. [ 417.301770][T19013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3138'. [ 417.418058][ T87] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 417.426662][ T5635] Bluetooth: hci3: command tx timeout [ 417.439770][T19019] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 417.468080][T19018] ip_tables: iptables: counters copy to user failed while replacing table [ 417.532093][ T87] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 417.637422][ T87] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 417.747891][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 417.950885][T19019] smc: net device lo applied user defined pnetid SYZ0 [ 418.287997][T18894] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.289278][T18894] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.289442][T18894] bridge_slave_0: entered allmulticast mode [ 418.308967][T18894] bridge_slave_0: entered promiscuous mode [ 418.332659][T18894] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.332962][T18894] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.333259][T18894] bridge_slave_1: entered allmulticast mode [ 418.345870][T18894] bridge_slave_1: entered promiscuous mode [ 418.706316][T18894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.729866][T18894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.800198][T18894] team0: Port device team_slave_0 added [ 418.803079][T18894] team0: Port device team_slave_1 added [ 418.886984][T18894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.887000][T18894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.887022][T18894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.889409][T18894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.889422][T18894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.889444][T18894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.070259][T18894] hsr_slave_0: entered promiscuous mode [ 419.071153][T18894] hsr_slave_1: entered promiscuous mode [ 419.071870][T18894] debugfs: 'hsr0' already exists in 'hsr' [ 419.071885][T18894] Cannot create hsr debugfs directory [ 419.141341][T19068] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3148'. [ 419.184499][T19062] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3146'. [ 419.184559][T19062] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3146'. [ 419.508896][ T5635] Bluetooth: hci3: command tx timeout [ 419.513761][T19078] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3150'. [ 419.558645][T19082] syzkaller0: entered promiscuous mode [ 419.558684][T19082] syzkaller0: entered allmulticast mode [ 419.564752][T19081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3151'. [ 420.568467][T19114] netlink: 'syz.2.3158': attribute type 1 has an invalid length. [ 420.570018][T18894] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 420.602177][T18894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.603012][T18894] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 420.631414][T18894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.633600][T18894] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 420.655214][T18894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.664157][T18894] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 420.686942][T18894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.818223][ T8476] net_ratelimit: 12 callbacks suppressed [ 420.818243][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 420.917772][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 420.983398][T18894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.018112][T19129] x_tables: duplicate entry at hook 3 [ 421.057969][T18894] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.080600][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.080760][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.161630][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.161734][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.175283][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 421.360253][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 421.587446][ T5635] Bluetooth: hci3: command tx timeout [ 421.608450][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 421.717869][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 421.728486][T19154] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 421.833053][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 421.937228][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 422.047915][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 422.066714][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 422.242267][T19183] rxe_eth0 speed is unknown, defaulting to 1000 [ 422.480200][T19185] __nla_validate_parse: 4 callbacks suppressed [ 422.480218][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3175'. [ 422.934866][T18894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.973207][T19183] lo speed is unknown, defaulting to 1000 [ 422.974354][T19173] rxe_eth0 speed is unknown, defaulting to 1000 [ 423.100946][T19202] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 423.137056][T18894] veth0_vlan: entered promiscuous mode [ 423.158894][T18894] veth1_vlan: entered promiscuous mode [ 423.219335][T19205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3178'. [ 423.240807][T19207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.241133][T19206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.273662][T18894] veth0_macvtap: entered promiscuous mode [ 423.291250][T18894] veth1_macvtap: entered promiscuous mode [ 423.378142][T18894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.402053][T19211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3180'. [ 423.412365][T18894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.616037][T13493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.616170][T13493] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.616232][T13493] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.616277][T13493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.966992][T19183] wg0 speed is unknown, defaulting to 1000 [ 423.997445][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.997466][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.124620][T19221] netlink: 'syz.2.3182': attribute type 11 has an invalid length. [ 424.223646][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3183'. [ 424.261581][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.261601][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.724381][T19173] lo speed is unknown, defaulting to 1000 [ 425.301488][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3111'. [ 425.685412][T19252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3187'. [ 425.754660][T19252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3187'. [ 425.791847][T19252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3187'. [ 425.823528][T19252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3187'. [ 425.850872][T19252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3187'. [ 425.857157][ T43] net_ratelimit: 18 callbacks suppressed [ 425.857173][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 425.963109][ T4951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 425.971608][ T4951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 425.973267][ T4951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 425.973783][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 425.976103][ T4951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 425.979540][ T4951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 426.057255][T19173] wg0 speed is unknown, defaulting to 1000 [ 426.076375][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 426.188735][ T43] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 426.295508][T19267] netlink: 'syz.3.3189': attribute type 12 has an invalid length. [ 426.296702][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 426.556010][ T6190] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 426.789192][ T6190] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 426.898673][ T6190] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 427.007835][ T6190] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 427.159963][ T8476] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 427.161190][T19259] rxe_eth0 speed is unknown, defaulting to 1000 [ 427.986868][ T5635] Bluetooth: hci2: command tx timeout [ 428.143152][T19310] __nla_validate_parse: 14 callbacks suppressed [ 428.143203][T19310] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3195'. [ 428.203655][T19310] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3195'. [ 428.487184][T19321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3196'. [ 428.488230][T19319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3196'. [ 428.538932][T19322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3196'. [ 428.543845][T19318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3196'. [ 430.071047][ T5635] Bluetooth: hci2: command tx timeout [ 430.172327][T19258] rxe_eth0 speed is unknown, defaulting to 1000 [ 430.402397][T19328] atomic_op ffff8880521ff1e0 conn xmit_atomic 0000000000000000 [ 430.585054][T19259] lo speed is unknown, defaulting to 1000 [ 430.887584][T13491] net_ratelimit: 7 callbacks suppressed [ 430.887604][T13491] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 430.990462][T19335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3200'. [ 430.990632][T19335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3200'. [ 430.990788][T19335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3200'. [ 430.990939][T19335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3200'. [ 430.996674][T13491] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 431.111431][ T6190] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 431.216930][ T6190] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 431.337847][T13491] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 431.385337][T19259] wg0 speed is unknown, defaulting to 1000 [ 431.389298][T19258] lo speed is unknown, defaulting to 1000 [ 431.446917][ T6190] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 431.557977][T13492] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 431.670418][ T6190] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 431.779591][T13491] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 431.909924][T13491] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 432.128212][T19258] wg0 speed is unknown, defaulting to 1000 [ 432.148723][ T5635] Bluetooth: hci2: command tx timeout [ 433.678439][T19386] vlan2: entered promiscuous mode [ 433.678460][T19386] hsr0: entered promiscuous mode [ 433.678800][T19386] vlan2: entered allmulticast mode [ 433.680506][T19386] hsr0: entered allmulticast mode [ 433.680520][T19386] hsr_slave_0: entered allmulticast mode [ 433.680533][T19386] hsr_slave_1: entered allmulticast mode [ 433.744819][T19386] __nla_validate_parse: 62 callbacks suppressed [ 433.744836][T19386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3210'. [ 433.861052][T19386] hsr_slave_0: left promiscuous mode [ 433.869652][T19386] hsr_slave_1: left promiscuous mode [ 434.237519][ T5635] Bluetooth: hci2: command tx timeout [ 434.700745][T19258] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.700852][T19258] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.700965][T19258] bridge_slave_0: entered allmulticast mode [ 434.702637][T19258] bridge_slave_0: entered promiscuous mode [ 434.752408][T19258] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.752514][T19258] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.752624][T19258] bridge_slave_1: entered allmulticast mode [ 434.761404][T19258] bridge_slave_1: entered promiscuous mode [ 434.775265][T19418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3217'. [ 434.882582][T19258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.885013][T19419] bridge0: port 3(veth0) entered blocking state [ 434.885115][T19419] bridge0: port 3(veth0) entered disabled state [ 434.885262][T19419] veth0: entered allmulticast mode [ 434.900544][T19419] veth0: entered promiscuous mode [ 434.901264][T19419] bridge0: port 3(veth0) entered blocking state [ 434.901368][T19419] bridge0: port 3(veth0) entered forwarding state [ 435.020072][T19425] bridge0: port 3(veth0) entered disabled state [ 435.020301][T19425] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.020882][T19425] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.068060][T19432] xt_hashlimit: size too large, truncated to 1048576 [ 435.122442][T19425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.140163][T19425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.245033][T19436] xt_hashlimit: size too large, truncated to 1048576 [ 435.325558][T19437] xt_hashlimit: size too large, truncated to 1048576 [ 435.488174][T19258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.827956][T19258] team0: Port device team_slave_0 added [ 435.924729][T19258] team0: Port device team_slave_1 added [ 436.037741][T19258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.037757][T19258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.037778][T19258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.048596][T19258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.048610][T19258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.048632][T19258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.173541][T19258] hsr_slave_0: entered promiscuous mode [ 436.182927][T19258] hsr_slave_1: entered promiscuous mode [ 436.192466][T19258] debugfs: 'hsr0' already exists in 'hsr' [ 436.192482][T19258] Cannot create hsr debugfs directory [ 436.231640][ T6190] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.232362][ T6190] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.232446][ T6190] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.426878][ T6190] net_ratelimit: 8 callbacks suppressed [ 436.426907][ T6190] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 436.496909][T13492] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.537422][T13491] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 436.666650][T13492] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 436.773406][T19465] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3226'. [ 436.773426][T19465] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3226'. [ 436.773707][T19465] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3226'. [ 436.773721][T19465] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3226'. [ 436.805825][T13492] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 436.807036][T19465] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3226'. [ 436.807067][T19465] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3226'. [ 436.807468][T19465] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3226'. [ 436.807495][T19465] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3226'. [ 437.186235][ T7219] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 437.198763][ T6190] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 437.227697][T19487] batman_adv: batadv0: Adding interface: veth0 [ 437.232536][T19487] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.232599][T19487] batman_adv: batadv0: Interface activated: veth0 [ 437.306886][ T6190] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 437.416201][ T6190] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 437.526769][T13492] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 437.636725][T13492] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 437.746903][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 439.990545][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.990626][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.406581][ T5635] Bluetooth: hci4: unexpected event 0x05 length: 0 < 4 [ 440.690652][ T5635] Bluetooth: hci1: unexpected cc 0x2003 length: 0 < 9 [ 440.872979][T19524] __nla_validate_parse: 122 callbacks suppressed [ 440.872999][T19524] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3242'. [ 440.873021][T19524] netlink: 'syz.0.3242': attribute type 8 has an invalid length. [ 440.914246][T19524] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 440.914265][T19524] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 441.030133][T19532] netlink: 'syz.3.3243': attribute type 1 has an invalid length. [ 441.030327][T19534] netlink: 'syz.3.3243': attribute type 1 has an invalid length. [ 441.090623][T19535] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3244'. [ 441.154846][T19531] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 441.159192][T19531] bond2 (unregistering): Released all slaves [ 441.233826][T19532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.266770][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 441.283845][T19538] bond1: (slave veth3): Enslaving as an active interface with a down link [ 441.321465][T19540] bond1: (slave dummy0): making interface the new active one [ 441.322430][T19540] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 441.487097][ T13] net_ratelimit: 26 callbacks suppressed [ 441.487134][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 441.656562][T19279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 441.673755][T19258] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 441.722289][T19258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.723948][T19258] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 441.770976][T19258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.193921][T19258] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 442.249171][T19258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.250755][T19258] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 442.330481][T19258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.348924][ T7219] rxe_eth0 speed is unknown, defaulting to 1000 [ 442.357052][T13489] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 442.656855][T13489] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 443.590010][ T30] audit: type=1800 audit(1794159766.750:17): pid=19622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3250" name="blkio.bfq.time_recursive" dev="tmpfs" ino=188 res=0 errno=-22 [ 443.815298][T19622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3250'. [ 445.856052][T19616] netdevsim0: mtu less than device minimum [ 445.859647][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'. [ 445.926466][ T9232] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 446.036693][T19279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 446.233858][T19258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.342171][T19258] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.433203][T19279] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.433314][T19279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.457201][T19280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 446.482863][ T9232] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.482969][ T9232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.611713][T19660] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3254'. [ 446.716149][T13492] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 446.846140][ T6190] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 446.960216][T13491] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 447.066726][ T6190] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 447.181142][T13491] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 447.286025][ T9232] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 447.311722][T19705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3259'. [ 447.398691][T19280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 447.440816][T19714] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3261'. [ 447.464972][T13491] IPVS: starting estimator thread 0... [ 447.507257][T13491] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 447.556568][T19715] IPVS: using max 40 ests per chain, 96000 per kthread [ 447.575450][T19719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3261'. [ 447.790762][T19258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.806796][T19279] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 447.860506][T19258] veth0_vlan: entered promiscuous mode [ 447.875497][T19258] veth1_vlan: entered promiscuous mode [ 447.921492][T19258] veth0_macvtap: entered promiscuous mode [ 447.935340][T19258] veth1_macvtap: entered promiscuous mode [ 447.957460][T19280] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 447.961394][T19258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.990193][T19258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.009379][T19279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.071079][T19279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.074219][T19279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.074864][T19279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.345543][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3262'. [ 448.363832][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3262'. [ 448.377208][T19280] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.377310][T19280] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.377372][T19280] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.377432][T19280] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.163599][T19662] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.456820][T19279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.456871][T19279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.585462][T19742] netlink: 'syz.4.3266': attribute type 39 has an invalid length. [ 449.967067][T19764] netlink: 'syz.2.3268': attribute type 21 has an invalid length. [ 451.460260][T19773] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3270'. [ 451.460280][T19773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3270'. [ 451.460295][T19773] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3270'. [ 451.460306][T19773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3270'. [ 451.779818][T19783] xt_hashlimit: max too large, truncated to 1048576 [ 451.780042][T19783] Cannot find del_set index 4 as target [ 451.822838][T19777] __nla_validate_parse: 1 callbacks suppressed [ 451.822871][T19777] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3269'. [ 451.822965][T19777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3269'. [ 452.162395][T13491] erspan0 (unregistering): left promiscuous mode [ 452.183957][T13491] gretap0 (unregistering): left promiscuous mode [ 452.229732][T13491] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 452.345141][T13491] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 452.345166][T13491] bridge1 (unregistering): left promiscuous mode [ 452.345182][T13491] bridge1 (unregistering): left allmulticast mode [ 452.442097][T13491] bond0 (unregistering): Released all slaves [ 452.458656][T13491] bond1 (unregistering): Released all slaves [ 452.480375][T13491] bond2 (unregistering): Released all slaves [ 452.502995][T13491] bond3 (unregistering): Released all slaves [ 452.530613][T13491] bond4 (unregistering): Released all slaves [ 452.557086][T13491] bond5 (unregistering): Released all slaves [ 452.584112][T13491] bond6 (unregistering): Released all slaves [ 452.607066][T13491] bond7 (unregistering): Released all slaves [ 452.638841][T13491] bond8 (unregistering): Released all slaves [ 452.658046][T13491] bond9 (unregistering): Released all slaves [ 452.678101][T13491] bond10 (unregistering): Released all slaves [ 452.707520][T13491] bond11 (unregistering): Released all slaves [ 452.724638][T13491] team0: Port device macvlan2 removed [ 452.734099][T13491] bond12 (unregistering): (slave veth7): Releasing active interface [ 452.734913][T13491] bond12 (unregistering): Released all slaves [ 452.754710][T13491] bond13 (unregistering): Released all slaves [ 452.778425][T13491] bond14 (unregistering): Released all slaves [ 452.801133][T13491] bond15 (unregistering): Released all slaves [ 452.817703][T13491] bond16 (unregistering): (slave lo): Releasing backup interface [ 452.818145][T13491] bond16 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 452.818555][T13491] bond16 (unregistering): Released all slaves [ 452.862331][T19779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3269'. [ 452.862353][T19779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3269'. [ 452.881407][T19780] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3269'. [ 452.881423][T19780] tc_dump_action: action bad kind [ 452.883757][T19785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3274'. [ 452.887604][T13489] net_ratelimit: 13 callbacks suppressed [ 452.887618][T13489] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 452.891442][T13489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.891457][T13489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.997002][ T9232] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 453.110977][T15099] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 453.228571][T15099] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 453.316227][T13491] tipc: Disabling bearer [ 453.316475][T13491] tipc: Disabling bearer [ 453.316940][T13491] tipc: Disabling bearer [ 453.317092][T13491] tipc: Left network mode [ 453.347444][T15099] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 453.438852][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 453.467753][T15099] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 453.578983][T13489] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 453.582458][T19810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3186'. [ 453.582487][T19810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3186'. [ 453.690757][ T9232] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 453.776195][T19810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3186'. [ 453.776230][T19810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3186'. [ 453.942563][T19823] openvswitch: netlink: Flow actions attr not present in new flow. [ 453.947179][ T9232] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 454.835558][T19856] netlink: 'syz.3.3286': attribute type 39 has an invalid length. [ 455.800847][T19888] veth0_to_bridge: entered promiscuous mode [ 455.801067][T19888] macsec1: entered allmulticast mode [ 455.801083][T19888] veth0_to_bridge: entered allmulticast mode [ 457.676386][T13491] hsr_slave_0: left promiscuous mode [ 457.681069][T13491] hsr_slave_1: left promiscuous mode [ 457.913008][T19969] xt_cluster: you have exceeded the maximum number of cluster nodes (134217732 > 32) [ 458.182280][T19983] netlink: 'syz.4.3309': attribute type 4 has an invalid length. [ 458.278535][T13491] vlan0 (unregistering): left allmulticast mode [ 458.284406][T13491] team0 (unregistering): Port device vlan0 removed [ 458.642320][T20009] netlink: 'syz.1.3312': attribute type 1 has an invalid length. [ 458.642340][T20009] netlink: 'syz.1.3312': attribute type 2 has an invalid length. [ 458.642350][T20009] __nla_validate_parse: 5 callbacks suppressed [ 458.642359][T20009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3312'. [ 459.460356][T19278] smc: removing ib device syz0 [ 459.476351][ T12] net_ratelimit: 19 callbacks suppressed [ 459.476369][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 459.518854][T19278] smbdirect: ib_dev[syz0] removed [ 459.592330][T20012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3313'. [ 460.047660][T20038] netlink: 'syz.0.3316': attribute type 1 has an invalid length. [ 460.047681][T20038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3316'. [ 460.142144][T20021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3314'. [ 460.261580][T20013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.280724][T20013] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.299326][T20013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.368558][T20013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.372018][T20013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.393856][T20013] veth1_vlan: left promiscuous mode [ 460.394644][T20013] veth0_vlan: left promiscuous mode [ 460.421113][T20013] veth0_vlan: entered promiscuous mode [ 460.422298][T20013] veth1_vlan: entered promiscuous mode [ 460.457571][T20013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.460461][T20013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.463292][T20013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 460.465164][T20013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 460.586610][T19879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.586672][T19879] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 460.625143][T20050] netlink: 'syz.3.3319': attribute type 16 has an invalid length. [ 460.794594][ T12] bridge0: port 3(veth0) entered blocking state [ 460.794706][ T12] bridge0: port 3(veth0) entered forwarding state [ 460.797463][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.797581][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.799715][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.799822][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.348069][T20068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3322'. [ 462.938974][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.939902][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 462.943862][ T13] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 463.043397][T13493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.050177][T19278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.051028][T19278] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 463.172874][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 463.279518][T19278] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 463.288240][T20077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3323'. [ 463.310817][T13491] IPVS: stop unused estimator thread 0... [ 463.361221][T20092] syzkaller0: entered promiscuous mode [ 463.361242][T20092] syzkaller0: entered allmulticast mode [ 463.363728][T20092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3327'. [ 463.363745][T20092] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3327'. [ 463.397880][T19880] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 463.610358][T20097] nbd: nbd0 already in use [ 463.613355][T20098] block nbd0: NBD_DISCONNECT [ 463.613381][T20098] block nbd0: Send disconnect failed -32 [ 463.613402][T20098] block nbd0: shutting down sockets [ 463.629186][T19278] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 463.739105][T19278] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 463.822154][T20115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3332'. [ 463.846177][T19880] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 464.270224][T20079] x_tables: duplicate underflow at hook 1 [ 464.519782][T19880] net_ratelimit: 6 callbacks suppressed [ 464.519801][T19880] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 464.644800][T20154] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 464.897324][T20166] netlink: 'syz.3.3340': attribute type 1 has an invalid length. [ 465.650285][T20166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 465.730311][T20168] bond2: (slave veth5): Enslaving as an active interface with a down link [ 465.865458][T20191] x_tables: duplicate underflow at hook 2 [ 465.934996][T20195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3346'. [ 466.479691][T20171] bond2 (unregistering): (slave veth5): Releasing active interface [ 466.481528][T20171] bond2 (unregistering): Released all slaves [ 466.561181][ T7229] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 466.606224][ T7229] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 466.621681][T20195] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 466.633647][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 466.652393][T20173] rxe_eth0 speed is unknown, defaulting to 1000 [ 466.736448][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 466.842764][T20209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3348'. [ 466.855903][ T9231] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 466.923343][T20210] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3349'. [ 466.967482][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 467.073127][T20215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3350'. [ 467.128952][T20213] bond1: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 467.151675][T20213] bond1 (unregistering): Released all slaves [ 467.267519][T13491] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 467.466460][T20173] wg0 speed is unknown, defaulting to 1000 [ 467.475777][ T9231] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 467.501627][T20230] tipc: Started in network mode [ 467.501652][T20230] tipc: Node identity e2bc564d8f88, cluster identity 4711 [ 467.501888][T20230] tipc: Enabled bearer , priority 0 [ 467.510387][T20217] syzkaller0: entered promiscuous mode [ 467.510406][T20217] syzkaller0: entered allmulticast mode [ 468.384915][T20270] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3356'. [ 468.397026][T20222] syzkaller0: mtu less than device minimum [ 468.419284][T20216] tipc: Resetting bearer [ 468.450051][T20216] tipc: Disabling bearer [ 468.477040][ T9231] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 468.641234][T20280] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3358'. [ 468.793181][T20287] netlink: 'syz.0.3357': attribute type 8 has an invalid length. [ 470.425925][T19278] net_ratelimit: 2 callbacks suppressed [ 470.425942][T19278] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 470.537562][T19278] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 470.710189][T19278] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 470.715324][T20312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3366'. [ 470.837137][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 470.967631][T19879] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 471.078238][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 471.207612][T19879] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 471.237715][T20349] ip_tables: iptables: counters copy to user failed while replacing table [ 471.262915][T20349] xt_hashlimit: size too large, truncated to 1048576 [ 471.782943][T20349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.796742][T19879] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 472.197151][T20391] pimreg1: tun_chr_ioctl cmd 1074025677 [ 472.197232][T20391] pimreg1: linktype set to 6 [ 472.268467][T20394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3380'. [ 472.357389][T20401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3382'. [ 472.428570][T20399] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3381'. [ 472.569713][T20408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'. [ 472.634302][T20408] pimreg0: tun_chr_ioctl cmd 1074025677 [ 472.634373][T20408] pimreg0: linktype set to 804 [ 472.914593][T20424] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 472.914700][T20423] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 472.930084][T20423] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 473.025450][T20430] ieee802154 phy0 wpan0: encryption failed: -126 [ 473.143244][T20443] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3390'. [ 473.244580][T20447] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3391'. [ 473.287266][T20447] bond1: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 473.312240][T20447] bond1 (unregistering): Released all slaves [ 474.034808][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3394'. [ 474.184534][T20490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3396'. [ 474.424273][T20493] vlan2: entered allmulticast mode [ 474.424294][T20493] bridge6: entered allmulticast mode [ 474.596679][T20506] netlink: 'syz.2.3399': attribute type 2 has an invalid length. [ 474.655545][T20506] !: entered promiscuous mode [ 474.736376][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3402'. [ 474.758885][T20522] ip6tnl1: entered allmulticast mode [ 475.034346][T20535] xt_TPROXY: Can be used only with -p tcp or -p udp [ 475.090343][T20525] netlink: 'syz.2.3399': attribute type 2 has an invalid length. [ 475.264738][T20531] !: left promiscuous mode [ 475.395545][T20525] !: entered promiscuous mode [ 475.419186][T20547] sctp: [Deprecated]: syz.1.3407 (pid 20547) Use of int in max_burst socket option. [ 475.419186][T20547] Use struct sctp_assoc_value instead [ 475.441812][T20547] Bluetooth: MGMT ver 1.23 [ 475.470351][ T12] net_ratelimit: 21 callbacks suppressed [ 475.470368][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 475.577159][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 475.687339][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 475.800426][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 475.929039][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 476.036782][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 476.147624][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 476.257297][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 476.368463][T19879] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 476.483104][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 476.486434][T20594] __nla_validate_parse: 1 callbacks suppressed [ 476.486448][T20594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3413'. [ 476.839313][ T5635] Bluetooth: hci4: Unexpected cc 0x1924 with no status [ 477.901337][T20666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3425'. [ 478.022529][T20675] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3428'. [ 478.115414][T20689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3425'. [ 478.177256][T20692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3430'. [ 478.272073][T20660] 8021q: adding VLAN 0 to HW filter on device bond5 [ 478.385293][T20660] bond5 (unregistering): Released all slaves [ 478.429731][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3430'. [ 478.490951][T20677] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 478.513407][ T5635] Bluetooth: hci3: ISO packet for unknown connection handle 3684 [ 478.590564][T20716] x_tables: duplicate underflow at hook 3 [ 478.710352][T20682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 478.770594][T20682] bond5 (unregistering): Released all slaves [ 478.829134][T20721] syz.1.3434: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 478.829219][T20721] CPU: 0 UID: 0 PID: 20721 Comm: syz.1.3434 Not tainted syzkaller #0 PREEMPT(full) [ 478.829238][T20721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 478.829252][T20721] Call Trace: [ 478.829259][T20721] [ 478.829267][T20721] dump_stack_lvl+0xe8/0x150 [ 478.829303][T20721] warn_alloc+0x24d/0x270 [ 478.829326][T20721] ? stack_depot_save_flags+0x33/0x810 [ 478.829488][T20721] ? __pfx_warn_alloc+0x10/0x10 [ 478.829520][T20721] ? kasan_save_track+0x4f/0x80 [ 478.829544][T20721] ? __kasan_kmalloc+0x93/0xb0 [ 478.829567][T20721] ? xsk_init_queue+0x8a/0xe0 [ 478.829634][T20721] ? xsk_setsockopt+0x5e0/0x960 [ 478.829654][T20721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.829687][T20721] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 478.829739][T20721] ? rcu_is_watching+0x16/0xb0 [ 478.829783][T20721] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 478.829802][T20721] ? __kmalloc_cache_noprof+0x31c/0x600 [ 478.829827][T20721] ? __kmalloc_cache_noprof+0x148/0x600 [ 478.829849][T20721] ? xskq_create+0x56/0x220 [ 478.829876][T20721] xskq_create+0x148/0x220 [ 478.829898][T20721] ? xsk_init_queue+0x8a/0xe0 [ 478.829920][T20721] xsk_init_queue+0x8a/0xe0 [ 478.829943][T20721] xsk_setsockopt+0x5e0/0x960 [ 478.829967][T20721] ? __pfx_xsk_setsockopt+0x10/0x10 [ 478.829987][T20721] ? __pfx_aa_sk_perm+0x10/0x10 [ 478.830133][T20721] ? aa_sock_opt_perm+0x142/0x1e0 [ 478.830156][T20721] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 478.830180][T20721] ? __pfx_xsk_setsockopt+0x10/0x10 [ 478.830203][T20721] do_sock_setsockopt+0x17c/0x1b0 [ 478.830288][T20721] __x64_sys_setsockopt+0x13d/0x1b0 [ 478.830315][T20721] do_syscall_64+0x166/0x520 [ 478.830363][T20721] ? trace_irq_disable+0x3b/0x140 [ 478.830397][T20721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.830415][T20721] ? clear_bhb_loop+0x70/0xc0 [ 478.830438][T20721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.830460][T20721] RIP: 0033:0x7f12c179fb19 [ 478.830477][T20721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.830491][T20721] RSP: 002b:00007f12bf9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 478.830507][T20721] RAX: ffffffffffffffda RBX: 00007f12c1a25fa0 RCX: 00007f12c179fb19 [ 478.830521][T20721] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 478.830532][T20721] RBP: 00007f12c1837b70 R08: 0000000000000004 R09: 0000000000000000 [ 478.830542][T20721] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.830553][T20721] R13: 00007f12c1a26038 R14: 00007f12c1a25fa0 R15: 00007fffa84c4428 [ 478.830584][T20721] [ 478.831981][T20721] Mem-Info: [ 478.831992][T20721] active_anon:5643 inactive_anon:0 isolated_anon:0 [ 478.831992][T20721] active_file:259 inactive_file:42932 isolated_file:0 [ 478.831992][T20721] unevictable:0 dirty:91 writeback:0 [ 478.831992][T20721] slab_reclaimable:13537 slab_unreclaimable:132315 [ 478.831992][T20721] mapped:31457 shmem:534 pagetables:3383 [ 478.831992][T20721] sec_pagetables:0 bounce:0 [ 478.831992][T20721] kernel_misc_reclaimable:0 [ 478.831992][T20721] free:1220474 free_pcp:13080 free_cma:0 [ 478.832053][T20721] Node 0 active_anon:22572kB inactive_anon:0kB active_file:1036kB inactive_file:171528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125828kB dirty:364kB writeback:0kB shmem:2136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15904kB pagetables:13396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 478.832102][T20721] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 478.832143][T20721] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.832191][T20721] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 478.832220][T20721] Node 0 DMA32 free:925768kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22572kB inactive_anon:0kB active_file:1036kB inactive_file:171528kB unevictable:0kB writepending:364kB zspages:0kB present:3129332kB managed:2522828kB mlocked:0kB bounce:0kB free_pcp:52308kB local_pcp:20448kB free_cma:0kB [ 478.833890][T20721] lowmem_reserve[]: 0 0 1 1 1 [ 478.833923][T20721] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 478.833975][T20721] lowmem_reserve[]: 0 0 0 0 0 [ 478.834003][T20721] Node 1 Normal free:3940756kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.834056][T20721] lowmem_reserve[]: 0 0 0 0 0 [ 478.834083][T20721] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 478.834188][T20721] Node 0 DMA32: 3396*4kB (UME) 1303*8kB (UME) 764*16kB (UME) 480*32kB (UME) 231*64kB (UME) 268*128kB (UME) 409*256kB (UME) 229*512kB (UME) 115*1024kB (UME) 5*2048kB (UME) 116*4096kB (UM) = 925768kB [ 478.834322][T20721] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 478.834417][T20721] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 9*16kB (UM) 11*32kB (UM) 10*64kB (UM) 6*128kB (UM) 6*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3940756kB [ 478.834552][T20721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 478.834566][T20721] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 478.834580][T20721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 478.834593][T20721] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 478.834607][T20721] 43721 total pagecache pages [ 478.834620][T20721] 0 pages in swap cache [ 478.834626][T20721] Free swap = 124996kB [ 478.834633][T20721] Total swap = 124996kB [ 478.834640][T20721] 2097051 pages RAM [ 478.834646][T20721] 0 pages HighMem/MovableOnly [ 478.834652][T20721] 434380 pages reserved [ 478.834658][T20721] 0 pages cma reserved [ 479.463742][T20740] netlink: 'syz.0.3438': attribute type 89 has an invalid length. [ 479.530517][T20747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3440'. [ 479.541631][T20748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3440'. [ 479.545536][T20743] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 479.749775][T20756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3442'. [ 479.813735][T20756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 479.813752][T20756] IPv6: NLM_F_CREATE should be set when creating new route [ 479.813792][T20756] IPv6: NLM_F_CREATE should be set when creating new route [ 479.813814][T20756] IPv6: NLM_F_CREATE should be set when creating new route [ 479.815249][T20760] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 479.941458][T20764] netlink: 'syz.1.3444': attribute type 1 has an invalid length. [ 480.067971][T20764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3444'. [ 480.086350][T20768] xt_TPROXY: Can be used only with -p tcp or -p udp [ 480.157391][T20773] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 2, id = 0 [ 480.244855][T20778] netlink: 'syz.0.3448': attribute type 11 has an invalid length. [ 480.244874][T20778] netlink: 'syz.0.3448': attribute type 4 has an invalid length. [ 480.264456][T20782] netlink: 'syz.0.3448': attribute type 11 has an invalid length. [ 480.264474][T20782] netlink: 'syz.0.3448': attribute type 4 has an invalid length. [ 480.341743][T20776] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 480.474732][T20792] netlink: 'syz.0.3451': attribute type 1 has an invalid length. [ 480.500247][T20776] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 480.502493][T20776] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 480.610845][T20793] bond5: (slave bridge7): Enslaving as a backup interface with an up link [ 480.638385][T20792] macvlan2: entered promiscuous mode [ 480.638405][T20792] macvlan2: entered allmulticast mode [ 480.638993][T20792] bond5: entered promiscuous mode [ 480.639007][T20792] bridge7: entered promiscuous mode [ 480.639400][T20792] bond5: entered allmulticast mode [ 480.639412][T20792] bridge7: entered allmulticast mode [ 480.676563][T20792] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 480.687412][T20792] bond5: left allmulticast mode [ 480.687431][T20792] bridge7: left allmulticast mode [ 480.687508][T20792] bond5: left promiscuous mode [ 480.687519][T20792] bridge7: left promiscuous mode [ 480.788084][T13493] net_ratelimit: 24 callbacks suppressed [ 480.788103][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 480.854163][T20813] IPVS: rr: UDP [::1]:8080 - no destination available [ 480.899063][T19879] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 481.017566][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 481.081345][T20827] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 481.128731][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 481.503573][T20833] netlink: 'syz.2.3461': attribute type 1 has an invalid length. [ 481.571580][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 481.642907][T20833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.766402][T20846] bond1: (slave geneve3): making interface the new active one [ 481.773557][T20846] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 481.883829][T20858] __nla_validate_parse: 5 callbacks suppressed [ 481.883847][T20858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3466'. [ 481.956299][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 482.144858][T20876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3470'. [ 482.146457][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 482.234060][T20874] netlink: 58 bytes leftover after parsing attributes in process `syz.3.3471'. [ 482.298541][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 482.407135][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 482.426884][T20893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3476'. [ 482.426916][T20893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3476'. [ 482.590845][T20904] mac80211_hwsim hwsim58 syzkaller0: entered promiscuous mode [ 482.590871][T20904] mac80211_hwsim hwsim58 syzkaller0: entered allmulticast mode [ 482.636216][ T4951] Bluetooth: hci2: command 0x0405 tx timeout [ 482.831199][T20909] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20001 [ 482.862776][T20921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3481'. [ 482.873001][T20921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3481'. [ 482.881800][T20921] Bluetooth: MGMT ver 1.23 [ 483.434503][T20948] netlink: 'syz.0.3486': attribute type 1 has an invalid length. [ 483.620599][T20948] 8021q: adding VLAN 0 to HW filter on device bond6 [ 483.766181][T20948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3486'. [ 483.858586][T20963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3488'. [ 483.963387][T20948] bond6: (slave bridge9): making interface the new active one [ 483.980738][T20948] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 483.993839][T20957] bridge_slave_1: left allmulticast mode [ 483.993863][T20957] bridge_slave_1: left promiscuous mode [ 483.994145][T20957] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.013731][T20963] netlink: 'syz.3.3488': attribute type 46 has an invalid length. [ 484.515014][T20979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3493'. [ 484.945691][ T4951] Bluetooth: hci2: command 0x0405 tx timeout [ 484.948486][ T5635] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 485.330808][T21021] tipc: Started in network mode [ 485.330848][T21021] tipc: Node identity c25ac24b9cc4, cluster identity 4711 [ 485.331139][T21021] tipc: Enabled bearer , priority 10 [ 485.334479][T21040] tipc: Resetting bearer [ 485.412132][T21040] tipc: Disabling bearer [ 485.541068][T21055] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 485.559815][T21055] 0ªX¹¦Dö»: entered allmulticast mode [ 485.796447][T19881] net_ratelimit: 21 callbacks suppressed [ 485.796465][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 485.833165][T21077] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 485.853419][T21077] erspan0: entered promiscuous mode [ 485.958010][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 486.070155][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 486.113814][T21090] netlink: 'syz.3.3516': attribute type 1 has an invalid length. [ 486.447573][T19278] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 486.555861][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 486.687182][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 486.797812][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 486.906168][T19879] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 487.017096][T19278] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 487.254401][T21164] __nla_validate_parse: 21 callbacks suppressed [ 487.254418][T21164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3532'. [ 487.457052][T19278] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 487.662151][T21170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3533'. [ 487.662178][T21170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3533'. [ 487.714745][T21190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3535'. [ 487.714971][T21190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3535'. [ 487.715190][T21190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3535'. [ 487.715434][T21190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3535'. [ 487.730488][T21170] bridge0: entered promiscuous mode [ 487.730506][T21170] bridge0: entered allmulticast mode [ 487.743530][T21190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3535'. [ 487.743743][T21190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3535'. [ 487.743945][T21190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3535'. [ 489.018186][T21253] netlink: 'syz.0.3551': attribute type 1 has an invalid length. [ 489.421975][T21278] IPv6: NLM_F_REPLACE set, but no existing node found! [ 489.438103][T21280] caif0: tun_chr_ioctl cmd 2147767507 [ 489.532179][T21293] nbd0: detected capacity change from 0 to 63 [ 489.552144][ T5635] block nbd0: Receive control failed (result -104) [ 489.864055][ T30] audit: type=1804 audit(1794159813.030:18): pid=21306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3562" name="/newroot/95/cgroup.controllers" dev="tmpfs" ino=503 res=1 errno=0 [ 489.864283][ T30] audit: type=1800 audit(1794159813.030:19): pid=21306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3562" name="cgroup.controllers" dev="tmpfs" ino=503 res=0 errno=-22 [ 490.272863][T21311] Bluetooth: MGMT ver 1.23 [ 490.683177][T21323] veth0_to_bridge: entered promiscuous mode [ 490.683301][T21323] macsec1: entered allmulticast mode [ 490.683315][T21323] veth0_to_bridge: entered allmulticast mode [ 490.711426][T21323] veth0_to_bridge: left allmulticast mode [ 490.711449][T21323] veth0_to_bridge: left promiscuous mode [ 490.797925][T21331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.868473][ T13] net_ratelimit: 18 callbacks suppressed [ 490.868491][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 490.986398][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 491.196139][T19879] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 491.307558][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 491.416687][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 491.609805][T21383] pim6reg99999999: entered allmulticast mode [ 491.631439][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 491.737266][T19879] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 491.848749][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 491.951565][T19881] IPVS: starting estimator thread 0... [ 491.958283][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 492.035788][T21410] IPVS: using max 30 ests per chain, 72000 per kthread [ 492.068190][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 492.490731][T21442] syzkaller1: entered promiscuous mode [ 492.490751][T21442] syzkaller1: entered allmulticast mode [ 492.812682][T21461] syzkaller0: entered promiscuous mode [ 492.812702][T21461] syzkaller0: entered allmulticast mode [ 492.836235][T21461] tipc: Started in network mode [ 492.836259][T21461] tipc: Node identity 62b5867f64a6, cluster identity 4711 [ 492.836535][T21461] tipc: Enabled bearer , priority 0 [ 492.865934][ T5635] Bluetooth: hci1: unexpected cc 0x2060 length: 24 > 7 [ 492.999018][T21466] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 493.000035][T21475] __nla_validate_parse: 32 callbacks suppressed [ 493.000048][T21475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3595'. [ 493.000091][T21475] lo: MTU not usable for tipc bearer [ 493.000118][T21475] tipc: Enabling of bearer rejected, failed to enable media [ 493.000662][T21459] tipc: Resetting bearer [ 493.039605][T21459] tipc: Disabling bearer [ 493.280823][T21481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3595'. [ 493.280867][T21481] lo: MTU not usable for tipc bearer [ 493.280895][T21481] tipc: Enabling of bearer rejected, failed to enable media [ 493.282847][T21489] netlink: 'syz.2.3596': attribute type 2 has an invalid length. [ 493.282864][T21489] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3596'. [ 493.411042][T21483] netlink: 'syz.2.3596': attribute type 10 has an invalid length. [ 493.451287][T21483] team0: Port device dummy0 added [ 493.486567][T21483] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 493.493456][T21501] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3599'. [ 493.508078][T21499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3598'. [ 493.659073][T21504] netlink: 'syz.4.3598': attribute type 2 has an invalid length. [ 493.692562][T21504] !: entered promiscuous mode [ 493.703342][T21499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3598'. [ 493.714743][T21499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3598'. [ 493.744075][T21499] !: left promiscuous mode [ 493.767385][T21515] xt_ecn: cannot match TCP bits for non-tcp packets [ 493.900339][T21522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3605'. [ 493.964194][T21530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3605'. [ 494.036253][T21537] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 494.164081][T21543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3609'. [ 494.334726][T21543] veth5: entered allmulticast mode [ 494.348848][T21543] bond7: (slave veth5): Enslaving as an active interface with an up link [ 495.018225][T21584] erspan0: entered promiscuous mode [ 495.474750][T21605] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 495.491957][T21604] [ 495.494327][T21604] ====================================================== [ 495.501338][T21604] WARNING: possible circular locking dependency detected [ 495.508366][T21604] syzkaller #0 Not tainted [ 495.512777][T21604] ------------------------------------------------------ [ 495.519788][T21604] syz.1.3620/21604 is trying to acquire lock: [ 495.525836][T21604] ffff888076809e18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0 [ 495.534696][T21604] [ 495.534696][T21604] but task is already holding lock: [ 495.542040][T21604] ffff88802a3aaac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 495.551546][T21604] [ 495.551546][T21604] which lock already depends on the new lock. [ 495.551546][T21604] [ 495.561930][T21604] [ 495.561930][T21604] the existing dependency chain (in reverse order) is: [ 495.570920][T21604] [ 495.570920][T21604] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 495.578715][T21604] __mutex_lock+0x197/0x15a0 [ 495.583885][T21604] elevator_change+0x1af/0x480 [ 495.589166][T21604] elevator_set_none+0xb5/0x140 [ 495.594522][T21604] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 495.600890][T21604] nbd_start_device+0x189/0xb30 [ 495.606317][T21604] nbd_genl_connect+0x167d/0x1cd0 [ 495.611843][T21604] genl_family_rcv_msg_doit+0x233/0x340 [ 495.617974][T21604] genl_rcv_msg+0x614/0x7a0 [ 495.622984][T21604] netlink_rcv_skb+0x226/0x4a0 [ 495.628252][T21604] genl_rcv+0x28/0x40 [ 495.632737][T21604] netlink_unicast+0x8ef/0xa80 [ 495.638006][T21604] netlink_sendmsg+0x7f0/0xb20 [ 495.643274][T21604] sock_sendmsg_nosec+0x14e/0x190 [ 495.648858][T21604] ____sys_sendmsg+0x54e/0x850 [ 495.654129][T21604] ___sys_sendmsg+0x2a5/0x360 [ 495.659304][T21604] __x64_sys_sendmsg+0x1b1/0x290 [ 495.664740][T21604] do_syscall_64+0x166/0x520 [ 495.669835][T21604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.676228][T21604] [ 495.676228][T21604] -> #5 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 495.684813][T21604] blk_alloc_queue+0x544/0x690 [ 495.690146][T21604] __blk_mq_alloc_disk+0x194/0x390 [ 495.695760][T21604] nbd_dev_add+0x494/0xb60 [ 495.700685][T21604] nbd_init+0x168/0x1f0 [ 495.705444][T21604] do_one_initcall+0x250/0x870 [ 495.710737][T21604] do_initcall_level+0x10a/0x1a0 [ 495.716242][T21604] do_initcalls+0x59/0xa0 [ 495.721086][T21604] kernel_init_freeable+0x29d/0x3e0 [ 495.726785][T21604] kernel_init+0x22/0x1d0 [ 495.731613][T21604] ret_from_fork+0x514/0xb70 [ 495.736724][T21604] ret_from_fork_asm+0x1a/0x30 [ 495.741989][T21604] [ 495.741989][T21604] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 495.749180][T21604] fs_reclaim_acquire+0x71/0x100 [ 495.754636][T21604] __kmalloc_cache_node_noprof+0x66/0x620 [ 495.760865][T21604] create_worker+0x112/0x7c0 [ 495.765985][T21604] workqueue_prepare_cpu+0xe4/0x170 [ 495.771686][T21604] cpuhp_invoke_callback+0x434/0x810 [ 495.777484][T21604] _cpu_up+0x2ce/0x5b0 [ 495.782057][T21604] cpu_up+0x1d2/0x220 [ 495.786543][T21604] cpuhp_bringup_mask+0xb2/0x1a0 [ 495.792048][T21604] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 495.798360][T21604] bringup_nonboot_cpus+0x17/0x30 [ 495.803888][T21604] smp_init+0x32/0x110 [ 495.808531][T21604] kernel_init_freeable+0x27f/0x3e0 [ 495.814229][T21604] kernel_init+0x22/0x1d0 [ 495.819059][T21604] ret_from_fork+0x514/0xb70 [ 495.824150][T21604] ret_from_fork_asm+0x1a/0x30 [ 495.829416][T21604] [ 495.829416][T21604] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 495.837126][T21604] cpus_read_lock+0x3d/0x160 [ 495.842220][T21604] static_key_slow_inc+0x12/0x30 [ 495.847696][T21604] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 495.853925][T21604] nbd_genl_foreach_sock+0x265/0x450 [ 495.859709][T21604] nbd_genl_reconfigure+0xbbb/0x1040 [ 495.865496][T21604] genl_family_rcv_msg_doit+0x233/0x340 [ 495.871542][T21604] genl_rcv_msg+0x614/0x7a0 [ 495.876548][T21604] netlink_rcv_skb+0x226/0x4a0 [ 495.881817][T21604] genl_rcv+0x28/0x40 [ 495.886303][T21604] netlink_unicast+0x8ef/0xa80 [ 495.891571][T21604] netlink_sendmsg+0x7f0/0xb20 [ 495.896833][T21604] sock_sendmsg_nosec+0x14e/0x190 [ 495.902364][T21604] ____sys_sendmsg+0x54e/0x850 [ 495.907642][T21604] ___sys_sendmsg+0x2a5/0x360 [ 495.912818][T21604] __x64_sys_sendmsg+0x1b1/0x290 [ 495.918254][T21604] do_syscall_64+0x166/0x520 [ 495.923350][T21604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.929744][T21604] [ 495.929744][T21604] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 495.937370][T21604] __mutex_lock+0x197/0x15a0 [ 495.942470][T21604] nbd_queue_rq+0x373/0xff0 [ 495.947475][T21604] blk_mq_dispatch_rq_list+0x499/0x1990 [ 495.953605][T21604] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 495.960472][T21604] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 495.966955][T21604] blk_mq_run_work_fn+0x167/0x2f0 [ 495.972484][T21604] process_scheduled_works+0xc3d/0x1630 [ 495.978534][T21604] worker_thread+0xa47/0xfb0 [ 495.983660][T21604] kthread+0x38b/0x480 [ 495.988231][T21604] ret_from_fork+0x514/0xb70 [ 495.993350][T21604] ret_from_fork_asm+0x1a/0x30 [ 495.998617][T21604] [ 495.998617][T21604] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 496.005803][T21604] __mutex_lock+0x197/0x15a0 [ 496.010901][T21604] nbd_queue_rq+0xc1/0xff0 [ 496.015830][T21604] blk_mq_dispatch_rq_list+0x499/0x1990 [ 496.021912][T21604] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 496.028757][T21604] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 496.035269][T21604] blk_mq_run_work_fn+0x167/0x2f0 [ 496.040813][T21604] process_scheduled_works+0xc3d/0x1630 [ 496.046870][T21604] worker_thread+0xa47/0xfb0 [ 496.051969][T21604] kthread+0x38b/0x480 [ 496.056550][T21604] ret_from_fork+0x514/0xb70 [ 496.061645][T21604] ret_from_fork_asm+0x1a/0x30 [ 496.066911][T21604] [ 496.066911][T21604] -> #0 (set->srcu){.+.+}-{0:0}: [ 496.074016][T21604] __lock_acquire+0x164c/0x2de0 [ 496.079372][T21604] lock_sync+0xb3/0x130 [ 496.084032][T21604] __synchronize_srcu+0xca/0x2f0 [ 496.089473][T21604] elevator_switch+0x1e8/0x7b0 [ 496.094741][T21604] elevator_change+0x2fa/0x480 [ 496.100020][T21604] elevator_set_default+0x375/0x440 [ 496.105738][T21604] blk_register_queue+0x404/0x4f0 [ 496.111265][T21604] __add_disk+0x6b8/0xdb0 [ 496.116096][T21604] add_disk_fwnode+0x100/0x3a0 [ 496.121378][T21604] nbd_dev_add+0x733/0xb60 [ 496.126297][T21604] nbd_genl_connect+0x96c/0x1cd0 [ 496.131731][T21604] genl_family_rcv_msg_doit+0x233/0x340 [ 496.137782][T21604] genl_rcv_msg+0x614/0x7a0 [ 496.142787][T21604] netlink_rcv_skb+0x226/0x4a0 [ 496.148054][T21604] genl_rcv+0x28/0x40 [ 496.152542][T21604] netlink_unicast+0x8ef/0xa80 [ 496.157823][T21604] netlink_sendmsg+0x7f0/0xb20 [ 496.163094][T21604] sock_sendmsg_nosec+0x14e/0x190 [ 496.168622][T21604] ____sys_sendmsg+0x54e/0x850 [ 496.173890][T21604] ___sys_sendmsg+0x2a5/0x360 [ 496.179066][T21604] __x64_sys_sendmsg+0x1b1/0x290 [ 496.184525][T21604] do_syscall_64+0x166/0x520 [ 496.189620][T21604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.196016][T21604] [ 496.196016][T21604] other info that might help us debug this: [ 496.196016][T21604] [ 496.206225][T21604] Chain exists of: [ 496.206225][T21604] set->srcu --> &q->q_usage_counter(io)#54 --> &q->elevator_lock [ 496.206225][T21604] [ 496.219850][T21604] Possible unsafe locking scenario: [ 496.219850][T21604] [ 496.227276][T21604] CPU0 CPU1 [ 496.232620][T21604] ---- ---- [ 496.237961][T21604] lock(&q->elevator_lock); [ 496.242530][T21604] lock(&q->q_usage_counter(io)#54); [ 496.250403][T21604] lock(&q->elevator_lock); [ 496.257496][T21604] sync(set->srcu); [ 496.261373][T21604] [ 496.261373][T21604] *** DEADLOCK *** [ 496.261373][T21604] [ 496.269498][T21604] locks held by syz.1.3620/21604: 6, last CPU#0: [ 496.275810][T21604] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.283989][T21604] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.292931][T21604] #2: ffff88808542b9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 496.303263][T21604] #3: ffff88802a3aab50 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0 [ 496.313070][T21604] #4: ffff88802a3aa5d8 (&q->q_usage_counter(queue)#58){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 496.323924][T21604] #5: ffff88802a3aaac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 496.333734][T21604] [ 496.333734][T21604] stack backtrace: [ 496.339601][T21604] CPU: 0 UID: 0 PID: 21604 Comm: syz.1.3620 Not tainted syzkaller #0 PREEMPT(full) [ 496.348953][T21604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 496.359005][T21604] Call Trace: [ 496.362272][T21604] [ 496.365184][T21604] dump_stack_lvl+0xe8/0x150 [ 496.369769][T21604] print_circular_bug+0x2e2/0x300 [ 496.374786][T21604] check_noncircular+0x12f/0x150 [ 496.379714][T21604] __lock_acquire+0x164c/0x2de0 [ 496.384552][T21604] ? lockdep_unlock+0x5c/0xd0 [ 496.389211][T21604] ? __lock_acquire+0x1511/0x2de0 [ 496.394220][T21604] lock_sync+0xb3/0x130 [ 496.398386][T21604] ? __synchronize_srcu+0xb6/0x2f0 [ 496.403485][T21604] ? __synchronize_srcu+0xb6/0x2f0 [ 496.408580][T21604] __synchronize_srcu+0xca/0x2f0 [ 496.413503][T21604] ? __pfx___synchronize_srcu+0x10/0x10 [ 496.419049][T21604] ? do_raw_spin_lock+0x12b/0x2f0 [ 496.424055][T21604] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 496.429911][T21604] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 496.435440][T21604] ? synchronize_srcu+0x20c/0x270 [ 496.440448][T21604] elevator_switch+0x1e8/0x7b0 [ 496.445209][T21604] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 496.450653][T21604] elevator_change+0x2fa/0x480 [ 496.455408][T21604] ? do_raw_spin_unlock+0xf5/0x200 [ 496.460501][T21604] elevator_set_default+0x375/0x440 [ 496.465689][T21604] ? __pfx_elevator_set_default+0x10/0x10 [ 496.471415][T21604] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 496.478483][T21604] ? blk_crypto_sysfs_register+0x11c/0x170 [ 496.484323][T21604] blk_register_queue+0x404/0x4f0 [ 496.489330][T21604] __add_disk+0x6b8/0xdb0 [ 496.493655][T21604] add_disk_fwnode+0x100/0x3a0 [ 496.498411][T21604] nbd_dev_add+0x733/0xb60 [ 496.502811][T21604] ? __pfx_nbd_dev_add+0x10/0x10 [ 496.507733][T21604] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 496.513516][T21604] ? bpf_lsm_capable+0x9/0x20 [ 496.518179][T21604] ? security_capable+0x7e/0x2c0 [ 496.523159][T21604] ? radix_tree_lookup+0x240/0x290 [ 496.528288][T21604] nbd_genl_connect+0x96c/0x1cd0 [ 496.533207][T21604] ? __pfx_nbd_genl_connect+0x10/0x10 [ 496.538560][T21604] ? rcu_is_watching+0x16/0xb0 [ 496.543360][T21604] ? trace_kmalloc+0x2a/0xf0 [ 496.547942][T21604] ? __kmalloc_noprof+0x387/0x710 [ 496.552952][T21604] ? __nla_parse+0x40/0x60 [ 496.557355][T21604] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 496.563663][T21604] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 496.569984][T21604] genl_family_rcv_msg_doit+0x233/0x340 [ 496.575518][T21604] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 496.581570][T21604] ? __lock_acquire+0x747/0x2de0 [ 496.586504][T21604] genl_rcv_msg+0x614/0x7a0 [ 496.591007][T21604] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.596023][T21604] ? __pfx_nbd_genl_connect+0x10/0x10 [ 496.601421][T21604] netlink_rcv_skb+0x226/0x4a0 [ 496.606177][T21604] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.611184][T21604] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.616460][T21604] ? down_read+0x2b9/0x320 [ 496.620865][T21604] genl_rcv+0x28/0x40 [ 496.624828][T21604] netlink_unicast+0x8ef/0xa80 [ 496.629583][T21604] netlink_sendmsg+0x7f0/0xb20 [ 496.634330][T21604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.639594][T21604] ? aa_sock_msg_perm+0x144/0x210 [ 496.644614][T21604] ? apparmor_socket_sendmsg+0x98/0x360 [ 496.650222][T21604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.655490][T21604] sock_sendmsg_nosec+0x14e/0x190 [ 496.660503][T21604] ____sys_sendmsg+0x54e/0x850 [ 496.665283][T21604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.670551][T21604] ? import_iovec+0x73/0xa0 [ 496.675126][T21604] ___sys_sendmsg+0x2a5/0x360 [ 496.679786][T21604] ? __lock_acquire+0x747/0x2de0 [ 496.684713][T21604] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.689891][T21604] ? futex_wait+0x2a2/0x390 [ 496.694413][T21604] ? __fget_files+0x3a2/0x420 [ 496.699120][T21604] ? __fget_files+0x2a/0x420 [ 496.703696][T21604] __x64_sys_sendmsg+0x1b1/0x290 [ 496.708625][T21604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.714095][T21604] do_syscall_64+0x166/0x520 [ 496.718691][T21604] ? trace_irq_disable+0x3b/0x140 [ 496.723706][T21604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.729754][T21604] ? clear_bhb_loop+0x70/0xc0 [ 496.734437][T21604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.740318][T21604] RIP: 0033:0x7f12c179fb19 [ 496.744715][T21604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.764300][T21604] RSP: 002b:00007f12bf9ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.772698][T21604] RAX: ffffffffffffffda RBX: 00007f12c1a26180 RCX: 00007f12c179fb19 [ 496.780680][T21604] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 496.788651][T21604] RBP: 00007f12c1837b70 R08: 0000000000000000 R09: 0000000000000000 [ 496.796639][T21604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.804600][T21604] R13: 00007f12c1a26218 R14: 00007f12c1a26180 R15: 00007fffa84c4428 [ 496.812559][T21604] [ 496.846234][T19881] net_ratelimit: 25 callbacks suppressed [ 496.846251][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 496.976299][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 497.068526][T21629] bond2: (slave bond_slave_0): Device is not our slave [ 497.068548][T21629] bond2: option active_slave: invalid value (bond_slave_0) [ 497.093677][T21629] bond2 (unregistering): Released all slaves [ 497.103129][T20376] udevd[20376]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 497.145889][T19879] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 497.257342][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 497.366375][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 497.477940][T19879] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 497.517132][T21617] syz.0.3622 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 497.517159][T21617] CPU: 0 UID: 0 PID: 21617 Comm: syz.0.3622 Not tainted syzkaller #0 PREEMPT(full) [ 497.517175][T21617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 497.517184][T21617] Call Trace: [ 497.517189][T21617] [ 497.517196][T21617] dump_stack_lvl+0xe8/0x150 [ 497.517221][T21617] dump_header+0xd3/0x4b0 [ 497.517240][T21617] oom_kill_process+0x3ab/0x9e0 [ 497.517260][T21617] out_of_memory+0xfb1/0x13b0 [ 497.517275][T21617] ? try_charge_memcg+0xc0d/0x15e0 [ 497.517293][T21617] ? __pfx_out_of_memory+0x10/0x10 [ 497.517308][T21617] ? do_raw_spin_unlock+0xf5/0x200 [ 497.517325][T21617] try_charge_memcg+0xcc3/0x15e0 [ 497.517345][T21617] ? __pfx_try_charge_memcg+0x10/0x10 [ 497.517359][T21617] ? rcu_is_watching+0x16/0xb0 [ 497.517378][T21617] ? percpu_ref_tryget+0x15/0x180 [ 497.517392][T21617] ? __lock_acquire+0x2d41/0x2de0 [ 497.517407][T21617] ? rcu_is_watching+0x16/0xb0 [ 497.517424][T21617] ? rcu_is_watching+0x16/0xb0 [ 497.517444][T21617] ? lock_release+0x4b/0x3c0 [ 497.517457][T21617] ? percpu_ref_tryget+0xfd/0x180 [ 497.517472][T21617] charge_memcg+0x1dd/0x310 [ 497.517492][T21617] ? mem_cgroup_swapin_charge_folio+0x2b/0x180 [ 497.517504][T21617] mem_cgroup_swapin_charge_folio+0x11a/0x180 [ 497.517517][T21617] __swap_cache_alloc_folio+0x4de/0x990 [ 497.517536][T21617] swap_cluster_readahead+0x4f2/0x640 [ 497.517554][T21617] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 497.517569][T21617] ? do_raw_spin_lock+0x12b/0x2f0 [ 497.517583][T21617] ? __css_rstat_updated+0x237/0x540 [ 497.517642][T21617] swapin_readahead+0x1a3/0xc60 [ 497.517659][T21617] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 497.517680][T21617] ? __pfx_swapin_readahead+0x10/0x10 [ 497.517696][T21617] ? swap_table_get+0x1e/0x260 [ 497.517712][T21617] ? rcu_is_watching+0x16/0xb0 [ 497.517731][T21617] ? swap_table_get+0x1e/0x260 [ 497.517747][T21617] ? lock_release+0x4b/0x3c0 [ 497.517765][T21617] ? lock_release+0x4b/0x3c0 [ 497.517783][T21617] ? rcu_is_watching+0x16/0xb0 [ 497.517805][T21617] ? swap_table_get+0x1e/0x260 [ 497.517820][T21617] ? swap_table_get+0x1e/0x260 [ 497.517839][T21617] ? swap_cache_get_folio+0x315/0x390 [ 497.517856][T21617] ? get_swap_device+0xd7/0x1c0 [ 497.517874][T21617] do_swap_page+0x752/0x4b80 [ 497.517898][T21617] ? __css_rstat_updated+0x237/0x540 [ 497.517922][T21617] ? rcu_is_watching+0x16/0xb0 [ 497.517944][T21617] ? lock_acquire+0x58/0x350 [ 497.517964][T21617] ? count_memcg_event_mm+0x21/0x260 [ 497.517988][T21617] ? do_swap_page+0x123/0x4b80 [ 497.518011][T21617] ? __pfx_do_swap_page+0x10/0x10 [ 497.518032][T21617] ? __pte_offset_map+0x45/0x240 [ 497.518047][T21617] ? __pte_offset_map+0x1ae/0x240 [ 497.518064][T21617] ? pte_offset_map_rw_nolock+0xea/0x160 [ 497.518081][T21617] handle_mm_fault+0x1327/0x2f80 [ 497.518110][T21617] ? handle_mm_fault+0xee/0x2f80 [ 497.518130][T21617] ? __pfx_handle_mm_fault+0x10/0x10 [ 497.518144][T21617] ? lock_vma_under_rcu+0x45a/0x500 [ 497.518171][T21617] do_user_addr_fault+0xb35/0x1480 [ 497.518196][T21617] ? trace_page_fault_user+0x84/0x1e0 [ 497.518216][T21617] exc_page_fault+0x6a/0xc0 [ 497.518237][T21617] asm_exc_page_fault+0x26/0x30 [ 497.518252][T21617] RIP: 0033:0x7f5c63c6c6cc [ 497.518267][T21617] Code: ee 8f ee 00 e8 03 00 00 48 8d 1d ef 98 3b 00 e8 7a 3f 13 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 497.518282][T21617] RSP: 002b:00007ffc7315dac0 EFLAGS: 00010202 [ 497.518298][T21617] RAX: 0000000000000000 RBX: 00007f5c64026090 RCX: 0000555587f97808 [ 497.518309][T21617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 497.518319][T21617] RBP: 00007f5c64027da0 R08: 0000000000000000 R09: 0000000000000000 [ 497.518329][T21617] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000007981c [ 497.518340][T21617] R13: 00007f5c6402627c R14: 0000000000079550 R15: 00007ffc7315dbc0 [ 497.518360][T21617] [ 497.539213][T21617] memory: usage 307200kB, limit 307200kB, failcnt 744 [ 497.539229][T21617] memory+swap: usage 307348kB, limit 9007199254740988kB, failcnt 0 [ 497.539240][T21617] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 497.539251][T21617] Memory cgroup stats for /syz0: [ 497.539358][T21617] cache 0 [ 497.539365][T21617] rss 0 [ 497.539370][T21617] rss_huge 0 [ 497.539375][T21617] shmem 0 [ 497.539380][T21617] mapped_file 0 [ 497.539385][T21617] dirty 0 [ 497.539390][T21617] writeback 0 [ 497.539395][T21617] workingset_refault_anon 9 [ 497.539401][T21617] workingset_refault_file 128 [ 497.539406][T21617] swap 151552 [ 497.539411][T21617] swapcached 4096 [ 497.539416][T21617] pgpgin 140294 [ 497.539421][T21617] pgpgout 140293 [ 497.539426][T21617] pgfault 261169 [ 497.539431][T21617] pgmajfault 12 [ 497.539437][T21617] inactive_anon 0 [ 497.539441][T21617] active_anon 4096 [ 497.539447][T21617] inactive_file 0 [ 497.539452][T21617] active_file 0 [ 497.539457][T21617] unevictable 0 [ 497.539462][T21617] hierarchical_memory_limit 314572800 [ 497.539468][T21617] hierarchical_memsw_limit 9223372036854771712 [ 497.539474][T21617] total_cache 0 [ 497.539480][T21617] total_rss 0 [ 497.539484][T21617] total_rss_huge 0 [ 497.539490][T21617] total_shmem 0 [ 497.539495][T21617] total_mapped_file 0 [ 497.539500][T21617] total_dirty 0 [ 497.539505][T21617] total_writeback 0 [ 497.539510][T21617] total_workingset_refault_anon 9 [ 497.539516][T21617] total_workingset_refault_file 128 [ 497.539522][T21617] total_swap 151552 [ 497.539527][T21617] total_swapcached 4096 [ 497.539533][T21617] total_pgpgin 140294 [ 497.539538][T21617] total_pgpgout 140293 [ 497.539543][T21617] total_pgfault 261169 [ 497.539549][T21617] total_pgmajfault 12 [ 497.539553][T21617] total_inactive_anon 0 [ 497.539559][T21617] total_active_anon 4096 [ 497.539564][T21617] total_inactive_file 0 [ 497.539569][T21617] total_active_file 0 [ 497.539574][T21617] total_unevictable 0 [ 497.539580][T21617] anon_cost 0 [ 497.539591][T21617] file_cost 0 [ 497.539597][T21617] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3622,pid=21617,uid=0 [ 497.539698][T21617] Memory cgroup out of memory: Killed process 21617 (syz.0.3622) total-vm:99032kB, anon-rss:1280kB, file-rss:21708kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 497.596567][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 497.698685][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 497.817205][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 497.927393][T19879] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 501.429377][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.927108][T19879] net_ratelimit: 35 callbacks suppressed [ 501.927122][T19879] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 502.036257][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 502.146583][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 502.257329][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 502.366847][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 502.477775][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 502.596561][T19879] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 502.708928][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 502.816231][T13493] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 502.936549][T19881] bond0: (slave ip6gretap1): failed to get link speed/duplex