last executing test programs: 5.483286479s ago: executing program 4 (id=1591): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="f300"}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)={0x118, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x106, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf9e14", @typed={0x8, 0x96, 0x0, 0x0, @fd=r1}, @nested={0x59, 0x7a, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @fd}, @generic="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da", @typed={0x8, 0x108, 0x0, 0x0, @u32=0x180000}]}, @typed={0x8, 0xc3, 0x0, 0x0, @fd}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000180)) 4.828087782s ago: executing program 4 (id=1596): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pK \x00'}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x5d, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0xfff1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x404d0c0) r9 = socket(0x1e, 0x805, 0x0) connect$tipc(r9, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x10) connect$tipc(r9, &(0x7f0000000600)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x2}}, 0x10) close(r9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 4.23499179s ago: executing program 4 (id=1603): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_newrule={0x24, 0x20, 0x400, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x10, 0x51, 0x2, 0x0, 0x0, 0x0, 0x8}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8810) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x148, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0xfff1, 0xffff}, {0xffff, 0xffff}}, [@TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x7, 0x7, 0x5, 0x0, 0x7f, 0x100, 0x2}}, {0x8, 0x2, [0xfff9, 0x800]}}, {{0x1c, 0x1, {0x3, 0x1, 0xa, 0x9, 0x0, 0x3, 0xc, 0x2}}, {0x8, 0x2, [0x4, 0x7]}}, {{0x1c, 0x1, {0x4, 0x9, 0x1000, 0xb49, 0x2, 0x9, 0xea7, 0x6}}, {0x10, 0x2, [0xe, 0x7, 0x4, 0x6, 0x400, 0x7]}}, {{0x1c, 0x1, {0x1, 0x2, 0x401, 0x2, 0x1, 0x2, 0x100}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x0, 0x9, 0xc27, 0x0, 0x6, 0x5, 0x6}}, {0x10, 0x2, [0x2, 0x1, 0x7, 0xa, 0x5, 0x5]}}, {{0x1c, 0x1, {0x87, 0x2, 0x1, 0x1, 0x0, 0x8000, 0x4, 0x7}}, {0x12, 0x2, [0xd, 0x2, 0x0, 0xfffa, 0x7ff, 0x4, 0x9]}}, {{0x1c, 0x1, {0x8, 0x2, 0x8, 0x9, 0x1, 0x10000, 0xef2, 0x7}}, {0x12, 0x2, [0x81, 0x7, 0x18, 0x9, 0x1, 0x8, 0x1]}}]}]}, 0x148}}, 0x20000000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f0000000240)='taprio\x00', 0x2000, &(0x7f0000000280)={@align=0x5, {0xcef, 0x7, 0x3e, 0x7}}, 0x6, &(0x7f00000002c0), &(0x7f0000000300)=0xe3e}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x29c, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x288, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0x16, 0x4, "b3585ed5dc2d0a39268e8887b6a735292dc7"}, @ETHTOOL_A_BITSET_VALUE={0xf2, 0x4, "90f054f52d7ca10decb83fac70169a1a366fcfa3b42a9bb2cde34dc3d50bf7c5df68639a2fc25ed46cb455ffd6b30799babda166cf6c5189296ffe29f93b51bf18ee6661ae7b39b2c928d824f40c9e628973ef1545b5d4339228c168d73a60fcccdb04f689b98348bd19351ff165d34b37e9487da483b55fceb70d0cebdd251aea66871adb5545842d4300d07f02806f5272ad2e01d0035aa8160942c532963668fb95afe29d5ecfbf66a63047343ce61019267b0da4247f3562816b3dcc74bbd6474213ccded7043498829c913e8adb7100ec0357d3b7e18f7940eaec7a0d286bbb11ca16ac53ddae97431df79c"}, @ETHTOOL_A_BITSET_VALUE={0x98, 0x4, "2add605cf1bca375a7ece7eb3b3db0001ca0292e5b35b91e65b80355cae6c3d1a41dad748a6283e0b0a8dd611a71df56b160b0f0c88f6cfc19bba914e524a1bddd71dd1f9e9cb4d7bd5cfc58cba6cd58817fabb9c4df9f67c3be8816e25907a1014a2481d55b4595e3b0864136c7fe0450af4485a44528418a43a772446bf8d8cf7869da2ae81e4b1abbca032ef575228c639526"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd1, 0x4, "0e405b5a1093c6520934f77aac02867c6cad62eba478302aee9b646df6fd3cd81d5e7fe703c41381cf9c342747ff2271b5828e025821910636492df38559659ff47a0a1f0f7e3e9878903d8d4b298e5d21081b6633cbcf3c835b7ee77fda1f062f274d0c83ae758c07a265bd9f6e2b26c2e5e7b01a449d6371e13339d2753f4d723f3cbb15abadb8c21cccdbf0040466a050e93feeb63280b46a5db5f6c35100003333dcd1ab2306e56a6ffa0ba2c1e6ad849178fc719004c79522e6542d83ffb7a9d9814173fcd9b5ad180637"}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4000090}, 0x8010) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4008061) 4.018481851s ago: executing program 4 (id=1605): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=@polexpire={0xcc, 0x1b, 0x3, 0x70bd27, 0x25dfdbfd, {{{@in6=@remote, @in=@multicast1, 0x4e22, 0x0, 0x4e23, 0x1, 0xa, 0xa0, 0x20, 0x32}, {0x8001, 0x5, 0xfffffffffffffff8, 0x1ff, 0x1, 0x8000000000000000, 0x9, 0x1158000000000}, {0x2, 0x1, 0x101, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x29}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xff}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x8000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000140079a048fe00000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000400)={0x5, 0x1, 0x9}, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0xe, &(0x7f0000000380)="ed6606c370a5", 0x6) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) (async) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000840)={0x2, {{0xa, 0x4e23, 0xb7, @loopback, 0x3}}, 0x1, 0x2, [{{0xa, 0x4e21, 0x6, @private1, 0x1}}, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3d03}}]}, 0x190) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r7, @in={{0x2, 0x4e21, @remote}}, 0x7fff, 0x0, 0x52f, 0xc7, 0x80, 0xf, 0x7a}, 0x9c) (async) sendto$inet6(r3, &(0x7f0000000240)='\x00', 0x1, 0x20000000, &(0x7f0000000480)={0xa, 0x4e1e, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, 0x5}, 0x1c) (async) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000), 0x10) 3.71415928s ago: executing program 4 (id=1608): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="090000000928467b7f8000000100000000000000492242302fb02e0df7539e2ed08a43e4855eff8512479c8e31384fda9a54ad9533174b9206b8cfce408e006db2ffa386bcfd7c0926", @ANYRES32=0x1, @ANYBLOB="000001000000be010000000000006268772b7251b4acdd0000dba33afb030b511477355b09bb97f071bfc108947711f608aba1ee722c7f9c49aef1b5158e67e4796150d9d6a904e774356d469ffffb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000002300000000000000170000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x14, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020600000000ffff000000000095fb6acfbfbe020c57fd92def2a33fef439d3ac815fbee625cf2023e59e6846a1cd049200ea56609134a4202f4b4face0e2d72a69e94e0d1ce"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9a6582e0ec066799, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) ioctl$SIOCGETMIFCNT_IN6(r7, 0x89e0, &(0x7f0000000000)={0xfffd}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={r6, &(0x7f0000000000)='cgroup\x00', 0x28501, 0x0, 0xf, 0x0, 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x40010, r8, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x35, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r10, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r10, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20, 0x40044}}], 0x1, 0x4) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) preadv(r9, &(0x7f0000000500)=[{&(0x7f0000000540)=""/191, 0xbf}], 0x1, 0x4f, 0x9) 2.499443055s ago: executing program 4 (id=1623): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg(r3, &(0x7f0000002100)=[{{&(0x7f0000000000)=@can={0x1d, r4}, 0x80, &(0x7f0000001880)=[{0x0}, {&(0x7f0000000180)="c5", 0x1}], 0x2}}], 0x1, 0x881) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) recvmmsg(r5, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xb8ad, 0x4, 0x4, 0x101, r1, 0x0, '\x00', r4, r6, 0x5, 0x0, 0x0, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x0, {0x35}}, 0x14}}, 0x0) 2.37298189s ago: executing program 3 (id=1625): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000001"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x2) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x8, 0x0, @mcast1, 0x2}, 0x1c) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r7, &(0x7f0000001140)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010101}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000280)="19647454ca71a4e92802c3ce40d9cedcc889e11e5908d4ee0a062e7f9e6f9161c4eda6924d89598b11dbe22cd55c9830736275d286920c11b7b9ca9cec9c78076c6e7bae228c9bc07e85f5e889cd4ccab10cb09cc2727f8021775614ae273bb5b179acda3698bef8f1682b1ffdf320983f1db542fea62d8caa0790411848fa2f60938d17061f716a6402a8864f604cce55568faf31e633b1e03334ebe468f3c58df0ef", 0xa3}, {&(0x7f00000004c0)="0cf830087c8c596aec90e8e5686f42f8816ad1ece0462d69c67ecedfc7644c6380df17a6f04efaede9f07f2410f166754fdfc4527b454642f959f85b391a1a2a2da44206c8cba7b769d9e3e032cb9d710810523c65f7ee0334a38fcc1ed2c3f14508e095d630ed8f5da908c5a4c0329c0aca33d65a786aa4eb8476de60109afb48685816e8e979b6d1d51f7ff70ef230756d4a3de8eb3254d5cb5930b883da9229779519238903a1b87ce1c97e42ccbcea05d0a3620ffa2da46d48a8030787d487c10d7dd00f5491b185186f06a887551445c01a3b751b9e1c559487", 0xfffffffffffffef7}, {&(0x7f00000005c0)="56f291fd62898d77ca8d33bba0adb40ec7c421a51bbba6", 0x17}, {&(0x7f0000000780)="c3dc5bd253802f90fedba5456583f59e0439f8d74ad0d52cc3e63a5860e327c82caeaaa85dbdc942be94f43913db1b08d5d0c00540d8bb6325d88e9c90be6f5a3eb96ad7494eacdee7728ed55f1a102ae44e8409aa8a8e9d77c9f9e0e15016e12f13a37a0512bf47649418e3bbdc8988f59979b9e5f05c3f1830ba8c97041a99fcaea02fdb50722a0aa946e1c5aac6d025ad3ae27cebe4adb52a0da64d1c0c710d8e7deb0be03d5cf602b81d7c459ec27a8d1533f263195cfcadb20298d17344d2e1a2e9c9096df629c65c0f5bc291c73bfd6e7ee6f27572bf015432e0e12521a24710d2b4ce8fb80959b9e72368a94b00"/250, 0xfa}, {&(0x7f0000000880)="29efd2f9a2374fcf40aa8842a69b0344736a72accf8df894c600b0b17532b9f48dbeaa507de6d30de28fce1d2c1159565403c0084a64eca604eb56ecc52435525cd64b68685dd70c604a25c8278015ecf00a3eb094491a092f825dbf1aa779bac80ed6b8d53d5e25869786ce804586394b3ca7ca147c", 0x76}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)="50755e1125a30856d460de0548703c57be20088784ed0a1920", 0x19}, {&(0x7f0000000a80)="51a052ef5c258c2707a320c880e754fca61989f0bbf3d94d0485e554edc048897ce94daf3267b00b807a415246ace8f6e4a9223c9183e2ef282f1c4d97851651e5be3bd9e9610bdc47d44d804b5739615758c31aa7af24762550bc11f569cdf384a74e2c63098e7964a77f27c0708c344b119bfdc36f500217e16cb4c321791c8b2aaf59e608abfe7218d8ba54d3957f694dc1be2f45", 0x96}, {&(0x7f0000000b40)="3e44c2bf848f5a63f6d48f38678775f47059548f7db903fdf67c534e4fb1ad1de90a06091612e6d4246bcbe3e3263494ebcd1b0c669c9b38bf803864600cfcaf67120fb0ac882efbb25b6c08d8a6696114695675bddad0873f52bd0d8a893a2c2d79d816daa0b6c0ac9514e55ab1c6f7df2cc483f808e0422f87c57d3285a63831876f4d8a", 0x85}, {&(0x7f0000000c00)="449152ea9cd52964e6b5f9f768c55b48c44ee2c716238c95086fdacb0091d85323c152f71e1ae709c12bcaedc66166c30fc8e51fca27b6a217fafbbb2ed42546050eee284efc4183965d4a8ee174ae30e19d51e48086d31827210d3df363f04ea80d48b0c60722765cb34d09e2692d8d323db7ec57ab94c87b85cfe41b2fa4da2bde88f92cb4c0f577b4b6", 0x8b}], 0xa, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x160}}], 0x1, 0x28000000) (async) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000040)=[{r6, 0x4236}, {r7, 0x3338}, {r7, 0x21}], 0x3, 0x0, 0x0, 0x0) (async) close(r5) (async) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x56) (async) sendmsg$tipc(r4, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x4000000) r9 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r9, 0x1, 0x21, &(0x7f00000001c0), 0xfffffffffffffd8c) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) (async) recvmsg(r3, 0x0, 0x1) (async) recvmsg(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000900)=""/203, 0xcb}], 0x1, &(0x7f0000000cc0)=""/221, 0xdd}, 0x100) sendmsg(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) 2.311871226s ago: executing program 1 (id=1626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0}, &(0x7f0000000580)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xfffffff2, 0x3, 0x2d, 0x4000, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x7}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xe, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x0, 0xa, 0x4, 0x4, 0x50, 0xa3af57cdd1deb0c0}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xba}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], &(0x7f0000000500)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x44, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x6, 0x7, 0xa}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r5, r6], &(0x7f00000007c0)=[{0x2, 0x5, 0x6, 0x6}, {0x2, 0x3, 0x0, 0xc}, {0x0, 0x5, 0x1, 0x3}, {0x4, 0x2, 0xb, 0x6}], 0x10, 0x3}, 0x94) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x007', @ANYRES16=r1, @ANYBLOB="17092bbd70000000000101000000080009000000000014001f00ff0200000000000000000000000000011400200000000000000000000000ffffac1414bb0500070002000000060002000100000008000a0004000000"], 0x5c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002000240012800b0001006d616373656300001400028005000a00010000000500090001"], 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0xffffffffffffffd6, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0x80, 0x14, 0xc7, 0x0, 0x0, 0xc8, 0x9, 0xc00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_DST={0x8, 0x1, @private=0xa010102}, @RTA_METRICS={0xeb, 0x8, 0x0, 0x1, "d077e2f0b86ac607b9b7c11beeb721c0e4e984a5f55282dc438db2683577b3a99cc53748802a039e12828c6940ffb6533c2c787fb225eb5ae83be1668f677dcfe583f9a7d0897587420d627b98d892e1eaa744673210f50b3742bc7fed1f404a45ceeceaeb21143937ac51105ea1cfafd292b67eaa4b216c74316c480d8875cba8da92283a5487652be93428253f1aa5400022dea8a0180444695d0f8286cde4d93abaafadd5ea3a74449545a44be0f914daacee374ab102108d48c069ac79a5735d84bbf497b2c1b052d6cc1dba2b9a6909a6b4c3bab16c94d242c55be0f6607b1da5562ffc8a"}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x120}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000010000000000090000a7bd88c90061104000000000009500000000000000"], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1002}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)='%pS \x00'}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580)=0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xfffffff2, 0x3, 0x2d, 0x4000, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x7}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xe, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x0, 0xa, 0x4, 0x4, 0x50, 0xa3af57cdd1deb0c0}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xba}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], &(0x7f0000000500)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x44, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x6, 0x7, 0xa}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r5, r6], &(0x7f00000007c0)=[{0x2, 0x5, 0x6, 0x6}, {0x2, 0x3, 0x0, 0xc}, {0x0, 0x5, 0x1, 0x3}, {0x4, 0x2, 0xb, 0x6}], 0x10, 0x3}, 0x94) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x007', @ANYRES16=r1, @ANYBLOB="17092bbd70000000000101000000080009000000000014001f00ff0200000000000000000000000000011400200000000000000000000000ffffac1414bb0500070002000000060002000100000008000a0004000000"], 0x5c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002000240012800b0001006d616373656300001400028005000a00010000000500090001"], 0x44}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0xffffffffffffffd6, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0x80, 0x14, 0xc7, 0x0, 0x0, 0xc8, 0x9, 0xc00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_DST={0x8, 0x1, @private=0xa010102}, @RTA_METRICS={0xeb, 0x8, 0x0, 0x1, "d077e2f0b86ac607b9b7c11beeb721c0e4e984a5f55282dc438db2683577b3a99cc53748802a039e12828c6940ffb6533c2c787fb225eb5ae83be1668f677dcfe583f9a7d0897587420d627b98d892e1eaa744673210f50b3742bc7fed1f404a45ceeceaeb21143937ac51105ea1cfafd292b67eaa4b216c74316c480d8875cba8da92283a5487652be93428253f1aa5400022dea8a0180444695d0f8286cde4d93abaafadd5ea3a74449545a44be0f914daacee374ab102108d48c069ac79a5735d84bbf497b2c1b052d6cc1dba2b9a6909a6b4c3bab16c94d242c55be0f6607b1da5562ffc8a"}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x120}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000010000000000090000a7bd88c90061104000000000009500000000000000"], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1002}, 0x94) (async) 2.174610949s ago: executing program 2 (id=1627): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x6}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000400}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x3010000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x300}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x100f, &(0x7f0000000900)=""/4111, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x600, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r1 = socket(0x40000000015, 0xa, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x6e23, 0x0, @empty, 0x7}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000035000100fcff0700040000000100000008000180040010800c0002000002000000000000100003"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000007010800000000000000000000000009000100"], 0x20}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r6, 0x10c, 0x8, &(0x7f0000000040)=0x4, 0x4) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000424c0000850000002d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000424c0000850000002d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r10], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r10], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(r6, &(0x7f0000001940)="ddc994c6418f23dcd12493c01c88a70ed04c7129e3b429204723a3bbc73938f57dacbea144ab176aa40d05dc59c758f2749dec02461012cb297c76ac46009185634c85fa3cdba01332f553003262d201a3856c41468384039a47397c6109c9049912248f85df401d5fe7975de60bfe6a115c81f0cb06840013d5f44736071e20da06e59d0653d4249030ec26729fcf31907c016f02b65ddcebb69d34f58bda308d704b9dd91b6c3bf8ea583435c6f99e3a68fb", 0xb3, 0x80, &(0x7f0000001a00)=@hci={0x1f, 0x2}, 0x80) (async) sendto(r6, &(0x7f0000001940)="ddc994c6418f23dcd12493c01c88a70ed04c7129e3b429204723a3bbc73938f57dacbea144ab176aa40d05dc59c758f2749dec02461012cb297c76ac46009185634c85fa3cdba01332f553003262d201a3856c41468384039a47397c6109c9049912248f85df401d5fe7975de60bfe6a115c81f0cb06840013d5f44736071e20da06e59d0653d4249030ec26729fcf31907c016f02b65ddcebb69d34f58bda308d704b9dd91b6c3bf8ea583435c6f99e3a68fb", 0xb3, 0x80, &(0x7f0000001a00)=@hci={0x1f, 0x2}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r11}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56441, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x5, 0x6}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0xfff, 0x0, 0x5, 0xa, 0xd, 0x80000000, 0x30, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x2200c084) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56441, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x5, 0x6}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0xfff, 0x0, 0x5, 0xa, 0xd, 0x80000000, 0x30, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x2200c084) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x1f, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xff}, @jmp={0x5, 0x1, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @alu={0x0, 0x0, 0x7, 0x7, 0x9, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa86c, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x2, 0x0, 0x3, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9e}}]}, &(0x7f0000000480)='syzkaller\x00', 0xc87, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xd00, r3, 0x2, &(0x7f00000004c0)=[r7, r3, r3, r3], &(0x7f0000000500)=[{0x5, 0x2, 0x7, 0xa}, {0xffffffff, 0x3, 0x3, 0x6}], 0x10, 0x9}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x1f, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xff}, @jmp={0x5, 0x1, 0x5, 0x6, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @alu={0x0, 0x0, 0x7, 0x7, 0x9, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa86c, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x2, 0x0, 0x3, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9e}}]}, &(0x7f0000000480)='syzkaller\x00', 0xc87, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xd00, r3, 0x2, &(0x7f00000004c0)=[r7, r3, r3, r3], &(0x7f0000000500)=[{0x5, 0x2, 0x7, 0xa}, {0xffffffff, 0x3, 0x3, 0x6}], 0x10, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffe0}, {0xfff3, 0x10}}}, 0x24}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r12}, 0x10, &(0x7f0000000240)={&(0x7f0000000880)={0x0, 0x101, 0x8000, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "cd765ecf5ec8806709271a2fa388e3233c8f9e935885c4250823585ea38f49f11cd2ab50ec8f2091c12a054bacd75a0137d8242178054b04039e41117accdc72"}}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) (async) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r12}, 0x10, &(0x7f0000000240)={&(0x7f0000000880)={0x0, 0x101, 0x8000, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "cd765ecf5ec8806709271a2fa388e3233c8f9e935885c4250823585ea38f49f11cd2ab50ec8f2091c12a054bacd75a0137d8242178054b04039e41117accdc72"}}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.07261389s ago: executing program 1 (id=1628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r1 = socket(0x1, 0x803, 0x0) getpeername$packet(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="ea90bf13599e", 0x6, 0x10000010, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b7000000cc000000bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61491800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.031220586s ago: executing program 3 (id=1629): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) unshare(0x400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r5, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r5, r4, 0x0, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.732013224s ago: executing program 2 (id=1631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) (async, rerun: 64) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x400) 1.47301942s ago: executing program 0 (id=1633): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/435, @ANYRESDEC=0x0], 0x130}, 0x1, 0x0, 0x0, 0x404c801}, 0x2000090) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.328726266s ago: executing program 0 (id=1634): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000640)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r4, &(0x7f0000000280)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0, 0x2}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e20}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000000)="2f177ba19e6c3601c47559f23fb40fc57432a0c7670d2007c33dfd910a4cf21d0e8c4317c6f7ae6dfaf505b37569b24037a1fba5da02065458f24502767a08a9e6e60f4ba600b431f18a326a8ca9fff27d0e20af38a3f341fbb2dc84", &(0x7f0000000080)=""/57, &(0x7f0000000240)="f298af7d3661f0431b0c1147057b5695aed537f4526ff9bd1d54ffd05e92266f1791dcf8ce59bfef72c1ea6ef2bb26a3eb5a661b56a51541c4aa0afc93a25aa0d7df7749f92c971740e16a14", &(0x7f00000002c0)="109863b0a792815788e4b7012c4017d15e22761cb67107275793864eb6423caba718a5a7b8ebc3e4832a0c7d2b3ba22f94a715077d1c72e24c88542158763766dedfbed76d1cd7cf82bd25343288ddbe65f51ff8b94d35527abbfd78e1b11f3c811392a8a851", 0x0, r6, 0x4}, 0x38) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) accept$alg(r7, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) 1.326285081s ago: executing program 3 (id=1635): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x1cc, r3, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8aea71104ddb"}, @NL80211_ATTR_IE={0x175, 0x2a, [@challenge={0x10, 0x1, 0xc9}, @mesh_id={0x72, 0x6}, @perr={0x84, 0x62, {0x0, 0x6, [{{}, @device_a, 0xe, @void, 0x15}, {{}, @device_a, 0xa, @void, 0x236}, {{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x29}, {{0x0, 0x1}, @broadcast, 0x2c1a, @value=@broadcast, 0x37}, {{0x0, 0x1}, @device_a, 0x86, @value=@broadcast, 0x40}, {{}, @device_a, 0x5, @void, 0x36}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x1, 0x5}}, @random={0x92, 0xe4, "bc722972e6adffd44ff799654a346533147833a3d9fdc4383e42c345f3307e951f05ade4b33435cd580e2f7aa0d249daf1eecfe56b72d5887e6ad03d2a845767ac51ff708e0bd65578b42af343db7734ff11b69fbb16eb51eb9aab19d27cd11933e21826153b5c2cbfd127897696e0343a800bb4bb4897fddf0744f46c6b05e7a5fc94d33dd7f0cce5526fd70e32df21b942ee4653f69803ee29b23469150e4bc2e276669b14691260478f4abe1659fd43fddcbcdd56238d85b1e0012766ef5424955862cdde46bc7409afb16888c0ea6e25ddd7687551325e87c31b74cb0b6834e141a5"}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0x3ff}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf5d2}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) connect$can_bcm(r5, &(0x7f0000001ff0), 0x10) 1.254791365s ago: executing program 2 (id=1636): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r1}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x100000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@fallback=r0, r3, 0xc, 0x18, r0, @void, @value=r0}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x20048000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r1}, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x100000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@fallback=r0, r3, 0xc, 0x18, r0, @void, @value=r0}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x20048000) (async) 1.22725334s ago: executing program 0 (id=1637): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000007000000060000008c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xd, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.141067849s ago: executing program 0 (id=1638): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8001, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x38}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000003c0)={{0x5, 0xffffff00}, 0x100, './file0\x00'}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002040)=@newlink={0x30, 0x10, 0x439, 0x0, 0x2, {0x0, 0x0, 0xe403, r7, 0x400}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) 979.833741ms ago: executing program 1 (id=1639): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x9, @loopback}], 0x1c) accept(r0, &(0x7f0000000040)=@sco={0x1f, @none}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x5d, "7a35860c15512da2ee414dc514e86e12973a0ffe221c121379256602d062d638e5b7393592b645598e937df870372115895e24293410b50c7aff9cc75e879f8f7f1d61afbe5f59bb2b4dc97a882d2be50e4dcdfe5470dde422c5b72f0d"}, &(0x7f0000000180)=0x65) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = socket(0x10, 0x4, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001080)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x3, 0x33, 0x20, 0x66, 0x0, 0x40, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x4, "0f24"}]}}, {0x1e, 0xb, 0x0, @loopback}}}}}, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e26, @loopback}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x8c}}, 0x0) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea1", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4809}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000002380)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 921.270322ms ago: executing program 2 (id=1640): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x2, 0x2fc, [0x200000000700, 0x0, 0x0, 0x200000000730, 0x20000000099c], 0x0, 0x0, &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x71, 0x3, 'dvmrp0\x00', 'wg1\x00', 'bond_slave_0\x00', 'tunl0\x00', @broadcast, [0x0, 0xff], @multicast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0xae, 0xae, 0x126, [@quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x4, {0x5}}}}], [], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xfc00, 0x4, 0x0, 0x0, "d59b194dc0eb817826154b8cf9d112472f3b8870385b66bd0a7a53ebc56f5a5f1672ddd246f6c980cafabc27e5b8b2e827298478f5c53c66d55fe719ef3a0d17"}}}}, {0xa, 0x21, 0xf8, 'veth1_to_bridge\x00', 'lo\x00', 'veth0_virt_wifi\x00', 'gretap0\x00', @random="c32393721b29", [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0xde, 0xde, 0x116, [@realm={{'realm\x00', 0x0, 0x10}, {{0xff, 0x1000, 0x1}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x7c, 0x401, 0x1c7e}}}], [], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x374) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x70, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0xfcc3, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000) socket$inet_icmp(0x2, 0x2, 0x1) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x2, 0x2fc, [0x200000000700, 0x0, 0x0, 0x200000000730, 0x20000000099c], 0x0, 0x0, &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x71, 0x3, 'dvmrp0\x00', 'wg1\x00', 'bond_slave_0\x00', 'tunl0\x00', @broadcast, [0x0, 0xff], @multicast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0xae, 0xae, 0x126, [@quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x4, {0x5}}}}], [], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xfc00, 0x4, 0x0, 0x0, "d59b194dc0eb817826154b8cf9d112472f3b8870385b66bd0a7a53ebc56f5a5f1672ddd246f6c980cafabc27e5b8b2e827298478f5c53c66d55fe719ef3a0d17"}}}}, {0xa, 0x21, 0xf8, 'veth1_to_bridge\x00', 'lo\x00', 'veth0_virt_wifi\x00', 'gretap0\x00', @random="c32393721b29", [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0xde, 0xde, 0x116, [@realm={{'realm\x00', 0x0, 0x10}, {{0xff, 0x1000, 0x1}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x7c, 0x401, 0x1c7e}}}], [], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x374) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x70, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0xfcc3, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000) (async) 715.457015ms ago: executing program 2 (id=1641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffd39, 0x0, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x1, 0x0, &(0x7f0000000300)) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103004d07000640975ecc0014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(0x4) 573.709253ms ago: executing program 2 (id=1642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) ppoll(&(0x7f0000000180)=[{r7}, {r5, 0x4}, {r6, 0x1c}], 0x3, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000140)={0x4}) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r9) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r3, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 414.62705ms ago: executing program 3 (id=1643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r2, r3, 0x0, 0x800) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r1, 0x331}, 0x14}}, 0x0) 400.873625ms ago: executing program 1 (id=1644): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="070000006c000100279d7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1a0000009c280000180034801400350000000000000000000000000000000000140035006e657464657673696d30000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000000d08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x8}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = socket$inet(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x140c, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @broadcast}, &(0x7f0000000100)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000000140)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_pktinfo={{0x1c, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xad}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @dev={0xac, 0x14, 0x14, 0x39}}}}], 0xb0}, 0x5) 230.943842ms ago: executing program 1 (id=1645): r0 = socket(0x10, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'xfrm0\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x0, 0x1b0, 0x1b0, 0x4a0, 0x3b0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff, 0xffffffff, 0x0, 0x1fe000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'ip6erspan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x11, 0x2, 0x4}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x4, 0x0, 0x9, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0x4c, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xff], [0xff000000], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x42}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x8, @ipv6=@private1, 0x1d, 0x35}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x274, 0xec, 0xfeffffff, 0xec, 0xec, 0x32c, 0x32c, 0xffffffff, 0x32c, 0x32c, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffffff, 0x0, 'veth0_to_bridge\x00', 'caif0\x00', {}, {}, 0x6, 0x3}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x4, @private=0xa010100, @empty, @gre_key=0x6, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @gre_key, @gre_key=0x8001}}}}, {{@ip={@rand_addr=0x64010101, @rand_addr, 0x0, 0xffffffff, 'lo\x00', 'ip6tnl0\x00', {0xff}}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e21}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@dev, @port, @port=0x4e20}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x394) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@loopback, @in=@multicast2, 0x4e21, 0xfffb, 0x4e20, 0x0, 0x2, 0xa0, 0x100, 0x87, r3}, {0x80000001, 0x1, 0x7, 0x1000, 0x100, 0x7ff, 0x7, 0xd2d}, {0x1, 0x7, 0x98, 0x5}, 0x61e7, 0x6e6bb8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x41, 0x0}, 0x4d3, 0x32}, 0x2, @in=@multicast2, 0x3501, 0x2, 0x3, 0x4, 0x80, 0x0, 0x6}}, 0xe8) (async, rerun: 32) r6 = accept4(r1, 0x0, 0x0, 0x80000) (rerun: 32) accept(r0, &(0x7f0000000b40)=@pptp, &(0x7f0000000bc0)=0x80) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000540)={r2, &(0x7f0000000400)='aead\x00', 0x0, &(0x7f0000000480)={@align, {0x1, 0x2, 0x5dc03493, 0x7}}, 0x5, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x80}) sendmmsg$alg(r7, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xe}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x48, 0x40000}, {0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)="c3f482bc75976d8b1d3c72e2e5960308fbdfa18d585c7ffe9d46159eeb8c4941b8ed9b1c", 0x24}, {&(0x7f0000000680)="e6894a84a9732d22d81a077a5f2169243547c1f5d355e0b837c81f696d52e81399a2c9f4248d31095be77fbc0bec6dc1aa2265399badcafd01a6a8d2b62a51a2f3d73abc74d2c4d29bb667135668c6052d7b528bf7b99a37f5007df9eb2384cdcd04349a4718304d23b44b2f5588f58570aad33111e05b225d0e9629dc41f8a8fd6a2c9ed56a4290ab08f2d15bc482858ad32df56fd006eda39924b50e645a0fccf4bbaa602bf30394f1ec8e3f748d6c90faf649b85412ab04e79beafb0607da88809186145eeb56604ca43517519ebd6633794826f113b2bbeed1fce5c672", 0xdf}, {&(0x7f00000007c0)="ccaaa3ee630eee79a61069537f30d531fca834f26692871fcf81436cc6eb8293beadc3c7369a5e79fc4f228bd57aeffd8374aaf9786c22b1f6b1f9d172a081836142de97c220921c358a495512e8457f559150e58386ddb8290275439ba11834987d84a378fa26e130e1a18bfb981a7b5043b433727cf9a96ebc7c51dbb61cce1e5a2bcada", 0x85}], 0x3, &(0x7f00000008c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x4008018}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)="762f73fa758b4f47bc6d25dca8a025071bfcbcd41350b31dbc5025cc6f212ff5f66fb0717ec77c55a241331f7a6bedff0997db18dddec8c3e94b02fbbc580a9a9c6cd611daf06c23005983ee91ba9f99ab9942e3febe", 0x56}, {&(0x7f0000000980)="22867035144cfc6707822810b27d57260598af011c28ab867bbb6002aaae4bc13ea336", 0x23}], 0x2, &(0x7f0000000a00)=[@iv={0x80, 0x117, 0x2, 0x68, "50d1e50c8111081100499788325f75c14a92501bb1b62598b465952b907fd20c04625210a638e7e3879ef200e0c39d0582f13877e6e98b82bc5ab65bd2c39a3e5f4a366910edb9b3147c4c992c6be22165fff9b6e2554a960124cddee67611fedec3f2af0c8311bf"}], 0x80, 0x20000011}], 0x3, 0x8000) (async, rerun: 32) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async, rerun: 32) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xfffffffffffffe5b, 0x0, 0x0, 0x0, 0x0, 0x4010}}], 0x2, 0x3000fdaf) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'hsr0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "a260e138df583245e489d758b93c8a9981b2f73be9e2dc59f63f021200007800", "ac3c68d4b6ca551331f9050c8f27fa19d7e52ea8e5f3f9c613ee37f62bc7218a", "9b514321d837e6f3f0aeb9d6fefd42c65019bf4a91b4c08ab4ea8c0042a89600", "e6eb292b2ff5e4091982ae38f3aa63894d1131ac8befcee54d106170bb13b8d6", "167a070048b665ac929332ed90236dabfd41a56b3127625cf6890d88b45c9547", "1ce7960a9968a5df6cc10f80", 0x7, 0x1, 0x101, 0x10001}}) (rerun: 64) 230.636581ms ago: executing program 3 (id=1646): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x110, r0, 0x2755000) (async) r1 = socket(0x5, 0xd209e11003f01783, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000040)=""/220, &(0x7f0000000140)=0xdc) socket$inet6(0xa, 0x5, 0xc000) bind$rds(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="00000000000000000000512288fb", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0xa, 0x3, [{0x1, 0x4, "5919"}]}, @rr={0x7, 0x3, 0x9e}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x70}, 0x4040018) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) 229.44829ms ago: executing program 0 (id=1647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x18, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0x8, 0x8, 0x1, 0xc, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94) socket$rds(0x15, 0x5, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000540)="8775716f", 0x4}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000400)="11a52626", 0x4}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400e7ff0f000100eb5e0000000000000200000a5c000000060a090400001900000000000202fffe0900020073797a320000000008000acaef1a1bec1e463cc2f8f6000234000480300001800a000100a00068000000200002800500030050cdda000b0001006e666163637400000800024000000001146a367a198adafbd9a882160000"], 0x84}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 127.702499ms ago: executing program 1 (id=1648): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x8, 0x200, 0xa}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r3}, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0xde, @private1, 0x1}}, [0xa857, 0x2, 0x9, 0xaa, 0x2a, 0x7, 0x2, 0x1, 0x3, 0x1, 0x5, 0xfff, 0x400, 0x8, 0xc]}, &(0x7f0000000600)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x4115, 0x8, 0x200, 0xfffffff7, 0x8001, 0x3, 0xc71, 0x0, r6}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r7) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fddbdf250400000005000a000100000008000100", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r7) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000236bd7000ffdbdf2508000000050001000000000008000500ac1414bb08000400640101030000000064010102030000002001000000000000000000000000000115e3c8d233bf7a036a47c4701c3d243a1978b5ddc848d56dd156e08846c21bb278203c038d397b9b38be3a0ea6c4a8e38e1015533a51fab3d8b1877d2aebc0f009622d07000000000000003f69f74650d393b421afc62c77f771b9c2640ca442dfdbb08e6e5039b36cea20e93677bb8052a406d408c17496ba139067c3a2ad937d8084abb085e27032"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4008041) 111.086568ms ago: executing program 0 (id=1649): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x401, 0xfffffffc, 0x25dfdc01, {0x0, 0x0, 0x0, r6, 0x2000c, 0x2801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) sendmsg$inet6(r3, &(0x7f00000005c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x3, @private0, 0x6}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000000c0)="22086327dc5ff968abab4bd9e3953339ce51ef2ffe", 0x15}, {&(0x7f0000000100)="fb6c6bc5c7fc1c3f48376d678183be5118c84ea1", 0x14}], 0x2}, 0x4894) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1fc, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x863}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb5fb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x14e1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9c2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1439}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffeffff}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1fd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xebe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf03}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c52}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x411}, 0x80) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x113003, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000640)={'ip6gretap0\x00', @remote}) 0s ago: executing program 3 (id=1650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x80}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x1}]}}}]}, 0x4c}, 0x1, 0xba01}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="10c30000000003000000851000000600000018000000", @ANYRESDEC, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x80}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x1}]}}}]}, 0x4c}, 0x1, 0xba01}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="10c30000000003000000851000000600000018000000", @ANYRESDEC, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) (async) kernel console output (not intermixed with test programs): ing up backlog [ 112.604802][ T6457] netlink: 36 bytes leftover after parsing attributes in process `syz.0.163'. [ 112.843749][ T6456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.851964][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.860396][ T6456] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.899756][ T6456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.082687][ T6480] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.167'. [ 113.168735][ T6483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.177988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.235403][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.285812][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.302848][ T6486] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 113.341643][ T6456] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.352427][ T6456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.378950][ T6456] veth1_vlan: left promiscuous mode [ 113.397209][ T6456] veth0_vlan: left promiscuous mode [ 113.403642][ T6456] veth0_vlan: entered promiscuous mode [ 113.413410][ T6456] veth1_vlan: entered promiscuous mode [ 113.430687][ T6456] veth1_macvtap: left promiscuous mode [ 113.440682][ T6456] veth0_macvtap: left promiscuous mode [ 113.448212][ T6456] veth0_macvtap: entered promiscuous mode [ 113.455996][ T6456] veth1_macvtap: entered promiscuous mode [ 113.476122][ T6456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.485463][ T6456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.498845][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.507229][ T6456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.517709][ T6456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.555794][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.563038][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.589783][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.597071][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.658258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.697831][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.733394][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.753506][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.781836][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.930107][ T6489] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.069666][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 114.184631][ T6489] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.361593][ T6489] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.600907][ T6489] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.693028][ T6517] netlink: 'syz.1.181': attribute type 1 has an invalid length. [ 114.919787][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.183'. [ 115.187232][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.272943][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.337908][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 115.359228][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.186'. [ 115.416810][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.531245][ T1121] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.742024][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 115.861450][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 115.902395][ T5819] net_ratelimit: 3 callbacks suppressed [ 115.902413][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.967371][ T6561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.193'. [ 116.081925][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.195'. [ 116.166788][ T6569] netlink: 63 bytes leftover after parsing attributes in process `syz.0.196'. [ 116.364934][ T6576] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 116.398880][ T6558] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 116.471147][ T6584] netlink: 204 bytes leftover after parsing attributes in process `syz.2.200'. [ 116.471180][ T6585] netlink: 'syz.1.192': attribute type 4 has an invalid length. [ 116.496333][ T6584] netlink: 84 bytes leftover after parsing attributes in process `syz.2.200'. [ 116.521821][ T6585] netlink: 156 bytes leftover after parsing attributes in process `syz.1.192'. [ 116.541477][ T6584] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 116.564814][ T6585] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 116.608248][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.630623][ T6587] netlink: 'syz.0.201': attribute type 1 has an invalid length. [ 116.741347][ T6593] syzkaller0: entered promiscuous mode [ 116.751825][ T6593] syzkaller0: entered allmulticast mode [ 117.024868][ T6605] netlink: 'syz.0.206': attribute type 9 has an invalid length. [ 117.033816][ T6605] netlink: 'syz.0.206': attribute type 6 has an invalid length. [ 117.036747][ T6571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.044006][ T6605] netlink: 'syz.0.206': attribute type 7 has an invalid length. [ 117.061842][ T6605] netlink: 'syz.0.206': attribute type 8 has an invalid length. [ 117.077225][ T6607] netlink: 'syz.0.206': attribute type 1 has an invalid length. [ 117.342276][ T6613] x_tables: duplicate underflow at hook 1 [ 117.581865][ T6624] pimreg: entered allmulticast mode [ 117.648055][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.773426][ T6639] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 117.903571][ T5824] IPVS: starting estimator thread 0... [ 117.937858][ T6648] IPVS: set_ctl: invalid protocol: 137 172.30.0.2:20002 [ 118.027631][ T6646] IPVS: using max 39 ests per chain, 93600 per kthread [ 118.132820][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.142218][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.151324][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.928131][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.169611][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.245150][ T6690] validate_nla: 3 callbacks suppressed [ 120.245167][ T6690] netlink: 'syz.4.227': attribute type 1 has an invalid length. [ 120.535803][ T6714] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 120.552392][ T6714] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 120.561163][ T6736] netlink: 'syz.2.238': attribute type 8 has an invalid length. [ 120.664467][ T6715] bond1: (slave gretap1): making interface the new active one [ 120.691449][ T6715] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 120.712793][ T6716] macvlan2: entered promiscuous mode [ 120.718467][ T6716] macvlan2: entered allmulticast mode [ 120.724809][ T6716] bond1: entered promiscuous mode [ 120.730426][ T6716] gretap1: entered promiscuous mode [ 120.738612][ T6716] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 120.750121][ T6716] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 120.764729][ T6716] bond1: left promiscuous mode [ 120.770454][ T6716] gretap1: left promiscuous mode [ 120.856204][ T6742] __nla_validate_parse: 3 callbacks suppressed [ 120.856220][ T6742] netlink: 40 bytes leftover after parsing attributes in process `syz.3.240'. [ 121.110866][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 121.181110][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 121.235711][ T6761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.241'. [ 121.255879][ T5861] net_ratelimit: 5 callbacks suppressed [ 121.255896][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.283932][ T6754] syzkaller0: entered promiscuous mode [ 121.336684][ T6754] syzkaller0: entered allmulticast mode [ 121.410128][ T6767] netlink: 76 bytes leftover after parsing attributes in process `syz.0.247'. [ 121.438089][ T6770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.248'. [ 121.448049][ T6754] tipc: Started in network mode [ 121.471169][ T6754] tipc: Node identity 82341384b94a, cluster identity 4711 [ 121.501925][ T6771] FAULT_INJECTION: forcing a failure. [ 121.501925][ T6771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.515403][ T6754] tipc: Enabled bearer , priority 0 [ 121.560006][ T6771] CPU: 1 UID: 0 PID: 6771 Comm: syz.3.249 Not tainted syzkaller #0 PREEMPT(full) [ 121.560033][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.560044][ T6771] Call Trace: [ 121.560051][ T6771] [ 121.560060][ T6771] dump_stack_lvl+0xe8/0x150 [ 121.560095][ T6771] should_fail_ex+0x412/0x560 [ 121.560124][ T6771] _copy_from_user+0x2d/0xb0 [ 121.560152][ T6771] ___sys_recvmsg+0x175/0x590 [ 121.560179][ T6771] ? __pfx____sys_recvmsg+0x10/0x10 [ 121.560204][ T6771] ? __fget_files+0x2a/0x420 [ 121.560281][ T6771] do_recvmmsg+0x334/0x800 [ 121.560310][ T6771] ? __pfx_do_recvmmsg+0x10/0x10 [ 121.560342][ T6771] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 121.560389][ T6771] __x64_sys_recvmmsg+0x198/0x250 [ 121.560412][ T6771] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 121.560441][ T6771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.560461][ T6771] do_syscall_64+0x15f/0xf80 [ 121.560487][ T6771] ? trace_irq_disable+0x3b/0x140 [ 121.560515][ T6771] ? clear_bhb_loop+0x40/0x90 [ 121.560539][ T6771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.560558][ T6771] RIP: 0033:0x7f3b6f39ce59 [ 121.560584][ T6771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.560598][ T6771] RSP: 002b:00007f3b70213028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 121.560621][ T6771] RAX: ffffffffffffffda RBX: 00007f3b6f615fa0 RCX: 00007f3b6f39ce59 [ 121.560635][ T6771] RDX: 03fffffffffffdfc RSI: 00002000000099c0 RDI: 0000000000000003 [ 121.560647][ T6771] RBP: 00007f3b70213090 R08: 0000000000000000 R09: 0000000000000000 [ 121.560658][ T6771] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002 [ 121.560668][ T6771] R13: 00007f3b6f616038 R14: 00007f3b6f615fa0 R15: 00007ffcca140458 [ 121.560698][ T6771] [ 121.815723][ T6752] tipc: Resetting bearer [ 121.920769][ T6752] tipc: Disabling bearer [ 121.948005][ T6783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.250'. [ 121.971212][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.035877][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'. [ 122.288218][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.294133][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 122.358961][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 122.635852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 122.684240][ T30] audit: type=1800 audit(1779263410.583:3): pid=6815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.260" name="blkio.bfq.time_recursive" dev="tmpfs" ino=316 res=0 errno=0 [ 123.001068][ T6833] FAULT_INJECTION: forcing a failure. [ 123.001068][ T6833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.068989][ T6833] CPU: 1 UID: 0 PID: 6833 Comm: syz.3.263 Not tainted syzkaller #0 PREEMPT(full) [ 123.069020][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.069032][ T6833] Call Trace: [ 123.069040][ T6833] [ 123.069048][ T6833] dump_stack_lvl+0xe8/0x150 [ 123.069077][ T6833] should_fail_ex+0x412/0x560 [ 123.069111][ T6833] _copy_from_user+0x2d/0xb0 [ 123.069142][ T6833] ___sys_recvmsg+0x175/0x590 [ 123.069170][ T6833] ? __pfx____sys_recvmsg+0x10/0x10 [ 123.069195][ T6833] ? __fget_files+0x2a/0x420 [ 123.069252][ T6833] do_recvmmsg+0x334/0x800 [ 123.069283][ T6833] ? __pfx_do_recvmmsg+0x10/0x10 [ 123.069315][ T6833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.069365][ T6833] __x64_sys_recvmmsg+0x198/0x250 [ 123.069396][ T6833] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 123.069427][ T6833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.069449][ T6833] do_syscall_64+0x15f/0xf80 [ 123.069477][ T6833] ? trace_irq_disable+0x3b/0x140 [ 123.069506][ T6833] ? clear_bhb_loop+0x40/0x90 [ 123.069530][ T6833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.069550][ T6833] RIP: 0033:0x7f3b6f39ce59 [ 123.069569][ T6833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.069585][ T6833] RSP: 002b:00007f3b70213028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 123.069605][ T6833] RAX: ffffffffffffffda RBX: 00007f3b6f615fa0 RCX: 00007f3b6f39ce59 [ 123.069619][ T6833] RDX: 03fffffffffffdfc RSI: 00002000000099c0 RDI: 0000000000000003 [ 123.069632][ T6833] RBP: 00007f3b70213090 R08: 0000000000000000 R09: 0000000000000000 [ 123.069643][ T6833] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002 [ 123.069655][ T6833] R13: 00007f3b6f616038 R14: 00007f3b6f615fa0 R15: 00007ffcca140458 [ 123.069687][ T6833] [ 123.331900][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.479446][ T6846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.549582][ T6849] x_tables: duplicate underflow at hook 1 [ 124.370642][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.431947][ T6881] netlink: 'syz.4.276': attribute type 2 has an invalid length. [ 124.579100][ T6886] netlink: 'syz.4.277': attribute type 2 has an invalid length. [ 125.009266][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.170074][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.407819][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.727443][ T6820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.000940][ T6896] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 126.007398][ T6893] FAULT_INJECTION: forcing a failure. [ 126.007398][ T6893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.021184][ T6896] syzkaller1: Linktype set failed because interface is up [ 126.031999][ T29] syzkaller1: tun_net_xmit 90 [ 126.050398][ T6893] CPU: 0 UID: 0 PID: 6893 Comm: syz.2.278 Not tainted syzkaller #0 PREEMPT(full) [ 126.050424][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.050435][ T6893] Call Trace: [ 126.050443][ T6893] [ 126.050451][ T6893] dump_stack_lvl+0xe8/0x150 [ 126.050478][ T6893] should_fail_ex+0x412/0x560 [ 126.050509][ T6893] _copy_from_user+0x2d/0xb0 [ 126.050539][ T6893] ___sys_recvmsg+0x175/0x590 [ 126.050566][ T6893] ? __pfx____sys_recvmsg+0x10/0x10 [ 126.050591][ T6893] ? __fget_files+0x2a/0x420 [ 126.050646][ T6893] do_recvmmsg+0x334/0x800 [ 126.050676][ T6893] ? __pfx_do_recvmmsg+0x10/0x10 [ 126.050709][ T6893] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 126.050756][ T6893] __x64_sys_recvmmsg+0x198/0x250 [ 126.050781][ T6893] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 126.050810][ T6893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.050832][ T6893] do_syscall_64+0x15f/0xf80 [ 126.050859][ T6893] ? trace_irq_disable+0x3b/0x140 [ 126.050889][ T6893] ? clear_bhb_loop+0x40/0x90 [ 126.050913][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.050932][ T6893] RIP: 0033:0x7fe51a99ce59 [ 126.050950][ T6893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.050965][ T6893] RSP: 002b:00007fe51b7c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 126.050985][ T6893] RAX: ffffffffffffffda RBX: 00007fe51ac15fa0 RCX: 00007fe51a99ce59 [ 126.050998][ T6893] RDX: 03fffffffffffdfc RSI: 00002000000099c0 RDI: 0000000000000003 [ 126.051011][ T6893] RBP: 00007fe51b7c8090 R08: 0000000000000000 R09: 0000000000000000 [ 126.051022][ T6893] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002 [ 126.051033][ T6893] R13: 00007fe51ac16038 R14: 00007fe51ac15fa0 R15: 00007ffd7c32f2d8 [ 126.051064][ T6893] [ 126.450590][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.612166][ T6923] netlink: 'syz.3.287': attribute type 2 has an invalid length. [ 126.784672][ T6930] __nla_validate_parse: 7 callbacks suppressed [ 126.784690][ T6930] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.287'. [ 126.966830][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 127.073184][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 127.087234][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 127.488256][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.514726][ T6960] FAULT_INJECTION: forcing a failure. [ 127.514726][ T6960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.605629][ T6960] CPU: 0 UID: 0 PID: 6960 Comm: syz.4.296 Not tainted syzkaller #0 PREEMPT(full) [ 127.605656][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.605667][ T6960] Call Trace: [ 127.605674][ T6960] [ 127.605683][ T6960] dump_stack_lvl+0xe8/0x150 [ 127.605711][ T6960] should_fail_ex+0x412/0x560 [ 127.605742][ T6960] _copy_from_user+0x2d/0xb0 [ 127.605771][ T6960] ___sys_recvmsg+0x175/0x590 [ 127.605799][ T6960] ? __pfx____sys_recvmsg+0x10/0x10 [ 127.605831][ T6960] ? __fget_files+0x2a/0x420 [ 127.605886][ T6960] do_recvmmsg+0x334/0x800 [ 127.605915][ T6960] ? __pfx_do_recvmmsg+0x10/0x10 [ 127.605948][ T6960] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.605995][ T6960] __x64_sys_recvmmsg+0x198/0x250 [ 127.606019][ T6960] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 127.606049][ T6960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.606070][ T6960] do_syscall_64+0x15f/0xf80 [ 127.606099][ T6960] ? trace_irq_disable+0x3b/0x140 [ 127.606127][ T6960] ? clear_bhb_loop+0x40/0x90 [ 127.606152][ T6960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.606172][ T6960] RIP: 0033:0x7f8c05b9ce59 [ 127.606191][ T6960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.606207][ T6960] RSP: 002b:00007f8c069c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 127.606229][ T6960] RAX: ffffffffffffffda RBX: 00007f8c05e15fa0 RCX: 00007f8c05b9ce59 [ 127.606243][ T6960] RDX: 03fffffffffffdfc RSI: 00002000000099c0 RDI: 0000000000000003 [ 127.606256][ T6960] RBP: 00007f8c069c7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.606267][ T6960] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002 [ 127.606279][ T6960] R13: 00007f8c05e16038 R14: 00007f8c05e15fa0 R15: 00007ffe0e852458 [ 127.606312][ T6960] [ 127.818458][ T6967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.828210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.873580][ T6967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.885811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.048595][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.161751][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 128.172624][ T6969] syzkaller1: entered promiscuous mode [ 128.187979][ T6969] syzkaller1: entered allmulticast mode [ 128.454377][ T6984] netlink: 'syz.1.300': attribute type 2 has an invalid length. [ 128.528547][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.582875][ T6987] vxcan3: entered allmulticast mode [ 128.661379][ T6990] : entered promiscuous mode [ 128.674706][ T6988] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.300'. [ 128.850373][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 129.054971][ T6999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.063420][ T6999] IPv6: NLM_F_CREATE should be set when creating new route [ 129.070804][ T6999] IPv6: NLM_F_CREATE should be set when creating new route [ 129.078167][ T6999] IPv6: NLM_F_CREATE should be set when creating new route [ 129.589166][ T7020] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 129.600360][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.781422][ T7027] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 130.175750][ T7036] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 130.278945][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.444625][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.316'. [ 130.487213][ T7049] netlink: 'syz.3.317': attribute type 39 has an invalid length. [ 130.508041][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.316'. [ 130.518852][ T98] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.531857][ T98] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.635305][ T98] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.659217][ T98] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.280675][ T7067] syz.1.324: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 131.318380][ T7067] CPU: 0 UID: 0 PID: 7067 Comm: syz.1.324 Not tainted syzkaller #0 PREEMPT(full) [ 131.318410][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.318423][ T7067] Call Trace: [ 131.318431][ T7067] [ 131.318440][ T7067] dump_stack_lvl+0xe8/0x150 [ 131.318472][ T7067] warn_alloc+0x249/0x340 [ 131.318504][ T7067] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 131.318538][ T7067] ? __pfx_warn_alloc+0x10/0x10 [ 131.318575][ T7067] ? kasan_save_track+0x4f/0x80 [ 131.318601][ T7067] ? kasan_save_track+0x3e/0x80 [ 131.318626][ T7067] ? __kasan_kmalloc+0x93/0xb0 [ 131.318652][ T7067] ? __kmalloc_cache_noprof+0x31c/0x660 [ 131.318679][ T7067] ? xskq_create+0x56/0x170 [ 131.318712][ T7067] ? xsk_setsockopt+0x54c/0x990 [ 131.318735][ T7067] ? do_sock_setsockopt+0x17c/0x1b0 [ 131.318764][ T7067] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 131.318793][ T7067] ? do_syscall_64+0x15f/0xf80 [ 131.318832][ T7067] __vmalloc_node_range_noprof+0x132/0x1750 [ 131.318896][ T7067] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 131.318932][ T7067] ? __kasan_kmalloc+0x93/0xb0 [ 131.318967][ T7067] vmalloc_user_noprof+0xad/0xe0 [ 131.318996][ T7067] ? xskq_create+0xbf/0x170 [ 131.319023][ T7067] xskq_create+0xbf/0x170 [ 131.319053][ T7067] xsk_init_queue+0x8a/0xe0 [ 131.319082][ T7067] xsk_setsockopt+0x54c/0x990 [ 131.319110][ T7067] ? __pfx_xsk_setsockopt+0x10/0x10 [ 131.319135][ T7067] ? __pfx_aa_sk_perm+0x10/0x10 [ 131.319164][ T7067] ? aa_sock_opt_perm+0xff/0x1a0 [ 131.319194][ T7067] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 131.319221][ T7067] ? __pfx_xsk_setsockopt+0x10/0x10 [ 131.319247][ T7067] do_sock_setsockopt+0x17c/0x1b0 [ 131.319283][ T7067] __x64_sys_setsockopt+0x13d/0x1b0 [ 131.319317][ T7067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.319339][ T7067] do_syscall_64+0x15f/0xf80 [ 131.319367][ T7067] ? trace_irq_disable+0x3b/0x140 [ 131.319419][ T7067] ? clear_bhb_loop+0x40/0x90 [ 131.319443][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.319464][ T7067] RIP: 0033:0x7ff827f9ce59 [ 131.319484][ T7067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.319500][ T7067] RSP: 002b:00007ff828ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 131.319522][ T7067] RAX: ffffffffffffffda RBX: 00007ff828215fa0 RCX: 00007ff827f9ce59 [ 131.319536][ T7067] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 131.319548][ T7067] RBP: 00007ff828032d6f R08: 0000000000000004 R09: 0000000000000000 [ 131.319559][ T7067] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.319572][ T7067] R13: 00007ff828216038 R14: 00007ff828215fa0 R15: 00007ffcc660a488 [ 131.319605][ T7067] [ 131.325716][ T7067] Mem-Info: [ 131.549422][ T7073] netlink: 48 bytes leftover after parsing attributes in process `syz.1.324'. [ 131.647887][ T29] net_ratelimit: 10 callbacks suppressed [ 131.647905][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.669442][ T7075] netlink: 'syz.3.326': attribute type 2 has an invalid length. [ 131.762644][ T7067] active_anon:5850 inactive_anon:0 isolated_anon:0 [ 131.762644][ T7067] active_file:3334 inactive_file:39966 isolated_file:0 [ 131.762644][ T7067] unevictable:768 dirty:173 writeback:0 [ 131.762644][ T7067] slab_reclaimable:10161 slab_unreclaimable:135640 [ 131.762644][ T7067] mapped:30430 shmem:1288 pagetables:1324 [ 131.762644][ T7067] sec_pagetables:0 bounce:0 [ 131.762644][ T7067] kernel_misc_reclaimable:0 [ 131.762644][ T7067] free:1279774 free_pcp:12451 free_cma:0 [ 131.819565][ T7085] __nla_validate_parse: 1 callbacks suppressed [ 131.819586][ T7085] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.326'. [ 131.857912][ T7067] Node 0 active_anon:23400kB inactive_anon:0kB active_file:13336kB inactive_file:159656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121720kB dirty:692kB writeback:0kB shmem:3616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12308kB pagetables:5176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 131.901785][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.327'. [ 131.923799][ T7067] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 131.982407][ T7067] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.015977][ T7067] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 132.022236][ T7067] Node 0 DMA32 free:1169840kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23252kB inactive_anon:0kB active_file:13336kB inactive_file:159656kB unevictable:1536kB writepending:692kB zspages:0kB present:3129332kB managed:2552428kB mlocked:0kB bounce:0kB free_pcp:48860kB local_pcp:27556kB free_cma:0kB [ 132.057215][ T7067] lowmem_reserve[]: 0 0 0 0 0 [ 132.069209][ T7067] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 132.100512][ T7067] lowmem_reserve[]: 0 0 0 0 0 [ 132.105392][ T7067] Node 1 Normal free:3943064kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.166329][ T7067] lowmem_reserve[]: 0 0 0 0 0 [ 132.172097][ T7067] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 132.185192][ T7067] Node 0 DMA32: 3523*4kB (UME) 1835*8kB (UME) 900*16kB (UME) 462*32kB (UME) 331*64kB (UME) 241*128kB (UM) 191*256kB (UME) 100*512kB (U) 69*1024kB (UM) 29*2048kB (UME) 203*4096kB (UM) = 1171620kB [ 132.218355][ T7087] vlan2: entered allmulticast mode [ 132.223698][ T7087] bond2: entered allmulticast mode [ 132.223866][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 132.236588][ T7067] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 132.256936][ T7067] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 7*16kB (UM) 8*32kB (UM) 8*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3943064kB [ 132.296444][ T7067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.306353][ T7067] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.317200][ T7067] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.329154][ T7067] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.339817][ T7067] 44584 total pagecache pages [ 132.359364][ T7067] 0 pages in swap cache [ 132.363745][ T7067] Free swap = 124996kB [ 132.374896][ T7067] Total swap = 124996kB [ 132.397754][ T7067] 2097051 pages RAM [ 132.413527][ T7090] netlink: 56 bytes leftover after parsing attributes in process `syz.2.329'. [ 132.424443][ T7067] 0 pages HighMem/MovableOnly [ 132.442514][ T7067] 427164 pages reserved [ 132.456987][ T7067] 0 pages cma reserved [ 132.465269][ T7090] bond1 (unregistering): Released all slaves [ 132.694561][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.849839][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.860188][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.987204][ T7118] netlink: 'syz.2.337': attribute type 11 has an invalid length. [ 133.098954][ T7118] pimreg: entered allmulticast mode [ 133.111843][ T7125] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 133.126602][ T7118] pimreg: left allmulticast mode [ 133.196090][ T7128] netlink: 'syz.3.338': attribute type 13 has an invalid length. [ 133.233676][ T7128] netlink: 'syz.3.338': attribute type 17 has an invalid length. [ 133.251376][ T7132] netlink: 'syz.1.340': attribute type 2 has an invalid length. [ 133.344761][ T7139] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.484399][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 133.595385][ T7126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.613324][ T7126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.727857][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.833762][ T7128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.844812][ T7128] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.861419][ T7128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.903964][ T7128] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.911167][ T7128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.924610][ T7128] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.931948][ T7128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.955680][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.966166][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.000260][ T7128] veth1_vlan: left promiscuous mode [ 134.006749][ T7128] veth0_vlan: left promiscuous mode [ 134.013784][ T7128] veth0_vlan: entered promiscuous mode [ 134.024989][ T7128] veth1_vlan: entered promiscuous mode [ 134.037235][ T7128] veth1_macvtap: left promiscuous mode [ 134.044459][ T7128] veth0_macvtap: left promiscuous mode [ 134.052095][ T7128] veth0_macvtap: entered promiscuous mode [ 134.071413][ T7128] veth1_macvtap: entered promiscuous mode [ 134.083994][ T7128] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.097784][ T7128] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.111729][ T7128] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.125416][ T7128] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.132994][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.154239][ T7128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.165105][ T7140] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.340'. [ 134.345165][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.349'. [ 134.355356][ T7167] netlink: 580 bytes leftover after parsing attributes in process `syz.3.349'. [ 134.374946][ T7168] netlink: 'syz.1.350': attribute type 1 has an invalid length. [ 134.546940][ T7172] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 134.768194][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.805978][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.859098][ T7183] batadv_slave_0: entered promiscuous mode [ 134.865667][ T7182] batadv_slave_0: left promiscuous mode [ 134.975297][ T7190] netlink: 'syz.1.358': attribute type 2 has an invalid length. [ 134.990593][ T7191] trusted_key: syz.2.357 sent an empty control message without MSG_MORE. [ 135.120126][ T7185] bond2: option all_slaves_active: invalid value (127) [ 135.177714][ T7185] bond2 (unregistering): Released all slaves [ 135.311900][ T7200] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.358'. [ 135.486388][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 135.807935][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.175785][ T7226] openvswitch: netlink: Flow actions attr not present in new flow. [ 136.804381][ T7256] netlink: 'syz.2.371': attribute type 2 has an invalid length. [ 136.850895][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.877308][ T7259] __nla_validate_parse: 1 callbacks suppressed [ 136.877326][ T7259] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.371'. [ 136.936583][ T7262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.373'. [ 136.972167][ T7262] netlink: 48 bytes leftover after parsing attributes in process `syz.4.373'. [ 136.993017][ T7262] netlink: 48 bytes leftover after parsing attributes in process `syz.4.373'. [ 137.080373][ T7265] netlink: 'syz.0.374': attribute type 1 has an invalid length. [ 137.096528][ T7265] netlink: 88 bytes leftover after parsing attributes in process `syz.0.374'. [ 137.106840][ T7265] netlink: 1 bytes leftover after parsing attributes in process `syz.0.374'. [ 137.167741][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.314829][ T7275] netlink: 'syz.0.378': attribute type 1 has an invalid length. [ 137.331711][ T7272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.376'. [ 137.365261][ T7272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.376'. [ 137.494257][ T7286] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.381'. [ 137.521902][ T7278] bond2: (slave geneve2): making interface the new active one [ 137.539462][ T7286] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 137.554023][ T7278] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 137.574328][ T7291] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 137.594318][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 137.612275][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 137.634420][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 137.719293][ T7295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.382'. [ 137.892049][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.938588][ T7309] netlink: 'syz.4.387': attribute type 2 has an invalid length. [ 137.950184][ T7311] wg2: entered allmulticast mode [ 137.988275][ T7292] bond2: (slave geneve2): making interface the new active one [ 137.999760][ T7292] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 138.020404][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 138.181730][ T7295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.299304][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.323806][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.421581][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.445760][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.634990][ T7327] netlink: 'syz.4.391': attribute type 5 has an invalid length. [ 138.654824][ T7336] syz_tun: entered allmulticast mode [ 138.800655][ T5765] hsr0: entered promiscuous mode [ 138.928314][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.983433][ T7374] bond3 (unregistering): Released all slaves [ 140.216455][ T7381] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.292578][ T7381] bond3: (slave bond4): Enslaving as an active interface with an up link [ 140.458683][ T7398] netlink: 'syz.3.410': attribute type 1 has an invalid length. [ 140.572095][ T7398] 8021q: adding VLAN 0 to HW filter on device bond5 [ 141.093589][ T5752] IPVS: starting estimator thread 0... [ 141.197590][ T7437] IPVS: using max 27 ests per chain, 64800 per kthread [ 141.382465][ T7446] netlink: 'syz.3.423': attribute type 21 has an invalid length. [ 141.782871][ T7426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.828440][ T7457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.034018][ T7467] syzkaller0: entered promiscuous mode [ 142.046949][ T7467] syzkaller0: entered allmulticast mode [ 142.214332][ T7475] __nla_validate_parse: 15 callbacks suppressed [ 142.214355][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'. [ 142.617059][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.436'. [ 142.707724][ T5752] IPVS: starting estimator thread 0... [ 142.807603][ T7502] IPVS: using max 29 ests per chain, 69600 per kthread [ 142.842440][ T7507] netlink: 'syz.3.440': attribute type 1 has an invalid length. [ 142.859061][ T7508] netlink: 136 bytes leftover after parsing attributes in process `syz.1.439'. [ 142.886111][ T7508] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 143.203568][ T7520] netlink: 'syz.1.443': attribute type 1 has an invalid length. [ 143.264636][ T7520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.281780][ T7521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.443'. [ 143.326165][ T7520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.443'. [ 143.353055][ T7520] bond2: entered allmulticast mode [ 143.426817][ T7528] bond2: (slave dummy0): making interface the new active one [ 143.446972][ T7528] dummy0: entered allmulticast mode [ 143.455044][ T7524] netlink: 'syz.0.444': attribute type 4 has an invalid length. [ 143.471179][ T7528] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 143.483424][ T7524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.444'. [ 143.495494][ T7530] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 143.506862][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'. [ 143.826022][ T7543] netlink: 76 bytes leftover after parsing attributes in process `syz.1.451'. [ 143.990934][ T7553] netlink: 56 bytes leftover after parsing attributes in process `syz.2.453'. [ 143.995028][ T7550] syzkaller0: entered promiscuous mode [ 144.014011][ T7550] syzkaller0: entered allmulticast mode [ 144.187270][ T7560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.454'. [ 144.672816][ T7588] gretap2: entered promiscuous mode [ 145.863888][ T7634] netlink: 'syz.0.474': attribute type 30 has an invalid length. [ 146.002268][ T7641] can: request_module (can-proto-0) failed. [ 146.113110][ T7645] netlink: 'syz.1.476': attribute type 2 has an invalid length. [ 147.270274][ T7682] __nla_validate_parse: 11 callbacks suppressed [ 147.270292][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'. [ 147.287527][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.488'. [ 147.399153][ T7685] netlink: 'syz.4.489': attribute type 5 has an invalid length. [ 147.595169][ T7693] netlink: 'syz.1.490': attribute type 2 has an invalid length. [ 147.662187][ T7697] netlink: 220 bytes leftover after parsing attributes in process `syz.3.492'. [ 147.686750][ T7699] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.490'. [ 148.062719][ T7704] Bluetooth: MGMT ver 1.23 [ 148.103674][ T7704] netlink: 104 bytes leftover after parsing attributes in process `syz.0.494'. [ 148.141700][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 148.155748][ T7721] xt_TCPMSS: Only works on TCP SYN packets [ 148.178588][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 148.188798][ T7704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.494'. [ 148.203715][ T7718] netlink: 'syz.1.497': attribute type 19 has an invalid length. [ 148.231207][ T7718] netlink: 'syz.1.497': attribute type 20 has an invalid length. [ 148.500649][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.501'. [ 148.690101][ T7740] syzkaller0: entered promiscuous mode [ 148.707823][ T7740] syzkaller0: entered allmulticast mode [ 148.814746][ T7746] netlink: 'syz.0.507': attribute type 2 has an invalid length. [ 148.902687][ T5819] IPVS: starting estimator thread 0... [ 149.008106][ T7751] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.507'. [ 149.032946][ T7750] IPVS: using max 35 ests per chain, 84000 per kthread [ 149.536669][ T7772] tipc: Started in network mode [ 149.558154][ T7772] tipc: Node identity 96df1f7190ec, cluster identity 4711 [ 149.585841][ T7772] tipc: Enabled bearer , priority 0 [ 149.593882][ T7775] syzkaller0: entered promiscuous mode [ 149.619265][ T7775] syzkaller0: entered allmulticast mode [ 149.731866][ T7780] netlink: 'syz.1.516': attribute type 1 has an invalid length. [ 149.742060][ T7766] tipc: Resetting bearer [ 149.900266][ T7780] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.063384][ T7797] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 150.129711][ T5644] Bluetooth: hci2: command 0x0401 tx timeout [ 150.140087][ T5631] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 150.212760][ T7765] tipc: Resetting bearer [ 150.278288][ T7765] tipc: Disabling bearer [ 150.304721][ T7786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.324341][ T7786] bond3: (slave bond0): Enslaving as a backup interface with an up link [ 150.338555][ T7789] netlink: 'syz.1.516': attribute type 10 has an invalid length. [ 150.362195][ T7793] tipc: Started in network mode [ 150.375333][ T7793] tipc: Node identity 00000000000003000000000000000001, cluster identity 4711 [ 150.385365][ T7793] tipc: Enabling of bearer rejected, failed to enable media [ 151.132173][ T7836] Bluetooth: MGMT ver 1.23 [ 151.580815][ T7828] syzkaller1: entered promiscuous mode [ 151.596324][ T7828] syzkaller1: entered allmulticast mode [ 151.673458][ T7852] netlink: 'syz.2.535': attribute type 32 has an invalid length. [ 151.724481][ T7860] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.894620][ T7869] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 152.144672][ T7880] vlan0: entered promiscuous mode [ 153.586378][ T7930] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20018 [ 153.597268][ T7930] __nla_validate_parse: 4 callbacks suppressed [ 153.597280][ T7930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.552'. [ 155.750648][ T7910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.925325][ T7953] hsr0: left promiscuous mode [ 155.939340][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 155.980426][ T7960] netlink: 'syz.0.559': attribute type 1 has an invalid length. [ 156.053485][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 156.159018][ T7960] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.207782][ T7966] bridge_slave_0: left allmulticast mode [ 156.213636][ T7966] bridge_slave_0: left promiscuous mode [ 156.220720][ T7966] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.249534][ T7966] bridge_slave_1: left allmulticast mode [ 156.262133][ T7966] bridge_slave_1: left promiscuous mode [ 156.278894][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.332062][ T7966] bond0: (slave bond_slave_0): Releasing backup interface [ 156.403873][ T7966] bond0: (slave bond_slave_1): Releasing backup interface [ 156.437131][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 156.493570][ T7966] team0: Port device team_slave_0 removed [ 156.539200][ T7966] team0: Port device team_slave_1 removed [ 156.564683][ T7966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.575093][ T7983] netlink: 'syz.4.565': attribute type 2 has an invalid length. [ 156.591010][ T7966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.623496][ T7966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.639367][ T7966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.674559][ T7966] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 156.702529][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 156.774153][ T7987] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.565'. [ 157.209547][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.569'. [ 157.254028][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 157.265874][ T8007] netlink: 'syz.4.569': attribute type 1 has an invalid length. [ 157.274750][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.569'. [ 157.286389][ T8005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.571'. [ 157.434708][ T8007] bond3: entered promiscuous mode [ 157.458845][ T8007] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.555738][ T8011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.593362][ T8011] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 157.611232][ T8011] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 157.625371][ T8011] bond3: (slave ip6gre1): making interface the new active one [ 157.640111][ T8011] ip6gre1: entered promiscuous mode [ 157.647065][ T8011] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 157.667216][ T8018] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.573'. [ 157.679531][ T8025] netlink: 32 bytes leftover after parsing attributes in process `syz.1.575'. [ 157.691370][ T8025] netlink: 32 bytes leftover after parsing attributes in process `syz.1.575'. [ 157.916372][ T8038] netlink: 'syz.4.577': attribute type 2 has an invalid length. [ 158.036972][ T8024] bond5: entered allmulticast mode [ 158.419109][ T8057] syzkaller0: entered promiscuous mode [ 158.449300][ T8057] syzkaller0: entered allmulticast mode [ 158.565788][ T8064] Bluetooth: MGMT ver 1.23 [ 158.797877][ T8081] __nla_validate_parse: 134 callbacks suppressed [ 158.797895][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 158.820300][ T8082] Cannot find del_set index 0 as target [ 158.944295][ T8087] netlink: 'syz.4.589': attribute type 1 has an invalid length. [ 158.997185][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.589'. [ 159.089803][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 159.145619][ T8093] netlink: 204 bytes leftover after parsing attributes in process `syz.2.590'. [ 159.215663][ T30] audit: type=1800 audit(1779263447.103:4): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.585" name="memory.events" dev="tmpfs" ino=656 res=0 errno=0 [ 159.251524][ T8087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.495495][ T8108] netlink: 'syz.3.593': attribute type 2 has an invalid length. [ 159.586085][ T8112] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.593'. [ 159.953947][ T8123] syzkaller0: entered promiscuous mode [ 159.975611][ T8123] syzkaller0: entered allmulticast mode [ 160.052150][ T8122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.597'. [ 160.081982][ T8122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.597'. [ 160.102944][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 160.117248][ T8122] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 160.127023][ T8130] netlink: 'syz.1.599': attribute type 6 has an invalid length. [ 160.140366][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 160.195729][ T8130] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 160.451450][ T8138] netlink: 68 bytes leftover after parsing attributes in process `syz.4.601'. [ 160.909668][ T8151] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 160.934861][ T8151] team0: Port device batadv1 added [ 161.138953][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.605'. [ 161.150345][ T8157] netlink: 'syz.1.606': attribute type 2 has an invalid length. [ 161.229577][ T8161] IPv6: addrconf: prefix option has invalid lifetime [ 161.237021][ T8161] IPv6: addrconf: prefix option has invalid lifetime [ 161.778280][ T8174] bond4: entered promiscuous mode [ 161.789643][ T8174] bond4: entered allmulticast mode [ 161.807083][ T8188] syzkaller0: entered promiscuous mode [ 161.825754][ T8188] syzkaller0: entered allmulticast mode [ 161.935212][ T8191] xt_TCPMSS: Only works on TCP SYN packets [ 162.127113][ T8197] netlink: 'syz.0.616': attribute type 1 has an invalid length. [ 162.140777][ T8197] netlink: 'syz.0.616': attribute type 2 has an invalid length. [ 162.180724][ T8198] gtp0: entered promiscuous mode [ 162.186785][ T8198] gtp0: entered allmulticast mode [ 162.414899][ T8214] netlink: 'syz.3.621': attribute type 58 has an invalid length. [ 162.911892][ T8243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.035816][ T8246] netlink: 'syz.4.630': attribute type 1 has an invalid length. [ 163.110792][ T8246] 8021q: adding VLAN 0 to HW filter on device bond5 [ 163.142633][ T8246] netlink: 'syz.4.630': attribute type 10 has an invalid length. [ 163.176932][ T8251] bond5: (slave dummy0): making interface the new active one [ 163.214767][ T8251] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 163.256326][ T8252] syzkaller0: entered promiscuous mode [ 163.276503][ T8252] syzkaller0: entered allmulticast mode [ 163.301555][ T8246] dummy0: entered promiscuous mode [ 163.322999][ T8246] bond5: (slave dummy0): Releasing active interface [ 163.538189][ T8261] syzkaller0: entered promiscuous mode [ 163.543820][ T8261] syzkaller0: entered allmulticast mode [ 163.764711][ T8284] openvswitch: netlink: Message has 4 unknown bytes. [ 164.093299][ T8296] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20003 [ 165.115339][ T8281] __nla_validate_parse: 10 callbacks suppressed [ 165.115352][ T8281] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.637'. [ 165.134692][ T8286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.639'. [ 165.346910][ T8306] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 165.404883][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 165.632898][ T8319] tipc: Started in network mode [ 165.638919][ T8319] tipc: Node identity 8e73b4db04b3, cluster identity 4711 [ 165.646311][ T8319] tipc: Enabled bearer , priority 0 [ 165.695834][ T8320] syzkaller0: entered promiscuous mode [ 165.701627][ T8320] syzkaller0: entered allmulticast mode [ 165.784628][ T8320] tipc: Resetting bearer [ 165.814027][ T8320] tipc: Disabling bearer [ 165.825925][ T8327] syzkaller0: entered promiscuous mode [ 165.831930][ T8327] syzkaller0: entered allmulticast mode [ 166.026261][ T8335] bond5: option arp_all_targets: invalid value (129) [ 166.061654][ T8335] bond5 (unregistering): Released all slaves [ 166.258963][ T8347] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.653'. [ 166.567222][ T8371] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.658'. [ 166.915262][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 168.168887][ T8392] bond1: entered promiscuous mode [ 168.197706][ T8392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.253469][ T8393] bridge4: entered promiscuous mode [ 168.260072][ T8393] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 168.294138][ T8400] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 168.499764][ T8405] syzkaller0: entered promiscuous mode [ 168.520311][ T8405] syzkaller0: entered allmulticast mode [ 168.547409][ T8413] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.667'. [ 168.721457][ T8426] netlink: 144 bytes leftover after parsing attributes in process `syz.0.670'. [ 169.290709][ T8455] bond3: (slave bond0): Removing an active aggregator [ 169.327281][ T8455] bond3: (slave bond0): Releasing backup interface [ 169.374312][ T8455] bond2: (slave dummy0): Releasing active interface [ 169.381771][ T8455] dummy0: left allmulticast mode [ 169.399282][ T8455] bridge_slave_0: left allmulticast mode [ 169.405117][ T8455] bridge_slave_0: left promiscuous mode [ 169.411732][ T8455] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.426147][ T8455] bridge_slave_1: left allmulticast mode [ 169.427352][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.678'. [ 169.432130][ T8455] bridge_slave_1: left promiscuous mode [ 169.432505][ T8455] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.469904][ T8455] bond0: (slave bond_slave_0): Releasing backup interface [ 169.481599][ T8455] bond0: (slave bond_slave_1): Releasing backup interface [ 169.493786][ T8455] team0: Port device team_slave_0 removed [ 169.505358][ T8455] team0: Port device team_slave_1 removed [ 169.512154][ T8455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.519835][ T8455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.527316][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 169.531712][ T8455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.543981][ T8455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.554150][ T8455] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.968627][ T8476] openvswitch: netlink: Flow key attr not present in new flow. [ 169.982159][ T8487] bond6: (slave bond_slave_1): Device is not our slave [ 169.992302][ T8487] bond6: option active_slave: invalid value (bond_slave_1) [ 170.019674][ T8487] bond6 (unregistering): Released all slaves [ 170.089095][ T8486] syzkaller0: entered promiscuous mode [ 170.104241][ T8486] syzkaller0: entered allmulticast mode [ 170.385724][ T8510] pimreg: entered allmulticast mode [ 170.454617][ T8510] pimreg: left allmulticast mode [ 170.906704][ T8533] __nla_validate_parse: 7 callbacks suppressed [ 170.906722][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 171.328368][ T8553] veth1_macvtap: left promiscuous mode [ 171.355504][ T8553] macsec0: entered allmulticast mode [ 171.400644][ T8553] veth1_macvtap: entered promiscuous mode [ 171.420980][ T8553] veth1_macvtap: entered allmulticast mode [ 171.439900][ T8553] macsec0: left allmulticast mode [ 171.455171][ T8553] veth1_macvtap: left allmulticast mode [ 171.485823][ T8559] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.695'. [ 171.620565][ T8563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.883258][ T8567] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 171.910833][ T8567] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 171.920563][ T8571] syzkaller0: entered promiscuous mode [ 171.926386][ T8571] syzkaller0: entered allmulticast mode [ 172.002649][ T8569] netlink: 'syz.2.697': attribute type 21 has an invalid length. [ 172.105649][ T8569] netlink: 132 bytes leftover after parsing attributes in process `syz.2.697'. [ 172.579498][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.704'. [ 172.591634][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.599318][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.850859][ T8618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.706'. [ 172.904510][ T8593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.966814][ T8593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.334898][ T8635] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.709'. [ 173.376537][ T98] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.424721][ T98] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.463639][ T98] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.504475][ T98] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.593409][ T98] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.644836][ T98] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.704092][ T98] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.754634][ T98] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.246906][ T8690] netlink: 'syz.4.718': attribute type 21 has an invalid length. [ 174.267372][ T8692] SET target dimension over the limit! [ 174.273912][ T8690] netlink: 132 bytes leftover after parsing attributes in process `syz.4.718'. [ 174.462266][ T8704] netlink: 'syz.4.719': attribute type 1 has an invalid length. [ 174.467815][ T8696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.717'. [ 174.484576][ T8704] netlink: 'syz.4.719': attribute type 2 has an invalid length. [ 174.510336][ T8704] netlink: 'syz.4.719': attribute type 3 has an invalid length. [ 177.042175][ T8678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.196120][ T8740] netlink: 76 bytes leftover after parsing attributes in process `syz.2.721'. [ 177.298302][ T8748] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.723'. [ 177.444465][ T8754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.725'. [ 177.539551][ T8759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.726'. [ 177.898994][ T8778] netlink: 68 bytes leftover after parsing attributes in process `syz.0.733'. [ 178.045329][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 178.083100][ T8783] netlink: 'syz.3.735': attribute type 23 has an invalid length. [ 178.092390][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'. [ 178.096066][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 178.155488][ T8784] netlink: 'syz.1.736': attribute type 1 has an invalid length. [ 178.515314][ T8798] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.738'. [ 178.994605][ T8825] veth0: entered promiscuous mode [ 179.068004][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 180.441217][ T8868] bond6: Unable to set down delay as MII monitoring is disabled [ 180.473954][ T8868] bond6 (unregistering): Released all slaves [ 180.955331][ T8891] batman_adv: batadv0: Adding interface: ipvlan2 [ 180.962539][ T8891] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.988346][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.000179][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.012317][ T8891] batman_adv: batadv0: Interface activated: ipvlan2 [ 181.382680][ T8902] team0 (unregistering): Port device team_slave_1 removed [ 181.480111][ T8909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.618988][ T10] bridge0: entered promiscuous mode [ 181.744986][ T8914] ipvlan3: entered promiscuous mode [ 181.932531][ T8927] netlink: 'syz.2.765': attribute type 1 has an invalid length. [ 181.967015][ T8927] warning: `syz.2.765' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 182.020612][ T8929] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 182.197047][ T8929] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.216808][ T8933] hmac(sh: entered promiscuous mode [ 182.254680][ T8940] __nla_validate_parse: 12 callbacks suppressed [ 182.254699][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 182.272148][ T8940] netlink: 'syz.0.770': attribute type 8 has an invalid length. [ 182.437020][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 182.483686][ T8940] geneve3: entered promiscuous mode [ 182.503894][ T8940] geneve3: entered allmulticast mode [ 182.753524][ T8946] bond6 (unregistering): Released all slaves [ 183.143715][ T8961] netlink: 'syz.3.774': attribute type 142 has an invalid length. [ 183.391424][ T8975] syzkaller0: entered promiscuous mode [ 183.425730][ T8975] syzkaller0: entered allmulticast mode [ 183.534466][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 183.551942][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 183.889304][ T8996] erspan1: entered promiscuous mode [ 183.894746][ T8996] erspan1: entered allmulticast mode [ 183.928782][ T9003] IPv6: sit2: Disabled Multicast RS [ 184.029754][ T9010] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.152303][ T9012] netlink: 44 bytes leftover after parsing attributes in process `syz.1.788'. [ 184.239537][ T9018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.791'. [ 184.254549][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 184.275054][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.791'. [ 184.657071][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'. [ 184.682173][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 184.707557][ T9040] netlink: 'syz.4.797': attribute type 13 has an invalid length. [ 184.924486][ T9049] syzkaller0: entered promiscuous mode [ 184.945522][ T9049] syzkaller0: entered allmulticast mode [ 185.013977][ T9049] tipc: Enabled bearer , priority 0 [ 185.238114][ T9048] tipc: Resetting bearer [ 185.270010][ T9048] tipc: Disabling bearer [ 186.755714][ T9080] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 186.821913][ T9084] netlink: 'syz.0.808': attribute type 1 has an invalid length. [ 186.846886][ T9082] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 187.029260][ T9089] batadv1: entered promiscuous mode [ 187.034870][ T9089] batadv1: entered allmulticast mode [ 187.059134][ T9095] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 187.248305][ T9100] veth1: entered promiscuous mode [ 187.271068][ T9105] __nla_validate_parse: 3 callbacks suppressed [ 187.271087][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 188.071225][ T9157] netlink: 240 bytes leftover after parsing attributes in process `syz.0.826'. [ 188.393212][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 188.573382][ T9176] netlink: 'syz.1.835': attribute type 1 has an invalid length. [ 188.650161][ T9184] Bluetooth: MGMT ver 1.23 [ 188.672627][ T9186] netlink: 'syz.0.836': attribute type 1 has an invalid length. [ 188.720257][ T9176] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.841608][ T9186] 8021q: adding VLAN 0 to HW filter on device bond7 [ 188.871093][ T9193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.838'. [ 188.887414][ T9187] bond6: (slave geneve2): making interface the new active one [ 188.906332][ T9187] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 188.962108][ T9190] bond7: (slave veth0_to_bond): making interface the new active one [ 189.023896][ T9190] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 189.189020][ T9180] bond7: entered promiscuous mode [ 189.206609][ T9180] veth0_to_bond: entered promiscuous mode [ 189.223744][ T9180] bond7: entered allmulticast mode [ 189.233030][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 189.245729][ T9180] veth0_to_bond: entered allmulticast mode [ 189.256834][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 189.799365][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.843'. [ 189.834520][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 190.099366][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 190.188145][ T9218] netlink: zone id is out of range [ 191.234748][ T9264] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 191.327220][ T9264] 8021q: adding VLAN 0 to HW filter on device bond7 [ 194.005435][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.860'. [ 194.203257][ T9308] netlink: 44 bytes leftover after parsing attributes in process `syz.4.864'. [ 194.290263][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.592100][ T9317] syzkaller0: entered promiscuous mode [ 194.609139][ T9317] syzkaller0: entered allmulticast mode [ 194.933499][ T9331] pim6reg1: entered promiscuous mode [ 194.934857][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 194.949693][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 194.955414][ T9331] pim6reg1: entered allmulticast mode [ 194.980612][ T9334] netlink: 'syz.3.868': attribute type 2 has an invalid length. [ 196.245816][ T9363] netlink: 36 bytes leftover after parsing attributes in process `syz.3.873'. [ 196.486509][ T9365] netlink: 'syz.4.874': attribute type 1 has an invalid length. [ 197.825483][ T9365] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 197.911838][ T9374] netlink: 'syz.3.876': attribute type 29 has an invalid length. [ 197.969890][ T9378] netlink: 'syz.4.877': attribute type 1 has an invalid length. [ 198.002370][ T9378] netlink: 'syz.4.877': attribute type 2 has an invalid length. [ 198.016389][ T9378] netlink: 'syz.4.877': attribute type 1 has an invalid length. [ 198.031491][ T9378] netlink: 'syz.4.877': attribute type 3 has an invalid length. [ 198.040604][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 198.120157][ T9386] tipc: Enabling of bearer rejected, failed to enable media [ 198.875396][ T9427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.889'. [ 199.553409][ T9447] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 199.913170][ T9464] netlink: 'syz.1.898': attribute type 1 has an invalid length. [ 199.979782][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.898'. [ 199.995327][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.898'. [ 200.271910][ T9464] bond8: entered promiscuous mode [ 200.292836][ T9470] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.898'. [ 200.314843][ T9464] 8021q: adding VLAN 0 to HW filter on device bond8 [ 200.337713][ T9470] netlink: Unknown conntrack attr (0) [ 200.430442][ T9466] bond8: (slave bridge3): making interface the new active one [ 200.457734][ T9466] bridge3: entered promiscuous mode [ 200.478327][ T9466] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 200.699849][ T9479] syzkaller0: entered promiscuous mode [ 200.705490][ T9479] syzkaller0: entered allmulticast mode [ 200.838213][ T9486] netlink: 36 bytes leftover after parsing attributes in process `syz.0.904'. [ 201.125585][ T5631] block nbd0: Receive control failed (result -22) [ 201.193206][ T9495] nbd0: detected capacity change from 0 to 32 [ 201.211459][ T5632] block nbd0: Dead connection, failed to find a fallback [ 201.252916][ T5632] block nbd0: shutting down sockets [ 201.284673][ T5632] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.318274][ T5632] Buffer I/O error on dev nbd0, logical block 0, async page read [ 201.336350][ T5632] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.376670][ T5632] Buffer I/O error on dev nbd0, logical block 0, async page read [ 201.418350][ T5632] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.456445][ T5632] Buffer I/O error on dev nbd0, logical block 0, async page read [ 201.479107][ T5632] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.494371][ T5632] Buffer I/O error on dev nbd0, logical block 0, async page read [ 201.505963][ T5632] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.525654][ T5632] Buffer I/O error on dev nbd0, logical block 0, async page read [ 201.534132][ T5632] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.557827][ T5632] Buffer I/O error on dev nbd0, logical block 0, async page read [ 201.580481][ T5632] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.603138][ T5632] Buffer I/O error on dev nbd0, logical block 0, async page read [ 201.635592][ T5632] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.691425][ T5632] Buffer I/O error on dev nbd0, logical block 0, async page read [ 201.718173][ T9508] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20002 [ 201.725325][ T5632] ldm_validate_partition_table(): Disk read failed. [ 201.735709][ T5632] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.755240][ T5632] Buffer I/O error on dev nbd0, logical block 0, async page read [ 201.768015][ T5632] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.784938][ T5632] Buffer I/O error on dev nbd0, logical block 0, async page read [ 201.808323][ T5632] Dev nbd0: unable to read RDB block 0 [ 201.844686][ T5632] nbd0: unable to read partition table [ 201.901651][ T5632] ldm_validate_partition_table(): Disk read failed. [ 201.908266][ T9513] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 201.940513][ T5632] Dev nbd0: unable to read RDB block 0 [ 201.956492][ T5632] nbd0: unable to read partition table [ 202.113043][ T9515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.188147][ T9515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.295829][ T9515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.309075][ T9515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.339574][ T9515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.357679][ T9515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.397678][ T9515] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 202.431514][ T8818] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.438768][ T8818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.482542][ T8818] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.489801][ T8818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.615871][ T9534] bridge4: entered promiscuous mode [ 202.650331][ T9534] bridge4: entered allmulticast mode [ 202.672088][ T9544] netlink: 44 bytes leftover after parsing attributes in process `syz.4.923'. [ 202.683757][ T9544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.923'. [ 202.720503][ T9534] team0: Port device bridge4 added [ 203.412372][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 203.507087][ T9555] netlink: 52 bytes leftover after parsing attributes in process `syz.0.927'. [ 203.556702][ T9559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.620282][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 203.727770][ T5631] Bluetooth: hci2: command 0x0401 tx timeout [ 203.743864][ T9568] netlink: 148 bytes leftover after parsing attributes in process `syz.2.930'. [ 203.799717][ T9568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.930'. [ 203.836732][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.927'. [ 204.208507][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.525101][ T9603] xt_NFQUEUE: number of total queues is 0 [ 204.700477][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.720521][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.795914][ T9615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.995092][ T5631] Bluetooth: hci4: link tx timeout [ 205.001289][ T5631] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 205.016351][ T5631] Bluetooth: hci4: link tx timeout [ 205.021641][ T5631] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.050848][ T9633] __nla_validate_parse: 6 callbacks suppressed [ 205.050865][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 205.068159][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 205.783368][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.953'. [ 205.805823][ T9649] syzkaller0: entered promiscuous mode [ 205.806997][ T9652] netlink: 'syz.3.953': attribute type 12 has an invalid length. [ 205.833694][ T9649] syzkaller0: entered allmulticast mode [ 205.881053][ T66] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.901887][ T66] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.616119][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 206.616173][ T5638] Bluetooth: hci2: command 0x0401 tx timeout [ 206.630553][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 207.100756][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 207.736574][ T9652] dummy0: entered allmulticast mode [ 207.742341][ T1127] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.751480][ T1127] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.772097][ T9652] dummy0: left allmulticast mode [ 208.473927][ T9702] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.496838][ T9702] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.508399][ T9702] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 208.608054][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 208.756384][ T9702] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.797992][ T9702] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.836953][ T9702] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.003946][ T9702] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.019941][ T9702] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.030897][ T9702] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.241274][ T9733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.976'. [ 209.257798][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 209.280225][ T9702] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.300146][ T9702] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.311090][ T9702] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.352373][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'. [ 209.497367][ T9739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.978'. [ 209.809370][ T9750] pimreg: left allmulticast mode [ 209.835107][ T1121] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.858622][ T1121] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 209.882432][ T1121] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.914387][ T9749] syzkaller0: entered promiscuous mode [ 209.938179][ T9749] syzkaller0: entered allmulticast mode [ 210.010647][ T9764] nbd: must specify a device to reconfigure [ 210.030378][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.984'. [ 210.050557][ T986] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.060958][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.984'. [ 210.077671][ T986] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.091705][ T986] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.280586][ T986] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.291476][ T986] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.303130][ T986] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.342394][ T986] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.364111][ T986] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.392243][ T986] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.489474][ T9768] bridge_slave_0: left allmulticast mode [ 210.515068][ T9768] bridge_slave_0: left promiscuous mode [ 210.542516][ T9779] netlink: 'syz.4.989': attribute type 2 has an invalid length. [ 210.555546][ T9768] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.591845][ T9768] bridge_slave_1: left allmulticast mode [ 210.618590][ T9768] bridge_slave_1: left promiscuous mode [ 210.624539][ T9768] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.690949][ T9768] bond7: (slave veth0_to_bond): Releasing active interface [ 210.730139][ T9768] veth0_to_bond: left promiscuous mode [ 210.746425][ T9768] veth0_to_bond: left allmulticast mode [ 210.790258][ T9768] bond0: (slave bond_slave_0): Releasing backup interface [ 210.819989][ T9768] bond0: (slave bond_slave_1): Releasing backup interface [ 210.863401][ T9768] team0: Port device team_slave_0 removed [ 210.894253][ T9768] team0: Port device team_slave_1 removed [ 210.901138][ T9768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.910160][ T9768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.930939][ T9768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.939083][ T9768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.954288][ T9768] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 211.255932][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 211.263980][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 211.335720][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.995'. [ 211.468930][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 211.627182][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 212.208487][ T9847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1002'. [ 212.257740][ T9847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1002'. [ 212.328363][ T9852] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1004'. [ 212.682501][ T9866] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 213.082278][ T9849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.418982][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 214.119449][ T9892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.092215][ T9981] netlink: 'syz.2.1036': attribute type 1 has an invalid length. [ 215.338266][ T9998] __nla_validate_parse: 36 callbacks suppressed [ 215.338304][ T9998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1041'. [ 215.356351][ T9988] bond2: (slave dummy0): making interface the new active one [ 215.385516][ T9988] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 215.443614][ T9991] bond2: entered promiscuous mode [ 215.470371][ T9991] dummy0: entered promiscuous mode [ 215.639730][ T9981] bond2: (slave dummy0): Releasing active interface [ 215.646503][ T9981] dummy0: left promiscuous mode [ 215.759703][ T9981] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 215.839536][ T9979] bond2: left promiscuous mode [ 216.014244][T10013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1042'. [ 216.043162][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1042'. [ 216.053825][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 216.483420][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 216.525652][T10033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.870301][T10046] IPVS: ip_vs_add_dest(): server weight less than zero [ 216.887907][T10046] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 217.009653][T10052] netlink: 'syz.3.1056': attribute type 1 has an invalid length. [ 217.041276][T10052] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 217.430094][T10064] bond6: option lacp_active: invalid value (8) [ 217.476560][T10064] bond6 (unregistering): Released all slaves [ 217.551981][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 217.589900][T10076] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1061'. [ 217.683907][T10084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1063'. [ 217.728573][T10087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1061'. [ 218.021877][T10094] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1067'. [ 218.065465][T10096] netlink: 'syz.2.1068': attribute type 1 has an invalid length. [ 218.088405][T10096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.098699][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'. [ 218.186962][T10107] tipc: Enabling of bearer rejected, failed to enable media [ 219.191652][T10141] openvswitch: netlink: Flow actions attr not present in new flow. [ 220.409115][T10194] bridge7: entered promiscuous mode [ 220.436367][T10194] bridge7: entered allmulticast mode [ 220.496115][T10194] team0: Port device bridge7 added [ 220.619007][T10199] bridge0: port 1(team0) entered blocking state [ 220.633621][T10199] bridge0: port 1(team0) entered disabled state [ 220.659258][T10199] team0: entered allmulticast mode [ 220.675626][T10205] __nla_validate_parse: 8 callbacks suppressed [ 220.675651][T10205] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1094'. [ 220.735577][T10199] team0: entered promiscuous mode [ 220.860450][T10202] syzkaller0: entered promiscuous mode [ 220.893302][T10202] syzkaller0: entered allmulticast mode [ 220.938538][T10214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.310202][T10228] netlink: 'syz.1.1099': attribute type 1 has an invalid length. [ 221.344639][T10230] ip6erspan0: entered allmulticast mode [ 221.504983][T10237] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1103'. [ 221.561348][T10240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1104'. [ 221.642939][T10243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.720474][T10248] IPv6: syztnl2: Disabled Multicast RS [ 221.848995][T10254] syzkaller0: entered promiscuous mode [ 221.855777][T10254] syzkaller0: entered allmulticast mode [ 222.057342][T10263] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1111'. [ 222.103527][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 222.137669][T10267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1112'. [ 222.153029][T10270] hsr0: entered promiscuous mode [ 222.304652][T10277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1113'. [ 222.553450][T10269] hsr0: left promiscuous mode [ 222.719393][T10298] netlink: 'syz.0.1118': attribute type 83 has an invalid length. [ 223.146537][T10314] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1121'. [ 223.450981][T10336] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 223.484045][T10337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1127'. [ 223.531933][T10331] syzkaller0: entered promiscuous mode [ 223.539525][T10331] syzkaller0: entered allmulticast mode [ 223.823567][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 223.866298][T10355] netlink: 'syz.3.1132': attribute type 1 has an invalid length. [ 224.151854][T10362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.164622][T10362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.183111][T10362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 224.215466][T10368] netlink: 'syz.3.1135': attribute type 9 has an invalid length. [ 224.329477][T10362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.364559][T10362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.401902][T10362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 224.572225][T10362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.609762][T10362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.655354][T10362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 224.805231][T10362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.825722][T10362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.846406][T10362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 225.003427][T10394] tipc: Started in network mode [ 225.023151][T10394] tipc: Node identity 5, cluster identity 4711 [ 225.041390][T10394] tipc: Node number set to 5 [ 225.051489][T10394] tipc: Cannot configure node identity twice [ 225.112565][ T1111] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.125996][ T1111] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 225.136008][ T1111] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 225.162552][ T1111] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.172056][ T1111] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 225.181382][ T1111] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 225.205629][ T1111] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.214748][ T1111] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 225.223486][ T1111] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 225.260893][ T1111] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.279874][ T1111] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 225.299814][ T1111] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 225.379028][T10398] netlink: 'syz.1.1142': attribute type 2 has an invalid length. [ 225.685867][T10411] netlink: 'syz.0.1146': attribute type 4 has an invalid length. [ 225.718590][T10411] __nla_validate_parse: 5 callbacks suppressed [ 225.718609][T10411] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1146'. [ 225.765841][T10405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1145'. [ 225.835222][T10418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1148'. [ 225.855429][T10426] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1144'. [ 225.870866][T10417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1148'. [ 225.995068][T10432] netlink: 'syz.3.1149': attribute type 1 has an invalid length. [ 226.244787][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1152'. [ 226.313348][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'. [ 226.451887][T10443] 8021q: adding VLAN 0 to HW filter on device bond6 [ 226.697733][T10449] bond6: (slave veth3): Enslaving as an active interface with an up link [ 226.904509][T10471] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 227.144744][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 227.293882][T10490] syzkaller0: entered promiscuous mode [ 227.309333][T10490] syzkaller0: entered allmulticast mode [ 227.443871][T10526] netlink: 'syz.1.1165': attribute type 10 has an invalid length. [ 227.452059][T10526] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1165'. [ 228.955474][T10519] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1164'. [ 229.854986][T10571] netlink: 'syz.1.1173': attribute type 1 has an invalid length. [ 230.233779][T10588] x_tables: unsorted underflow at hook 1 [ 230.768836][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 233.296377][T10632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.327396][T10625] bond7: Removing last arp target with arp_interval on [ 233.360098][T10638] __nla_validate_parse: 1 callbacks suppressed [ 233.360118][T10638] netlink: 540 bytes leftover after parsing attributes in process `syz.4.1186'. [ 233.377267][T10638] netlink: 540 bytes leftover after parsing attributes in process `syz.4.1186'. [ 233.673937][T10651] netlink: 'syz.1.1187': attribute type 11 has an invalid length. [ 233.933959][T10664] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1189'. [ 233.952034][T10665] netlink: 'syz.3.1191': attribute type 12 has an invalid length. [ 234.113651][T10667] pimreg: entered allmulticast mode [ 234.149074][T10667] pimreg: left allmulticast mode [ 234.155206][T10638] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1186'. [ 234.200691][T10638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1186'. [ 234.229411][T10670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1193'. [ 234.251322][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 234.633355][T10696] openvswitch: netlink: IP tunnel dst address not specified [ 234.700061][T10695] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1198'. [ 234.768343][T10702] netlink: 'syz.1.1200': attribute type 1 has an invalid length. [ 234.807172][T10700] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1198'. [ 234.828765][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 235.056713][T10705] bond10: (slave dummy0): making interface the new active one [ 235.107082][T10705] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 235.451033][T10733] netlink: 'syz.1.1207': attribute type 1 has an invalid length. [ 235.702792][T10731] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.823995][T10768] netlink: 'syz.3.1212': attribute type 4 has an invalid length. [ 235.907679][T10771] Bluetooth: MGMT ver 1.23 [ 236.049052][T10756] netlink: 'syz.3.1212': attribute type 4 has an invalid length. [ 236.192914][T10731] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.262949][T10783] netlink: 'syz.0.1218': attribute type 58 has an invalid length. [ 236.669514][T10731] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.755058][T10794] netlink: 'syz.1.1221': attribute type 13 has an invalid length. [ 236.775283][T10794] netlink: 'syz.1.1221': attribute type 17 has an invalid length. [ 236.908062][T10794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.925005][T10794] wg2: left allmulticast mode [ 236.952265][T10794] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 237.070312][T10731] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.092742][T10803] openvswitch: netlink: Flow key attr not present in new flow. [ 237.269267][T10819] bond11: entered promiscuous mode [ 237.303374][T10819] bond11: entered allmulticast mode [ 237.322211][T10819] 8021q: adding VLAN 0 to HW filter on device bond11 [ 237.531604][ T8820] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.623798][ T986] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.698134][ T986] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.779070][ T66] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.071369][T10855] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.091266][T10855] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 238.103911][T10855] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 238.193493][T10855] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.205160][T10855] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 238.217147][T10855] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 238.344638][T10855] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.365228][T10855] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 238.397574][T10855] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 238.515473][T10855] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.525733][T10855] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 238.539000][T10855] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 238.707154][ T986] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.716914][ T986] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 238.726005][ T986] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 238.745775][T10881] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 238.808535][ T48] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.825041][ T48] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 238.845311][ T48] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 239.058757][ T1121] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.067194][ T1121] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 239.076260][ T1121] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 239.106975][ T1121] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.115490][ T1121] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 239.124536][ T1121] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 239.272202][T10895] __nla_validate_parse: 12 callbacks suppressed [ 239.272225][T10895] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1247'. [ 239.820619][T10921] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1253'. [ 240.269528][T10941] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 240.303237][T10941] bond3: (slave lo): Enslaving as an active interface with an up link [ 240.342455][T10941] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 240.389613][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1259'. [ 240.514837][T10952] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1260'. [ 240.645417][T10956] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1261'. [ 240.658316][T10956] bond0 (unregistering): Released all slaves [ 241.249251][T10970] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1265'. [ 241.336426][T10972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1266'. [ 241.680565][T10983] hma(kX: entered promiscuous mode [ 241.823389][T10989] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1271'. [ 242.247698][T11008] netlink: 'syz.3.1277': attribute type 1 has an invalid length. [ 242.264077][T11008] netlink: 'syz.3.1277': attribute type 1 has an invalid length. [ 242.286001][T11009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1276'. [ 242.475653][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'. [ 243.730595][T11074] IPv6: syztnl2: Disabled Multicast RS [ 243.895718][T11078] syzkaller0: entered promiscuous mode [ 243.918182][T11078] syzkaller0: entered allmulticast mode [ 243.976763][T11083] syzkaller0: entered promiscuous mode [ 243.993190][T11083] syzkaller0: entered allmulticast mode [ 244.362951][T11094] __nla_validate_parse: 11 callbacks suppressed [ 244.362974][T11094] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1299'. [ 244.449192][T11097] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 244.851285][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1303'. [ 244.931307][T11115] x_tables: duplicate underflow at hook 1 [ 245.157722][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1310'. [ 245.322939][T11138] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1313'. [ 245.431488][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'. [ 245.680278][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1318'. [ 246.121550][T11174] bridge3: entered promiscuous mode [ 246.127092][T11174] bridge3: entered allmulticast mode [ 246.379842][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'. [ 246.396793][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1327'. [ 246.485899][T11190] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1329'. [ 246.552473][T11191] syzkaller0: entered promiscuous mode [ 246.568708][T11191] syzkaller0: entered allmulticast mode [ 246.771878][T11202] netlink: 'syz.2.1333': attribute type 21 has an invalid length. [ 246.803676][T11202] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1333'. [ 246.853166][T11202] netlink: 'syz.2.1333': attribute type 1 has an invalid length. [ 247.155304][T11220] veth7: entered promiscuous mode [ 247.180697][T11224] lo: entered allmulticast mode [ 247.254416][T11220] lo: left allmulticast mode [ 247.798171][T11258] ip6tnl1: entered allmulticast mode [ 248.025046][T11270] veth1_to_bond: entered allmulticast mode [ 248.038961][T11270] netlink: 'syz.4.1351': attribute type 49 has an invalid length. [ 248.073460][T11273] syzkaller0: entered promiscuous mode [ 248.086221][T11273] syzkaller0: entered allmulticast mode [ 248.177256][T11277] IPv4: Oversized IP packet from 127.202.26.0 [ 248.224218][T11273] netlink: 'syz.2.1349': attribute type 10 has an invalid length. [ 248.851114][T11269] veth1_to_bond: left allmulticast mode [ 249.290944][ T30] audit: type=1800 audit(1779263537.193:5): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1354" name="memory.events" dev="tmpfs" ino=1490 res=0 errno=0 [ 250.948024][T11265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.254814][T11312] xt_hashlimit: size too large, truncated to 1048576 [ 251.424642][T11304] __nla_validate_parse: 4 callbacks suppressed [ 251.424663][T11304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1359'. [ 251.502407][T11304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1359'. [ 252.066797][T11352] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1368'. [ 252.359591][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 252.410190][T11362] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1371'. [ 252.580250][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1372'. [ 253.098890][T11385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1378'. [ 253.116484][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1377'. [ 253.163332][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 253.566285][T11408] tipc: Enabled bearer , priority 0 [ 253.586879][T11408] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 253.609425][T11408] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 253.635531][T11411] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20004 [ 253.673008][T11409] syzkaller0: entered promiscuous mode [ 253.678629][T11409] syzkaller0: entered allmulticast mode [ 253.692087][T11409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1386'. [ 253.855668][T11416] bond3: (slave lo): Releasing backup interface [ 253.885688][T11416] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 253.907199][T11416] team0: left allmulticast mode [ 253.918344][T11416] team0: left promiscuous mode [ 253.930420][T11416] bridge0: port 1(team0) entered disabled state [ 253.982236][T11416] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 254.389805][T11446] hsr_slave_0: left promiscuous mode [ 254.413845][T11446] hsr_slave_1: left promiscuous mode [ 254.682496][ T5765] tipc: Node number set to 769 [ 254.820746][T11469] x_tables: duplicate underflow at hook 1 [ 255.736277][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.220877][T11526] netlink: 'syz.3.1421': attribute type 13 has an invalid length. [ 256.811089][T11558] __nla_validate_parse: 14 callbacks suppressed [ 256.811110][T11558] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1428'. [ 256.864312][T11558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1428'. [ 256.975877][T11564] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1430'. [ 256.989017][T11563] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1431'. [ 257.052457][T11566] sctp: [Deprecated]: syz.1.1432 (pid 11566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.052457][T11566] Use struct sctp_sack_info instead [ 257.078733][T11568] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1431'. [ 257.095204][T11566] sctp: [Deprecated]: syz.1.1432 (pid 11566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.095204][T11566] Use struct sctp_sack_info instead [ 257.475025][ T30] audit: type=1804 audit(1779263545.373:6): pid=11579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1436" name="/newroot/268/cgroup.controllers" dev="tmpfs" ino=1387 res=1 errno=0 [ 257.558296][ T30] audit: type=1800 audit(1779263545.373:7): pid=11579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1436" name="cgroup.controllers" dev="tmpfs" ino=1387 res=0 errno=0 [ 257.702653][T11588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1439'. [ 257.733936][T11588] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 257.743093][T11588] dvmrp1: linktype set to 804 [ 257.773637][T11588] macvtap0: mtu less than device minimum [ 257.966183][T11602] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1443'. [ 258.104841][T11610] netlink: 'syz.3.1447': attribute type 1 has an invalid length. [ 258.123554][T11610] netlink: 'syz.3.1447': attribute type 1 has an invalid length. [ 258.149170][T11610] netlink: 'syz.3.1447': attribute type 1 has an invalid length. [ 258.158304][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1446'. [ 258.177867][T11608] tipc: Failed to remove unknown binding: 66,0,0/0:813231220/813231222 [ 258.203762][T11608] tipc: Failed to remove unknown binding: 66,0,0/0:813231220/813231221 [ 258.215237][T11610] bond8: entered promiscuous mode [ 258.222366][T11610] bond8: entered allmulticast mode [ 258.228696][T11610] 8021q: adding VLAN 0 to HW filter on device bond8 [ 258.251754][T11612] erspan0: entered promiscuous mode [ 258.258239][T11612] macvtap1: entered promiscuous mode [ 258.263903][T11612] macvtap1: entered allmulticast mode [ 258.270915][T11612] erspan0: entered allmulticast mode [ 258.312922][T11614] erspan0: left allmulticast mode [ 258.319382][T11614] erspan0: left promiscuous mode [ 258.328549][T11614] macvtap1: left promiscuous mode [ 258.340716][T11614] macvtap1: left allmulticast mode [ 258.404118][T11615] erspan1: entered allmulticast mode [ 258.434493][T11615] bond8: (slave erspan1): making interface the new active one [ 258.442984][T11615] erspan1: entered promiscuous mode [ 258.462905][T11615] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 258.532185][T11620] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1448'. [ 258.589009][T11627] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1449'. [ 258.778322][T11635] netlink: 'syz.0.1453': attribute type 2 has an invalid length. [ 258.927829][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 259.183888][T11649] netlink: 'syz.4.1458': attribute type 6 has an invalid length. [ 259.562203][T11670] FAULT_INJECTION: forcing a failure. [ 259.562203][T11670] name failslab, interval 1, probability 0, space 0, times 1 [ 259.599816][T11673] netlink: 'syz.3.1462': attribute type 1 has an invalid length. [ 259.617076][T11675] netlink: 'syz.1.1464': attribute type 2 has an invalid length. [ 259.625736][T11674] netlink: 'syz.3.1462': attribute type 1 has an invalid length. [ 259.637860][T11670] CPU: 1 UID: 0 PID: 11670 Comm: syz.4.1463 Not tainted syzkaller #0 PREEMPT(full) [ 259.637887][T11670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.637910][T11670] Call Trace: [ 259.637918][T11670] [ 259.637927][T11670] dump_stack_lvl+0xe8/0x150 [ 259.637955][T11670] should_fail_ex+0x412/0x560 [ 259.637985][T11670] should_failslab+0xa8/0x100 [ 259.638021][T11670] __kmalloc_cache_noprof+0x88/0x660 [ 259.638049][T11670] ? __pfx___mutex_lock+0x10/0x10 [ 259.638066][T11670] ? __inet_diag_dump_start+0x8b/0xbf0 [ 259.638093][T11670] ? netlink_lookup+0x30/0x200 [ 259.638116][T11670] __inet_diag_dump_start+0x8b/0xbf0 [ 259.638144][T11670] ? netlink_lookup+0x30/0x200 [ 259.638162][T11670] ? netlink_lookup+0x30/0x200 [ 259.638178][T11670] ? netlink_lookup+0x30/0x200 [ 259.638202][T11670] __netlink_dump_start+0x469/0x7e0 [ 259.638230][T11670] inet_diag_handler_cmd+0x1e0/0x2c0 [ 259.638259][T11670] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 259.638285][T11670] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 259.638309][T11670] ? __pfx_inet_diag_dump+0x10/0x10 [ 259.638332][T11670] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 259.638361][T11670] ? sock_diag_lock_handler+0x19/0x290 [ 259.638387][T11670] ? sock_diag_lock_handler+0x19/0x290 [ 259.638420][T11670] sock_diag_rcv_msg+0x4cc/0x600 [ 259.638452][T11670] netlink_rcv_skb+0x232/0x4b0 [ 259.638473][T11670] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 259.638503][T11670] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.638544][T11670] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.638564][T11670] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.638589][T11670] netlink_unicast+0x75c/0x8e0 [ 259.638629][T11670] netlink_sendmsg+0x813/0xb40 [ 259.638659][T11670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.638684][T11670] ? aa_sock_msg_perm+0xf1/0x1b0 [ 259.638712][T11670] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.638740][T11670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.638760][T11670] sock_write_iter+0x49b/0x4f0 [ 259.638786][T11670] ? __pfx_sock_write_iter+0x10/0x10 [ 259.638833][T11670] do_iter_readv_writev+0x619/0x8c0 [ 259.638867][T11670] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 259.638901][T11670] ? bpf_lsm_file_permission+0x9/0x20 [ 259.638928][T11670] ? security_file_permission+0x75/0x260 [ 259.638952][T11670] ? rw_verify_area+0x255/0x4d0 [ 259.638983][T11670] vfs_writev+0x33c/0x990 [ 259.639014][T11670] ? __pfx_vfs_writev+0x10/0x10 [ 259.639052][T11670] ? __fget_files+0x2a/0x420 [ 259.639080][T11670] ? __fget_files+0x3a0/0x420 [ 259.639102][T11670] ? __fget_files+0x2a/0x420 [ 259.639132][T11670] do_writev+0x154/0x2e0 [ 259.639157][T11670] ? __pfx_do_writev+0x10/0x10 [ 259.639188][T11670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.639210][T11670] do_syscall_64+0x15f/0xf80 [ 259.639238][T11670] ? trace_irq_disable+0x3b/0x140 [ 259.639268][T11670] ? clear_bhb_loop+0x40/0x90 [ 259.639293][T11670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.639312][T11670] RIP: 0033:0x7f8c05b9ce59 [ 259.639331][T11670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.639348][T11670] RSP: 002b:00007f8c069c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 259.639369][T11670] RAX: ffffffffffffffda RBX: 00007f8c05e15fa0 RCX: 00007f8c05b9ce59 [ 259.639384][T11670] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 259.639396][T11670] RBP: 00007f8c069c7090 R08: 0000000000000000 R09: 0000000000000000 [ 259.639408][T11670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.639419][T11670] R13: 00007f8c05e16038 R14: 00007f8c05e15fa0 R15: 00007ffe0e852458 [ 259.639453][T11670] [ 260.043362][T11673] 8021q: adding VLAN 0 to HW filter on device bond9 [ 260.481681][T11695] veth0_macvtap: left promiscuous mode [ 261.697069][T11755] sctp: [Deprecated]: syz.4.1483 (pid 11755) Use of int in max_burst socket option. [ 261.697069][T11755] Use struct sctp_assoc_value instead [ 262.000136][T11766] __nla_validate_parse: 18 callbacks suppressed [ 262.000155][T11766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1486'. [ 262.034168][T11767] team0: Cannot enslave team device to itself [ 262.126455][T11774] x_tables: duplicate underflow at hook 1 [ 262.180997][T11774] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1487'. [ 262.393066][T11775] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1486'. [ 262.405884][T11775] nbd: device at index 64 is going down [ 262.564028][ T8611] IPVS: starting estimator thread 0... [ 262.573257][T11786] IPVS: set_ctl: invalid protocol: 92 100.1.1.1:20000 [ 262.587916][T11784] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1489'. [ 262.698298][T11789] IPVS: using max 30 ests per chain, 72000 per kthread [ 262.744929][T11784] hsr_slave_0: left promiscuous mode [ 262.885381][T11792] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 262.948453][T11794] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.010980][ T5635] udevd[5635]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 263.141831][ T5635] udevd[5635]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 263.234302][T11819] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1497'. [ 264.144047][T11854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1507'. [ 264.436987][T11870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1510'. [ 264.458435][T11870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1510'. [ 264.563656][T11872] netlink: 'syz.1.1506': attribute type 12 has an invalid length. [ 264.634043][T11865] syzkaller1: entered promiscuous mode [ 264.648968][T11865] syzkaller1: entered allmulticast mode [ 264.778333][T11881] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1512'. [ 267.094801][T11855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.198606][T11903] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1518'. [ 267.302044][T11905] netlink: 'syz.4.1519': attribute type 13 has an invalid length. [ 267.314150][T11907] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 267.448773][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.549984][ T50] block nbd1: Receive control failed (result -32) [ 267.717676][T11931] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1524'. [ 267.797334][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 267.809748][T11933] netlink: 'syz.0.1527': attribute type 30 has an invalid length. [ 267.820085][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 267.890381][T11936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1528'. [ 267.999603][T11939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1530'. [ 268.042708][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 268.043172][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 268.140224][T11947] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1531'. [ 268.234999][T11955] netlink: 'syz.1.1534': attribute type 10 has an invalid length. [ 268.273730][T11955] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1534'. [ 268.369846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 269.340557][T11995] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 269.360441][T11995] syzkaller1: linktype set to 1 [ 270.463198][T12049] ipvlan1: mtu less than device minimum [ 271.090627][T12082] bond0: option miimon: invalid value (18446744073709551607) [ 271.099154][T12082] bond0: option miimon: allowed values 0 - 2147483647 [ 271.118515][T12090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.130047][T12082] bond0 (unregistering): Released all slaves [ 271.362809][T12096] x_tables: duplicate underflow at hook 2 [ 271.983127][T12127] netlink: 'syz.1.1576': attribute type 27 has an invalid length. [ 272.090404][T12130] veth0_to_hsr: entered promiscuous mode [ 272.133324][T12125] syzkaller1: entered promiscuous mode [ 272.156590][T12125] syzkaller1: entered allmulticast mode [ 272.405664][T12140] __nla_validate_parse: 9 callbacks suppressed [ 272.405683][T12140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1580'. [ 272.533228][T12150] xt_hashlimit: size too large, truncated to 1048576 [ 272.729983][T12146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1581'. [ 272.803723][T12146] openvswitch: netlink: Flow key attr not present in new flow. [ 272.822936][T12162] netlink: 'syz.3.1583': attribute type 1 has an invalid length. [ 272.841012][T12162] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1583'. [ 272.980516][T12129] veth0_to_hsr: left promiscuous mode [ 273.743941][T12199] netlink: 'syz.4.1591': attribute type 1 has an invalid length. [ 273.799975][T12199] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1591'. [ 273.844802][T12192] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.862471][T12192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.972998][T12192] hsr_slave_0: entered promiscuous mode [ 273.986708][T12192] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 274.070957][T12193] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 274.420275][T12236] bridge0: entered allmulticast mode [ 274.441588][T12238] netlink: 'syz.2.1598': attribute type 2 has an invalid length. [ 274.510448][T12236] pim6reg: entered allmulticast mode [ 274.817082][T12249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1600'. [ 274.833881][T12254] netlink: 'syz.0.1602': attribute type 7 has an invalid length. [ 274.903385][T12252] netlink: 'syz.2.1601': attribute type 21 has an invalid length. [ 274.918651][T12252] IPv6: NLM_F_CREATE should be specified when creating new route [ 275.124446][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1601'. [ 275.645575][T12288] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1611'. [ 275.671407][T12284] netlink: 'syz.2.1610': attribute type 21 has an invalid length. [ 275.674868][T12288] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1611'. [ 275.698597][T12284] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1610'. [ 275.708479][T12288] netlink: 'syz.1.1611': attribute type 5 has an invalid length. [ 275.708514][T12288] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1611'. [ 275.732542][T12284] netlink: 'syz.2.1610': attribute type 4 has an invalid length. [ 276.945316][T12349] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 276.990067][T12349] netlink: 'syz.2.1627': attribute type 2 has an invalid length. [ 277.011177][T12349] netlink: 'syz.2.1627': attribute type 3 has an invalid length. [ 277.398307][T12358] bridge4: port 1(veth5) entered blocking state [ 277.405903][T12358] bridge4: port 1(veth5) entered disabled state [ 277.425629][T12358] veth5: entered allmulticast mode [ 277.443713][T12358] veth5: entered promiscuous mode [ 277.515488][T12355] bridge4: port 2(veth0_to_bond) entered blocking state [ 277.532303][T12355] bridge4: port 2(veth0_to_bond) entered disabled state [ 277.541129][T12355] veth0_to_bond: entered allmulticast mode [ 277.551097][T12355] veth0_to_bond: entered promiscuous mode [ 277.597367][T12373] __nla_validate_parse: 5 callbacks suppressed [ 277.597384][T12373] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1633'. [ 277.614637][T12373] openvswitch: netlink: Flow key attr not present in new flow. [ 277.624230][T12369] bridge4: port 3(veth7) entered blocking state [ 277.631124][T12369] bridge4: port 3(veth7) entered disabled state [ 277.638388][T12369] veth7: entered allmulticast mode [ 277.646066][T12369] veth7: entered promiscuous mode [ 277.820289][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 277.969922][T12379] 8021q: adding VLAN 0 to HW filter on device bond10 [ 278.038564][T12385] 8021q: adding VLAN 0 to HW filter on device bond10 [ 278.065394][T12385] bond10: (slave vcan0): The slave device specified does not support setting the MAC address [ 278.089452][T12385] bond10: (slave vcan0): Error -95 calling set_mac_address [ 278.206216][T12396] netlink: 'syz.2.1640': attribute type 1 has an invalid length. [ 278.215455][T12396] netlink: 'syz.2.1640': attribute type 2 has an invalid length. [ 278.224513][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 278.239862][T12396] netlink: 'syz.2.1640': attribute type 1 has an invalid length. [ 278.250366][T12396] netlink: 'syz.2.1640': attribute type 2 has an invalid length. [ 278.260127][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 278.486162][T12393] bond2: left allmulticast mode [ 278.495086][T12393] bond4: left promiscuous mode [ 278.500178][T12393] bond4: left allmulticast mode [ 278.509790][T12393] erspan1: left promiscuous mode [ 278.514867][T12393] erspan1: left allmulticast mode [ 278.521598][T12393] veth1: left promiscuous mode [ 278.534755][T12393] bond8: left promiscuous mode [ 278.540303][T12393] bridge3: left promiscuous mode [ 278.549766][T12393] bond11: left promiscuous mode [ 278.554681][T12393] bond11: left allmulticast mode [ 278.562358][T12379] sch_fq: defrate 0 ignored. [ 278.622556][ T1121] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.712940][ T1121] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.745216][ T1121] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.781636][ T1121] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.854575][T12415] x_tables: duplicate underflow at hook 2 [ 279.101075][T12435] bond11: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 279.111090][T12435] bond11: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 279.130776][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'. [ 279.204286][T12440] bond12: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 279.244620][T12440] bond12: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 279.535167][T12455] netlink: 'syz.3.1653': attribute type 13 has an invalid length. [ 279.771244][ T12] [ 279.773756][ T12] ============================================ [ 279.779925][ T12] WARNING: possible recursive locking detected [ 279.786119][ T12] syzkaller #0 Not tainted [ 279.790550][ T12] -------------------------------------------- [ 279.796711][ T12] kworker/u8:0/12 is trying to acquire lock: [ 279.802711][ T12] ffff88807c635158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 279.812734][ T12] [ 279.812734][ T12] but task is already holding lock: [ 279.820112][ T12] ffff888032075958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 279.829979][ T12] [ 279.829979][ T12] other info that might help us debug this: [ 279.838040][ T12] Possible unsafe locking scenario: [ 279.838040][ T12] [ 279.845493][ T12] CPU0 [ 279.848805][ T12] ---- [ 279.852095][ T12] lock(&qdisc_xmit_lock_key#3); [ 279.857135][ T12] lock(&qdisc_xmit_lock_key#3); [ 279.862175][ T12] [ 279.862175][ T12] *** DEADLOCK *** [ 279.862175][ T12] [ 279.870320][ T12] May be due to missing lock nesting notation [ 279.870320][ T12] [ 279.878647][ T12] 10 locks held by kworker/u8:0/12: [ 279.883867][ T12] #0: ffff888078f8f940 ((wq_completion)bond8#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 279.894937][ T12] #1: ffffc90000117c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 279.907827][ T12] #2: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 279.917465][ T12] #3: ffffffff8e95ce00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 279.927419][ T12] #4: ffff888055261228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 279.940076][ T12] #5: ffff888032075958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 279.950363][ T12] #6: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 279.959256][ T12] #7: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 279.969017][ T12] #8: ffffffff8e95ce00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 279.979009][ T12] #9: ffff888059904228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 279.991671][ T12] [ 279.991671][ T12] stack backtrace: [ 279.997581][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 279.997603][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.997616][ T12] Workqueue: bond8 bond_alb_monitor [ 279.997645][ T12] Call Trace: [ 279.997652][ T12] [ 279.997662][ T12] dump_stack_lvl+0xe8/0x150 [ 279.997683][ T12] print_deadlock_bug+0x279/0x290 [ 279.997716][ T12] __lock_acquire+0x253f/0x2cf0 [ 279.997742][ T12] ? unwind_next_frame+0xa6/0x2550 [ 279.997763][ T12] ? unwind_next_frame+0x1bbf/0x2550 [ 279.997792][ T12] ? sch_direct_xmit+0x15f/0x4c0 [ 279.997817][ T12] lock_acquire+0x106/0x350 [ 279.997836][ T12] ? sch_direct_xmit+0x15f/0x4c0 [ 279.997868][ T12] _raw_spin_lock+0x2e/0x40 [ 279.997892][ T12] ? sch_direct_xmit+0x15f/0x4c0 [ 279.997917][ T12] sch_direct_xmit+0x15f/0x4c0 [ 279.997945][ T12] ? __pfx_sch_direct_xmit+0x10/0x10 [ 279.997976][ T12] __dev_queue_xmit+0x180f/0x3950 [ 279.998001][ T12] ? __dev_queue_xmit+0x2b6/0x3950 [ 279.998029][ T12] ? __pfx___dev_queue_xmit+0x10/0x10 [ 279.998047][ T12] ? neigh_resolve_output+0x438/0x750 [ 279.998087][ T12] ? eth_header+0x11b/0x200 [ 279.998104][ T12] ? __asan_memcpy+0x40/0x70 [ 279.998134][ T12] ? ip_finish_output2+0x3c2/0x1070 [ 279.998156][ T12] ip_finish_output2+0xca9/0x1070 [ 279.998178][ T12] ? ip_skb_dst_mtu+0x80b/0xa50 [ 279.998201][ T12] ? ip_finish_output+0x40e/0x530 [ 279.998223][ T12] ip_output+0x29f/0x450 [ 279.998244][ T12] ? ip_output+0x5b/0x450 [ 279.998265][ T12] iptunnel_xmit+0x621/0xd10 [ 279.998307][ T12] ip_tunnel_xmit+0x193a/0x1f20 [ 279.998337][ T12] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 279.998358][ T12] ? __pfx_gre_build_header+0x10/0x10 [ 279.998377][ T12] ? kfree+0x1c5/0x640 [ 279.998395][ T12] ? pskb_expand_head+0x458/0x1390 [ 279.998413][ T12] __gre_xmit+0x19e/0x240 [ 279.998431][ T12] ? __pfx___gre_xmit+0x10/0x10 [ 279.998453][ T12] erspan_xmit+0xa41/0x14d0 [ 279.998476][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 279.998494][ T12] ? __pfx_erspan_xmit+0x10/0x10 [ 279.998517][ T12] dev_hard_start_xmit+0x2cd/0x830 [ 279.998540][ T12] sch_direct_xmit+0x251/0x4c0 [ 279.998563][ T12] ? __pfx_sch_direct_xmit+0x10/0x10 [ 279.998583][ T12] ? kthread+0x310/0x470 [ 279.998606][ T12] __dev_queue_xmit+0x180f/0x3950 [ 279.998625][ T12] ? __dev_queue_xmit+0x2b6/0x3950 [ 279.998647][ T12] ? __pfx___dev_queue_xmit+0x10/0x10 [ 279.998665][ T12] ? rcu_is_watching+0x15/0xb0 [ 279.998683][ T12] ? trace_kmem_cache_alloc+0x29/0xe0 [ 279.998709][ T12] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 279.998737][ T12] ? alb_send_lp_vid+0x14e/0x550 [ 279.998759][ T12] alb_send_lp_vid+0x348/0x550 [ 279.998783][ T12] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 279.998812][ T12] alb_send_learning_packets+0x12c/0x300 [ 279.998833][ T12] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 279.998854][ T12] ? bond_alb_monitor+0xf8/0x17e0 [ 279.998877][ T12] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 279.998901][ T12] bond_alb_monitor+0x3d5/0x17e0 [ 279.998941][ T12] ? bond_alb_monitor+0xf8/0x17e0 [ 279.998962][ T12] ? __pfx_bond_alb_monitor+0x10/0x10 [ 279.998984][ T12] ? process_scheduled_works+0xa70/0x1860 [ 279.999000][ T12] ? process_scheduled_works+0xa70/0x1860 [ 279.999016][ T12] process_scheduled_works+0xb5d/0x1860 [ 279.999045][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.999064][ T12] ? assign_work+0x3d5/0x5e0 [ 279.999081][ T12] worker_thread+0xa53/0xfc0 [ 279.999108][ T12] kthread+0x389/0x470 [ 279.999128][ T12] ? __pfx_worker_thread+0x10/0x10 [ 279.999143][ T12] ? __pfx_kthread+0x10/0x10 [ 279.999163][ T12] ret_from_fork+0x514/0xb70 [ 279.999181][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 279.999197][ T12] ? __switch_to+0xc79/0x1410 [ 279.999221][ T12] ? __pfx_kthread+0x10/0x10 [ 279.999241][ T12] ret_from_fork_asm+0x1a/0x30 [ 279.999266][ T12] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 280.876403][T12455] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.883584][T12455] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.980548][T12455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.990408][T12455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.190451][ T5643] syz_tun (unregistering): left allmulticast mode [ 281.282723][ T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.292922][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 281.314657][ T12] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 281.338016][ T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.349798][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 281.377720][ T12] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 281.386146][ T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.394890][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 281.404418][ T12] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 281.415034][ T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.437491][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 281.450777][ T12] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 281.720841][ T8818] bridge_slave_1: left allmulticast mode [ 281.727834][ T8818] bridge_slave_1: left promiscuous mode [ 281.733643][ T8818] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.742954][ T8818] bridge_slave_0: left allmulticast mode [ 281.748926][ T8818] bridge_slave_0: left promiscuous mode [ 281.754660][ T8818] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.788785][ T8818] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 281.796885][ T8818] ip6gre1 (unregistering): left promiscuous mode [ 282.252091][ T8818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.262237][ T8818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.272091][ T8818] bond0 (unregistering): Released all slaves [ 282.280533][ T8818] bond1 (unregistering): Released all slaves [ 282.291837][ T8818] bond2 (unregistering): Released all slaves [ 282.301677][ T8818] bond3 (unregistering): Released all slaves [ 282.311664][ T8818] bond4 (unregistering): Released all slaves [ 282.324426][ T8818] bond5 (unregistering): Released all slaves [ 282.396126][ T8818] tipc: Left network mode [ 282.640220][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 282.696662][ T8818] hsr_slave_0: left promiscuous mode [ 282.702702][ T8818] hsr_slave_1: left promiscuous mode [ 282.709308][ T8818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.716726][ T8818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.728337][ T8818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.735790][ T8818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.743921][ T8818] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 282.751665][ T8818] batman_adv: batadv0: Removing interface: ipvlan2 [ 283.060165][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 283.305099][ T8818] IPVS: stop unused estimator thread 0... [ 283.379568][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 283.416393][ T8818] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.481311][ T8818] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.534640][ T8818] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.572776][ T8818] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.818991][ T8818] bridge0 (unregistering): left allmulticast mode [ 283.990065][ T8818] bond1 (unregistering): (slave bridge4): Releasing backup interface [ 283.999035][ T8818] bridge4 (unregistering): left promiscuous mode [ 284.110417][ T8818] team0: Port device bridge7 removed [ 284.331687][ T8818] bond1 (unregistering): Released all slaves [ 284.341836][ T8818] bond2 (unregistering): Released all slaves [ 284.352188][ T8818] bond3 (unregistering): Released all slaves [ 284.362836][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 284.417052][ T8818] : left promiscuous mode [ 284.465650][ T8818] tipc: Left network mode [ 284.479311][ T8818] IPVS: stopping backup sync thread 5932 ... [ 284.703401][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 284.794961][ T8818] veth1_macvtap: left promiscuous mode [ 284.801586][ T8818] veth0_macvtap: left promiscuous mode [ 284.807172][ T8818] veth1_vlan: left promiscuous mode [ 284.862789][ T8818] pim6reg (unregistering): left allmulticast mode [ 285.066603][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 285.283959][ T8818] IPVS: stop unused estimator thread 0... [ 285.397230][ T5290] 8021q: adding VLAN 0 to HW filter on device eth7 [ 285.642001][ T5290] 8021q: adding VLAN 0 to HW filter on device eth8