last executing test programs: 4m5.442104976s ago: executing program 1 (id=605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f00000002c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x5}, 0x8) close(r5) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000080)={{0x2, 0xffff, @empty}, {0x6, @local}, 0x38, {0x2, 0x0, @broadcast}, 'veth0\x00'}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'virt_wifi0\x00', 0x3}, 0x18) 4m5.061097692s ago: executing program 1 (id=612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x52}, &(0x7f00000001c0)=0x9c) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000008000500000000000800060000000000"], 0x24}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r4, 0x8b27, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x2, 0x6, 0x660, 0x378, 0x378, 0xe0, 0x378, 0x468, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xff, 0xff, 0xff000000, 0xffffff00], 'batadv0\x00', 'rose0\x00', {}, {0xff}, 0xff, 0x3, 0x0, 0x26}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0xfffd, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x138, 0x170, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@unspec=@rateest={{0x68}, {'pim6reg\x00', 'ip6_vti0\x00', 0x24, 0x0, 0x2, 0x2400000, 0x3, 0x8, {0x10000}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff, 0x0, 0x5}, {}, {0x87, 0x1, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x0, 0x7ff}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000008000000000200000000f15358a01ee8fc000013020061e3ce4664ec"], 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=@ringbuf, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x90) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6) write(r6, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="37050000fbffffffffffffff", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000002d40)=ANY=[@ANYBLOB="200c8c1a97653fd5a13094", @ANYRES16=r8, @ANYBLOB="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"], 0xc20}, 0x1, 0x0, 0x0, 0x800}, 0x2000c081) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x2e4e}, {0x0, 0xfffffffffffffffd, 0x1}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x6c}, 0xa, @in=@empty}}, 0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r11, 0x10f, 0x80, &(0x7f0000001540)=0x5, 0x4) 4m4.792554187s ago: executing program 1 (id=617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x800) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x2}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) (async) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)=ANY=[@ANYBLOB="202700002c0007012bbd7000ffdbdf25047c0000280301802103dd802001e98008004600", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000227082d57c5848d403e212111b7355941a4abee53192f9ad0ca4033342783801144c6ba1ea7845071729e825b33f1a20fe09b8762b86d910fab7e0264c14550e4b91c89f69764109add4c2854f000000e42303800c0001"], 0x2720}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r11, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x1c, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) (async) sendmsg$NFT_BATCH(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x1c, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 4m4.274039292s ago: executing program 1 (id=625): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000100)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xffbffffe, @mcast1, 0x9}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x50) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0xbe}], "7bf354a4d44f873e"}}}}}}}, 0x0) 4m4.06747497s ago: executing program 1 (id=628): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x2c) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001200010affffffff0000000000000200ab9600cff36ab32cb351ab9fc5bec79c8fccf3b137338d4905d09accdb811d2f9bdebd363aa5e112c19da41af105e707224e5e57eeb78d5f9aa6b91d421db3e77c2101efe1c31f7fac661181cab4af5a787ec364747ac55acb00020000e47a55ce7d452c4466c326d293f214650564c89d721add3f6c751d91f2ed94ba343ea3cac9eef426394856358246325c9c9a7100dfe19785d54da8241217400dff17aba46d57c10d5fabe2a4f8af23"], 0x14}}, 0x0) 4m3.911127475s ago: executing program 1 (id=632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000620000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b400000000000000006140000001100010000000000000000000100000af726024567f3"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='.'], 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x44110) 3m39.348296182s ago: executing program 32 (id=632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000620000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b400000000000000006140000001100010000000000000000000100000af726024567f3"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='.'], 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x44110) 3m30.627549129s ago: executing program 2 (id=711): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x5c, 0x1, 0x0, 0x0, 0x0, 0xf0}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@private, @private, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001200420028bd7000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="80110000000402000500210005000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m30.428061834s ago: executing program 2 (id=714): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x19, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r2, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x180, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r2, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00b64c", @ANYRES16=r0, @ANYBLOB="010000000000fbdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x0) 3m30.185313309s ago: executing program 2 (id=720): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099"], 0x38}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000000606030073797a30000000000500000000000900030073797a30000000000900030073797a32000000000900020073797a32000000000900020073797a3000"/84], 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10040040) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 3m29.55170438s ago: executing program 2 (id=726): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @empty, 0x4e23, 0x3, 'none\x00', 0xf, 0x7, 0x49}, 0x2c) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a}) poll(0xfffffffffffffffc, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) 3m28.514039553s ago: executing program 2 (id=740): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00', 0x400, 0xc2, &(0x7f0000000600)=""/194, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x0, 0x10, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000880)=@o_path={0x0, r1, 0x4000, r0}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x40, r2, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x40}}, 0x18004090) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x10, &(0x7f0000000080)=0x10001, 0x4) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r8], 0x28}}, 0x4040802) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 3m28.164490812s ago: executing program 2 (id=744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x14}], 0x1}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000280)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r9, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r11 = openat$cgroup_procs(r8, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r9, &(0x7f0000000200)='FREEZING\x00', 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m13.135522298s ago: executing program 33 (id=744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x14}], 0x1}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000280)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r9, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r11 = openat$cgroup_procs(r8, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r9, &(0x7f0000000200)='FREEZING\x00', 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m41.293546585s ago: executing program 0 (id=1198): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) ioctl$FIONCLEX(r4, 0x5450) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x40880) 2m41.103286866s ago: executing program 0 (id=1202): socket(0x2b, 0x1, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="07000000040000001800000042a0000000000000", @ANYRES32, @ANYBLOB="fbffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000081000000000005000000a92a7b0100"], 0x50) socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0x1, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @dest_unreach={0x1, 0x1, 0x0, 0x5, '\x00', {0x8, 0x6, "db8603", 0x0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a000005440002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c000280050001000000000006000340000000003c0001800c00028014000300ff0200000000000000002100000000011400040020010000000000000000000000000001080007400000000004000680"], 0xa0}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r8, &(0x7f0000000380)={0xa, 0xe22, 0x80, @mcast2, 0x1}, 0x1c) 2m40.600232726s ago: executing program 0 (id=1207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x20, r6, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x7}}}}}, 0x20}}, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r7, 0x4018f514, &(0x7f0000000080)={0x2, 0x800, 0x3}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, 0xfffffffffffffffe) (async) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f00000023c0)) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x4, 0x7, 0x18, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x7, 0x8, 0x3, 0x3}}) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@enum64={0xe, 0x5, 0x0, 0x13, 0x0, 0xa, [{0x1, 0x0, 0x61c}, {0x3, 0x7, 0x7}, {0xa, 0x9}, {0x10, 0x2, 0x7f}, {0x2, 0x4, 0xd}]}]}, {0x0, [0x2e, 0x5f, 0x48, 0x0]}}, &(0x7f0000000640)=""/4096, 0x66, 0x1000, 0x0, 0x4}, 0x28) (async) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001700)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, '\x00', r11, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) (async) r14 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001800)={{0x1, 0xffffffffffffffff}, &(0x7f0000001780), &(0x7f00000017c0)='%pS \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a80)=@bpf_tracing={0x1a, 0x16, &(0x7f00000003c0)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @alu={0x7, 0x1, 0x7, 0x5, 0x2, 0xfffffffffffffff8, 0x4}], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', r11, 0x1a, r12, 0x8, &(0x7f0000001680)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000016c0)={0x2, 0x10, 0x8, 0x6}, 0x10, 0x13529, 0xffffffffffffffff, 0x7, &(0x7f00000019c0)=[0xffffffffffffffff, r13, r14, r5, r15, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001a00)=[{0x0, 0x3, 0x7, 0x4}, {0x1, 0x3, 0xf, 0xc}, {0x1, 0x3, 0x4, 0xe}, {0x1, 0x3, 0x6, 0xb}, {0x3, 0x1, 0xf, 0x3}, {0x2, 0x4, 0x7, 0x1}, {0x0, 0x4, 0xf, 0x9}], 0x10, 0x8}, 0x94) 2m40.331423928s ago: executing program 0 (id=1211): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500030000000500010006000000140007800600040000040000060005"], 0x5c}}, 0x0) 2m40.068735212s ago: executing program 0 (id=1214): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8ce6e3117aaf10cd}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20040010) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r1, &(0x7f0000002a00)=[{{&(0x7f00000007c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f0000000b80)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1f8}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) write$cgroup_int(r0, &(0x7f0000000080)=0x6, 0x12) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) 2m39.825396777s ago: executing program 0 (id=1218): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x300, 0x10001}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000240)=0x84) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r6, 0x29, 0xf1, 0xca, 0x0, 0x53, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x10, 0x9, 0xffffff80}}) bind$packet(r3, &(0x7f0000000200)={0x11, 0x6, r8, 0x1, 0xf9, 0x6, @local}, 0x14) 2m24.752893594s ago: executing program 34 (id=1218): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x300, 0x10001}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000240)=0x84) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r6, 0x29, 0xf1, 0xca, 0x0, 0x53, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x10, 0x9, 0xffffff80}}) bind$packet(r3, &(0x7f0000000200)={0x11, 0x6, r8, 0x1, 0xf9, 0x6, @local}, 0x14) 3.443059313s ago: executing program 5 (id=3197): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000240)="94", 0x1) (async, rerun: 32) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) (rerun: 32) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000001c0)={r1, &(0x7f0000000040)='}\x00', 0x301000, &(0x7f00000000c0)={@_ha_fsid={[0xff1154, 0x9c]}, {0x2, 0x5, 0x8, 0xe67}}, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x2}) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x1, 0x1, 0x80000000}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x400000000000001, 0x0, 0x0, 0x1bb, 0x400}}]}}}]}, 0x90}}, 0x0) (async) tee(r0, r2, 0x2, 0x100000000000003) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2832455cbf48123ab106a70000001000010025bd", @ANYRES32=0x0, @ANYBLOB="0c72295fc8076b49fababb8272c80a975e99d2412dcefe725539880f00cf8392c6cfc1f76430160da5a5cd1add8bab14f155611556aa7545bd05e6268c254cf87b5cc0f224310fa610541df24d12e39b633931ced10eea90ae3318ed6d8f5965b86225e27f2d6d341b0e47f63d561dcafc6774c91380501f50bdb708ed5eed3c6a6a8a1b77fc17b42a3759e1cd226e116e59463d1665a0b12c2bf876fd3249b4472b5ec3a5dfb095629522d0abc0eca2789c7fda03449a4cd32a6283109f7d3fcd2f87bc74"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x24040000) 2.362529545s ago: executing program 5 (id=3209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000100), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r3 = socket(0x2b, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f00000004c0)=0xa, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r6) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) close(r1) 2.346412912s ago: executing program 4 (id=3213): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0000000200e9000000000001000004ff00000005000066040000004000000000000000000000005253053128536d1a00"], &(0x7f0000000340)=""/5, 0x32, 0x5, 0x1}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x6, 0x0, 0x6a, 0x2, 0x9, 0xfffffff8, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x6, 0x1, 0x101, 0x40, 0x0, 0x33ff, 0xfd7, 0x2}}, {0x8, 0x2, [0x2665, 0x136]}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x400}, 0x4014) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bridge\x00', 0x10) 2.123006598s ago: executing program 4 (id=3215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x18, 0x0, 0x0, 0x41000, 0x0, '\x00', r1}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x18}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x18, 0x0, 0x0, 0x41000, 0x0, '\x00', r1}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x18}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) 2.102672132s ago: executing program 6 (id=3216): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x61, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25000}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xf, 0x0, 0x10000000, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f00000001c0)={'veth1_macvtap\x00', 0x101}) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket(0x400000000010, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000006080)=@newtfilter={0x34, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r15, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r16 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r17, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3000000) 1.999999841s ago: executing program 5 (id=3217): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) close(r1) write(r0, &(0x7f0000000100)="520003000100b8", 0x7) 1.95734243s ago: executing program 4 (id=3219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x100000001, 0x17) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "d90700b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(r0, r2, 0x0, 0xffffffff004) 1.849674988s ago: executing program 5 (id=3221): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0x10001, 0x12) sendfile(r1, r0, 0x0, 0xf03a0005) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x140f, 0x60ceaae1ef55e4c3, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}]}, 0x20}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000002440)={'nat\x00', 0x0, [0x632, 0x9, 0x7fff, 0x80008000, 0x4]}, &(0x7f00000003c0)=0x54) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd28, 0xfffe, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x3, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, 0x0, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e21, 0x3ae, @empty, 0x12d}}, 0x2, 0x2, 0x8614, 0x1, 0x14, 0x7, 0x4}, 0x9c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x100010, 0xffffffffffffffff, 0xe18c5000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.779792484s ago: executing program 3 (id=3222): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004"], 0x0, 0x34}, 0x28) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 1.583258844s ago: executing program 4 (id=3223): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x110ce}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xd}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xd}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xb}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000840}, 0x20008001) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x5c}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) sendmsg$IPVS_CMD_NEW_DEST(r8, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x0, 0x62, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x100}, 0x4000040) setsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, &(0x7f00000005c0)=0x5, 0x4) r9 = accept4$netrom(r8, &(0x7f0000000600)={{0x3, @bcast}, [@null, @rose, @bcast, @default, @bcast, @remote, @netrom, @default]}, &(0x7f0000000680)=0x48, 0x80400) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000740)={0x9, &(0x7f00000006c0)=[{0x1, 0xf1, 0x3, 0x80}, {0x800, 0xfd, 0x8, 0x3}, {0x30, 0x3, 0xff, 0x41af}, {0xfff8, 0x3, 0x92, 0x4}, {0xf, 0x6, 0xff, 0xffffffff}, {0x9ea, 0xa2, 0x6, 0x1}, {0x7fff, 0xe, 0x9}, {0x8, 0x8c, 0x7f, 0x4}, {0x81, 0xc, 0x3, 0x5}]}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r12, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x20008001) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f00000008c0), &(0x7f0000000900)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000fc0)=@filter={'filter\x00', 0xe, 0x5, 0x63e, [0x0, 0x200000000980, 0x2000000009b0, 0x200000000c84], 0x0, &(0x7f0000000940), &(0x7f0000000980)=[{0x0, '\x00', 0x0, 0x24694f5b22fcd440}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x38, 0x884c, 'veth1_to_batadv\x00', 'batadv_slave_0\x00', 'geneve0\x00', 'dvmrp1\x00', @remote, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff], 0x10e, 0x10e, 0x13e, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x7, 0x1}}}, @rateest={{'rateest\x00', 0x0, 0x48}, {{'batadv_slave_1\x00', 'bridge_slave_1\x00', 0x22, 0x3, 0x1, 0xa, 0x7, 0x4, {0x4}, {0xe8}}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}, {0x11, 0x10, 0x7, 'dvmrp1\x00', 'veth1_to_bond\x00', 'veth0_to_bond\x00', 'gretap0\x00', @remote, [0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x116, 0x116, 0x166, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x2, 0x1}}}, @ip6={{'ip6\x00', 0x0, 0x50}, {{@ipv4={'\x00', '\xff\xff', @multicast1}, @private0, [0xffffffff, 0xff000000, 0xffff00, 0xffffff00], [0x0, 0x7f7fff00, 0xff], 0xa0, 0x5c, 0x8, 0x34, 0x4e21, 0x4e24, 0x4e20, 0x4e22}}}], [], @common=@log={'log\x00', 0x28, {{0x9, "59d196dff2315a3cfe29420fc61e461e1efe0bfa621c760d8ae75f7b5720", 0x2}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x34, 0xd, 'vcan0\x00', 'veth1_to_team\x00', 'pimreg\x00', 'veth1_to_batadv\x00', @multicast, [0xff, 0x0, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, [0xff, 0xff], 0xae, 0xae, 0xf6, [@time={{'time\x00', 0x0, 0x18}, {{0x1, 0x8bec, 0xc3d7, 0x238a, 0x9, 0x3, 0x1}}}], [], @common=@ERROR={'ERROR\x00', 0x20, {"1fdd7d856bcd5d5cc654b68585a2301e910824973bfdbe0514f7422600bb"}}}, {0x11, 0x0, 0x0, 'geneve0\x00', 'rose0\x00', 'syz_tun\x00', 'ip_vti0\x00', @remote, [0x101, 0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@dnat={'dnat\x00', 0x10, {{@local}}}}]}, {0x0, '\x00', 0x4, 0x0, 0x1, [{0x11, 0xd, 0x9, 'pimreg1\x00', 'dvmrp0\x00', 'tunl0\x00', 'syz_tun\x00', @local, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0x0, 0xff], 0xbe, 0x10e, 0x13e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x93}}}], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x33, {0x42}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x2}}}}]}]}, 0x6b6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040), 0x4) clock_gettime(0x0, &(0x7f0000001080)={0x0, 0x0}) nanosleep(&(0x7f00000010c0)={r13, r14+10000000}, &(0x7f0000001100)) nanosleep(&(0x7f0000001140)={0x77359400}, &(0x7f0000001180)) clock_gettime(0x0, &(0x7f000000aec0)={0x0, 0x0}) recvmmsg(r8, &(0x7f000000acc0)=[{{&(0x7f00000011c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001240)=""/243, 0xf3}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/84, 0x54}, {&(0x7f00000023c0)=""/200, 0xc8}, {&(0x7f00000024c0)=""/48, 0x30}, {&(0x7f0000002500)=""/145, 0x91}], 0x6, &(0x7f0000002640)=""/46, 0x2e}, 0xc3f}, {{&(0x7f0000002680)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002700)=""/204, 0xcc}, {&(0x7f0000002800)=""/218, 0xda}, {&(0x7f0000002900)=""/92, 0x5c}, {&(0x7f0000002980)=""/17, 0x11}, {&(0x7f00000029c0)=""/136, 0x88}], 0x5, &(0x7f0000002b00)=""/4096, 0x1000}, 0x86}, {{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/67, 0x43}, {&(0x7f0000004b80)=""/235, 0xeb}, {&(0x7f0000004c80)=""/51, 0x33}, {&(0x7f0000004cc0)=""/4096, 0x1000}, {&(0x7f0000005cc0)=""/177, 0xb1}, {&(0x7f0000005d80)=""/42, 0x2a}], 0x7, &(0x7f0000005e40)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000006e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000009300)=[{0xfffffffffffffffd}, {&(0x7f0000006ec0)=""/4096, 0x1000}, {&(0x7f0000007ec0)=""/27, 0x1b}, {&(0x7f0000007f00)=""/135, 0x87}, {&(0x7f0000007fc0)=""/89, 0x59}, {&(0x7f0000008040)=""/200, 0xc8}, {&(0x7f0000008140)=""/177, 0xb1}, {&(0x7f0000008200)=""/208, 0xd0}, {&(0x7f0000008300)=""/4096, 0x1000}], 0x9}, 0x4}, {{&(0x7f00000093c0)=@tipc=@name, 0x80, &(0x7f0000009540)=[{&(0x7f0000009440)=""/215, 0xd7}], 0x1}, 0x2}, {{&(0x7f0000009580)=@ethernet={0x0, @local}, 0x80, &(0x7f00000096c0)=[{&(0x7f0000009600)=""/177, 0xb1}], 0x1, &(0x7f0000009700)=""/81, 0x51}, 0x10000}, {{&(0x7f0000009780)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000009880)=[{&(0x7f0000009800)=""/92, 0x5c}], 0x1, &(0x7f00000098c0)=""/4096, 0x1000}, 0x5}, {{&(0x7f000000a8c0)=@caif=@rfm, 0x80, &(0x7f000000ab80)=[{&(0x7f000000a940)=""/188, 0xbc}, {&(0x7f000000aa00)=""/105, 0x69}, {&(0x7f000000aa80)=""/217, 0xd9}], 0x3, &(0x7f000000abc0)=""/233, 0xe9}, 0x1b7}], 0x8, 0x3, &(0x7f000000af00)={r15, r16+60000000}) ioctl$SIOCPNADDRESOURCE(r8, 0x89e0, &(0x7f000000af40)=0xffff) ioctl$sock_inet_SIOCSIFBRDADDR(r10, 0x891a, &(0x7f000000af80)={'wlan0\x00', {0x2, 0x4e22, @rand_addr=0x64010100}}) 1.53938889s ago: executing program 3 (id=3225): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=@newtfilter={0x3c, 0x26, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_basic={{0x4}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=@newtfilter={0x3c, 0x26, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_basic={{0x4}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 1.476122541s ago: executing program 6 (id=3226): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=@deltaction={0x208, 0x31, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xffff}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xfffffffffffffd55, 0x1, 'sample\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff0075}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40}, 0x4008013) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x2c, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) 1.274574989s ago: executing program 7 (id=3228): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000210000304000000000000000000000000d628b185921e9df9a95c7b738c79", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c0002800600010000000000"], 0x3c}, 0x1, 0xba01}, 0x0) 1.23464848s ago: executing program 6 (id=3229): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x800}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x697b861ef4cb96c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc444}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x4000000, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e23}]}}]}, 0x4c}}, 0x24004000) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r4, &(0x7f0000000380)="075fdaf9"}, 0x20) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0xd}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.172000569s ago: executing program 3 (id=3230): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x17f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00, 0x0, 0x0, 0x0, 0x7ffffffd}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x7, 0x7, 0x5e, @dev={0xfe, 0x80, '\x00', 0x37}, @empty, 0x7800, 0x7, 0x2, 0xffff}}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) (async) writev(r4, &(0x7f0000000140)=[{&(0x7f00000026c0)="fb5584", 0x3}], 0x1) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x24, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x70a2bfee, 0x0, 0x0, 0x0, 0x80000000}, [@ldst={0x4, 0x0, 0x1, 0x7, 0xb, 0x4, 0xffffffffffffffe8}, @alu={0x7, 0x1, 0x5, 0xb, 0xa, 0x100, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9c5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}]}, &(0x7f0000000200)='GPL\x00', 0x7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x94a2a5f51f4c3cc0, '\x00', r3, 0x25, r5, 0x8, &(0x7f0000000300)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xc, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[r6, r0], &(0x7f0000000440)=[{0x71, 0x3, 0x0, 0x5}, {0x5, 0x4, 0xe, 0x5}], 0x10, 0x5834}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.164865308s ago: executing program 7 (id=3231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'lo\x00', 0x1000}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f00000000c0)=[{0x2d, 0x0, 0x1}, {0x40, 0x40, 0x0, 0xfffffffd}, {0x6}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000140)={0x2, 0x3, 0x1, 0x6, 0x3, [0x7fff, 0xde, 0x1]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x200008c4}, 0x1) 920.966628ms ago: executing program 7 (id=3232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000280)={0xffffffffffffffff, 0x8, 0x97, 0x4, @vifc_lcl_addr=@rand_addr=0x64010102, @local}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) 918.535958ms ago: executing program 3 (id=3233): r0 = socket$inet(0xa, 0x801, 0x84) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@noop, @lsrr={0x83, 0x3, 0x77}]}}, @address_request={0x11, 0x0, 0x0, 0x576}}}}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) close(0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x6, 0x4) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) close(r5) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 779.83586ms ago: executing program 5 (id=3234): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, &(0x7f0000000200)=""/45, 0x2d, 0x3, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x0, 0x3, 0x3, 0x4}}, 0x80) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x61c, 0x2c, 0x1, 0xfffffffe, 0x25dfdbfc, "", [@nested={0x60a, 0xf2, 0x0, 0x1, [@nested={0x415, 0x9, 0x0, 0x1, [@generic="102feac198785ba6069a2315b12bcdb555b23ad272136fb0f1b7bf24cbe2475d7e47b567c67e8206764a2b7fe8d24e4511a1217be4d745bf52250ee015697e166f9bfebf", @nested={0x69, 0xfe, 0x0, 0x1, [@nested={0x4, 0x7a}, @generic="0cba6006f4bd1742669cffea9c468a302339fdc6e5ebe982f01fca95e5130a030de38ba88c22cabbd5ab444781be3b9ef7354e6110f279d89ed928c3ec7262d99c6ec4b5fed9e3241d1af742772004a1890d48e1d8e17bafdc7dd83637453605ba"]}, @nested={0x4, 0x68}, @nested={0x1b1, 0x35, 0x0, 0x1, [@typed={0x8, 0xd9, 0x0, 0x0, @ipv4=@multicast2}, @generic="18d1cc04e027df777f58d2b9f290fc4953808ad1be9a3080380daea68df269cfe7a69abf3f6dbca0e1e6e0947652cb00ef9b36d61ff4dcc0a673b81067bf67a9dbeff194a587f348b7200a4f84de5d77161702671bcce59db97c0118cfedf73d3242c9e3e9d4875ff2cb61d745394c5848687da93ed4ca2f480ee3fa9bba6fb95453dcd7ed493536c78bf3aed5e605bcf9ced64c1b1130709d383b65f5383053b1243545f1b559e953f71148cc701d66b22a", @generic="e26ae98187095816191cd93789b69ce6398095113d3363efb9683805d0b47c5c3414", @typed={0x8, 0xbe, 0x0, 0x0, @pid}, @generic="66e1b9a3bd46edf8cb89890c4b3fa9511d2d6ab6849479dce4de677b564c2463b139", @typed={0x5, 0x129, 0x0, 0x0, @str='\x00'}, @generic="1de6e91f777aad387b97857eb8257eeea20ff00436e4b4789ab18044dab020e5ae87dfa208b175c33cf2c71428dcad74c6f7b81f05ff19cb8f71b30d224560584b9c7b871a699b898f314f7b732df048e57f614d0762ae28ae27e93c0d460cd15a4caa020e0fcef4b5619a505140ba87dcb55fe4d3ad9a63418c6e5e5871cbeff9ee5e7b68dab17c239ea48cb2cd2aea9c98f0ea83193c58da20c555bc1c7c"]}, @nested={0xe1, 0x9f, 0x0, 0x1, [@generic="643f66a472ab6b53c398fb4523ddf91d84c300000000000000000000000000000000b195e656b4ea1779748f4d8e5deb82e614c311022800000000ad1699982a09a1fe94c5e121c0c556b0136dfb97d13a30270582582f69367749d09e10a1a21399d01c653bc4d02e68477d499bd7dc5b2c1a86afaaffe0133f64dbc9f35fb7bc0d7322724c09b51b26940e3a666be7cf15c3faf673c91246bec038e471c56f3134ef0eff5f19e857697c", @typed={0x8, 0x120, 0x0, 0x0, @pid}, @nested={0x4, 0x26}, @generic="73b712b7ea46d927874ae80e42270e23707ff496287e1b0013f6e43a720eddc9cdaa29cc7abc"]}, @typed={0xc, 0x13f, 0x0, 0x0, @u64=0x2000000000000}, @nested={0xd, 0xd8, 0x0, 0x1, [@generic="fc8cd828b7", @nested={0x4, 0x18}]}, @generic="872dbabf04e79912548c2fe9ac2b28ebb91a02adeb0e89fac194f81a94f00d8e4c5c27ae6d83671d383ee2612e5764749d234069aa3b81f4e5707b7bfa7c7e67c9dfbb2ee974b282aa79b6c69c56debaf4749d43354e5db6bff424d6d15abe353a582bd87dab76a6075566a419610127a2f2a4df7c3d8407b73c667770f5445674871db43e2b7304405587059b16717bcdcfad1267b1f34563f9369d0aa5da4007", @typed={0x8, 0x105, 0x0, 0x0, @fd=r0}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640d", @typed={0x4, 0x145}, @generic="0a9e989568b49c238ba95217f31bc96afe81e099cd09a08e7647c6694fc48c6b6e5cb4c757fae3f6ac4a2d295e409581bbf6a75fcf87833e5ea6d2ae3b3533d29519e29fa9fe04f50c4954f5adc03718dbb2a00a4efbc989bfd08a1ea2a9c20ce8881a823fa09917321698558fd1fcceccb420e963e9e693ba9ad5428ffa907f0c72c2ace2e0b8896886a1d589c544ecfca9d095870a403c428c8d4f903fdea321fee997e87c61cb885d0a02583c238e3bafdf9a55d9d7cd77f1", @typed={0x8, 0xf, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xbb, 0x0, 0x0, @fd=r0}, @nested={0x24, 0xa7, 0x0, 0x1, [@nested={0x20, 0x9b, 0x0, 0x1, [@nested={0x4, 0xfd}, @typed={0x14, 0x10e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @nested={0x4, 0x53}]}]}, @typed={0x4, 0xfd}, @typed={0x8, 0xce, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0xce, 0x0, 0x0, @u64=0x9}]}]}, 0x61c}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0x6}}, [@filter_kind_options=@f_flow={{0x7}, {0x20, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x400}, @TCA_FLOW_XOR={0x0, 0x7, 0xffff2b4c}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x0, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x48}, {0x7, 0x100, 0x4, 0xffffffff}}}, @TCF_EM_IPSET={0x0, 0x1, 0x0, 0x0, {{0x2}, {0xfffc, 0x0, 0x6}}}, @TCF_EM_CANID={0x0, 0x3, 0x0, 0x0, {{0xfc01, 0x7, 0xd}, {{0x4}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x0, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x8000}, {0x3, 0x2, 0x6}}}, @TCF_EM_IPSET={0x0, 0x3, 0x0, 0x0, {{0xf, 0x8, 0x400}, {0x4, 0x2}}}, @TCF_EM_META={0x0, 0x3, 0x0, 0x0, {{0xa1b5, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="8caa8cf9df0c"]}]}}, @TCF_EM_NBYTE={0x0, 0x3, 0x0, 0x0, {{0x40, 0x2, 0x6}, {0xe, 0x0, 0x3, "49c97f0d28a0225fda"}}}, @TCF_EM_CANID={0x0, 0x2, 0x0, 0x0, {{0xe, 0x7, 0x8}, {{0x4, 0x0, 0x0, 0x1}, {0x2, 0x1}}}}, @TCF_EM_CANID={0x0, 0x2, 0x0, 0x0, {{0xfff9, 0x7, 0xfffa}, {{0x3, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xc858}, 0x80) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0x6}}, [@filter_kind_options=@f_flow={{0x7}, {0x20, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x400}, @TCA_FLOW_XOR={0x0, 0x7, 0xffff2b4c}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x0, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x48}, {0x7, 0x100, 0x4, 0xffffffff}}}, @TCF_EM_IPSET={0x0, 0x1, 0x0, 0x0, {{0x2}, {0xfffc, 0x0, 0x6}}}, @TCF_EM_CANID={0x0, 0x3, 0x0, 0x0, {{0xfc01, 0x7, 0xd}, {{0x4}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x0, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x8000}, {0x3, 0x2, 0x6}}}, @TCF_EM_IPSET={0x0, 0x3, 0x0, 0x0, {{0xf, 0x8, 0x400}, {0x4, 0x2}}}, @TCF_EM_META={0x0, 0x3, 0x0, 0x0, {{0xa1b5, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="8caa8cf9df0c"]}]}}, @TCF_EM_NBYTE={0x0, 0x3, 0x0, 0x0, {{0x40, 0x2, 0x6}, {0xe, 0x0, 0x3, "49c97f0d28a0225fda"}}}, @TCF_EM_CANID={0x0, 0x2, 0x0, 0x0, {{0xe, 0x7, 0x8}, {{0x4, 0x0, 0x0, 0x1}, {0x2, 0x1}}}}, @TCF_EM_CANID={0x0, 0x2, 0x0, 0x0, {{0xfff9, 0x7, 0xfffa}, {{0x3, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x80000001, 0x2, 0x0, 0x40, 0x100ad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) 779.523841ms ago: executing program 7 (id=3235): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newtaction={0x14, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r4, @ANYBLOB="05002d0001000000080006"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r0}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r5}, @IFLA_GTP_ROLE={0x8}, @IFLA_GTP_LOCAL={0x8, 0x7, @private=0xa010102}]}}}]}, 0x50}}, 0x0) 779.091847ms ago: executing program 3 (id=3236): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x2420844) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x1) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x0, 0x0}) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x48800}, 0x4008000) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000072c0)=[{{0x0, 0x0, &(0x7f0000004240)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0xe}], 0x1, 0x2020, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) (async) sendto$inet(r2, &(0x7f00000002c0)="ab", 0x1, 0x4000805, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) (async) setsockopt$inet6_mtu(r1, 0x29, 0x4e, &(0x7f0000000400), 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000002e00090025bd70000000000004000000320016"], 0x48}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000180)=0x3, 0x4) (async) getsockopt$inet6_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f00000003c0)) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) (async) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 739.266778ms ago: executing program 6 (id=3237): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001000)="ba451538c1222d58b25ccfe3f18579a38e9a068bd4daadbea7179ca46ffa9f37e2cbeaa7c6d92a3925a4254e64f49bd3c7653a20cf8e223b8026ce8024185f5e4e88b4c0bba68efe03fba92409eac0038e873ff36f7ab8e5c04b417c02300a4cefd7755e5edde1ab0b70695eb8cdb3cdc355b23895851180cf515370b5c587f154c631ae90deb50eda7bc3b1bf9b874e16e56d839036fe6762219e6c24d5a249862545191bde8b3fde95bed253bd71771228486d1aec190f161dc2afd087b4f3b9eddcbd2889e3fa2a4a6f841acd9a786b", 0xd1) (async) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) recvfrom$inet(r4, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x6b, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x7, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r10, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r12 = openat$cgroup_devices(r11, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r12, &(0x7f0000000180)=ANY=[@ANYBLOB=' w'], 0x8) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13, @ANYRES64], 0x0}, 0x90) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r13, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc}) (async) ioctl(r13, 0x8b22, &(0x7f0000000040)) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffd3d, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}, @TCA_FLOW_ADDEND={0x0, 0x5, 0x10}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (rerun: 64) 624.208734ms ago: executing program 4 (id=3238): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) (async, rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x0, 0x0, 0x23d, 0x0, "2dfedf4fe729e6da2c283c04b074205e1eefc56dbc4e3bbeef85e81f0118fc0f64326f290de80584bce41936f14cb7a820ac8e630e660da57c076a7cb4155c7f0efdcea917bd84db674f344208d682a5"}, 0xd8) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x4, 0xfffff020}, {0x6}]}, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x49c, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2a0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x194, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xdc, 0x8, {0x2af, 0xf, "fd6d1adde1f3ad77201b2f4073b0e2a4190628e232831eb3539ab745d95f03079bd5bb5e42c745d5e1242bf9c8b495aee87e798ba17d4c8978305c89ae31cf6f56760d3c38aa6e0f3f215f7f5e856737a08d90558dd781d3aef17198bbad9e1f46723cfecee12688468d1d84e42596622300cfb8b44752b81e2ea22c65643e3cf66495759168d6c0248e0653317a488b21180ab1dee8f17b7a471446967e018b758ab8c68044e719d753b936d2b7dd9c54300c20faaf7b9801b89a2f5628da3c1233be8247423c4c0627917757889eb3"}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @broadcast}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x91, 0xb, "a8ea6be5101aea7d1632aa768a8132a9f69510acb42a5106d611bbbad7cbebc830c003e7c88bf28d2d3a2eeb5a533b738502452da1708cbe6dc07daffa447b45776c95e724d552546a3ed066dbc4bed43f757a60cd9b9942f5f7a8c33c4af1340fc8d667770cb7594f94f8b4ede86f76fe661b9c7206994a5889be8d8f46bdd07ae0df5035b07c2a05b7adc063"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x1, 0x1, 0xc8}}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x5}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xe8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @local}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x9d, 0xb, "8bd6dad75d387f8f9ff07418500290c97658fc2adcb6e95cc12bc2e526cdf6ab05aa677d9dc278f8b6d82b335ec132898e71f758d58916b087fa948ad2cc235fd8dcbd644fa0ecc770cf5e2b0dc86b0f4e00c0b63c3927c2fcbac5a78eb8fbab697ff462377b0085c62c95ae5c594b64a6ee07dcacc62c458f6ab8d6f658c0644165287fbe76517b55dc0153d8090d9a321a8e15ec397bc918"}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x4}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xfe00}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x9}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x10, 0x4, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5876}]}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1b4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x190, 0x4, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x71, 0x2, "8775ee0cbb202aac6f9da413e4e014c9fa5b1043e65ee1323809618d9850c165156303d7fd1871df3af49978750fd2e613b9deda6833ef07666d0c57e9367fc7fe3dc72c9d15e7495922727853c76028e751d343bc0695f5fd48c703789cd6edd1a3ed45a213c5f0f2730cd34f"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x12}]}, {0x104, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x88, 0x2, "d3ddaac0f2a05e42dbf1b5bc17c6ab0975cde45213f405b782a15d269e8d37aafa317b29efed6ad912e759bc91439d2defb225d2d228f5163cd5792cdc748221cad926292b638d7957c9feecdcc4481a7fe4806fbeef626115f3bb79db0ae229861537a36a93df1cee1d0e6abab39d6d9517a33f9045a7173defb94d80d98e53c799a286"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_MASK={0x2f, 0x1, "7853ab11aca09a5d8c7a148151ea070651cfa17d968a51da1ba9a3dd6d92ee54cc19587f9f90b8b1c56b6e"}, @NL80211_PKTPAT_MASK={0x3d, 0x1, "390f907495c4567acbd0a51a4e345d7a9557d4ecfb3bc15ac90eeeb420f336d75d09766014e49d779cdca17a6ea15d21d706e4d9888e8bc4e3"}]}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x49c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 475.55852ms ago: executing program 7 (id=3239): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000180)={r5, 0x1, 0x6, @broadcast}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom(r4, &(0x7f0000000480)=""/77, 0x4d, 0x41, &(0x7f0000000500)=@can={0x1d, r2}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r7, 0x541b, &(0x7f0000000840)) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 448.135976ms ago: executing program 3 (id=3240): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) pipe(&(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x4, @void}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x8, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r15, 0x4, r0}, 0x10) 381.885514ms ago: executing program 5 (id=3241): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xb1, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@bridge_setlink={0xf4, 0x13, 0x20, 0x70bd2a, 0x21dfdbff, {0x7, 0x0, 0x0, 0x0, 0x8010, 0x4}, [@IFLA_PHYS_PORT_ID={0x16, 0x22, "4ee433c5b7223e22f31dacdbdfa9200d6c91"}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2a2a}, @IFLA_EVENT={0x8, 0x2c, 0x9}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_VF_PORTS={0x8c, 0x18, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "db872ba8c6e15810fee87bd270fb65d8"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1c4610e6b7ea1ab5e6236932f7c652d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f7a0b54d856debfd43d9903bfe07b1af"}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x8001}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0970fe8b346b91bd0e450decb96d47a3"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a44aa644e9afebee254038e113f14131"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}]}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x801) 311.661812ms ago: executing program 6 (id=3242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="080000000000000000e799427400c50000000000000200970000001900"], 0x10) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x4e22, 0x0, 0x4e22, 0x1, 0x2, 0x20, 0x20, 0x5e, 0x0, 0xffffffffffffffff}, {0x2, 0x3, 0x9, 0x2, 0xfffffffffffffffa, 0x4, 0x7, 0x6}, {0xfff, 0x0, 0x8001, 0x6}, 0x7, 0x6e6bb4, 0x0, 0x1, 0x2, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d4, 0x33}, 0xa, @in=@private=0xa010101, 0x34ff, 0x1, 0x0, 0x3, 0x7c01, 0x7, 0x3}}, 0xe8) (async) close(r0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) (rerun: 32) accept4$bt_l2cap(r3, 0x0, 0x0, 0x800) (async) r4 = socket(0x2a, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x0, 0x5, 0xff, 0x0, 0x1, @private2, @remote, 0x8, 0x80, 0x1, 0x10000}}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1008020}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x80, r8, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1a}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x60}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x40811}, 0x0) (async, rerun: 32) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) (rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x20, &(0x7f00000002c0)={&(0x7f0000000080)=""/35, 0x23, 0x0, &(0x7f0000000340)=""/19, 0x13}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0xa, [@float={0x8, 0x0, 0x0, 0x10, 0xc}, @restrict={0xc, 0x0, 0x0, 0xb, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2}]}, @fwd={0xd}, @struct={0xa, 0x4, 0x0, 0x4, 0x0, 0x9, [{0x2, 0x1, 0x5}, {0x1, 0x0, 0xf}, {0xe, 0x3, 0xb}, {0xc, 0x5, 0x4}]}]}, {0x0, [0x30, 0x2e, 0x2e, 0x2e, 0x5f, 0x5f, 0x0, 0x0]}}, &(0x7f00000007c0)=""/217, 0x96, 0xd9, 0x0, 0x1}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x3, 0x7fffffff, 0x20, 0xffffffffffffffff, 0x6, '\x00', r6, r10, 0x0, 0x9, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x29, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 177.898559ms ago: executing program 4 (id=3243): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000000c0)=0xfffffffe, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0xf9}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "9e33e0", 0x14, 0x6, 0x1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x7, 0x0, 0x8}}}}}}}}, 0x4e) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) 72.772093ms ago: executing program 6 (id=3244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r2, 0xff, 0x0, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) listen(r1, 0x7e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 7 (id=3245): r0 = socket(0x200000000000011, 0x2, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8954, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x3) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$kcm(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000000c0)) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000025c0)="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", 0x4e5}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): .6.1464': attribute type 21 has an invalid length. [ 250.583833][T11367] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1464'. [ 250.630751][T11368] xt_TCPMSS: Only works on TCP SYN packets [ 250.706065][T11370] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1465'. [ 250.889283][T11081] veth0_vlan: entered promiscuous mode [ 250.903360][T11081] veth1_vlan: entered promiscuous mode [ 250.918231][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1469'. [ 251.036950][T11081] veth0_macvtap: entered promiscuous mode [ 251.059225][T11081] veth1_macvtap: entered promiscuous mode [ 251.104196][T11081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.168413][T11081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.247370][ T128] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.273156][ T128] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.320891][ T128] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.364417][ T128] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.427534][ T1343] net_ratelimit: 308 callbacks suppressed [ 251.427555][ T1343] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.441657][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 251.485054][ T1367] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 251.503194][ T1367] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 251.516121][ T128] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.557761][ T1367] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.584804][ T1346] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.622715][ T128] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.644728][ T1346] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.652557][ T1346] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 251.677307][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'. [ 251.677965][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.704000][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.810710][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1479'. [ 251.846869][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.862408][T11413] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1479'. [ 251.872718][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.908249][ T5837] Bluetooth: hci7: command tx timeout [ 252.058590][T11422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1481'. [ 252.078834][T11424] netlink: 'syz.5.1483': attribute type 30 has an invalid length. [ 252.815406][T11472] syz.5.1496: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 252.863699][T11472] CPU: 0 UID: 0 PID: 11472 Comm: syz.5.1496 Not tainted syzkaller #0 PREEMPT(full) [ 252.863742][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.863773][T11472] Call Trace: [ 252.863783][T11472] [ 252.863793][T11472] dump_stack_lvl+0xe8/0x150 [ 252.863832][T11472] warn_alloc+0x249/0x340 [ 252.863859][T11472] ? stack_trace_save+0xa9/0x100 [ 252.863887][T11472] ? __pfx_warn_alloc+0x10/0x10 [ 252.863919][T11472] ? kasan_save_track+0x4f/0x80 [ 252.863939][T11472] ? kasan_save_track+0x3e/0x80 [ 252.863959][T11472] ? __kasan_kmalloc+0x93/0xb0 [ 252.863981][T11472] ? __kmalloc_cache_noprof+0x31c/0x660 [ 252.864002][T11472] ? xskq_create+0x56/0x170 [ 252.864032][T11472] ? xsk_setsockopt+0x54c/0x990 [ 252.864059][T11472] ? do_sock_setsockopt+0x17c/0x1b0 [ 252.864088][T11472] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 252.864116][T11472] ? do_syscall_64+0x14d/0xf80 [ 252.864141][T11472] __vmalloc_node_range_noprof+0x132/0x1730 [ 252.864195][T11472] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 252.864225][T11472] ? __kasan_kmalloc+0x93/0xb0 [ 252.864255][T11472] vmalloc_user_noprof+0xad/0xe0 [ 252.864278][T11472] ? xskq_create+0xbf/0x170 [ 252.864309][T11472] xskq_create+0xbf/0x170 [ 252.864343][T11472] xsk_init_queue+0x8a/0xe0 [ 252.864377][T11472] xsk_setsockopt+0x54c/0x990 [ 252.864408][T11472] ? __pfx_xsk_setsockopt+0x10/0x10 [ 252.864437][T11472] ? __pfx_aa_sk_perm+0x10/0x10 [ 252.864467][T11472] ? aa_sock_opt_perm+0xff/0x1a0 [ 252.864496][T11472] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 252.864520][T11472] ? __pfx_xsk_setsockopt+0x10/0x10 [ 252.864552][T11472] do_sock_setsockopt+0x17c/0x1b0 [ 252.864592][T11472] __x64_sys_setsockopt+0x13d/0x1b0 [ 252.864631][T11472] do_syscall_64+0x14d/0xf80 [ 252.864651][T11472] ? trace_irq_disable+0x3b/0x150 [ 252.864682][T11472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.864705][T11472] ? clear_bhb_loop+0x40/0x90 [ 252.864741][T11472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.864763][T11472] RIP: 0033:0x7fc295b9c799 [ 252.864785][T11472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.864805][T11472] RSP: 002b:00007fc296adb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 252.864829][T11472] RAX: ffffffffffffffda RBX: 00007fc295e15fa0 RCX: 00007fc295b9c799 [ 252.864845][T11472] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 252.864859][T11472] RBP: 00007fc295c32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 252.864872][T11472] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.864887][T11472] R13: 00007fc295e16038 R14: 00007fc295e15fa0 R15: 00007ffc5efe0be8 [ 252.864922][T11472] [ 253.171967][T11472] Mem-Info: [ 253.181325][T11472] active_anon:6910 inactive_anon:7 isolated_anon:0 [ 253.181325][T11472] active_file:2565 inactive_file:40202 isolated_file:0 [ 253.181325][T11472] unevictable:768 dirty:88 writeback:0 [ 253.181325][T11472] slab_reclaimable:11947 slab_unreclaimable:112413 [ 253.181325][T11472] mapped:45560 shmem:1355 pagetables:1532 [ 253.181325][T11472] sec_pagetables:0 bounce:0 [ 253.181325][T11472] kernel_misc_reclaimable:0 [ 253.181325][T11472] free:1280954 free_pcp:9497 free_cma:0 [ 253.260957][T11472] Node 0 active_anon:27740kB inactive_anon:28kB active_file:10260kB inactive_file:160608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:182240kB dirty:352kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15324kB pagetables:5800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 253.301759][T11472] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 253.332449][T11472] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 253.364248][T11472] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 253.370212][T11472] Node 0 DMA32 free:1168096kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27740kB inactive_anon:28kB active_file:10260kB inactive_file:160608kB unevictable:1536kB writepending:352kB zspages:0kB present:3129332kB managed:2552820kB mlocked:0kB bounce:0kB free_pcp:37784kB local_pcp:18732kB free_cma:0kB [ 253.407874][T11472] lowmem_reserve[]: 0 0 0 0 0 [ 253.418586][T11472] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 253.449847][T11472] lowmem_reserve[]: 0 0 0 0 0 [ 253.454878][T11472] Node 1 Normal free:3940296kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:160kB local_pcp:160kB free_cma:0kB [ 253.487820][T11472] lowmem_reserve[]: 0 0 0 0 0 [ 253.492754][T11472] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 253.507489][T11472] Node 0 DMA32: 340*4kB (UME) 1688*8kB (UME) 735*16kB (UM) 67*32kB (ME) 34*64kB (ME) 54*128kB (UME) 93*256kB (UM) 125*512kB (UM) 102*1024kB (UE) 62*2048kB (UM) 198*4096kB (UM) = 1168096kB [ 253.525881][T11484] netlink: 'syz.3.1500': attribute type 7 has an invalid length. [ 253.528300][T11472] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 253.549974][T11484] netlink: 'syz.3.1500': attribute type 8 has an invalid length. [ 253.586211][T11472] Node 1 Normal: 4*4kB (UE) 11*8kB (UME) 12*16kB (UME) 13*32kB (UME) 12*64kB (UME) 6*128kB (UME) 3*256kB (ME) 4*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 959*4096kB (UM) = 3940296kB [ 253.607577][T11472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 253.621537][T11472] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 253.631333][T11472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 253.643473][T11472] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 253.653997][T11472] 44118 total pagecache pages [ 253.659814][T11472] 0 pages in swap cache [ 253.664206][T11472] Free swap = 124996kB [ 253.670038][T11472] Total swap = 124996kB [ 253.674359][T11472] 2097051 pages RAM [ 253.678635][T11472] 0 pages HighMem/MovableOnly [ 253.683351][T11472] 427010 pages reserved [ 253.709259][T11472] 0 pages cma reserved [ 253.790036][T11494] netlink: 'syz.4.1502': attribute type 1 has an invalid length. [ 254.875340][T11537] netlink: 'syz.5.1514': attribute type 10 has an invalid length. [ 254.883234][T11537] __nla_validate_parse: 10 callbacks suppressed [ 254.883254][T11537] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1514'. [ 254.903655][T11537] dummy0: entered promiscuous mode [ 254.914490][T11537] bridge0: port 3(dummy0) entered blocking state [ 254.921409][T11537] bridge0: port 3(dummy0) entered disabled state [ 254.928666][T11537] dummy0: entered allmulticast mode [ 254.945339][T11537] bridge0: port 3(dummy0) entered blocking state [ 254.951907][T11537] bridge0: port 3(dummy0) entered forwarding state [ 254.982390][T11541] ip6gre1: entered promiscuous mode [ 255.066782][T11546] lo: entered promiscuous mode [ 255.076340][T11546] tunl0: entered promiscuous mode [ 255.089830][T11546] gre0: entered promiscuous mode [ 255.099970][T11546] gretap0: entered promiscuous mode [ 255.106225][T11546] erspan0: entered promiscuous mode [ 255.112064][T11546] ip_vti0: entered promiscuous mode [ 255.393595][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1526'. [ 255.672250][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.731206][T11582] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1531'. [ 255.873374][T11586] netlink: 'syz.5.1532': attribute type 21 has an invalid length. [ 255.885642][T11586] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1532'. [ 255.937911][T11588] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1532'. [ 255.961937][T11586] netlink: 'syz.5.1532': attribute type 5 has an invalid length. [ 255.971949][T11586] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1532'. [ 256.376582][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1538'. [ 256.446813][ T13] net_ratelimit: 201 callbacks suppressed [ 256.446835][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 256.464418][ T1346] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 256.504765][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 256.515480][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 256.560401][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 256.569536][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 256.591812][T11608] netlink: 'syz.3.1539': attribute type 1 has an invalid length. [ 256.615556][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 256.625769][T11608] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1539'. [ 256.634986][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 256.642806][ T48] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 256.675845][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 256.850213][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1542'. [ 256.978098][T11626] netlink: 'syz.7.1545': attribute type 10 has an invalid length. [ 256.986023][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1543'. [ 257.029002][T11626] team0: Device vxcan1 is of different type [ 257.145764][T11633] macvlan2: entered promiscuous mode [ 257.163693][T11633] macvlan2: entered allmulticast mode [ 257.390371][T11640] syzkaller0: entered promiscuous mode [ 257.404796][T11640] syzkaller0: entered allmulticast mode [ 259.204215][T11691] sctp: [Deprecated]: syz.6.1556 (pid 11691) Use of int in max_burst socket option. [ 259.204215][T11691] Use struct sctp_assoc_value instead [ 259.505534][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 259.514210][T11642] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 259.568874][T11718] block nbd1: Unsupported socket: should be TCP or UNIX. [ 259.570942][T11642] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 259.908480][T11736] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.969850][T11740] __nla_validate_parse: 8 callbacks suppressed [ 259.969873][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 259.997667][T11736] netlink: 'syz.5.1566': attribute type 10 has an invalid length. [ 260.084839][T11736] bridge0: port 3(dummy0) entered disabled state [ 260.125030][T11736] dummy0: left allmulticast mode [ 260.130210][T11736] dummy0: left promiscuous mode [ 260.145293][T11736] bridge0: port 3(dummy0) entered disabled state [ 260.229026][T11747] syzkaller0: entered promiscuous mode [ 260.238544][T11642] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 260.244510][T11642] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 260.252996][T11747] syzkaller0: entered allmulticast mode [ 260.322024][T11642] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.354383][T11642] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 260.426837][T11642] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.463871][T11642] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 260.890133][T11776] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1575'. [ 260.918852][T11776] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1575'. [ 260.971494][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1575'. [ 261.151462][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'. [ 261.360439][T11642] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 261.409491][T11642] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 261.460441][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1582'. [ 261.486026][ T1346] net_ratelimit: 341 callbacks suppressed [ 261.486047][ T1346] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.499809][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 261.513844][T11811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1581'. [ 261.529920][ T48] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 261.564968][ T48] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.582809][T11810] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 261.595971][ T1346] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.654899][ T1346] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.663649][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 261.716148][ T48] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.724832][ T1346] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 261.739736][ T1346] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.846902][T11642] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 261.852921][T11642] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 261.985533][T11642] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 262.002714][T11642] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 262.245558][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1588'. [ 262.264666][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1588'. [ 262.827950][T11853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.108456][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1593'. [ 263.473663][T11889] lo: entered allmulticast mode [ 263.667970][T11899] vlan2: entered promiscuous mode [ 263.686717][T11899] geneve1: entered promiscuous mode [ 263.694909][T11899] vlan2: entered allmulticast mode [ 263.704194][T11899] geneve1: entered allmulticast mode [ 263.758399][T11905] syzkaller0: entered promiscuous mode [ 263.767388][T11905] syzkaller0: entered allmulticast mode [ 263.905247][T11914] netlink: 'syz.7.1611': attribute type 1 has an invalid length. [ 264.169154][T11927] syzkaller0: entered promiscuous mode [ 264.178911][T11927] syzkaller0: entered allmulticast mode [ 264.733798][T11961] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 264.978105][T11977] sit0: entered promiscuous mode [ 265.015429][T11981] netlink: 'syz.6.1631': attribute type 39 has an invalid length. [ 265.044512][T11977] netlink: 'syz.3.1634': attribute type 1 has an invalid length. [ 265.056730][T11977] __nla_validate_parse: 11 callbacks suppressed [ 265.056751][T11977] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1634'. [ 265.342321][T12002] x_tables: duplicate underflow at hook 2 [ 265.560786][T12014] netlink: 'syz.7.1641': attribute type 14 has an invalid length. [ 265.629776][T12019] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1643'. [ 265.648319][T12019] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1643'. [ 265.765377][T12025] 8021q: VLANs not supported on ip6_vti0 [ 265.889892][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1646'. [ 266.008161][T12033] netlink: 'syz.6.1648': attribute type 18 has an invalid length. [ 266.470994][T12012] lo speed is unknown, defaulting to 1000 [ 266.515044][ T128] net_ratelimit: 230 callbacks suppressed [ 266.515066][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 266.530037][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.555093][ T36] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 266.565490][ T128] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.593477][ T48] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.605816][ T48] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 266.615537][ T36] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 266.715305][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.735354][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 266.764759][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 266.942264][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1658'. [ 266.943179][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1659'. [ 267.508626][T12090] batadv2: entered allmulticast mode [ 267.572704][T12094] netlink: 'syz.3.1667': attribute type 4 has an invalid length. [ 267.995335][T12115] netlink: 'syz.7.1674': attribute type 1 has an invalid length. [ 268.003143][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1674'. [ 268.045877][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1674'. [ 268.276345][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1678'. [ 268.369912][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 268.656779][T12158] x_tables: duplicate underflow at hook 3 [ 268.716317][T12158] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 269.590856][T12208] netlink: 'syz.5.1704': attribute type 3 has an invalid length. [ 269.610582][T12208] netlink: 'syz.5.1704': attribute type 21 has an invalid length. [ 269.792304][T12224] netlink: 'syz.5.1708': attribute type 39 has an invalid length. [ 270.439863][T12255] __nla_validate_parse: 7 callbacks suppressed [ 270.439884][T12255] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1717'. [ 270.842680][T12278] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1723'. [ 271.171095][T12290] ipt_ECN: cannot use operation on non-tcp rule [ 271.279811][T12293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1729'. [ 271.563044][ T1346] net_ratelimit: 194 callbacks suppressed [ 271.563067][ T1346] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 271.577606][ T1328] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 271.600157][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1734'. [ 271.635991][ T1328] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 271.643815][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 271.667096][T12303] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 271.681913][T12303] bond11 (unregistering): Released all slaves [ 271.706358][ T36] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 271.725050][ T128] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 271.738037][ T128] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 271.745633][ T1328] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 271.771508][T12308] syzkaller0: entered promiscuous mode [ 271.775006][ T36] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 271.790276][T12308] syzkaller0: entered allmulticast mode [ 271.815074][ T36] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 271.835164][T12264] lo speed is unknown, defaulting to 1000 [ 271.851742][T12320] netlink: 'syz.6.1737': attribute type 10 has an invalid length. [ 271.917994][T12320] bond0: (slave wlan1): Opening slave failed [ 272.087909][T12308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.101782][T12308] bond0: (slave rose0): Enslaving as an active interface with an up link [ 272.120339][T12316] syzkaller1: entered promiscuous mode [ 272.133444][T12316] syzkaller1: entered allmulticast mode [ 272.178315][T12334] netlink: 'syz.5.1740': attribute type 1 has an invalid length. [ 272.189767][T12334] netlink: 'syz.5.1740': attribute type 7 has an invalid length. [ 272.207733][T12334] netlink: 'syz.5.1740': attribute type 8 has an invalid length. [ 272.228542][T12334] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1740'. [ 272.589485][T12349] syzkaller0: entered promiscuous mode [ 272.595130][T12349] syzkaller0: entered allmulticast mode [ 272.952924][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1749'. [ 272.989494][T12373] nftables ruleset with unbound chain [ 273.225276][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1753'. [ 273.243169][T12382] IPv6: NLM_F_REPLACE set, but no existing node found! [ 273.252133][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1753'. [ 273.289076][ T1328] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.289422][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1753'. [ 273.327017][ T1328] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.376861][ T1328] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.380369][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1753'. [ 273.405210][ T1328] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.588466][ T25] block nbd6: Possible stuck request ffff8880272b8000: control (read@0,1024B). Runtime 60 seconds [ 273.599477][ T25] block nbd6: Possible stuck request ffff8880272b8200: control (read@1024,1024B). Runtime 60 seconds [ 273.610844][ T25] block nbd6: Possible stuck request ffff8880272b8400: control (read@2048,1024B). Runtime 60 seconds [ 273.621915][ T25] block nbd6: Possible stuck request ffff8880272b8600: control (read@3072,1024B). Runtime 60 seconds [ 273.719407][T12405] netlink: 'syz.7.1759': attribute type 1 has an invalid length. [ 273.827545][T12410] team0: Port device team_slave_0 removed [ 273.850035][T12410] bond1: (slave team_slave_0): Enslaving as a backup interface with an up link [ 274.251586][T12436] bridge3: entered allmulticast mode [ 274.266178][T12436] dvmrp8: entered allmulticast mode [ 274.273160][T12436] dvmrp6: left allmulticast mode [ 274.285904][T12436] dvmrp8: left allmulticast mode [ 274.699693][T12434] bridge3: left allmulticast mode [ 275.500857][T12497] netlink: 'syz.3.1778': attribute type 12 has an invalid length. [ 275.537023][T12504] __nla_validate_parse: 5 callbacks suppressed [ 275.537044][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1779'. [ 275.658785][T12504] netlink: 'syz.5.1779': attribute type 83 has an invalid length. [ 276.084758][T12533] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 276.384344][T12550] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 276.515641][T12555] netlink: 'syz.6.1796': attribute type 1 has an invalid length. [ 276.604841][ T1346] net_ratelimit: 272 callbacks suppressed [ 276.604862][ T1346] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 276.618864][ T1328] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 276.635254][ T1346] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 276.645369][ T1328] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 276.675685][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 276.683501][ T48] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 276.766902][ T48] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 276.802955][ T48] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 276.844893][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 276.852916][ T128] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 277.098602][T12594] Bluetooth: MGMT ver 1.23 [ 277.303478][T12611] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.1810'. [ 277.442054][T12618] sctp: [Deprecated]: syz.6.1811 (pid 12618) Use of int in max_burst socket option. [ 277.442054][T12618] Use struct sctp_assoc_value instead [ 277.473212][T12620] : entered promiscuous mode [ 277.488621][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1812'. [ 277.528629][T12620] bond0: entered promiscuous mode [ 277.540626][T12620] bond_slave_0: entered promiscuous mode [ 277.553410][T12620] bond_slave_1: entered promiscuous mode [ 277.573220][T12620] bond0: left promiscuous mode [ 277.578695][T12620] bond_slave_0: left promiscuous mode [ 277.587733][T12620] bond_slave_1: left promiscuous mode [ 277.610853][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1813'. [ 277.936893][T12635] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 278.091140][T12643] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1819'. [ 278.337588][T12650] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1821'. [ 278.374870][T12650] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1821'. [ 278.428350][T12650] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1821'. [ 278.541349][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1825'. [ 278.583420][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1824'. [ 278.600187][T12664] xt_TCPMSS: Only works on TCP SYN packets [ 278.628063][T12664] netlink: 'syz.4.1827': attribute type 16 has an invalid length. [ 278.877906][T12674] x_tables: duplicate underflow at hook 2 [ 279.010371][T12684] netlink: 'syz.7.1832': attribute type 1 has an invalid length. [ 279.039045][T12684] netlink: 'syz.7.1832': attribute type 3 has an invalid length. [ 279.050296][T12686] netlink: 'syz.4.1833': attribute type 1 has an invalid length. [ 279.066236][T12684] NCSI netlink: No device for ifindex 813332851 [ 279.405643][ T5899] IPVS: starting estimator thread 0... [ 279.468465][T12698] syzkaller0: entered promiscuous mode [ 279.478817][T12698] syzkaller0: entered allmulticast mode [ 279.523109][T12709] IPVS: using max 26 ests per chain, 62400 per kthread [ 279.635747][T12716] netlink: 'syz.6.1840': attribute type 2 has an invalid length. [ 281.254080][T12724] tipc: Enabling of bearer rejected, failed to enable media [ 281.553405][T12759] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 281.617114][ T36] net_ratelimit: 311 callbacks suppressed [ 281.617134][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 281.631201][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 281.650949][ T128] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 281.695406][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 281.725146][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 281.748077][T12777] __nla_validate_parse: 3 callbacks suppressed [ 281.748097][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1852'. [ 281.755991][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 281.785196][ T36] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 281.795149][T12776] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1852'. [ 281.799406][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 281.812757][ T1346] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 281.821637][T12777] xt_TCPMSS: Only works on TCP SYN packets [ 281.839259][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1852'. [ 281.864853][ T1346] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 281.879096][T12768] bond6: option resend_igmp: invalid value (32767) [ 281.910344][T12768] bond6: option resend_igmp: allowed values 0 - 255 [ 281.952196][T12768] bond6 (unregistering): Released all slaves [ 282.034199][T12778] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 282.129878][T12790] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1854'. [ 282.212401][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1855'. [ 282.222664][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1855'. [ 282.266550][T12796] netlink: 'syz.7.1855': attribute type 12 has an invalid length. [ 282.423150][T12796] bond2: option primary_reselect: invalid value (255) [ 282.462697][T12796] bond2 (unregistering): Released all slaves [ 282.737867][T12823] netlink: 'syz.5.1862': attribute type 1 has an invalid length. [ 282.778523][T12822] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1863'. [ 282.929835][T12823] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.953306][T12828] vlan4: entered promiscuous mode [ 282.964942][T12828] bond5: entered promiscuous mode [ 282.970256][T12828] vlan4: entered allmulticast mode [ 283.004701][T12828] bond5: entered allmulticast mode [ 283.046359][T12831] bond5: (slave bridge5): making interface the new active one [ 283.054070][T12831] bridge5: entered promiscuous mode [ 283.060460][T12831] bridge5: entered allmulticast mode [ 283.069136][T12831] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 283.177527][T12836] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 283.190492][T12836] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1867'. [ 283.247393][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1870'. [ 283.330434][T12848] netlink: 'syz.7.1871': attribute type 4 has an invalid length. [ 283.354100][T12848] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1871'. [ 283.466455][T12858] netlink: 'syz.5.1873': attribute type 13 has an invalid length. [ 283.519121][T12858] erspan0: refused to change device tx_queue_len [ 283.596019][T12864] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 283.608409][T12864] bond12 (unregistering): Released all slaves [ 283.628194][T12862] netlink: 'syz.6.1874': attribute type 2 has an invalid length. [ 283.679255][T12866] netlink: 'syz.7.1875': attribute type 1 has an invalid length. [ 283.742243][T12866] bond2: (slave geneve2): making interface the new active one [ 283.751125][T12866] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 283.761863][ T1328] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 283.774239][ T1328] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 283.787622][ T1328] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 283.798936][ T1328] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 284.042728][T12884] syzkaller0: entered promiscuous mode [ 284.055087][T12884] syzkaller0: entered allmulticast mode [ 284.077579][T12884] xt_cgroup: invalid path, errno=-2 [ 284.429735][T12909] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 284.459466][T12914] netlink: 'syz.6.1887': attribute type 1 has an invalid length. [ 284.729756][T12932] netlink: 'syz.4.1894': attribute type 10 has an invalid length. [ 284.753642][T12932] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 284.899568][T12938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.968531][T12938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.273371][T12958] delete_channel: no stack [ 285.526034][T12972] can: request_module (can-proto-4) failed. [ 285.688717][T12981] netlink: 'syz.7.1908': attribute type 29 has an invalid length. [ 285.831346][T12985] bond6: entered promiscuous mode [ 285.837462][T12985] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.967537][T12997] netlink: 'syz.4.1915': attribute type 3 has an invalid length. [ 286.398821][T13026] netlink: 'syz.7.1923': attribute type 1 has an invalid length. [ 286.418879][T13026] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 286.443235][T13033] netlink: 'syz.5.1922': attribute type 5 has an invalid length. [ 286.464153][T13023] bridge0: port 1(batadv2) entered blocking state [ 286.526585][T13023] bridge0: port 1(batadv2) entered disabled state [ 286.533248][T13023] batadv2: entered allmulticast mode [ 286.625172][ T36] net_ratelimit: 239 callbacks suppressed [ 286.625195][ T36] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 286.625955][ T1346] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.645865][ T36] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 286.659222][T13023] batadv2: entered promiscuous mode [ 286.665561][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.684918][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 286.695080][T13040] pim6reg1: entered promiscuous mode [ 286.700429][T13040] pim6reg1: entered allmulticast mode [ 286.709912][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.720668][T13045] bridge_slave_0: entered promiscuous mode [ 286.746940][ T128] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.755295][ T36] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 286.781440][ T128] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.787749][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 286.935050][ T48] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 286.945031][ T48] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 286.966126][T13051] geneve3: entered promiscuous mode [ 286.971567][T13051] geneve3: entered allmulticast mode [ 286.978741][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 286.993021][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 287.032851][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 287.051475][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 287.098722][T13056] 8021q: VLANs not supported on tunl0 [ 287.116685][T13060] __nla_validate_parse: 28 callbacks suppressed [ 287.116705][T13060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1936'. [ 287.147903][T13061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1936'. [ 287.347537][T13070] tipc: Started in network mode [ 287.352527][T13070] tipc: Node identity 1e61147268b8, cluster identity 4711 [ 287.374911][T13070] tipc: Enabled bearer , priority 0 [ 287.434985][T13070] syzkaller0: entered promiscuous mode [ 287.440541][T13070] syzkaller0: entered allmulticast mode [ 287.453757][T13076] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 287.477523][T13076] bond7: (slave lo): Enslaving as an active interface with an up link [ 287.507625][T13073] tipc: Resetting bearer [ 287.531029][T13067] tipc: Resetting bearer [ 287.551274][T13067] tipc: Disabling bearer [ 287.910337][T13102] netlink: 'syz.6.1952': attribute type 1 has an invalid length. [ 288.028097][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1952'. [ 288.041418][T13102] bond7: entered promiscuous mode [ 288.059166][T13102] 8021q: adding VLAN 0 to HW filter on device bond7 [ 288.084748][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1952'. [ 288.167571][ T30] audit: type=1800 audit(1772406618.840:3): pid=13110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1950" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=466 res=0 errno=0 [ 288.227011][T13115] bond7: (slave bridge4): making interface the new active one [ 288.257103][T13115] bridge4: entered promiscuous mode [ 288.279840][T13115] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 288.295775][T13121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1956'. [ 288.466773][T13126] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 288.467615][T13132] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1959'. [ 288.506331][T13126] bond12 (unregistering): Released all slaves [ 288.738759][T13144] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1961'. [ 288.757656][T13144] syzkaller0: entered promiscuous mode [ 288.763290][T13144] syzkaller0: entered allmulticast mode [ 288.779417][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1962'. [ 288.845961][T13151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1964'. [ 289.112494][T13166] netlink: 'syz.4.1969': attribute type 1 has an invalid length. [ 289.119152][T13169] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1970'. [ 289.136477][T13166] netlink: 'syz.4.1969': attribute type 2 has an invalid length. [ 289.421037][T13188] netlink: 'syz.7.1975': attribute type 13 has an invalid length. [ 289.452237][T13188] veth0_macvtap: left promiscuous mode [ 289.471110][T13188] macvtap0: entered allmulticast mode [ 289.490192][T13188] macvtap0: refused to change device tx_queue_len [ 290.119314][T13233] sctp: [Deprecated]: syz.4.1989 (pid 13233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.119314][T13233] Use struct sctp_sack_info instead [ 290.256944][T13244] netlink: 'syz.3.1991': attribute type 1 has an invalid length. [ 290.265862][T13244] netlink: 'syz.3.1991': attribute type 2 has an invalid length. [ 290.273674][T13244] netlink: 'syz.3.1991': attribute type 1 has an invalid length. [ 291.237172][T13347] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 291.298175][T13351] netlink: 'syz.7.2003': attribute type 1 has an invalid length. [ 291.317824][T13347] team1: entered promiscuous mode [ 291.343348][T13347] team1: entered allmulticast mode [ 291.409762][T13357] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 291.654362][T13371] bridge3: entered allmulticast mode [ 291.735150][ T128] net_ratelimit: 267 callbacks suppressed [ 291.735172][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 291.755045][ T1367] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 291.792143][ T128] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 291.804813][ T1367] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 291.823003][ T1367] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 291.928918][ T1367] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 291.950195][ T48] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 291.976529][ T1346] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 291.984929][ T1367] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 291.992722][ T1367] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 292.406596][T13401] __nla_validate_parse: 14 callbacks suppressed [ 292.406617][T13401] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2022'. [ 292.468377][T13409] netlink: 'syz.6.2025': attribute type 21 has an invalid length. [ 292.513501][T13409] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2025'. [ 292.579170][T13406] xt_hashlimit: size too large, truncated to 1048576 [ 292.802853][T13410] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 292.831010][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 293.078213][T13433] SET target dimension over the limit! [ 293.090276][T13433] netlink: 'syz.5.2032': attribute type 17 has an invalid length. [ 293.103910][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2032'. [ 293.136618][T13433] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2032'. [ 293.203905][T13433] gretap0: entered promiscuous mode [ 293.214075][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 293.230082][T13437] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2033'. [ 293.243430][T13433] gretap0: left promiscuous mode [ 293.507370][T13447] tipc: Enabled bearer , priority 0 [ 293.520518][T13447] syzkaller0: entered promiscuous mode [ 293.527947][T13447] syzkaller0: entered allmulticast mode [ 293.587007][T13447] tipc: Resetting bearer [ 293.598355][T13445] tipc: Resetting bearer [ 293.661409][T13445] tipc: Disabling bearer [ 293.923441][T13464] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2040'. [ 294.004165][T13461] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2039'. [ 294.004179][T13467] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2041'. [ 295.281658][T13538] xt_hashlimit: size too large, truncated to 1048576 [ 295.307187][T13540] bond0: entered promiscuous mode [ 295.312507][T13540] bond_slave_0: entered promiscuous mode [ 295.320794][T13540] bond_slave_1: entered promiscuous mode [ 295.697863][T13560] xt_addrtype: ipv6 does not support BROADCAST matching [ 295.977717][T13575] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.449758][T13555] lo speed is unknown, defaulting to 1000 [ 296.733293][T13615] netlink: 'syz.5.2078': attribute type 10 has an invalid length. [ 296.745065][ T1346] net_ratelimit: 253 callbacks suppressed [ 296.745085][ T1346] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 296.760742][ T9000] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 296.785206][ T1367] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 296.793808][ T9000] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 296.825089][ T9000] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 296.835091][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 296.844634][ T1367] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 296.872878][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 296.892443][ T1367] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 296.917151][T13615] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 296.926833][ T9000] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 297.447481][T13640] tipc: Enabling of bearer rejected, media not registered [ 297.710241][T13656] netlink: 'syz.3.2093': attribute type 12 has an invalid length. [ 297.735110][T13656] __nla_validate_parse: 10 callbacks suppressed [ 297.735134][T13656] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2093'. [ 298.138136][T13673] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2099'. [ 298.162557][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 298.423385][T13688] netlink: 'syz.7.2105': attribute type 1 has an invalid length. [ 298.443122][T13688] netlink: 'syz.7.2105': attribute type 1 has an invalid length. [ 298.640413][ T30] audit: type=1800 audit(1772406629.310:4): pid=13703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2110" name="memory.events" dev="tmpfs" ino=2515 res=0 errno=0 [ 298.736732][ T30] audit: type=1804 audit(1772406629.320:5): pid=13703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2110" name="/newroot/488/memory.events" dev="tmpfs" ino=2515 res=1 errno=0 [ 298.769612][T13698] bond3: option miimon: invalid value (18446744073709551585) [ 298.816548][T13698] bond3: option miimon: allowed values 0 - 2147483647 [ 298.837318][T13698] bond3 (unregistering): Released all slaves [ 298.856314][T13716] netlink: 'syz.4.2115': attribute type 1 has an invalid length. [ 298.865930][T13716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2115'. [ 299.099417][T13725] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2118'. [ 299.320453][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2113'. [ 299.333925][T13714] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2113'. [ 299.713643][T13756] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2124'. [ 299.795182][T13762] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2125'. [ 299.929817][T13766] netlink: 21 bytes leftover after parsing attributes in process `syz.7.2127'. [ 300.011364][T13770] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 300.372425][T13788] netlink: 'syz.5.2132': attribute type 4 has an invalid length. [ 300.481508][T13791] bond4: option fail_over_mac: invalid value (16) [ 300.491495][T13791] bond4 (unregistering): Released all slaves [ 300.729834][T13804] siw: device registration error -23 [ 300.765982][T13812] netlink: 'syz.3.2140': attribute type 13 has an invalid length. [ 301.147192][T13826] bond8: entered promiscuous mode [ 301.152312][T13826] bond8: entered allmulticast mode [ 301.168308][T13826] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.195764][ T13] bond0: (slave bond_slave_0): interface is now down [ 301.203280][ T13] bond0: (slave bond_slave_1): interface is now down [ 301.235183][ T13] bond0: now running without any active interface! [ 301.459107][ T48] syzkaller0: tun_net_xmit 76 [ 301.464489][ T48] syzkaller0: tun_net_xmit 48 [ 301.485317][ T7663] syzkaller0: tun_net_xmit 76 [ 301.558554][T13861] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20003 [ 301.623755][T13864] IPVS: set_ctl: invalid protocol: 41 172.20.20.61:20003 [ 301.765067][ T13] net_ratelimit: 221 callbacks suppressed [ 301.765092][ T13] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 301.780436][ T48] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 301.794843][ T13] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 301.805189][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 301.815223][ T13] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 301.826414][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 301.835125][ T1346] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 301.858910][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 301.858938][ T1346] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 301.887009][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 301.952171][ T8250] block nbd64: NBD_DISCONNECT [ 302.159799][T10355] udevd[10355]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 302.257521][T13877] netlink: 'syz.7.2158': attribute type 10 has an invalid length. [ 303.451009][T13877] team0: Device vxcan1 is of different type [ 303.666228][ T25] block nbd6: Possible stuck request ffff8880272b8000: control (read@0,1024B). Runtime 90 seconds [ 303.682804][ T25] block nbd6: Possible stuck request ffff8880272b8200: control (read@1024,1024B). Runtime 90 seconds [ 303.694013][ T25] block nbd6: Possible stuck request ffff8880272b8400: control (read@2048,1024B). Runtime 90 seconds [ 303.705311][ T25] block nbd6: Possible stuck request ffff8880272b8600: control (read@3072,1024B). Runtime 90 seconds [ 304.015713][T13914] __nla_validate_parse: 8 callbacks suppressed [ 304.015734][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'. [ 304.031485][T13913] block nbd3: not configured, cannot reconfigure [ 304.378641][T13936] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2173'. [ 304.783163][T13922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.798196][T13922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.968157][T13922] vlan2: left allmulticast mode [ 304.977386][T13922] gretap0: left allmulticast mode [ 304.999667][T13922] vlan3: left promiscuous mode [ 305.007861][T13922] bond3: left promiscuous mode [ 305.012798][T13922] batadv1: left promiscuous mode [ 305.019788][T13922] vlan3: left allmulticast mode [ 305.025114][T13922] bond3: left allmulticast mode [ 305.030237][T13922] batadv1: left allmulticast mode [ 305.058815][T13949] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2175'. [ 305.105171][T13922] vlan4: left promiscuous mode [ 305.110117][T13922] bond5: left promiscuous mode [ 305.115845][T13922] bridge5: left promiscuous mode [ 305.121198][T13922] vlan4: left allmulticast mode [ 305.126584][T13922] bond5: left allmulticast mode [ 305.131548][T13922] bridge5: left allmulticast mode [ 305.159556][T13922] bond6: left promiscuous mode [ 305.169967][T13922] bond8: left promiscuous mode [ 305.182358][T13922] bond8: left allmulticast mode [ 305.242181][ T13] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.270387][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.295016][ T13] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.303957][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.363932][ T13] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.400242][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.441137][ T13] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.473308][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.778851][T13975] netlink: 'syz.5.2183': attribute type 29 has an invalid length. [ 305.798187][T13974] netlink: 'syz.5.2183': attribute type 29 has an invalid length. [ 305.864862][T13981] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2185'. [ 306.007670][T13994] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2186'. [ 306.103009][T13998] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 306.122531][T13998] bond1: (slave lo): Enslaving as an active interface with an up link [ 306.135688][ T5908] lo speed is unknown, defaulting to 1000 [ 306.143268][ T7672] lo speed is unknown, defaulting to 1000 [ 306.161067][ T7672] syz0: Port: 1 Link ACTIVE [ 306.324009][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2192'. [ 306.335078][T14011] sctp: [Deprecated]: syz.5.2191 (pid 14011) Use of int in max_burst socket option deprecated. [ 306.335078][T14011] Use struct sctp_assoc_value instead [ 306.505017][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2192'. [ 306.524820][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2192'. [ 306.566091][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2195'. [ 306.824994][ T1367] net_ratelimit: 360 callbacks suppressed [ 306.825018][ T1367] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 306.839095][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 306.872388][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 306.892461][ T1367] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 306.922845][ T1367] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 306.963477][ T1367] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 307.014993][ T128] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.033064][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 307.041009][ T128] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 307.070961][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 307.116510][T14047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2201'. [ 307.205389][T14052] netlink: 'syz.3.2202': attribute type 1 has an invalid length. [ 307.235247][T14052] netlink: 'syz.3.2202': attribute type 1 has an invalid length. [ 307.304074][T14055] netlink: 'syz.5.2203': attribute type 4 has an invalid length. [ 307.364299][T14064] netlink: 'syz.5.2203': attribute type 4 has an invalid length. [ 307.518747][T14068] netlink: 'syz.3.2206': attribute type 1 has an invalid length. [ 307.662952][T14068] bond11: entered promiscuous mode [ 307.689399][T14068] 8021q: adding VLAN 0 to HW filter on device bond11 [ 307.734056][T14084] netlink: 'syz.7.2207': attribute type 21 has an invalid length. [ 307.881253][T14070] wireguard0: entered promiscuous mode [ 307.915848][T14070] wireguard0: entered allmulticast mode [ 307.946558][T14070] team0: Device wireguard0 is of different type [ 308.004515][T14097] netlink: 'syz.6.2213': attribute type 2 has an invalid length. [ 308.221343][T14108] netlink: 'syz.3.2216': attribute type 10 has an invalid length. [ 308.267755][T14107] batadv3: entered allmulticast mode [ 308.439067][T14119] netlink: 'syz.7.2219': attribute type 1 has an invalid length. [ 308.448760][T14119] netlink: 'syz.7.2219': attribute type 1 has an invalid length. [ 308.718801][T14135] netlink: 'syz.3.2226': attribute type 1 has an invalid length. [ 308.741592][T14135] netlink: 'syz.3.2226': attribute type 1 has an invalid length. [ 308.908297][T14143] tipc: MTU too low for tipc bearer [ 309.084056][T14160] __nla_validate_parse: 17 callbacks suppressed [ 309.084076][T14160] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2234'. [ 309.292081][T14172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2239'. [ 309.329066][T14172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2239'. [ 309.378043][T14176] syzkaller0: entered promiscuous mode [ 309.395112][T14176] syzkaller0: entered allmulticast mode [ 309.416000][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2239'. [ 309.454732][T14177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2239'. [ 309.489735][T14177] geneve4: entered promiscuous mode [ 309.508942][T14177] geneve4: entered allmulticast mode [ 309.543726][ T128] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 309.561951][ T128] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 309.592774][ T128] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 309.652178][ T128] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 309.714828][T14191] 8021q: VLANs not supported on lo [ 309.723423][T14191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2243'. [ 309.741798][T14191] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2243'. [ 309.850252][T14195] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2245'. [ 310.000744][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2249'. [ 310.120650][T14213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2251'. [ 310.338140][T14223] dvmrp0: left allmulticast mode [ 310.566005][T14236] ip6tnl0: entered promiscuous mode [ 311.036564][T14264] bond12: Invalid ad_actor_system MAC address. [ 311.042876][T14264] bond12: option ad_actor_system: invalid value (1) [ 311.055862][T14264] bond12 (unregistering): Released all slaves [ 311.092870][T14263] bond12: Invalid ad_actor_system MAC address. [ 311.099351][T14263] bond12: option ad_actor_system: invalid value (1) [ 311.119515][T14263] bond12 (unregistering): Released all slaves [ 311.145388][T14273] ±ÿ: renamed from team_slave_1 [ 311.246096][T14261] macsec1: entered promiscuous mode [ 311.357578][T14281] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 311.926801][ T13] net_ratelimit: 249 callbacks suppressed [ 311.926824][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 311.945266][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 311.964847][ T1367] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 311.972675][ T1367] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 311.995024][ T12] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.044745][ T9000] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.057641][ T1367] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 312.104737][ T9000] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.112640][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 312.125194][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.210057][T14313] 8021q: adding VLAN 0 to HW filter on device bond8 [ 312.236882][T14323] netem: invalid attributes len -24 [ 312.250500][T14323] netem: change failed [ 312.460383][T14334] syzkaller0: entered promiscuous mode [ 312.478129][T14334] syzkaller0: entered allmulticast mode [ 312.612400][T14337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.991666][T14363] vxlan1: entered promiscuous mode [ 313.005862][T14363] vxlan1: entered allmulticast mode [ 313.018815][ T1367] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.053690][ T1367] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.140410][ T1367] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.203557][ T1367] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.450054][T14381] nbd: must specify a device to reconfigure [ 313.612754][T14388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.645348][T14388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.659550][T14388] bond0 (unregistering): Released all slaves [ 313.692987][T14390] block nbd0: reconnected socket [ 313.694236][ T5837] block nbd0: Receive control failed (result -107) [ 313.945914][T14409] sctp: [Deprecated]: syz.7.2307 (pid 14409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.945914][T14409] Use struct sctp_sack_info instead [ 313.992075][ T12] bond0: (slave bond_slave_0): link status definitely up [ 314.015778][ T12] bond0: (slave bond_slave_1): link status definitely up [ 314.031800][T14409] validate_nla: 8 callbacks suppressed [ 314.031821][T14409] netlink: 'syz.7.2307': attribute type 9 has an invalid length. [ 314.068240][ T12] bond0: active interface up! [ 314.127763][T14409] netlink: 'syz.7.2307': attribute type 11 has an invalid length. [ 314.156433][T14409] netlink: 'syz.7.2307': attribute type 12 has an invalid length. [ 314.176246][T14409] __nla_validate_parse: 19 callbacks suppressed [ 314.176268][T14409] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.2307'. [ 314.201218][T14428] netlink: 'syz.4.2312': attribute type 1 has an invalid length. [ 314.378726][T14430] bond13: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 314.441411][T14430] bond13: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 314.457540][T14430] bond13: (slave ip6gre2): making interface the new active one [ 314.471460][T14430] bond13: (slave ip6gre2): Enslaving as an active interface with an up link [ 314.482399][T14446] netlink: 'syz.7.2317': attribute type 83 has an invalid length. [ 314.518180][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2315'. [ 314.801715][T14466] syz_tun: entered allmulticast mode [ 314.827473][T14466] bridge_slave_0: left allmulticast mode [ 314.847294][T14466] bridge_slave_0: left promiscuous mode [ 314.853166][T14466] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.097991][T14466] bridge_slave_1: left allmulticast mode [ 315.103765][T14466] bridge_slave_1: left promiscuous mode [ 315.112642][T14466] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.138292][T14466] bond0: (slave bond_slave_0): Releasing backup interface [ 315.170793][T14466] bond0: (slave bond_slave_1): Releasing backup interface [ 315.199790][T14466] bond1: (slave team_slave_0): Releasing backup interface [ 315.224290][T14466] team0: Port device team_slave_1 removed [ 315.236605][T14466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.255821][T14466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.270493][T14466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.278248][T14466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.308469][ T5908] syz1: Port: 1 Link DOWN [ 315.396203][T14478] bond9: entered promiscuous mode [ 315.428127][T14478] bond9: entered allmulticast mode [ 315.455819][T14478] 8021q: adding VLAN 0 to HW filter on device bond9 [ 315.737440][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2332'. [ 315.765189][T14510] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2331'. [ 315.776418][T14510] netlink: 'syz.7.2331': attribute type 7 has an invalid length. [ 315.784207][T14510] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2331'. [ 315.888964][T14515] IPVS: Error connecting to the multicast addr [ 315.953203][T14515] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2335'. [ 315.980688][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2335'. [ 316.006143][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2335'. [ 316.050244][T14523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2337'. [ 316.202623][T14533] Cannot find add_set index 46338 as target [ 316.378320][T14545] netlink: 'syz.4.2342': attribute type 21 has an invalid length. [ 316.399955][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2344'. [ 317.025727][ T13] net_ratelimit: 259 callbacks suppressed [ 317.025749][ T13] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 317.039431][ T1367] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.084705][ T1367] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.092571][ T1367] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 317.107416][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 317.123535][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.134637][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 317.165298][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 317.184854][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 317.214780][ T1346] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 317.234722][ T1346] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 317.511438][T14610] tipc: Enabling of bearer rejected, failed to enable media [ 317.541634][ T1367] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 317.565067][ T1367] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 317.578035][ T1367] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 317.604671][ T1367] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 317.719331][ T1367] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 317.730473][T14621] Cannot find add_set index 65532 as target [ 317.742316][ T1367] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 317.780119][ T1367] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 317.800630][ T1367] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 317.850063][T14630] netlink: 'syz.7.2365': attribute type 9 has an invalid length. [ 317.978560][T14635] block nbd1: shutting down sockets [ 318.253773][T14652] xt_addrtype: ipv6 does not support BROADCAST matching [ 318.356462][T14655] IPv6: sit3: Disabled Multicast RS [ 318.401917][T14655] sit3: entered allmulticast mode [ 319.247341][T14706] syzkaller0: entered promiscuous mode [ 319.252891][T14706] syzkaller0: entered allmulticast mode [ 319.867690][T14742] tc_dump_action: action bad kind [ 320.089929][T14755] netlink: 'syz.6.2391': attribute type 19 has an invalid length. [ 320.124414][T14755] __nla_validate_parse: 10 callbacks suppressed [ 320.124436][T14755] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2391'. [ 320.383903][T14764] syzkaller0: entered promiscuous mode [ 320.392602][T14764] syzkaller0: entered allmulticast mode [ 320.497380][T14764] bond14: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 320.520053][T14774] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2397'. [ 320.550058][T14764] bond14 (unregistering): Released all slaves [ 320.558440][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2397'. [ 320.589955][T14781] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2400'. [ 320.592371][T14778] netlink: 'syz.5.2399': attribute type 62 has an invalid length. [ 320.642800][T14776] xt_hashlimit: size too large, truncated to 1048576 [ 320.895624][T14793] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2403'. [ 321.311767][T14817] netlink: 'syz.5.2411': attribute type 1 has an invalid length. [ 321.568066][T14830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2416'. [ 321.666782][T14832] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2413'. [ 321.718790][T14840] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2420'. [ 321.860481][T14852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2420'. [ 322.044712][ T195] net_ratelimit: 144 callbacks suppressed [ 322.044735][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 322.092478][ T195] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 322.228563][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 322.264929][ T1343] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 322.373385][T14872] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2426'. [ 322.383396][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 322.397727][ T195] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 322.524981][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 322.562542][ T128] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 322.658434][T14886] x_tables: duplicate underflow at hook 1 [ 322.703119][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 322.734977][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 322.772658][T14889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.797588][T14894] netlink: 'syz.6.2434': attribute type 1 has an invalid length. [ 323.255821][T14913] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 323.630096][T14924] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 323.752161][T14935] tun0: tun_chr_ioctl cmd 1074025675 [ 323.760158][T14935] tun0: persist disabled [ 324.320281][T14948] team0 (unregistering): Port device team_slave_1 removed [ 325.254412][T14990] bridge0: port 3(ipvlan0) entered blocking state [ 325.262923][T14990] bridge0: port 3(ipvlan0) entered disabled state [ 325.282662][T14990] ipvlan0: entered allmulticast mode [ 325.298954][T14990] bridge0: entered allmulticast mode [ 325.326605][T14990] ipvlan0: left allmulticast mode [ 325.341965][T14990] bridge0: left allmulticast mode [ 325.391198][T14995] __nla_validate_parse: 13 callbacks suppressed [ 325.391220][T14995] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2472'. [ 326.037596][T15021] netlink: 'syz.4.2481': attribute type 39 has an invalid length. [ 326.500622][T15043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2490'. [ 327.077080][ T195] net_ratelimit: 90 callbacks suppressed [ 327.077102][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 327.094985][ T195] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 327.162353][T15087] syzkaller0: entered promiscuous mode [ 327.175447][T15078] "syz.6.2501" (15078) uses obsolete ecb(arc4) skcipher [ 327.184082][T15078] "syz.6.2501" (15078) uses obsolete ecb(arc4) skcipher [ 327.192103][T15078] "syz.6.2501" (15078) uses obsolete ecb(arc4) skcipher [ 327.199552][T15087] syzkaller0: entered allmulticast mode [ 327.219496][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 327.232511][T15078] "syz.6.2501" (15078) uses obsolete ecb(arc4) skcipher [ 327.255026][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 327.270069][T15078] "syz.6.2501" (15078) uses obsolete ecb(arc4) skcipher [ 327.277692][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 327.277834][T15091] tipc: Enabling of bearer rejected, already enabled [ 327.288848][T15078] "syz.6.2501" (15078) uses obsolete ecb(arc4) skcipher [ 327.302982][T15078] "syz.6.2501" (15078) uses obsolete ecb(arc4) skcipher [ 327.310465][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 327.319231][T15078] "syz.6.2501" (15078) uses obsolete ecb(arc4) skcipher [ 327.327929][T15078] "syz.6.2501" (15078) uses obsolete ecb(arc4) skcipher [ 327.335537][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 327.350624][T15078] "syz.6.2501" (15078) uses obsolete ecb(arc4) skcipher [ 327.357960][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 327.384706][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 327.392600][ T48] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 327.923410][T15126] xt_hashlimit: max too large, truncated to 1048576 [ 327.999715][T15129] xt_hashlimit: max too large, truncated to 1048576 [ 328.112777][T15136] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2517'. [ 328.319715][T15145] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2520'. [ 328.816843][T15171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2526'. [ 328.962122][T15179] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 329.038812][T15183] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2530'. [ 329.397472][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 329.418250][T15211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2538'. [ 329.425838][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 329.606544][T15219] netlink: 'syz.6.2541': attribute type 1 has an invalid length. [ 330.248772][T15247] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2548'. [ 330.259816][T15248] x_tables: duplicate entry at hook 3 [ 330.308294][T15248] x_tables: duplicate entry at hook 3 [ 330.365429][T15253] vcan0: entered allmulticast mode [ 330.400823][T15253] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2551'. [ 330.527198][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2546'. [ 330.571131][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2546'. [ 331.003146][T15291] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2561'. [ 331.047782][T15291] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2561'. [ 331.076420][T15299] netlink: 'syz.5.2561': attribute type 1 has an invalid length. [ 331.142658][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2561'. [ 331.348195][T15299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.389558][T15325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2570'. [ 331.874269][T15353] netlink: 492 bytes leftover after parsing attributes in process `syz.4.2580'. [ 331.944627][T15357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2582'. [ 332.087404][ T195] net_ratelimit: 102 callbacks suppressed [ 332.087427][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 332.113389][ T195] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 332.148301][T15366] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 332.219236][T15368] netlink: 'syz.4.2586': attribute type 22 has an invalid length. [ 332.228055][T15368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2586'. [ 332.255087][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 332.273403][ T9000] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.282529][T15368] netlink: 'syz.4.2586': attribute type 22 has an invalid length. [ 332.291285][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 332.301121][ T9000] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.319108][ T9000] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.332002][ T9000] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.341032][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 332.364711][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 332.404631][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 332.420121][ T48] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 332.549827][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 333.745696][ T25] block nbd6: Possible stuck request ffff8880272b8000: control (read@0,1024B). Runtime 120 seconds [ 333.757483][ T25] block nbd6: Possible stuck request ffff8880272b8200: control (read@1024,1024B). Runtime 120 seconds [ 333.768927][ T25] block nbd6: Possible stuck request ffff8880272b8400: control (read@2048,1024B). Runtime 120 seconds [ 333.780053][ T25] block nbd6: Possible stuck request ffff8880272b8600: control (read@3072,1024B). Runtime 120 seconds [ 334.099897][T15475] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 334.680628][ T30] audit: type=1800 audit(1772406665.330:6): pid=15501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2624" name="memory.events" dev="tmpfs" ino=1116 res=0 errno=0 [ 334.713043][T15508] netlink: 'syz.3.2625': attribute type 10 has an invalid length. [ 335.233344][T15535] vlan5: entered allmulticast mode [ 335.254769][T15535] bond0: entered allmulticast mode [ 335.518101][T15558] __nla_validate_parse: 14 callbacks suppressed [ 335.518124][T15558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2635'. [ 335.819466][T15581] batadv_slave_1: entered allmulticast mode [ 335.857723][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2640'. [ 335.983247][T15586] : renamed from hsr0 (while UP) [ 336.252095][T15609] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 336.271617][T15609] syzkaller1: linktype set to 823 [ 336.291500][T15608] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 336.503270][T15624] ip6gre1: entered promiscuous mode [ 336.781161][T15634] bond14: (slave bond_slave_1): Device is not our slave [ 336.793379][T15634] bond14: option active_slave: invalid value (bond_slave_1) [ 336.853839][T15634] bond14 (unregistering): Released all slaves [ 337.165392][ T195] net_ratelimit: 132 callbacks suppressed [ 337.165415][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 337.222321][ T195] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 337.354710][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 337.384667][ T48] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 337.445229][T15676] netlink: 'syz.5.2663': attribute type 5 has an invalid length. [ 337.515356][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 337.533440][ T195] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 337.627968][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2664'. [ 337.650594][ T5846] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 337.674689][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 337.679448][ T5846] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 337.693550][ T5846] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 337.700609][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 337.707223][T15687] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2664'. [ 337.719089][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 337.739620][ T5846] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 337.752203][ T5846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 337.785795][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2664'. [ 337.794949][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 337.824411][ T5837] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 337.858851][T15687] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2664'. [ 337.868935][ T5837] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 337.877969][ T5837] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 337.907343][ T5837] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 337.923565][ T5837] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 338.446255][T15711] netlink: 'syz.7.2670': attribute type 11 has an invalid length. [ 338.482470][T15711] netlink: 'syz.7.2670': attribute type 11 has an invalid length. [ 338.502303][T15711] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2670'. [ 338.750739][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2671'. [ 338.892629][T15686] lo speed is unknown, defaulting to 1000 [ 338.930120][T15727] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2673'. [ 338.961017][T15727] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2673'. [ 339.002225][T15732] tipc: New replicast peer: 255.255.255.255 [ 339.009368][T15732] tipc: Enabled bearer , priority 10 [ 339.289153][T15744] syzkaller0: entered promiscuous mode [ 339.297870][T15744] syzkaller0: entered allmulticast mode [ 339.440756][T15686] chnl_net:caif_netlink_parms(): no params data found [ 339.932077][T15686] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.954844][T15686] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.978864][T15686] bridge_slave_0: entered allmulticast mode [ 339.985118][ T5837] Bluetooth: hci8: command tx timeout [ 339.990954][T15686] bridge_slave_0: entered promiscuous mode [ 340.005858][T15686] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.013318][T15686] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.021413][T15686] bridge_slave_1: entered allmulticast mode [ 340.032868][T15686] bridge_slave_1: entered promiscuous mode [ 340.047725][T15785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.198241][T15686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.217477][ T7672] tipc: Node number set to 1993938034 [ 340.229009][T15686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.469878][T15686] team0: Port device team_slave_0 added [ 340.584193][T15686] team0: Port device team_slave_1 added [ 340.862918][T15686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.871346][T15686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.900797][T15840] __nla_validate_parse: 38 callbacks suppressed [ 340.900816][T15840] netlink: 576 bytes leftover after parsing attributes in process `syz.6.2691'. [ 340.919991][T15686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.932483][T15839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2694'. [ 341.015697][T15686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.022804][T15686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.051205][T15686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.104459][T15848] netlink: 'syz.5.2695': attribute type 1 has an invalid length. [ 341.262014][T15686] hsr_slave_0: entered promiscuous mode [ 341.273283][T15686] hsr_slave_1: entered promiscuous mode [ 341.293782][T15686] debugfs: 'hsr0' already exists in 'hsr' [ 341.332278][T15686] Cannot create hsr debugfs directory [ 341.702235][T15878] netlink: 83 bytes leftover after parsing attributes in process `syz.4.2699'. [ 341.999034][T15898] syzkaller1: entered promiscuous mode [ 342.019765][T15898] syzkaller1: entered allmulticast mode [ 342.071298][ T5837] Bluetooth: hci8: command tx timeout [ 342.081217][T15905] netlink: 'syz.4.2705': attribute type 7 has an invalid length. [ 342.122647][T15905] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2705'. [ 342.185668][ T1367] net_ratelimit: 153 callbacks suppressed [ 342.185693][ T1367] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 342.229788][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 342.256279][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 342.285738][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 342.311859][T15686] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.326051][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 342.338557][T15686] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 33928 - 0 [ 342.357542][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 342.367399][T15686] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 342.405311][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 342.439713][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 342.486594][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 342.528006][T15921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2710'. [ 342.546169][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 342.560172][T15921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2710'. [ 342.618412][T15686] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.648745][T15927] netlink: 'syz.7.2709': attribute type 10 has an invalid length. [ 342.649131][T15686] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 33928 - 0 [ 342.713884][T15686] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 342.747485][T15916] macsec0: entered promiscuous mode [ 342.753749][T15916] macsec0: entered allmulticast mode [ 342.765061][T15923] veth1_macvtap: entered allmulticast mode [ 342.771269][T15923] macsec0: left promiscuous mode [ 342.776681][T15923] macsec0: left allmulticast mode [ 342.782314][T15923] veth1_macvtap: left allmulticast mode [ 342.856006][T15686] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.899805][T15686] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 33928 - 0 [ 342.944150][T15686] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 343.075472][T15947] syzkaller0: entered promiscuous mode [ 343.081023][T15947] syzkaller0: entered allmulticast mode [ 343.106870][T15686] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.139341][T15686] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 33928 - 0 [ 343.163649][T15686] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 343.204992][T15930] IPv6: sit2: Disabled Multicast RS [ 343.217145][T15930] sit2: entered allmulticast mode [ 343.309173][T15936] netlink: 'syz.4.2713': attribute type 3 has an invalid length. [ 343.587595][T15972] xt_socket: unknown flags 0x50 [ 343.670587][T15975] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2723'. [ 343.755141][T15978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.145399][ T5837] Bluetooth: hci8: command tx timeout [ 345.141756][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2726'. [ 345.175635][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2726'. [ 345.253309][T15986] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2726'. [ 345.306621][T15686] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 345.384333][T15686] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 345.449309][T15686] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 345.488861][T15686] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 345.503464][T16005] xt_policy: output policy not valid in PREROUTING and INPUT [ 345.859647][T15686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.916392][T15686] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.942786][T16032] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 345.967138][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.982669][ T1343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.011415][T16039] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 346.088572][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.095825][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.228107][ T5837] Bluetooth: hci8: command tx timeout [ 346.241655][T15686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 346.274670][T15686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.467674][T16067] __nla_validate_parse: 1 callbacks suppressed [ 346.467694][T16067] netlink: 808 bytes leftover after parsing attributes in process `syz.4.2747'. [ 346.932332][T16086] IPVS: set_ctl: invalid protocol: 22 172.30.1.8:20003 [ 346.959571][T15686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.079590][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2754'. [ 347.110605][T15686] veth0_vlan: entered promiscuous mode [ 347.142024][T15686] veth1_vlan: entered promiscuous mode [ 347.195193][ T1343] net_ratelimit: 168 callbacks suppressed [ 347.195216][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 347.244715][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 347.260384][T15686] veth0_macvtap: entered promiscuous mode [ 347.271601][T16099] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.2755'. [ 347.281295][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 347.295004][T15686] veth1_macvtap: entered promiscuous mode [ 347.325527][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 347.333332][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 347.354049][T15686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.399968][T15686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.419810][ T1343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.432001][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2756'. [ 347.447758][ T1343] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.458958][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 347.464802][ T1343] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.485618][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 347.496770][ T1343] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.524795][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 347.568724][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 347.614662][ T1343] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 347.660177][T16110] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2757'. [ 347.688993][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.718919][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.806360][ T9000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.823443][ T9000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.084035][T16128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2762'. [ 348.094114][T16128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2762'. [ 348.166339][T16132] netlink: 'syz.7.2764': attribute type 13 has an invalid length. [ 348.174287][T16132] netlink: 'syz.7.2764': attribute type 58 has an invalid length. [ 348.185259][T16132] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2764'. [ 348.748079][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2771'. [ 348.841020][T16172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2772'. [ 348.891423][T16158] 8021q: adding VLAN 0 to HW filter on device bond4 [ 349.325434][T16210] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20003 [ 352.050639][T16187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.061635][T16198] __nla_validate_parse: 1 callbacks suppressed [ 352.061659][T16198] netlink: 404 bytes leftover after parsing attributes in process `syz.7.2781'. [ 352.295076][ T1343] net_ratelimit: 100 callbacks suppressed [ 352.295098][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 352.345726][T16232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.364780][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 352.373313][T16234] tipc: Enabling of bearer rejected, failed to enable media [ 352.386287][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 352.400204][ T128] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 352.515649][T16239] netlink: 'syz.7.2794': attribute type 10 has an invalid length. [ 352.534651][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 352.542463][ T128] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 352.555365][T16239] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2794'. [ 352.588890][T16239] dummy0: entered promiscuous mode [ 352.610824][T16239] bridge0: port 1(dummy0) entered blocking state [ 352.633379][T16239] bridge0: port 1(dummy0) entered disabled state [ 352.644481][T16239] dummy0: entered allmulticast mode [ 352.653989][T16239] bridge0: port 1(dummy0) entered blocking state [ 352.660535][T16239] bridge0: port 1(dummy0) entered forwarding state [ 352.695258][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 352.704348][T16248] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2793'. [ 352.718119][ T9000] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 352.844801][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 352.925641][T16252] syzkaller0: entered promiscuous mode [ 352.931334][T16252] syzkaller0: entered allmulticast mode [ 352.939190][T16257] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2797'. [ 353.944872][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2807'. [ 353.987732][T16305] netlink: 'syz.3.2807': attribute type 3 has an invalid length. [ 354.077076][T16309] vlan1: entered promiscuous mode [ 354.082322][T16309] bridge0: entered promiscuous mode [ 354.286199][T16315] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 354.907334][T16354] ieee802154 phy1 wpan1: encryption failed: -22 [ 355.208824][T16365] netlink: 'syz.6.2824': attribute type 4 has an invalid length. [ 355.227083][T16363] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 355.276137][T16363] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2825'. [ 355.475338][T16374] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2829'. [ 355.509612][T16374] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2829'. [ 355.536006][T16374] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2829'. [ 355.566830][T16370] tipc: Started in network mode [ 355.592950][T16370] tipc: Node identity 3, cluster identity 4711 [ 355.629643][T16370] tipc: Node number set to 3 [ 355.927176][T16390] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.2832'. [ 356.156731][T16395] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 356.351746][T16407] netlink: 'syz.6.2839': attribute type 1 has an invalid length. [ 356.704079][T16427] IPVS: Unknown mcast interface: pim6reg [ 356.852574][T16434] netlink: 'syz.3.2848': attribute type 1 has an invalid length. [ 357.061138][T16448] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 357.169937][T16450] netem: unknown loss type 0 [ 357.205425][T16450] netem: change failed [ 357.339592][T16454] x_tables: duplicate underflow at hook 3 [ 357.365944][ T128] net_ratelimit: 179 callbacks suppressed [ 357.365965][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 357.386227][T16454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.393746][T16454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.412495][T16462] __nla_validate_parse: 5 callbacks suppressed [ 357.412517][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2858'. [ 357.433088][T16454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.449814][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 357.453647][T16454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.484759][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 357.515124][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 357.531195][T16467] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2861'. [ 357.557025][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 357.569333][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 357.704693][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 357.712534][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 357.723333][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2862'. [ 357.766874][T16478] syzkaller0: entered promiscuous mode [ 357.772422][T16478] syzkaller0: entered allmulticast mode [ 357.823886][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2866'. [ 357.854753][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 357.884892][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 358.032048][T16490] netlink: 'syz.5.2869': attribute type 1 has an invalid length. [ 358.160825][T16490] 8021q: adding VLAN 0 to HW filter on device bond9 [ 358.180511][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.190325][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.200041][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.216721][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.242004][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.203432][ T195] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.271128][T16549] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2883'. [ 359.300664][T16495] lo speed is unknown, defaulting to 1000 [ 359.392348][ T195] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.447631][T16556] netlink: 'syz.3.2883': attribute type 1 has an invalid length. [ 359.457010][T16558] netlink: 165 bytes leftover after parsing attributes in process `syz.7.2885'. [ 359.557674][ T195] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.714047][ T195] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.813725][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2889'. [ 359.822953][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2889'. [ 359.833178][T16570] netlink: 'syz.7.2889': attribute type 12 has an invalid length. [ 359.841244][T16570] netlink: 'syz.7.2889': attribute type 11 has an invalid length. [ 360.243424][ T195] batadv2: left allmulticast mode [ 360.265985][ T195] batadv2: left promiscuous mode [ 360.272715][ T195] bridge0: port 1(batadv2) entered disabled state [ 360.305975][ T5837] Bluetooth: hci3: command tx timeout [ 360.542854][ T195] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 360.579954][ T195] bond13 (unregistering): (slave ip6gre2): Releasing backup interface [ 360.788539][ T195] dvmrp0 (unregistering): left allmulticast mode [ 360.878467][ T195] bond6 (unregistering): (slave bridge1): Releasing backup interface [ 360.907290][T16607] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 361.030045][ T195] bond9 (unregistering): (slave bridge4): Releasing backup interface [ 361.044624][ T195] bridge4 (unregistering): left promiscuous mode [ 361.232190][ T195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.242664][ T195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.253247][ T195] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 361.269877][ T195] bond0 (unregistering): Released all slaves [ 361.287531][ T195] bond1 (unregistering): (slave batadv1): Releasing active interface [ 361.295969][ T195] batadv1: left promiscuous mode [ 361.301092][ T195] batadv1: left allmulticast mode [ 361.308840][ T195] bond1 (unregistering): Released all slaves [ 361.329114][ T195] bond2 (unregistering): Released all slaves [ 361.349671][ T195] bond3 (unregistering): Released all slaves [ 361.368141][ T195] bond4 (unregistering): Released all slaves [ 361.383700][ T195] bond5 (unregistering): Released all slaves [ 361.407207][ T195] bond6 (unregistering): Released all slaves [ 361.422130][ T195] bond7 (unregistering): Released all slaves [ 361.439922][ T195] bond8 (unregistering): (slave team_slave_0): Releasing backup interface [ 361.459725][ T195] bond8 (unregistering): Released all slaves [ 361.475466][ T195] bond9 (unregistering): Released all slaves [ 361.490784][ T195] bond10 (unregistering): Released all slaves [ 361.505803][ T195] bond11 (unregistering): Released all slaves [ 361.529514][ T195] bond12 (unregistering): Released all slaves [ 361.546324][ T195] bond13 (unregistering): Released all slaves [ 361.561505][T16495] chnl_net:caif_netlink_parms(): no params data found [ 361.807078][ T195] tipc: Left network mode [ 361.880268][T16630] netlink: 'syz.5.2906': attribute type 83 has an invalid length. [ 362.009929][T16495] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.017865][T16495] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.025470][T16495] bridge_slave_0: entered allmulticast mode [ 362.033792][T16495] bridge_slave_0: entered promiscuous mode [ 362.118816][T16495] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.128940][T16495] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.140785][T16646] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2905'. [ 362.149909][T16495] bridge_slave_1: entered allmulticast mode [ 362.159518][T16495] bridge_slave_1: entered promiscuous mode [ 362.284162][T16654] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2910'. [ 362.358614][T16495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.396170][ T5837] Bluetooth: hci3: command tx timeout [ 362.449654][T16495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.465813][ T1343] net_ratelimit: 154 callbacks suppressed [ 362.465834][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 362.496765][T16659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2912'. [ 362.548868][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 362.590076][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 362.639824][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 362.687352][T16495] team0: Port device team_slave_0 added [ 362.695084][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 362.703450][T16670] netlink: 'syz.6.2913': attribute type 1 has an invalid length. [ 362.722403][T16495] team0: Port device team_slave_1 added [ 362.731168][T16670] netlink: 'syz.6.2913': attribute type 2 has an invalid length. [ 362.739153][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 362.784232][T16670] netlink: 'syz.6.2913': attribute type 1 has an invalid length. [ 362.790414][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 362.848335][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 362.904899][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 362.939220][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 362.954936][T16679] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2917'. [ 363.049504][T16686] tipc: Can't bind to reserved service type 1 [ 363.084833][T16684] vlan1: entered promiscuous mode [ 363.096647][T16684] vlan1: entered allmulticast mode [ 363.112270][T16684] bridge0: entered allmulticast mode [ 363.238488][T16495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.268554][T16698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.278805][T16495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.278844][T16495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.285085][T16495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.352568][T16495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.383484][T16495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.417566][T16693] netlink: 'syz.7.2917': attribute type 6 has an invalid length. [ 363.421247][T16686] netdevsim netdevsim6: Direct firmware load for .. failed with error -2 [ 363.442507][T16686] netdevsim netdevsim6: Falling back to sysfs fallback for: .. [ 363.475972][T16703] netlink: 'syz.7.2917': attribute type 6 has an invalid length. [ 363.654071][T16716] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2923'. [ 363.826920][ T25] block nbd6: Possible stuck request ffff8880272b8000: control (read@0,1024B). Runtime 150 seconds [ 363.837917][ T25] block nbd6: Possible stuck request ffff8880272b8200: control (read@1024,1024B). Runtime 150 seconds [ 363.849377][ T25] block nbd6: Possible stuck request ffff8880272b8400: control (read@2048,1024B). Runtime 150 seconds [ 363.863886][ T25] block nbd6: Possible stuck request ffff8880272b8600: control (read@3072,1024B). Runtime 150 seconds [ 363.908853][T16495] hsr_slave_0: entered promiscuous mode [ 363.923343][T16495] hsr_slave_1: entered promiscuous mode [ 363.946603][T16495] debugfs: 'hsr0' already exists in 'hsr' [ 363.953020][T16724] netlink: 'syz.3.2927': attribute type 39 has an invalid length. [ 363.964275][T16725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2926'. [ 363.973771][T16495] Cannot create hsr debugfs directory [ 363.995886][T16728] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2928'. [ 364.464995][ T5837] Bluetooth: hci3: command tx timeout [ 365.172871][T16774] bridge7: entered promiscuous mode [ 365.196002][T16774] bridge7: entered allmulticast mode [ 365.448966][T16785] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2943'. [ 365.529726][T16788] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2944'. [ 365.647331][T16794] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2944'. [ 365.883531][T16798] veth0_to_bond: entered allmulticast mode [ 366.174386][T16814] xt_hashlimit: invalid rate [ 366.332243][T16817] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2952'. [ 366.466647][T16826] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 366.473183][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2955'. [ 366.507173][T16826] validate_nla: 2 callbacks suppressed [ 366.507194][T16826] netlink: 'syz.3.2952': attribute type 1 has an invalid length. [ 366.554134][ T5837] Bluetooth: hci3: command tx timeout [ 366.584473][ T195] hsr_slave_0: left promiscuous mode [ 366.610573][ T195] hsr_slave_1: left promiscuous mode [ 366.635120][ T195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.646671][ T195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.062102][ T195] batadv_slave_1 (unregistering): left allmulticast mode [ 367.396971][T16495] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.451397][T16495] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.474702][ T1343] net_ratelimit: 169 callbacks suppressed [ 367.474722][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 367.528270][T16495] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 367.544747][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 367.553162][T16865] xt_hashlimit: size too large, truncated to 1048576 [ 367.575873][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 367.594884][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 367.602794][T16495] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 367.656233][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 367.751100][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 367.774723][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 367.805990][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 367.844993][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 367.935793][ T48] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 368.152787][T16495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.253093][T16495] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.318456][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.325857][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.411062][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.418324][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.521672][ T195] IPVS: stop unused estimator thread 0... [ 368.810090][T16928] __nla_validate_parse: 4 callbacks suppressed [ 368.810110][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2971'. [ 368.883116][T16928] chnl_net:caif_netlink_parms(): no params data found [ 369.320804][T16495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.750767][T16962] ip6gre2: entered allmulticast mode [ 369.992727][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2980'. [ 370.304213][T16980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2983'. [ 370.421757][T16980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.485900][T16980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.521308][T16991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2985'. [ 370.534273][T16980] bond0 (unregistering): Released all slaves [ 370.576187][T16495] veth0_vlan: entered promiscuous mode [ 370.599696][T16994] netlink: 'syz.6.2985': attribute type 1 has an invalid length. [ 370.643294][T16495] veth1_vlan: entered promiscuous mode [ 370.747572][T16495] veth0_macvtap: entered promiscuous mode [ 370.778557][T16495] veth1_macvtap: entered promiscuous mode [ 370.808164][T17002] siw: device registration error -23 [ 370.873923][T16495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.928231][T16495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.015285][ T1367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.037719][ T1367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.056426][ T1367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.118332][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.364252][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.403930][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.471624][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.484275][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.914027][T17049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3001'. [ 371.973834][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 372.019339][T17055] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 372.080369][T17055] bond1 (unregistering): Released all slaves [ 372.119478][T17064] netlink: 'syz.5.3006': attribute type 5 has an invalid length. [ 372.136180][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3006'. [ 372.222647][T17064] 8021q: adding VLAN 0 to HW filter on device bond10 [ 372.393076][T17080] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3008'. [ 372.456467][T17084] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3011'. [ 372.498935][ T1367] net_ratelimit: 136 callbacks suppressed [ 372.498957][ T1367] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 372.513845][ T1367] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 372.637025][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 372.673199][ T128] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 372.700563][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3014'. [ 372.770414][T17099] netlink: 'syz.5.3014': attribute type 5 has an invalid length. [ 372.801166][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 372.844628][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 372.887097][ T9000] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 373.006257][T17114] openvswitch: netlink: Flow actions attr not present in new flow. [ 373.030621][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 373.076049][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 373.181874][T17118] syzkaller0: entered promiscuous mode [ 373.213125][T17118] syzkaller0: entered allmulticast mode [ 373.266150][T17118] netlink: 'syz.4.3020': attribute type 7 has an invalid length. [ 373.273952][T17118] netlink: 'syz.4.3020': attribute type 8 has an invalid length. [ 373.338464][T17129] netlink: 'syz.7.3023': attribute type 3 has an invalid length. [ 374.000585][T17171] __nla_validate_parse: 6 callbacks suppressed [ 374.000646][T17171] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3031'. [ 374.037297][T17168] netlink: 1044 bytes leftover after parsing attributes in process `syz.7.3031'. [ 374.099321][T17171] bridge0: port 1(dummy0) entered disabled state [ 374.126046][T17171] dummy0 (unregistering): left allmulticast mode [ 374.140253][T17171] dummy0 (unregistering): left promiscuous mode [ 374.149060][T17176] xt_ecn: cannot match TCP bits for non-tcp packets [ 374.158990][T17171] bridge0: port 1(dummy0) entered disabled state [ 374.221479][T17176] veth0: entered promiscuous mode [ 374.230799][T17173] veth0: left promiscuous mode [ 374.382268][T17186] netlink: 'syz.3.3035': attribute type 1 has an invalid length. [ 374.742732][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3042'. [ 374.943461][T17220] !: renamed from dummy0 [ 375.016616][T17223] netlink: 'syz.7.3045': attribute type 4 has an invalid length. [ 375.051535][T17223] netlink: 1280 bytes leftover after parsing attributes in process `syz.7.3045'. [ 375.249133][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3047'. [ 375.260197][T17233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3048'. [ 375.522345][T17250] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 [ 375.574292][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3053'. [ 375.625070][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3053'. [ 375.674842][T17255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3054'. [ 375.742654][T17258] syzkaller0: entered promiscuous mode [ 375.775865][T17258] syzkaller0: entered allmulticast mode [ 376.404178][T17298] netlink: 252 bytes leftover after parsing attributes in process `syz.5.3067'. [ 376.885707][T17328] syzkaller0: entered promiscuous mode [ 376.892477][T17328] syzkaller0: entered allmulticast mode [ 377.045191][T17336] netlink: 'syz.3.3079': attribute type 1 has an invalid length. [ 377.139804][T17341] netlink: 'syz.3.3079': attribute type 1 has an invalid length. [ 377.219125][T17346] netlink: 'syz.4.3081': attribute type 3 has an invalid length. [ 377.546153][ T1367] net_ratelimit: 96 callbacks suppressed [ 377.546176][ T1367] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 377.560377][ T1367] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 377.674650][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 377.695386][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 377.804689][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 377.816962][ T1343] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 378.026674][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 378.044690][ T1343] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 378.185035][ T1367] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 378.203719][T17388] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 378.234885][ T1367] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 378.258129][T17388] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 378.294881][T17388] team0: Failed to send options change via netlink (err -105) [ 378.302508][T17388] team0: Port device batadv1 added [ 378.445973][T17401] netlink: 'syz.7.3099': attribute type 11 has an invalid length. [ 378.555775][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.677766][T17410] IPVS: set_ctl: invalid protocol: 0 172.20.20.50:20002 [ 379.417667][T17437] __nla_validate_parse: 14 callbacks suppressed [ 379.417688][T17437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3109'. [ 379.553077][ T5908] IPVS: starting estimator thread 0... [ 379.644746][T17453] IPVS: using max 25 ests per chain, 60000 per kthread [ 379.847110][T17474] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3113'. [ 380.179767][T17489] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3123'. [ 380.402294][T17503] netlink: 'syz.4.3129': attribute type 1 has an invalid length. [ 380.436594][T17503] netlink: 'syz.4.3129': attribute type 4 has an invalid length. [ 380.465933][T17503] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3129'. [ 380.913213][T17530] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3138'. [ 381.062353][T17540] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3139'. [ 381.127476][T17543] netlink: 'syz.4.3141': attribute type 4 has an invalid length. [ 381.160485][T17543] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3141'. [ 381.174254][T17543] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.3141'. [ 381.229561][T17550] netlink: 'syz.3.3144': attribute type 21 has an invalid length. [ 381.247482][T17550] netlink: 'syz.3.3144': attribute type 22 has an invalid length. [ 381.263351][T17550] netlink: 'syz.3.3144': attribute type 23 has an invalid length. [ 381.273189][T17550] netlink: 'syz.3.3144': attribute type 25 has an invalid length. [ 381.293975][T17550] netlink: 'syz.3.3144': attribute type 26 has an invalid length. [ 381.302643][T17550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3144'. [ 381.961873][T17588] netlink: 119 bytes leftover after parsing attributes in process `syz.6.3154'. [ 382.160768][T17600] syzkaller0: entered promiscuous mode [ 382.166602][T17600] syzkaller0: entered allmulticast mode [ 382.479350][T17617] x_tables: duplicate underflow at hook 3 [ 382.558906][ T128] net_ratelimit: 102 callbacks suppressed [ 382.558956][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 382.604730][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 382.634914][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 382.675673][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 382.691560][ T128] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 382.815942][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 382.848540][ T128] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 382.996785][ T9000] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 383.035050][ T128] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 383.054906][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 383.493629][T17661] validate_nla: 1 callbacks suppressed [ 383.493650][T17661] netlink: 'syz.7.3180': attribute type 3 has an invalid length. [ 383.729414][T17669] batadv_slave_1: entered promiscuous mode [ 383.831839][T17680] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 383.850637][T17680] netlink: 'syz.5.3186': attribute type 1 has an invalid length. [ 383.935497][T17669] batadv_slave_1: left promiscuous mode [ 383.987740][T17682] bond11: (slave geneve3): making interface the new active one [ 383.999467][T17682] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 384.015090][ T128] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 384.044427][ T128] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 384.079266][T17684] IPv6: sit1: Disabled Multicast RS [ 384.093344][ T9000] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 384.123713][ T9000] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 384.403255][T17708] bridge3: left allmulticast mode [ 384.456841][T17710] __nla_validate_parse: 5 callbacks suppressed [ 384.456861][T17710] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3194'. [ 384.498507][T17710] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3194'. [ 384.840115][T17731] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3200'. [ 385.039722][T17735] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3202'. [ 385.199803][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3205'. [ 385.604267][T17757] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3211'. [ 385.701743][T17761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3209'. [ 385.778604][T17764] syzkaller0: entered promiscuous mode [ 385.784232][T17764] syzkaller0: entered allmulticast mode [ 386.048533][T17775] Bluetooth: MGMT ver 1.23 [ 386.145390][T17784] netlink: 'syz.6.3216': attribute type 1 has an invalid length. [ 386.172956][T17787] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3220'. [ 386.259650][T17786] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3220'. [ 386.295541][T17786] netem: invalid attributes len -24 [ 386.323879][T17786] netem: change failed [ 386.334172][T17794] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3216'. [ 386.651772][T17804] bond1 (unregistering): Released all slaves [ 387.277051][T17837] netlink: 'syz.3.3236': attribute type 11 has an invalid length. [ 387.300239][T17838] netlink: 'syz.5.3234': attribute type 1 has an invalid length. [ 387.574971][ T12] net_ratelimit: 105 callbacks suppressed [ 387.574993][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 387.608024][ T1367] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 387.654788][ T1367] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 387.677911][ T12] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 387.690623][T17858] syzkaller0: entered promiscuous mode [ 387.704373][T17858] syzkaller0: entered allmulticast mode [ 387.734655][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 387.775196][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 387.804009][T17865] bond12: Invalid ad_actor_system MAC address. [ 387.813734][T17865] bond12: option ad_actor_system: invalid value (1) [ 387.842260][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 387.870384][T17865] bond12 (unregistering): Released all slaves [ 387.884805][ T195] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 387.940274][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 387.988880][ T1343] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 388.147431][ T31] INFO: task syz.0.1218:10427 blocked for more than 143 seconds. [ 388.161586][ T31] Not tainted syzkaller #0 [ 388.178129][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 388.190543][ T31] task:syz.0.1218 state:D stack:26432 pid:10427 tgid:10426 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 388.204912][ T31] Call Trace: [ 388.208363][ T31] [ 388.211439][ T31] __schedule+0x1585/0x5340 [ 388.235994][ T31] ? __pfx___schedule+0x10/0x10 [ 388.248377][ T31] ? schedule+0x90/0x360 [ 388.258634][ T31] schedule+0x164/0x360 [ 388.268739][ T31] schedule_preempt_disabled+0x13/0x30 [ 388.281028][ T31] __mutex_lock+0x7fe/0x1300 [ 388.290533][ T31] ? __mutex_lock+0x5ac/0x1300 [ 388.296000][ T31] ? nfsd_nl_threads_set_doit+0x2b9/0xa00 [ 388.302827][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 388.308845][ T31] ? net_generic+0x1e/0x240 [ 388.313516][ T31] ? net_generic+0x1e/0x240 [ 388.320210][ T31] nfsd_nl_threads_set_doit+0x2b9/0xa00 [ 388.335213][ T31] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 388.349208][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 388.359594][ T31] ? __asan_memcpy+0x40/0x70 [ 388.364958][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 388.371343][ T31] ? bpf_lsm_capable+0x9/0x20 [ 388.376778][ T31] ? security_capable+0x7e/0x2c0 [ 388.382127][ T31] genl_rcv_msg+0x61c/0x7a0 [ 388.387347][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.392661][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 388.400380][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 388.405964][ T31] netlink_rcv_skb+0x232/0x4b0 [ 388.410964][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.416635][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.422191][ T31] ? down_read+0x272/0x2e0 [ 388.438805][ T31] ? genl_rcv+0xd/0x40 [ 388.447997][ T31] genl_rcv+0x28/0x40 [ 388.456548][ T31] netlink_unicast+0x80f/0x9b0 [ 388.461946][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 388.467982][ T31] ? netlink_sendmsg+0x650/0xb40 [ 388.472982][ T31] ? skb_put+0x11b/0x210 [ 388.477908][ T31] netlink_sendmsg+0x813/0xb40 [ 388.482824][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.489225][ T31] ? trace_sched_set_need_resched_tp+0x3e/0x160 [ 388.495940][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 388.501112][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.509910][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.515632][ T31] ____sys_sendmsg+0xa68/0xad0 [ 388.520613][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.526436][ T31] ? import_iovec+0x73/0xa0 [ 388.531200][ T31] ___sys_sendmsg+0x2a5/0x360 [ 388.536457][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.541806][ T31] ? futex_wake+0x4ac/0x580 [ 388.547504][ T31] ? __fget_files+0x2a/0x420 [ 388.552384][ T31] ? __fget_files+0x3a0/0x420 [ 388.557722][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 388.562931][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.569068][ T31] ? rcu_is_watching+0x15/0xb0 [ 388.574100][ T31] do_syscall_64+0x14d/0xf80 [ 388.580129][ T31] ? trace_irq_disable+0x3b/0x150 [ 388.585737][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.592147][ T31] ? clear_bhb_loop+0x40/0x90 [ 388.597613][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.603812][ T31] RIP: 0033:0x7f164459c799 [ 388.609849][ T31] RSP: 002b:00007f1645388028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.620368][ T31] RAX: ffffffffffffffda RBX: 00007f1644815fa0 RCX: 00007f164459c799 [ 388.630029][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000009 [ 388.638576][ T31] RBP: 00007f1644632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 388.647427][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.655955][ T31] R13: 00007f1644816038 R14: 00007f1644815fa0 R15: 00007ffe45c2e3b8 [ 388.664785][ T31] [ 388.667975][ T31] [ 388.667975][ T31] Showing all locks held in the system: [ 388.678040][ T31] 1 lock held by khungtaskd/31: [ 388.682966][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 388.695365][ T31] 3 locks held by kworker/u8:5/128: [ 388.701013][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 388.741693][ T31] #1: ffffc90002e57c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 388.753319][ T31] #2: ffffffff8fbcc8c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 388.762896][ T31] 2 locks held by getty/5584: [ 388.768551][ T31] #0: ffff888036b1c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 388.778820][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 388.800832][ T31] 2 locks held by syz.1.632/8192: [ 388.806656][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 388.815550][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 388.826785][ T31] 1 lock held by udevd/8261: [ 388.831495][ T31] #0: ffff8880271ab358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 388.841332][ T31] 1 lock held by udevd/8306: [ 388.847722][ T31] #0: ffff888026b23358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 388.859068][ T31] 2 locks held by syz.0.1218/10427: [ 388.864385][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 388.873231][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b9/0xa00 [ 388.887070][ T31] 2 locks held by syz.3.3240/17856: [ 388.892331][ T31] #0: ffffffff8fbcc8c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 388.901943][ T31] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 388.916951][ T31] 1 lock held by syz.5.3241/17873: [ 388.922121][ T31] #0: ffffffff8fbcc8c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 388.932159][ T31] 3 locks held by syz.4.3243/17877: [ 388.937685][ T31] #0: ffff888050fc4cc8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 388.948936][ T31] #1: ffff88802971a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_release+0x77d/0xcc0 [ 388.960270][ T31] #2: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 388.974340][ T31] 1 lock held by syz.4.3243/17878: [ 388.980373][ T31] #0: ffffffff8fbcc8c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 388.990174][ T31] 1 lock held by syz.4.3243/17883: [ 388.995605][ T31] #0: ffffffff8fbcc8c8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 389.005641][ T31] 1 lock held by syz.7.3245/17885: [ 389.010767][ T31] #0: ffff888047b45288 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 389.021929][ T31] [ 389.044682][ T31] ============================================= [ 389.044682][ T31] [ 389.053185][ T31] NMI backtrace for cpu 0 [ 389.053214][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 389.053238][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.053251][ T31] Call Trace: [ 389.053259][ T31] [ 389.053268][ T31] dump_stack_lvl+0xe8/0x150 [ 389.053329][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 389.053411][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 389.053450][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 389.053480][ T31] sys_info+0x135/0x170 [ 389.053528][ T31] watchdog+0xfd9/0x1030 [ 389.053573][ T31] ? watchdog+0x21a/0x1030 [ 389.053613][ T31] kthread+0x388/0x470 [ 389.053634][ T31] ? __pfx_watchdog+0x10/0x10 [ 389.053664][ T31] ? __pfx_kthread+0x10/0x10 [ 389.053686][ T31] ret_from_fork+0x51e/0xb90 [ 389.053723][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.053750][ T31] ? __switch_to+0xc7d/0x1450 [ 389.053791][ T31] ? __pfx_kthread+0x10/0x10 [ 389.053813][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.053862][ T31] [ 389.053870][ T31] Sending NMI from CPU 0 to CPUs 1: [ 389.168613][ C1] NMI backtrace for cpu 1 [ 389.168632][ C1] CPU: 1 UID: 0 PID: 17886 Comm: syz.7.3245 Not tainted syzkaller #0 PREEMPT(full) [ 389.168652][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.168662][ C1] RIP: 0010:unwind_next_frame+0x73a/0x23c0 [ 389.168696][ C1] Code: 53 16 00 00 0f b7 1e c1 eb 0b 80 e3 01 48 8b 44 24 28 0f b6 04 28 84 c0 4c 8b 7c 24 78 0f 85 5d 16 00 00 48 8b 44 24 18 88 18 <0f> b7 1e 83 e3 0f 83 fb 05 0f 8f 85 00 00 00 83 fb 03 0f 8f 01 01 [ 389.168715][ C1] RSP: 0018:ffffc90004e7f318 EFLAGS: 00000246 [ 389.168732][ C1] RAX: ffffc90004e7f41d RBX: 0000000000000000 RCX: ffffffff9031f8a0 [ 389.168745][ C1] RDX: ffffffff90b21dcc RSI: ffffffff90b21dd0 RDI: ffffffff8c27a9a0 [ 389.168758][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8e7602e0 [ 389.168769][ C1] R10: ffffc90004e7f438 R11: ffffffff81b0b100 R12: ffffffff90b21dd1 [ 389.168782][ C1] R13: ffffc90004e7f438 R14: ffffc90004e7f3e8 R15: ffffc90004e7f420 [ 389.168796][ C1] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 389.168810][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.168822][ C1] CR2: 000056529d936d51 CR3: 0000000068b9a000 CR4: 00000000003526f0 [ 389.168837][ C1] Call Trace: [ 389.168844][ C1] [ 389.168855][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 389.168881][ C1] ? tear_down_vmas+0x312/0x520 [ 389.168937][ C1] ? tear_down_vmas+0x312/0x520 [ 389.168965][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 389.168985][ C1] arch_stack_walk+0x11b/0x150 [ 389.169016][ C1] ? tear_down_vmas+0x312/0x520 [ 389.169045][ C1] stack_trace_save+0xa9/0x100 [ 389.169063][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 389.169082][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 389.169099][ C1] ? __kmalloc_cache_noprof+0x31c/0x660 [ 389.169123][ C1] ? kmem_cache_free+0x15b/0x630 [ 389.169140][ C1] ? tear_down_vmas+0x312/0x520 [ 389.169165][ C1] ? exit_mmap+0x4b6/0xa10 [ 389.169189][ C1] ? __mmput+0x118/0x430 [ 389.169215][ C1] ? exit_mm+0x168/0x220 [ 389.169231][ C1] ? do_exit+0x62e/0x2320 [ 389.169246][ C1] ? get_signal+0x1284/0x1330 [ 389.169266][ C1] ? arch_do_signal_or_restart+0xbc/0x830 [ 389.169287][ C1] kasan_save_stack+0x3e/0x60 [ 389.169303][ C1] ? kasan_save_stack+0x3e/0x60 [ 389.169319][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 389.169343][ C1] ? kmem_cache_free+0x426/0x630 [ 389.169359][ C1] ? tear_down_vmas+0x312/0x520 [ 389.169416][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 389.169441][ C1] kmem_cache_free+0x426/0x630 [ 389.169458][ C1] ? tear_down_vmas+0x312/0x520 [ 389.169488][ C1] tear_down_vmas+0x312/0x520 [ 389.169518][ C1] exit_mmap+0x4b6/0xa10 [ 389.169546][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 389.169595][ C1] ? __pfx_exit_aio+0x10/0x10 [ 389.169628][ C1] ? uprobe_clear_state+0x27c/0x290 [ 389.169651][ C1] __mmput+0x118/0x430 [ 389.169674][ C1] exit_mm+0x168/0x220 [ 389.169693][ C1] do_exit+0x62e/0x2320 [ 389.169711][ C1] ? cgroup1_freezing+0x20/0x350 [ 389.169736][ C1] ? __pfx_do_exit+0x10/0x10 [ 389.169754][ C1] ? cgroup1_freezing+0x20/0x350 [ 389.169776][ C1] ? cgroup1_freezing+0x20/0x350 [ 389.169804][ C1] do_group_exit+0x21b/0x2d0 [ 389.169821][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.169849][ C1] get_signal+0x1284/0x1330 [ 389.169883][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 389.169904][ C1] ? __x64_sys_sendmsg+0x26f/0x2a0 [ 389.169930][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 389.169963][ C1] exit_to_user_mode_loop+0x86/0x480 [ 389.169982][ C1] ? rcu_is_watching+0x15/0xb0 [ 389.170010][ C1] do_syscall_64+0x32d/0xf80 [ 389.170026][ C1] ? trace_irq_disable+0x3b/0x150 [ 389.170052][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.170070][ C1] ? clear_bhb_loop+0x40/0x90 [ 389.170091][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.170109][ C1] RIP: 0033:0x7f900fb9c799 [ 389.170124][ C1] Code: Unable to access opcode bytes at 0x7f900fb9c76f. [ 389.170133][ C1] RSP: 002b:00007f9010a5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.170150][ C1] RAX: 00000000000004e5 RBX: 00007f900fe15fa0 RCX: 00007f900fb9c799 [ 389.170163][ C1] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000007 [ 389.170173][ C1] RBP: 00007f900fc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 389.170204][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.170214][ C1] R13: 00007f900fe16038 R14: 00007f900fe15fa0 R15: 00007ffe248acaf8 [ 389.170237][ C1] [ 389.640800][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 389.647734][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 389.656881][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.666974][ T31] Call Trace: [ 389.670289][ T31] [ 389.673252][ T31] vpanic+0x56c/0xa60 [ 389.677285][ T31] ? __pfx___schedule+0x10/0x10 [ 389.682184][ T31] ? __pfx_vpanic+0x10/0x10 [ 389.686736][ T31] ? __pfx_console_unlock+0x10/0x10 [ 389.691998][ T31] panic+0xc5/0xd0 [ 389.695770][ T31] ? __pfx_panic+0x10/0x10 [ 389.700233][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 389.705635][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 389.711823][ T31] watchdog+0x1023/0x1030 [ 389.716192][ T31] ? watchdog+0x21a/0x1030 [ 389.720641][ T31] kthread+0x388/0x470 [ 389.724739][ T31] ? __pfx_watchdog+0x10/0x10 [ 389.729447][ T31] ? __pfx_kthread+0x10/0x10 [ 389.734066][ T31] ret_from_fork+0x51e/0xb90 [ 389.738690][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.743828][ T31] ? __switch_to+0xc7d/0x1450 [ 389.748533][ T31] ? __pfx_kthread+0x10/0x10 [ 389.753186][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.758001][ T31] [ 389.761658][ T31] Kernel Offset: disabled [ 389.765993][ T31] Rebooting in 86400 seconds..