last executing test programs: 6m2.469353529s ago: executing program 1 (id=1691): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf3a2700000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 6m2.258630099s ago: executing program 1 (id=1693): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061122c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x2}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYRES16=r0], &(0x7f0000000480)='GPL\x00', 0x3}, 0xffffffffffffffb4) 6m2.019684012s ago: executing program 1 (id=1696): socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000200)={r0, r1+60000000}, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000000000014f194e20002b"], 0x65) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r2, @ANYRES8=r3], 0x218}, 0x1, 0x0, 0x0, 0x4044800}, 0x20040058) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r10 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r8, r11, 0x25, 0x0, @val=@netkit={@void, @value=r8}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r7, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r12, &(0x7f0000000000)={0x23, 0x80, 0x2}, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="40000000100039042abd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="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"/385], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) ioctl$XFS_IOC_FSGETXATTRA(r13, 0x801c582d, &(0x7f00000002c0)) 6m0.612190993s ago: executing program 1 (id=1705): unshare(0x8000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000d5ee1648f5ea40bf90ecda920400000023f07fe076d96372996e155e410439e06db081492925c0b478367ca29c9c85e03fa89bd99c73", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) unshare(0x8000600) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000d5ee1648f5ea40bf90ecda920400000023f07fe076d96372996e155e410439e06db081492925c0b478367ca29c9c85e03fa89bd99c73", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) 6m0.197576953s ago: executing program 1 (id=1707): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x40010, r0, 0x504fc000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000080)={r2, @in={{0x2, 0x4e23, @private=0xa010100}}}, 0x84) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r6, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9077, 0x66}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8015}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r5) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x164, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa2}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfffffffc, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2cb8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1a78}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xffff7fff, @local, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x95c5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xce}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x740c}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) bpf$LINK_DETACH(0x22, &(0x7f0000000540), 0x4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x3, 0xffffffff, 0x0, 0x7}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48014}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000680)={0x6, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000006c0)=r8, 0x4) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f0000000700)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x400, 0x8, 0xc, 0x9, 0x7f}, &(0x7f00000007c0)=0x98) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000800)={0x2}, 0x8) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r10, 0x660c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000880)={0x8, 'veth1\x00', {'batadv_slave_0\x00'}, 0x5}) ioctl$NILFS_IOCTL_GET_VINFO(r10, 0xc0186e86, &(0x7f0000000900)={&(0x7f00000008c0)=[{0x2, 0x4, 0x4, 0x7}, {0xfffffffffffffff8, 0x7, 0xff, 0x1}], 0x2, 0x20, 0x10, 0x7}) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000940)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x2, @empty, 0x5}], 0x3c) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000980)={'veth0_to_bond\x00', @local}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000009c0)={r10, r10, 0x0, r10}, 0x10) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x3, 0x8, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x40, 0x4, 0x9}}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x1890) 5m59.617557638s ago: executing program 1 (id=1714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x7d, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x47, 0x2f, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x3, 0x1, [], "bf3f03"}, {0x1}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0x0, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000002400"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000480)={0x18}) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) recvmmsg(r6, &(0x7f0000008ac0)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000005ec0)=""/112, 0x70}, {&(0x7f0000005f40)=""/130, 0x82}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000007000)=""/7, 0x7}, {&(0x7f0000007080)=""/129, 0x81}, {&(0x7f0000007140)=""/93, 0x5d}, {&(0x7f00000071c0)=""/165, 0xa5}, {&(0x7f0000000480)=""/111, 0x6f}, {&(0x7f0000007300)=""/34, 0x22}], 0x9}}], 0x2, 0x40, 0x0) epoll_wait(r4, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0x1, 0x99}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)="35f136414651bc9e8083fd358c76", &(0x7f0000002640)="ff01e71a130b3e47df725cb0ac2f153dbfd014ec9dff4513dd52bf203c1b43067be4eebcf0e925316da58180b9b31a3d701e4412219522721bbf848b90548a0000b26ad98a00000000000000", 0xffffffff, r10}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r10, &(0x7f0000000880)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002600)={&(0x7f0000000500)="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", &(0x7f0000001500)=""/151, &(0x7f00000015c0)="ecb42d59f261656ad6e7166dd87da9b711102ddd59fea3bd76fd0a3160542c88f44755109ed7be0efeac4691e21ce7110fd04b21a0040bfe696cfe96", &(0x7f0000001600)="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", 0xfffff042, r10}, 0x38) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000003080101000000000000000000000000050003000600000006000240000000002400048008000440000000000800054000000000040007"], 0x48}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000004}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newrule={0x44, 0x20, 0x8, 0x70bd2c, 0x25dfdbfc, {0xa, 0x14, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x3, 0x10010}, [@FRA_SRC={0x14, 0x2, @remote}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'dvmrp1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x0) r11 = socket$rxrpc(0x21, 0x2, 0x2) close(r11) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@getqdisc={0x28, 0x26, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x7, 0x8}, {0x3, 0x4}, {0x4, 0x5}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 5m44.498262024s ago: executing program 32 (id=1714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x7d, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x47, 0x2f, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x3, 0x1, [], "bf3f03"}, {0x1}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0x0, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000002400"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000480)={0x18}) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) recvmmsg(r6, &(0x7f0000008ac0)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000005ec0)=""/112, 0x70}, {&(0x7f0000005f40)=""/130, 0x82}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000007000)=""/7, 0x7}, {&(0x7f0000007080)=""/129, 0x81}, {&(0x7f0000007140)=""/93, 0x5d}, {&(0x7f00000071c0)=""/165, 0xa5}, {&(0x7f0000000480)=""/111, 0x6f}, {&(0x7f0000007300)=""/34, 0x22}], 0x9}}], 0x2, 0x40, 0x0) epoll_wait(r4, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0x1, 0x99}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)="35f136414651bc9e8083fd358c76", &(0x7f0000002640)="ff01e71a130b3e47df725cb0ac2f153dbfd014ec9dff4513dd52bf203c1b43067be4eebcf0e925316da58180b9b31a3d701e4412219522721bbf848b90548a0000b26ad98a00000000000000", 0xffffffff, r10}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r10, &(0x7f0000000880)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002600)={&(0x7f0000000500)="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", &(0x7f0000001500)=""/151, &(0x7f00000015c0)="ecb42d59f261656ad6e7166dd87da9b711102ddd59fea3bd76fd0a3160542c88f44755109ed7be0efeac4691e21ce7110fd04b21a0040bfe696cfe96", &(0x7f0000001600)="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", 0xfffff042, r10}, 0x38) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000003080101000000000000000000000000050003000600000006000240000000002400048008000440000000000800054000000000040007"], 0x48}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000004}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newrule={0x44, 0x20, 0x8, 0x70bd2c, 0x25dfdbfc, {0xa, 0x14, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x3, 0x10010}, [@FRA_SRC={0x14, 0x2, @remote}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'dvmrp1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x0) r11 = socket$rxrpc(0x21, 0x2, 0x2) close(r11) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@getqdisc={0x28, 0x26, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x7, 0x8}, {0x3, 0x4}, {0x4, 0x5}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 3m44.283462475s ago: executing program 2 (id=2375): r0 = socket(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="2002247e2a000000840000000800000049000000000000000001ffffac1414aaf6565e387608f52cc24b62307b75d4936a1fd4c8f6b978edd25e90a42b4ae2f74f7b"], 0x20, 0x4855}, 0x24000052) 3m44.08510346s ago: executing program 2 (id=2376): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) unshare(0x4000400) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtaction={0xe4, 0x30, 0x4, 0x0, 0x1, {0x9}, [{0xd0, 0x1, [@m_sample={0xcc, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x76, 0x6, "8ba569fa38aa9e380ab36b693b1a268dc75a4e2541dcae3800aa22e4837ebc57ffbc142fd9ccd67cfb94328be0158edfc6ed0aabc5121cb2496a9ad0d4af8286a763ee4dafe7c69b069d18a4a560a1601023d6a00fbd49b488b5b2ad9c119b53c074d0e5b6e4882631fa334d9d69623b84f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x400c085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_buf(r4, 0x1, 0x13, 0x0, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e24, 0x3, 'fo\x00', 0x15, 0x3240, 0x32}, {@multicast1, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r5 = socket(0x10, 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000020601080000000000000d000080772f51bf7f1f9d00ef904bf35f0000000c0007800800"], 0x28}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="70020000130029"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES64=r0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) close(0x3) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r5) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x70bd2f, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6cec636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000000000000000000000000000f7ffffff", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="010000000300"/28], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r9, 0x0, 0x8000f28, 0x0) vmsplice(r11, &(0x7f0000000940)=[{&(0x7f0000000400)="1333", 0x2}], 0x1, 0x0) 3m43.56289535s ago: executing program 2 (id=2380): unshare(0x20000400) unshare(0x24020400) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="440100001a00330600000000fddbdf25fe8000000000000000000000000000aafe8000000000000000000000000000bb000340044e2480010000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) 3m43.207064333s ago: executing program 2 (id=2382): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000000000000290000000004000000000000000000001400000000000000290000000b0000000000000200000000140000000000000029000000340000000400000000000000180000000000000029000000370000002b00000000000000"], 0x60}, 0x48010) 3m43.034991209s ago: executing program 2 (id=2385): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x4, &(0x7f0000000080)={0x2, 0x4c1e, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0xffff}, {{&(0x7f0000000a80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001f00)=[{0x0}, {0x0}, {&(0x7f0000001e80)=""/94, 0x5e}], 0x3}, 0xfa6e}], 0x2, 0x22, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x6, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 3m42.313097469s ago: executing program 2 (id=2388): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x41, 0x1, 0x80002, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async, rerun: 32) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000c8d1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) (async) r6 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000280)='FROZEN\x00', 0x7) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) 3m27.209271879s ago: executing program 33 (id=2388): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x41, 0x1, 0x80002, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async, rerun: 32) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000c8d1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) (async) r6 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000280)='FROZEN\x00', 0x7) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) 4.635382473s ago: executing program 0 (id=3674): unshare(0x100000) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1, '.\x00'}, 0x6e) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 4.368276482s ago: executing program 0 (id=3677): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="20010000160001002abd700000000000fe8000000000000000000000000000bbff0200000000000000000000000000010e2100004e2300000000a0001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14142d000000185c31faef2f965000000000006c000000ff0200000000000000000000000000010000010000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000400000000000000000000000000000000000000000000000600000000000000ff0f000000000000fbffdfffffffffff0000000004000000000000000000000000000400000000002200000000000000000000003210d81028001a00ac141428000000000000000000000000ff0100000000000000000000000000010a000900"], 0x120}}, 0x0) 3.592164185s ago: executing program 4 (id=3685): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r1, 0x215eb000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000004"], 0x68) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xbc, r4, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x7c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x84}, 0x80c) 3.380969879s ago: executing program 0 (id=3687): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695f839, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x4009, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.093640951s ago: executing program 3 (id=3688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000140)) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x4489, 0x9, 0x3b, 0x5, 0x4}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={r3, 0x9}, 0x8) socket$packet(0x11, 0x2, 0x300) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x732680648c78a9fb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1af}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000480)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r5, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10a00c1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x880c) r14 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000006c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r14, 0x28, 0x6, &(0x7f0000000700)={0x0, 0xea60}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000740)={0x5, 0x1, 0x6, 0x0, r3}, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80fa2033c1554ece}, 0x24000010) socket(0x29, 0x1, 0x1000) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000008c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000900), r5) r15 = accept(r0, &(0x7f0000000940)=@sco={0x1f, @fixed}, &(0x7f00000009c0)=0x80) sendmsg$NL80211_CMD_REQ_SET_REG(r15, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x700, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) 2.969011773s ago: executing program 6 (id=3689): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000db2300000000000000000000f6ab5254"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x94) 2.968691613s ago: executing program 0 (id=3690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd30, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x40}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008084}, 0x90) 2.725113456s ago: executing program 3 (id=3691): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x2d, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x400, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b, 0x8019}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_IFALIAS={0x0, 0x14, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.724871858s ago: executing program 0 (id=3692): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071105700000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) socket(0x2b, 0x2, 0x1) 2.635488692s ago: executing program 6 (id=3694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x6e}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x24000800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000000)="c1dfb061cd21d3084d94d3540800", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x40}}, 0x4044800) 2.546630266s ago: executing program 0 (id=3695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a8000088a800a8880000990000", 0x20, 0x200000c4, &(0x7f0000000100)={0x11, 0x3, r3, 0x1, 0xc, 0x6, @local}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a030000000000000000000700000084000000090a0104000000000000000007000008000a40000000030900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c610400000000000400028010000180090001006c61737400000000140001800c000100636f756e74657200040002800c000b400000000000000e17140000001000010000000000000000000084000a00"], 0xc0}}, 0x20050800) 2.39342507s ago: executing program 4 (id=3696): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000002540)=""/4108, 0x1064}, {&(0x7f0000001400)=""/136, 0x94}], 0x2) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.315681647s ago: executing program 5 (id=3697): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f00000000c0)='\x00', 0x100, &(0x7f0000000100)={@_ha_fsid={[0x0, 0x9b]}, {0x7, 0x9c72, 0x6, 0x7f}}, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x2}) openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000040)='E', 0x1}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 2.134727693s ago: executing program 3 (id=3698): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000001c0)={@rand_addr=0x64010102, @empty}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}}, 0x800) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x140f, 0x2, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 2.085119889s ago: executing program 5 (id=3699): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r1, 0x0, {0x2}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x418801, 0x0) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410005000200000000000000020100002a0000001400018010000400"], 0x38}}, 0x20004031) getpeername$packet(r0, 0x0, &(0x7f0000000480)) 2.02753115s ago: executing program 6 (id=3700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf0}}, 0x0) 2.025241484s ago: executing program 4 (id=3701): socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4880) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 69) 1.848094296s ago: executing program 5 (id=3702): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) listen(r0, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa"], 0x28}}, 0x0) 1.82217759s ago: executing program 4 (id=3703): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0xfffffffe, {{'cbc-aes-neonbs\x00'}, '\x00', '\x00', 0x2400, 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 1.741228269s ago: executing program 6 (id=3704): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00060211000000120012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 1.715361057s ago: executing program 4 (id=3705): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x20000}, 0x10}, 0x94) 1.528803118s ago: executing program 4 (id=3706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "7f7fcc4693bde5551b444b305a8ce00c31c3d2d7d3db92dd4d31ad5c0de9249dc2c1df7808f8e0c20d48a3578d417da0b6ef16ffc46aca9557d972508aa53f34ff18a7e73ec0d9c8461dfad6aee6cf4621c93babc94fc3de79b7173ab2217af3ddeed07c978eb6ef9d931bcc28402d3e04e8aa47388197a99a05af468159b4d46a16590e97cf073cd49877e7169e6cac87f35e96be8e4512000d870af0501174097d73908bfd012c6973e62fc4adb99f4fe52908c79343fe1d3d0e5c1accea3efd67f2898a9995228494f1c5cc81ac9be2ead4db4fc334b872bc8f0bd61ad148533dc843ed04a794"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x20040090) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000000)='\x00', 0x200000, &(0x7f0000000080)={@_ha_fsid={[0xe, 0x9]}, {0x5, 0x6, 0x0, 0x7}}, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x1}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, 0x0, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async, rerun: 32) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) (rerun: 32) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000b00)="13000000010203", 0x7}, {&(0x7f0000000040)="6327642f586b16", 0x7}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x3, 0x4}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a}, 0x20) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004810}, 0x0) 1.39722953s ago: executing program 3 (id=3707): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="03022dbd70000000000001000000110001004e4c424c5f434950534f76340000000006000b003900e642c6a3338cf19d335a"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x8) 1.257761334s ago: executing program 6 (id=3708): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="4c00000011002914001b00020000170002000400200000", 0x17) writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000000)=0xff, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, 0x0, &(0x7f0000000100)=0x28) getsockname$llc(r1, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x10) 1.240419091s ago: executing program 5 (id=3709): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0xc251}], 0x1, 0x10002, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000880)=0xbc, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x80000001, 0x3, 0x7fffffff, 0x20a, 0xffffffffffffffff, 0x5}, 0x48) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x1, 0x27}, 0x80, 0x0}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x10, 0x803, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) r10 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r15 = syz_open_procfs$namespace(r12, &(0x7f0000001780)='ns/ipc\x00') r16 = getpid() sendmmsg$unix(r11, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r12, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r12, 0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {r16, r13}}}, @rights={{0x18, 0x1, 0x1, [r15, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmmsg$unix(r7, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)="b4effaf55eeadfa74ac323d6602159860b48ca0e6d5a7686cc67c3af359194b8847dcb5be1a0c721e41f4a74bfa51f6512044165c83a88421628c8b66d12f925759800d7ba27efad276d0a1d658222fce884f35274f2450c2db89766a61c88", 0x5f}], 0x1, &(0x7f0000000900)=[@rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r4, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}, @rights={{0x1c, 0x1, 0x1, [r4, r2, r5]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, r14}}}], 0xa0, 0x80}}], 0x1, 0x4c005) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r18 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x68, 0x2, {{'cbc(camellia)\x00'}, 0x100, "51ad34d9ea841223e5d0f932af16e92125ccc28f24846c994df42d7b27056624"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.024787109s ago: executing program 3 (id=3710): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001400090527bd7000fc045e3d23d7df25", @ANYRES32=r3, @ANYBLOB="08000400640101040800080000010000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x12}, @volatile={0xd, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x30, 0x5f, 0x5f, 0x2e, 0x30]}}, &(0x7f0000000140)=""/59, 0x3e, 0x3b, 0x1, 0x1}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x11, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x80000001}], &(0x7f00000002c0)='syzkaller\x00', 0x200, 0x3, &(0x7f0000000300)=""/3, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xb, 0x8, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x8, 0x10}, 0xc) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4010}, 0x18) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x25}], &(0x7f0000000080)='syzkaller\x00', 0x4e, 0x1b, &(0x7f00000000c0)=""/27, 0x40f00, 0x2c, '\x00', r3, @fallback=0x22, r4, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r5, 0x0, &(0x7f0000000600)=[r6, r7, r1, 0x1, r8], 0x0, 0x10, 0x2}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r13, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b40000000000000079b03f0000000000620040000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r12}, 0x94) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000004400010029bd700004000000020000000400488044000180"], 0x5c}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x6, '\x00', r3, r2, 0x1, 0x3, 0x4}, 0x50) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x1e, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, {}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @jmp={0x5, 0x1, 0x8, 0x8, 0x4, 0xfffffffffffffff0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b00)='GPL\x00', 0x0, 0xf7, &(0x7f0000000b40)=""/247, 0x41000, 0x22, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000c40)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x5, 0x9, 0x9, 0xc}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d00)=[r0, r1], &(0x7f0000000d80)=[{0x5, 0x4, 0x1, 0x3}, {0x2, 0x3, 0x1, 0x4}, {0x4, 0x1, 0xf, 0x4}, {0x3, 0x1, 0x0, 0x4}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0x27, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ldst={0x2, 0x3, 0x6, 0x9, 0x9, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_fd={0x18, 0xb, 0x1, 0x0, r15}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xcb3c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0xae, &(0x7f0000000900)=""/174, 0x41000, 0x5a, '\x00', r3, @fallback=0x18, r4, 0x8, &(0x7f00000009c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r16, 0x6, &(0x7f0000000e80)=[r7, r6, r6], &(0x7f0000000f00)=[{0x3, 0x5, 0x0, 0x3}, {0x2, 0x1, 0x7, 0x3}, {0x1, 0x5, 0xd}, {0x3, 0x4, 0xb}, {0x0, 0x3, 0x7, 0x7}, {0x4, 0x5, 0x9, 0x9}]}, 0x94) 796.242754ms ago: executing program 6 (id=3711): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r7, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001080)=""/4096, 0x54000}], 0x1}, 0x8}], 0x1, 0x40000142, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e21, @loopback}, 0x4, 0x1, 0x4, 0x2}}, 0x26) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r11, 0x5) accept4(r11, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) 678.757571ms ago: executing program 3 (id=3712): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000080)='GPL\x00', 0x4000, &(0x7f0000000100)={@_ha_fsid={[0x8, 0x5]}, {0x10, 0xf, 0x6, 0x7fffffffffffffff}}, 0x0, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x91a}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={r4, 0x6, 0x0, 0x5, 0x1}, &(0x7f0000000280)=0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 456.754697ms ago: executing program 5 (id=3713): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x43, 0x2, 0xa, 0x4, 0x2, 0x81}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f00000000c0)=0x7, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r2, &(0x7f0000000100)='\x00', 0x18500, &(0x7f0000000140)={@_ha_fsid={[0xffff90b9, 0xa4]}, {0x401, 0xb, 0x6f, 0x4}}, 0x8f, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x2}, {[0x6, 0x1, 0x1, 0x5]}, 0x9c2, 0x3, &(0x7f0000000200)=""/3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000380)=0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1, 0x25, 0x5, @val=@uprobe_multi={&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=[0x38, 0x8, 0x3, 0x9], &(0x7f0000000340)=[0x5], 0x0, 0x4, 0xdd1a22cb65bdf79e, r4}}, 0x40) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x17, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x0, 0x6, 0xb, 0x4, 0x6}, @generic={0x4, 0x5, 0x4, 0x6, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x6, 0x8, 0x7, 0x5}, @alu={0x4, 0x0, 0x1, 0x5, 0x8, 0x4, 0x8}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x4}]}, &(0x7f00000004c0)='syzkaller\x00', 0xaf, 0x0, 0x0, 0x41100, 0x40, '\x00', r1, 0x25, r3, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x4, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[r3, r3, r3, r3, r3, r5, r3, r3], &(0x7f0000000640)=[{0x0, 0x5, 0xc, 0x8}, {0x0, 0x5, 0xb, 0x5}], 0x10, 0x1}, 0x94) setsockopt$inet_int(r3, 0x0, 0x31, &(0x7f0000000740)=0xffffffff, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000780)={0x0, 0xb2, "3e6d823880dbe71252d9091bc19db24f5e7495134c1caff7378616964d872f07419f59fff28f28593d36fca2a51992e2a1e1f08b4f09d107ef5a8ad4275859eb43e96b23ffb961deee38044796ce86371c667469b6e54cb8b1af1659be52bf3312aacda1974cf3524a7fa5e7b4de52cf0de69ec245bd2742eb6cebc5cf7a84b3f6ad4a23ae6084d71fbcba9be0974be599bf1fd2435262d04d94a915c71f1a351ee05cc0ebda0aeb21e42def3c1964effb63"}, &(0x7f0000000840)=0xba) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000880)={r7, 0xfffffffe}, 0x8) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000008c0), &(0x7f0000000900)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000940)={r7, 0x28, "994135ff0d998cac6afdb46532659b337b8912c54505970a889c01ece1b5085a4bef0a3ed496b21f"}, &(0x7f0000000980)=0x30) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000009c0)={r8, 0x5}, &(0x7f0000000a00)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000a40)={r8, 0xe8, "fbe8724f32cfd369d75e68855a42187c6dc83f21f900c6df9a8077cfb563ad7de8c7ed90d2bf4a93d0e89adc973b7dc76a15e6b71011d2501965fb8be58d9b962932f62e6a88d850f576b1f246ea9fa67e9ade812b2b4eaf293399bae46e3e4689341ce3bc2ee7ab0c13bc3092c306c30d5a8b340c5299f9a53f9801ea161f35a579e5c967a6f1b2670da2c7718cb043471ec8ff96e189b65b8c7ed49647067099ba9a70be5913b192091d28c280561cc845866daa44ad0b6978ea68726e92e7fe5aa9a0ace1bbe811b10e58a310399988dd50f1424e498530aa8d2b04d4a6755347aa30b9eb8259"}, &(0x7f0000000b40)=0xf0) r9 = epoll_create1(0x80000) syz_genetlink_get_family_id$smc(&(0x7f0000000b80), r3) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000bc0)=r7, 0x4) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000c00)) ioctl$XFS_IOC_GETBMAP(r6, 0xc0205826, &(0x7f0000000c40)={0xb67, 0x9, 0x8, 0x9, 0x9}) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000c80)) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000cc0)={r0, 0xe0, 0x400, "4f0c3a99370a717f251fcc"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000d00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000f00)={"833787e6d2400190781a746143f3a77b", 0x0, 0x0, {0x6, 0x7}, {0x2, 0x10000}, 0x5, [0x401, 0xc, 0xe3, 0xfffffffffffffffd, 0x1000, 0x7, 0xfffffffffffffffd, 0x5, 0x6, 0x0, 0x0, 0x6, 0x4, 0x9, 0x1, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000001000)={"098ecf11663dac09d7a182f6cbde9055", r10, r11, {0x5, 0x8}, {0x8, 0xd85}, 0x1000, [0xff, 0x8000000000000001, 0x1, 0xa00000000000000, 0x0, 0x3, 0x2, 0x3, 0x80, 0x80000000, 0xffffffffffffea89, 0x9, 0x0, 0x4, 0x3ff, 0x1]}) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000001100)={0xffffffffffffffff}) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000001180)={{0x2, 0x4e23, @empty}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10, {0x2, 0x4e21, @local}, 'gretap0\x00'}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001340)={@cgroup=r12, r12, 0x36, 0x20, r3}, 0x20) 0s ago: executing program 5 (id=3714): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, 'B\x00', 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0xca88, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0xc289}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x2, 0x4}, 0x2, {0x4, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711243000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) write$nbd(r2, &(0x7f0000000400)=ANY=[], 0xb4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000100)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x5c, r4, 0x800, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x804) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0x1, 0x0, &(0x7f0000000040)) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x2, 0x0, 0x2}}, 0x26) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x40047440, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000080)="edf4cf189c96bd96e5ca853a796e6b83827ea8ca8088dd463f7a4198130eead09b9cf5de898ae67bdd5f66d17185dc71dbf2ece1f421b9bfb02a752fd0a34fc12b186ed9c552087e0f80665d6a916300", &(0x7f00000003c0)=@buf="84d651cdca81070ae6d8c12b029ebe2a7b12e5993ec79f20a1aa5caf0203a800005699f40d1e98c70dcafe6fa9fd16209ffce4e06998a759f58122873bd240c40370efc2b5bf329ff2bea956574b263bec1dfc5f4ecf6b65c52748100e72c86b472e71297b4c2260edb838551efbdd45e3440b7dae1319fefd2a0133515f1bc1ad24985d7121bf4d3f991bc228586f0fa2e50b0b8ea5ee3e603813b4f8cefa0191d8b387de687eff0000040000", 0x2}, 0x20) kernel console output (not intermixed with test programs): n mode balance-rr(0) [ 552.695440][T15928] bond1 (unregistering): Released all slaves [ 552.731859][T15934] netlink: 'syz.5.2408': attribute type 33 has an invalid length. [ 553.061727][T15934] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 553.136084][T15934] bond1 (unregistering): Released all slaves [ 553.627324][T15956] : renamed from bond0 (while UP) [ 553.917662][T15959] bridge1: entered promiscuous mode [ 553.957068][T15959] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 554.222619][T15977] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2419'. [ 554.832436][T15995] netlink: 'syz.5.2423': attribute type 1 has an invalid length. [ 554.842561][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2422'. [ 554.927905][T16003] netlink: 'syz.5.2423': attribute type 13 has an invalid length. [ 556.008657][T16034] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 556.157115][T16038] IPv6: sit1: Disabled Multicast RS [ 556.262618][T16040] ±ïª¨úrBº“€ speed is unknown, defaulting to 1000 [ 556.272590][T16040] hsr0 speed is unknown, defaulting to 1000 [ 557.667480][T15992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.206761][T16077] xt_TCPMSS: Only works on TCP SYN packets [ 558.218261][T16074] __nla_validate_parse: 2 callbacks suppressed [ 558.226542][T16074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2437'. [ 558.256565][T16075] netlink: 'syz.5.2436': attribute type 11 has an invalid length. [ 558.256806][T16075] netlink: 'syz.5.2436': attribute type 3 has an invalid length. [ 558.260347][T16077] netlink: 'syz.3.2438': attribute type 10 has an invalid length. [ 558.402455][T16081] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 558.417413][T16081] xt_hashlimit: size too large, truncated to 1048576 [ 558.776490][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2441'. [ 558.960536][T16097] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2443'. [ 559.216945][T16105] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2445'. [ 559.231015][T16105] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2445'. [ 559.245474][T16108] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2445'. [ 559.246230][T16108] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2445'. [ 559.874763][T16118] bond8: (slave bond_slave_0): Device is not our slave [ 559.885845][T16118] bond8: option active_slave: invalid value (bond_slave_0) [ 559.920213][T16118] bond8 (unregistering): Released all slaves [ 560.131235][T16126] bond8: (slave bond_slave_0): Device is not our slave [ 560.138626][T16126] bond8: option active_slave: invalid value (bond_slave_0) [ 560.150848][T16126] bond8 (unregistering): Released all slaves [ 560.921690][T16159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2456'. [ 561.050945][T16144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2452'. [ 561.062133][T16144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2452'. [ 561.527332][T16180] openvswitch: netlink: ct_state flags ffffffff unsupported [ 562.075872][T16197] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 562.186495][T16199] netlink: 'syz.3.2467': attribute type 2 has an invalid length. [ 562.199010][T16199] netlink: 'syz.3.2467': attribute type 8 has an invalid length. [ 563.728993][T16249] gre1: entered promiscuous mode [ 563.773901][T16244] __nla_validate_parse: 4 callbacks suppressed [ 563.783970][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2478'. [ 563.798552][T16260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2481'. [ 564.689054][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.781476][T16292] netlink: 'syz.0.2489': attribute type 1 has an invalid length. [ 564.887965][T16298] bond12: (slave gretap0): making interface the new active one [ 564.899222][T16298] bond12: (slave gretap0): Enslaving as an active interface with an up link [ 564.913729][T16292] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2489'. [ 565.133230][T16305] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 565.460487][T16316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2495'. [ 565.494233][T16314] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2495'. [ 565.588665][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2497'. [ 565.730494][T15826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 565.749253][T15826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 565.763541][T15826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 565.788009][T15826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 565.800884][T15826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 565.943628][T16325] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2498'. [ 566.073038][T16328] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2498'. [ 566.089028][T16328] nbd: nbd64 already in use [ 566.553846][T16339] 8021q: VLANs not supported on ip6_vti0 [ 567.188503][T14834] udevd[14834]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 567.928617][T15826] Bluetooth: hci1: command tx timeout [ 568.037326][T16321] ±ïª¨úrBº“€ speed is unknown, defaulting to 1000 [ 568.044507][T16321] hsr0 speed is unknown, defaulting to 1000 [ 568.068927][T16375] x_tables: duplicate underflow at hook 2 [ 568.311357][T16383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2512'. [ 568.480674][T16383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2512'. [ 569.057411][T16409] __nla_validate_parse: 1 callbacks suppressed [ 569.057478][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'. [ 569.196616][T16405] bond1: option all_slaves_active: invalid value (222) [ 569.233857][T16405] bond1 (unregistering): Released all slaves [ 569.273792][T16416] sctp: [Deprecated]: syz.0.2520 (pid 16416) Use of int in max_burst socket option deprecated. [ 569.273792][T16416] Use struct sctp_assoc_value instead [ 569.291979][T16416] sctp: [Deprecated]: syz.0.2520 (pid 16416) Use of int in max_burst socket option deprecated. [ 569.291979][T16416] Use struct sctp_assoc_value instead [ 569.950178][T15826] Bluetooth: hci1: command tx timeout [ 570.171777][T16440] netlink: 'syz.3.2527': attribute type 1 has an invalid length. [ 570.682531][T16459] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.2531'. [ 570.815913][T16471] xt_hashlimit: size too large, truncated to 1048576 [ 571.015153][T15826] Bluetooth: hci4: unexpected cc 0x2003 length: 0 < 9 [ 571.015206][T15826] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 571.056159][T16481] netlink: 'syz.3.2539': attribute type 23 has an invalid length. [ 571.297468][T16488] netlink: 'syz.3.2539': attribute type 12 has an invalid length. [ 571.614705][T16488] bond9: option primary_reselect: invalid value (255) [ 571.628444][T16488] bond9 (unregistering): Released all slaves [ 571.920331][T16321] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.929277][T16321] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.929481][T16321] bridge_slave_0: entered allmulticast mode [ 571.952904][T16321] bridge_slave_0: entered promiscuous mode [ 571.968500][T16321] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.979993][T16321] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.980214][T16321] bridge_slave_1: entered allmulticast mode [ 571.998594][T16321] bridge_slave_1: entered promiscuous mode [ 572.030353][T15826] Bluetooth: hci1: command tx timeout [ 572.070610][T16321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.084814][T16321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.136901][T16321] team0: Port device team_slave_0 added [ 572.147953][T16321] team0: Port device team_slave_1 added [ 572.246884][T16509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2546'. [ 572.263351][T16321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.274929][T16321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.274993][T16321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.333022][T16321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.340580][T16321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.340618][T16321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.540684][T16321] hsr_slave_0: entered promiscuous mode [ 572.554492][T16321] hsr_slave_1: entered promiscuous mode [ 572.566103][T16321] debugfs: 'hsr0' already exists in 'hsr' [ 572.576090][T16321] Cannot create hsr debugfs directory [ 573.550454][T16537] syzkaller0: entered promiscuous mode [ 573.550499][T16537] syzkaller0: entered allmulticast mode [ 573.801341][T16548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.109666][T15826] Bluetooth: hci1: command tx timeout [ 574.531250][T16321] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 574.571858][T16321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 574.584847][T16321] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 574.625643][T16321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 574.636795][T16321] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 574.652300][T16321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 574.674883][T16321] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 574.750890][T16321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 575.131333][T16581] netlink: 'syz.3.2567': attribute type 1 has an invalid length. [ 575.144316][T16582] netlink: 'syz.3.2567': attribute type 1 has an invalid length. [ 575.583975][T16321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.665327][T16321] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.762412][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.762549][ T8317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.843707][T16605] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2572'. [ 575.858550][T16604] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2573'. [ 575.866024][ T8329] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.866137][ T8329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.877018][T16603] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2573'. [ 576.069146][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2574'. [ 576.113473][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2574'. [ 576.162333][T16321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 576.228780][T16615] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2575'. [ 577.430103][T16645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2581'. [ 578.430080][T16321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.020615][T16690] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2592'. [ 579.063633][T16684] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2590'. [ 579.063884][T16684] nbd: illegal input index -8454144 [ 579.150987][T16696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2593'. [ 579.353657][T16684] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 579.985023][T16710] 0ªX¹¦Dö»: renamed from 30ªî{X¹¦ (while UP) [ 580.019900][ T8330] IPVS: starting estimator thread 0... [ 580.143022][T16716] IPVS: using max 29 ests per chain, 69600 per kthread [ 580.183822][T16721] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 580.508277][T16321] veth0_vlan: entered promiscuous mode [ 580.787363][T16321] veth1_vlan: entered promiscuous mode [ 581.024677][T16321] veth0_macvtap: entered promiscuous mode [ 581.064786][T16321] veth1_macvtap: entered promiscuous mode [ 581.179347][T16321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.233577][T16321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.330856][ T8325] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.330927][ T8325] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.330982][ T8325] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.331022][ T8325] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.404348][ T8330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.404390][ T8330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.639314][ T8325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.639611][ T8325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.783629][T16755] __nla_validate_parse: 2 callbacks suppressed [ 582.783700][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2609'. [ 583.703743][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2613'. [ 583.703999][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2613'. [ 583.949526][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2616'. [ 584.687482][T16797] IPv6: Can't replace route, no match found [ 584.755114][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2621'. [ 585.050206][T16805] netlink: 'syz.6.2623': attribute type 30 has an invalid length. [ 585.152387][ C0] bridge0: received packet on c9b with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.244714][T16816] netlink: 'syz.5.2626': attribute type 10 has an invalid length. [ 585.283043][T16805] bond1: option arp_missed_max: invalid value (0) [ 585.290614][T16805] bond1: option arp_missed_max: allowed values 1 - 255 [ 585.307660][T16805] bond1 (unregistering): Released all slaves [ 585.560997][T16816] team0: Port device dummy0 added [ 586.102267][T16829] tipc: Started in network mode [ 586.102331][T16829] tipc: Node identity ac14140f, cluster identity 4711 [ 586.102842][T16829] tipc: New replicast peer: 255.255.255.255 [ 586.146492][T16829] tipc: Enabled bearer , priority 10 [ 586.412070][T16837] x_tables: duplicate underflow at hook 2 [ 586.581259][ T13] IPVS: starting estimator thread 0... [ 586.711549][T16846] IPVS: using max 27 ests per chain, 64800 per kthread [ 587.230057][ T5734] tipc: Node number set to 2886997007 [ 587.332744][T16851] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 587.452003][T16851] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2639'. [ 587.819492][T16868] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2642'. [ 588.633164][T16888] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2648'. [ 589.247874][T16895] netlink: 'syz.0.2651': attribute type 29 has an invalid length. [ 590.020663][T16927] netlink: 'syz.3.2661': attribute type 1 has an invalid length. [ 590.472741][T16927] bridge2: entered promiscuous mode [ 590.502345][T16927] bond10: (slave bridge2): making interface the new active one [ 590.522736][T16927] bond10: (slave bridge2): Enslaving as an active interface with an up link [ 590.572357][T16931] bridge3: entered promiscuous mode [ 590.582781][T16931] bond10: (slave bridge3): Enslaving as a backup interface with an up link [ 590.618057][T16941] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2663'. [ 590.954923][T16946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2666'. [ 591.101626][T16949] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.125247][T16949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2667'. [ 593.041224][T16978] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 593.041397][T16978] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 593.632892][T16989] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 593.821868][T16993] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 594.570165][T17015] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.180027][T17041] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2686'. [ 616.429164][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2692'. [ 616.463214][T17044] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 616.537873][T17051] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2691'. [ 616.537950][T17051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2691'. [ 616.537989][T17051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2691'. [ 616.816480][T17063] netlink: 'syz.5.2698': attribute type 1 has an invalid length. [ 616.816523][T17063] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2698'. [ 616.816558][T17063] netlink: 'syz.5.2698': attribute type 2 has an invalid length. [ 616.816576][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2698'. [ 617.482778][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2700'. [ 617.517547][T17085] netlink: 748 bytes leftover after parsing attributes in process `syz.6.2701'. [ 617.910684][T17102] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2703'. [ 617.964150][T17103] can: request_module (can-proto-0) failed. [ 618.042957][T17114] team0: left allmulticast mode [ 618.043218][T17114] team_slave_0: left allmulticast mode [ 618.044573][T17114] team_slave_1: left allmulticast mode [ 618.046544][T17114] bridge0: port 3(team0) entered disabled state [ 618.072069][T17114] bridge_slave_1: left allmulticast mode [ 618.072531][T17114] bridge_slave_1: left promiscuous mode [ 618.074625][T17114] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.103349][T17114] bridge_slave_0: left allmulticast mode [ 618.111007][T17114] bridge_slave_0: left promiscuous mode [ 618.117438][T17114] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.179030][T17119] netlink: 'syz.5.2708': attribute type 1 has an invalid length. [ 618.188686][T17119] netlink: 'syz.5.2708': attribute type 7 has an invalid length. [ 618.188707][T17119] netlink: 'syz.5.2708': attribute type 8 has an invalid length. [ 618.188724][T17119] NCSI netlink: No device for ifindex 65584 [ 618.409195][ T8317] tipc: Subscription rejected, illegal request [ 618.705873][T17129] netlink: 'syz.3.2712': attribute type 6 has an invalid length. [ 618.705931][T17129] netlink: 'syz.3.2712': attribute type 5 has an invalid length. [ 618.958537][T17138] x_tables: duplicate underflow at hook 3 [ 618.968286][T17138] x_tables: duplicate underflow at hook 3 [ 618.968392][T17138] x_tables: duplicate underflow at hook 3 [ 618.968475][T17138] x_tables: duplicate underflow at hook 3 [ 618.968551][T17138] x_tables: duplicate underflow at hook 3 [ 618.968625][T17138] x_tables: duplicate underflow at hook 3 [ 618.968699][T17138] x_tables: duplicate underflow at hook 3 [ 619.034630][T17138] x_tables: duplicate underflow at hook 3 [ 619.034739][T17138] x_tables: duplicate underflow at hook 3 [ 619.034828][T17138] x_tables: duplicate underflow at hook 3 [ 619.263178][T17134] vlan2: entered allmulticast mode [ 619.263218][T17134] gretap0: entered allmulticast mode [ 619.712557][T17154] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 620.015167][T17169] netlink: 'syz.3.2722': attribute type 1 has an invalid length. [ 620.015208][T17169] netlink: 'syz.3.2722': attribute type 2 has an invalid length. [ 620.024836][T17175] netlink: NAT attribute has 4 unknown bytes [ 620.024871][T17175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.160331][T17161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 620.418423][T17166] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 620.697213][T17187] netlink: 'syz.3.2725': attribute type 1 has an invalid length. [ 621.089205][T17190] xt_TCPMSS: Only works on TCP SYN packets [ 621.403851][T17212] __nla_validate_parse: 8 callbacks suppressed [ 621.414156][T17212] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2729'. [ 621.414206][T17212] nbd: illegal input index 65508 [ 622.450928][T17236] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2735'. [ 622.553407][T17246] netlink: 81 bytes leftover after parsing attributes in process `syz.5.2737'. [ 622.701573][T17250] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2738'. [ 622.879260][T17258] netlink: 'syz.5.2740': attribute type 1 has an invalid length. [ 623.038787][T17268] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2742'. [ 623.417548][T17278] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2745'. [ 623.516992][T17281] sit1: entered promiscuous mode [ 623.523037][T17281] sit1: entered allmulticast mode [ 623.664228][T17285] netlink: 'syz.6.2748': attribute type 1 has an invalid length. [ 623.672575][T17285] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2748'. [ 623.688506][T17254] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 623.691803][T17260] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 623.772721][T17288] team0: entered promiscuous mode [ 623.778453][T17288] team_slave_0: entered promiscuous mode [ 623.784885][T17288] team_slave_1: entered promiscuous mode [ 623.793414][T17288] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 624.463351][T17287] team0: left promiscuous mode [ 624.473702][T17287] team_slave_0: left promiscuous mode [ 624.481287][T17287] team_slave_1: left promiscuous mode [ 624.721393][T17308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2754'. [ 624.773341][T17310] netlink: 'syz.6.2753': attribute type 1 has an invalid length. [ 624.845823][T17304] syz_tun: entered allmulticast mode [ 624.865641][T17302] netlink: 'syz.3.2752': attribute type 10 has an invalid length. [ 624.912866][T17302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 624.913873][T15826] Bluetooth: hci2: command 0x0406 tx timeout [ 624.933569][T17302] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 624.941985][T17302] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 625.066423][T17311] netlink: 'syz.4.2754': attribute type 23 has an invalid length. [ 625.263619][T17314] xt_CT: No such helper "snmp_trap" [ 625.563820][T17332] netlink: 'syz.3.2758': attribute type 29 has an invalid length. [ 625.686081][T17331] syzkaller1: entered promiscuous mode [ 625.686135][T17331] syzkaller1: entered allmulticast mode [ 625.976963][T17341] netlink: 'syz.3.2761': attribute type 21 has an invalid length. [ 625.989093][T17341] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2761'. [ 626.033290][T17341] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.2761'. [ 626.049939][T17341] 0ªX¹¦Dö»: renamed from gretap0 [ 626.090848][T17341] 0ªX¹¦Dö»: left promiscuous mode [ 626.096625][T17341] 0ªX¹¦Dö»: entered allmulticast mode [ 626.115271][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.529833][T17348] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 626.549449][T17354] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2765'. [ 626.990608][T15826] Bluetooth: hci2: command 0x0406 tx timeout [ 627.536955][T17386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2776'. [ 627.546583][T17386] netlink: 'syz.0.2776': attribute type 7 has an invalid length. [ 627.546608][T17386] netlink: 'syz.0.2776': attribute type 8 has an invalid length. [ 627.546621][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2776'. [ 628.102995][T17380] netlink: 'syz.6.2774': attribute type 2 has an invalid length. [ 628.591719][T17414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2781'. [ 628.878469][T17414] bond13: option resend_igmp: invalid value (32767) [ 628.878711][T17414] bond13: option resend_igmp: allowed values 0 - 255 [ 628.984095][T17414] bond13 (unregistering): Released all slaves [ 629.279402][T17436] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2785'. [ 629.532856][T17445] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2788'. [ 629.774306][T17454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2792'. [ 629.778814][T17454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 629.778851][T17454] IPv6: NLM_F_CREATE should be set when creating new route [ 629.779232][T17454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2792'. [ 630.090144][T17457] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2794'. [ 631.249329][T17463] ip6gre1: entered allmulticast mode [ 631.436582][T17467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2797'. [ 631.468384][T17470] netlink: 'syz.3.2799': attribute type 39 has an invalid length. [ 631.696759][T17476] ipvlan4: entered allmulticast mode [ 631.696999][T17476] virt_wifi0: entered allmulticast mode [ 632.695312][T17479] ipvlan4: entered allmulticast mode [ 632.721736][T17500] __nla_validate_parse: 1 callbacks suppressed [ 632.729014][T17500] netlink: 13 bytes leftover after parsing attributes in process `syz.5.2806'. [ 633.217992][T17507] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2808'. [ 633.317219][T17514] xt_ecn: cannot match TCP bits for non-tcp packets [ 633.868119][T17521] bridge0: port 3(syz_tun) entered blocking state [ 633.868259][T17521] bridge0: port 3(syz_tun) entered disabled state [ 633.868448][T17521] syz_tun: entered allmulticast mode [ 633.914163][T17521] syz_tun: entered promiscuous mode [ 633.924453][T17521] bridge0: port 3(syz_tun) entered blocking state [ 633.924625][T17521] bridge0: port 3(syz_tun) entered forwarding state [ 634.052107][T17532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2816'. [ 634.089305][T17532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2816'. [ 634.186328][T17536] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2815'. [ 634.529632][T17532] hsr_slave_1 (unregistering): left promiscuous mode [ 634.603673][T17552] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2818'. [ 634.795600][T17558] sctp: [Deprecated]: syz.4.2819 (pid 17558) Use of int in max_burst socket option deprecated. [ 634.795600][T17558] Use struct sctp_assoc_value instead [ 634.967738][T17557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2820'. [ 635.063950][T17565] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2821'. [ 635.157953][T17571] netlink: 576 bytes leftover after parsing attributes in process `syz.5.2821'. [ 635.730000][T17575] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 635.914883][T17600] netlink: 'syz.6.2828': attribute type 11 has an invalid length. [ 636.147385][T17605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2830'. [ 636.384402][T17616] xt_LOG: prefix is not null-terminated [ 636.728027][T17624] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 636.897936][T17624] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 637.201507][T17644] nftables ruleset with unbound set [ 637.629464][T17660] netlink: 'syz.0.2845': attribute type 12 has an invalid length. [ 637.836300][T17660] __nla_validate_parse: 1 callbacks suppressed [ 637.846546][T17660] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2845'. [ 637.992659][T17673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.515099][T17693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2855'. [ 638.535486][T17693] openvswitch: netlink: Flow actions attr not present in new flow. [ 638.986826][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2859'. [ 639.102881][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 639.116263][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 639.124182][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 639.152139][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 639.222312][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 639.983510][T17711] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2860'. [ 640.258515][ T5618] syz_tun (unregistering): left allmulticast mode [ 640.328836][T17729] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2863'. [ 641.274906][ T8317] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.289036][ T8317] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.302208][ T8317] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 641.313152][ T5624] Bluetooth: hci6: command tx timeout [ 642.063608][T17771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2872'. [ 642.525827][ T8317] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.537490][ T8317] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.549756][ T8317] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 642.934050][T17800] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2878'. [ 643.042117][ T8317] .`: (slave netdevsim1): Releasing backup interface [ 643.112890][ T8317] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 643.141487][ T8317] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.168603][ T8317] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.181165][ T8317] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 643.242740][T17706] ±ïª¨úrBº“€ speed is unknown, defaulting to 1000 [ 643.258366][T17706] hsr0 speed is unknown, defaulting to 1000 [ 643.391151][ T5624] Bluetooth: hci6: command tx timeout [ 643.519144][ T8317] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.519394][ T8317] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.519421][ T8317] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 643.769355][T17808] geneve0: entered allmulticast mode [ 643.840417][T17021] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.842824][T17021] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.850013][T17021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.850075][T17021] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.850109][T17021] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.391991][T17825] netlink: 199784 bytes leftover after parsing attributes in process `syz.6.2883'. [ 644.392238][T17825] netlink: 'syz.6.2883': attribute type 1 has an invalid length. [ 644.805831][ T81] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.810436][ T81] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.988614][T17838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2888'. [ 644.988662][T17838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2888'. [ 645.137660][ T8320] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.140373][ T1173] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.471899][ T5624] Bluetooth: hci6: command tx timeout [ 645.763746][T17864] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2892'. [ 646.577224][ T8317] pim6reg527: left allmulticast mode [ 646.580993][T17875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2893'. [ 646.581028][T17875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2893'. [ 646.625253][ T8317] pimreg: left allmulticast mode [ 647.085558][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2894'. [ 647.536249][ T8317] bond6 (unregistering): (slave erspan1): Releasing active interface [ 647.546782][ T8317] erspan1 (unregistering): left promiscuous mode [ 647.549752][ T5624] Bluetooth: hci6: command tx timeout [ 647.661493][ T8317] bond5 (unregistering): (slave geneve2): Releasing active interface [ 647.735163][ T8317] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 647.758869][ T8317] bond10 (unregistering): (slave bridge2): Releasing backup interface [ 647.767628][ T8317] bond10 (unregistering): (slave bridge2): the permanent HWaddr of slave - ba:84:5a:b8:12:92 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 647.791967][ T8317] bond10 (unregistering): (slave bridge3): making interface the new active one [ 647.812207][ T8317] bond10 (unregistering): (slave bridge3): Error 16 setting MAC of new active slave [ 647.833334][ T8317] bond10 (unregistering): (slave bridge3): Releasing backup interface [ 647.878951][ T8317] .` (unregistering): (slave ªªªªª»): Releasing backup interface [ 647.892815][ T8317] ªªªªª»: left allmulticast mode [ 647.905253][ T8317] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.916608][ T8317] bond_slave_1: left allmulticast mode [ 647.924857][ T8317] .` (unregistering): Released all slaves [ 647.942281][ T8317] bond1 (unregistering): Released all slaves [ 647.964520][ T8317] bond2 (unregistering): Released all slaves [ 647.997172][ T8317] bond3 (unregistering): Released all slaves [ 648.020778][ T8317] bond4 (unregistering): Released all slaves [ 648.068958][ T8317] bond5 (unregistering): Released all slaves [ 648.097310][ T8317]  (unregistering): (slave veth0_to_bond): Releasing active interface [ 648.122729][ T8317]  (unregistering): Released all slaves [ 648.145972][ T8317] bond6 (unregistering): Released all slaves [ 648.169402][ T8317] bond7 (unregistering): Released all slaves [ 648.204697][ T8317] bond8 (unregistering): Released all slaves [ 648.227541][ T8317] bond0 (unregistering): Released all slaves [ 648.262065][ T8317] bond9 (unregistering): Released all slaves [ 648.284691][ T8317] bond10 (unregistering): Released all slaves [ 648.314731][ T8317] bond11 (unregistering): Released all slaves [ 648.361487][T17875] syz_tun: entered promiscuous mode [ 648.368605][T17875] syz_tun: left promiscuous mode [ 648.395282][T17884] netlink: 'syz.5.2896': attribute type 12 has an invalid length. [ 648.395543][T17884] netlink: 'syz.5.2896': attribute type 29 has an invalid length. [ 648.395775][T17884] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2896'. [ 648.395969][T17884] netlink: 'syz.5.2896': attribute type 1 has an invalid length. [ 648.396152][T17884] netlink: 'syz.5.2896': attribute type 2 has an invalid length. [ 648.396348][T17884] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2896'. [ 649.007701][ T8317] tipc: Left network mode [ 649.236721][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'. [ 649.689908][T17913] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.020088][T17913] tipc: Resetting bearer [ 650.021847][T17913] tipc: Resetting bearer [ 650.076459][T17928] netlink: 'syz.0.2905': attribute type 1 has an invalid length. [ 650.076714][T17928] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2905'. [ 650.076739][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2905'. [ 650.164024][T13941] hsr0 speed is unknown, defaulting to 1000 [ 650.164279][T13941] syz1: Port: 1 Link DOWN [ 650.785469][T17946] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2907'. [ 650.856484][T17952] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2907'. [ 651.782761][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 652.749147][T17991] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2917'. [ 652.749194][T17991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2917'. [ 652.783711][T17992] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2917'. [ 652.998019][T18004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.122519][T17993] IPVS: Scheduler module ip_vs_sip not found [ 653.202294][T17997] IPVS: length: 448 != 8 [ 653.398199][T17706] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.398429][T17706] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.398645][T17706] bridge_slave_0: entered allmulticast mode [ 653.461739][T18007] IPVS: Scheduler module ip_vs_sip not found [ 653.612342][T17706] bridge_slave_0: entered promiscuous mode [ 653.668426][T18012] __nla_validate_parse: 1 callbacks suppressed [ 653.668701][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2918'. [ 653.683770][T17706] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.706954][T17706] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.714450][T17706] bridge_slave_1: entered allmulticast mode [ 653.765760][T17706] bridge_slave_1: entered promiscuous mode [ 654.038877][T18031] ip_tables: iptables: counters copy to user failed while replacing table [ 654.574624][T17706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.610419][T18050] netlink: 'syz.0.2925': attribute type 1 has an invalid length. [ 654.617434][T17706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.933560][T18061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2927'. [ 654.944595][T18061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2927'. [ 654.957541][T18061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2927'. [ 654.967531][T18061] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2927'. [ 655.249676][ T8317] hsr_slave_0: left promiscuous mode [ 655.374307][ T8317] veth1_macvtap: left promiscuous mode [ 655.385008][ T8317] veth0_macvtap: left promiscuous mode [ 655.391337][ T8317] veth1_vlan: left promiscuous mode [ 655.391373][ T8317] veth0_vlan: left promiscuous mode [ 656.042535][ T8317] team_slave_1 (unregistering): left promiscuous mode [ 656.054761][ T8317] team0 (unregistering): Port device team_slave_1 removed [ 656.079178][ T8317] team_slave_0 (unregistering): left promiscuous mode [ 656.087910][ T8317] team0 (unregistering): Port device team_slave_0 removed [ 656.335555][T17706] team0: Port device team_slave_0 added [ 656.373255][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 656.427972][T17706] team0: Port device team_slave_1 added [ 656.709374][T17706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.709414][T17706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.709458][T17706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.762998][T17706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.763249][T17706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.763494][T17706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.908061][ T8317] IPVS: stop unused estimator thread 0... [ 656.990372][T18082] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:3617 [ 656.998123][T18081] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:3617 [ 657.074338][T17706] hsr_slave_0: entered promiscuous mode [ 657.087202][T17706] hsr_slave_1: entered promiscuous mode [ 657.159481][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2935'. [ 657.672995][T18100] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2938'. [ 658.052200][T18109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2940'. [ 658.198192][T18119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2943'. [ 658.314895][T17706] netdevsim netdevsim3 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.468879][T18126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2947'. [ 658.521303][T18126] xt_check_table_hooks: 55 callbacks suppressed [ 658.522040][T18126] x_tables: duplicate underflow at hook 2 [ 658.598656][T18132] x_tables: duplicate underflow at hook 1 [ 658.670242][T18127] __nla_validate_parse: 19 callbacks suppressed [ 658.677937][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'. [ 658.688404][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'. [ 658.724479][T17706] netdevsim netdevsim3 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.754047][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'. [ 658.768591][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'. [ 658.797410][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'. [ 658.807821][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'. [ 658.822593][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'. [ 658.833199][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'. [ 658.848291][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'. [ 658.862913][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'. [ 659.168973][T17706] netdevsim netdevsim3 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.493785][T18155] netlink: 'syz.0.2953': attribute type 21 has an invalid length. [ 659.828284][T17706] netdevsim netdevsim3 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.995856][T18182] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 661.177437][T18186] netlink: 'syz.0.2961': attribute type 2 has an invalid length. [ 663.618860][T18206] geneve3: entered promiscuous mode [ 663.849225][T17706] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 663.898915][T17706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 663.921000][T17706] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 663.961825][T17706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 663.980406][T17706] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 663.999348][T17706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.014414][T17706] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 664.052982][T17706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.239256][T18252] netlink: 'syz.6.2969': attribute type 23 has an invalid length. [ 664.607752][T18277] netlink: 'syz.6.2969': attribute type 23 has an invalid length. [ 665.090079][T17706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.091301][T18294] __nla_validate_parse: 37 callbacks suppressed [ 665.091319][T18294] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2976'. [ 665.091339][T18294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2976'. [ 665.175034][T17706] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.227030][ T8327] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.227169][ T8327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.308970][ T8327] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.309141][ T8327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.555300][T18303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'. [ 665.622837][T18302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2979'. [ 666.160856][T18310] can: request_module (can-proto-3) failed. [ 666.282812][T18318] netlink: 'syz.6.2981': attribute type 15 has an invalid length. [ 666.282873][T18318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2981'. [ 666.295797][T18318] netlink: 'syz.6.2981': attribute type 15 has an invalid length. [ 666.295822][T18318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2981'. [ 666.713342][T18330] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2984'. [ 666.846578][T18334] x_tables: duplicate underflow at hook 2 [ 667.007614][T18340] x_tables: duplicate underflow at hook 2 [ 667.227524][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2988'. [ 667.239442][T18356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2988'. [ 667.318977][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2988'. [ 667.400728][ T8327] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.446566][ T8327] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.447697][ T8320] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.447790][ T8320] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.240951][T18386] tunl0: entered promiscuous mode [ 668.245076][T18386] netlink: 'syz.4.2994': attribute type 4 has an invalid length. [ 668.481330][T17706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.724409][T17706] veth0_vlan: entered promiscuous mode [ 669.075607][T17706] veth1_vlan: entered promiscuous mode [ 669.316166][T17706] veth0_macvtap: entered promiscuous mode [ 669.371165][T17706] veth1_macvtap: entered promiscuous mode [ 669.563079][T17706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.631969][T17706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.731069][ T8320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.731580][ T141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.731617][ T141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.747799][ T141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.176480][ T8327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.176526][ T8327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.217507][T18448] ieee802154 phy0 wpan0: encryption failed: -22 [ 670.466422][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.466473][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.498155][T18459] netlink: 'syz.4.3006': attribute type 49 has an invalid length. [ 671.405557][T18482] __nla_validate_parse: 3 callbacks suppressed [ 671.405614][T18482] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3011'. [ 671.405643][T18482] netlink: 'syz.5.3011': attribute type 7 has an invalid length. [ 671.405655][T18482] netlink: 'syz.5.3011': attribute type 8 has an invalid length. [ 671.405666][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3011'. [ 671.461407][T18482] bridge0: entered promiscuous mode [ 671.478172][T18482] syz_tun: entered promiscuous mode [ 671.491033][T18482] bridge0: left promiscuous mode [ 671.497662][T18482] syz_tun: left promiscuous mode [ 671.738555][T18515] xt_hashlimit: size too large, truncated to 1048576 [ 671.762486][T15826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 671.777874][T15826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 671.785747][T15826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 671.793947][T15826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 671.796099][T15826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 672.048647][T18521] tipc: Started in network mode [ 672.048879][T18521] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 672.100762][T18521] tipc: Enabling of bearer rejected, failed to enable media [ 673.217509][T18551] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3024'. [ 673.221349][T18552] bridge0: port 3(syz_tun) entered disabled state [ 673.227711][T18553] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3025'. [ 673.229110][T18555] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 673.398087][T18552] syz_tun (unregistering): left allmulticast mode [ 673.398133][T18552] syz_tun (unregistering): left promiscuous mode [ 673.398290][T18552] bridge0: port 3(syz_tun) entered disabled state [ 673.533379][T18492] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.546157][T18492] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.872412][T15826] Bluetooth: hci2: command tx timeout [ 673.912731][T18492] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.912793][T18492] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.153484][T18492] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.153557][T18492] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.388846][T18492] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.388913][T18492] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.632864][T18596] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 674.651051][T18596] bond1 (unregistering): Released all slaves [ 674.805576][T18516] ±ïª¨úrBº“€ speed is unknown, defaulting to 1000 [ 674.898950][T18516] hsr0 speed is unknown, defaulting to 1000 [ 675.311497][T18615] tipc: Can't bind to reserved service type 1 [ 675.344247][T18494] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.603572][ T8328] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.616538][T18619] netlink: 'syz.0.3038': attribute type 11 has an invalid length. [ 675.616600][T18619] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.3038'. [ 675.818091][T18617] netlink: NAT attribute has 5 unknown bytes [ 675.818157][T18617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.826193][T18617] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3037'. [ 675.895116][T18490] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.935101][T18492] bond3: left allmulticast mode [ 675.950482][T15826] Bluetooth: hci2: command tx timeout [ 675.977637][T18492] bond3: left promiscuous mode [ 675.978198][T18492] bridge0: port 3(bond3) entered disabled state [ 676.011475][T18492] bridge_slave_1: left allmulticast mode [ 676.011538][T18492] bridge_slave_1: left promiscuous mode [ 676.021948][T18492] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.036737][T18492] bridge_slave_0: left allmulticast mode [ 676.036798][T18492] bridge_slave_0: left promiscuous mode [ 676.037038][T18492] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.109895][T18625] netlink: 'syz.3.3040': attribute type 1 has an invalid length. [ 676.112167][T18630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3039'. [ 676.229006][T18492] dvmrp0: left allmulticast mode [ 676.546406][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3042'. [ 676.629051][T18492] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 676.641297][T18492] ip6gretap1 (unregistering): left allmulticast mode [ 677.190180][T18492] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 677.199386][T18492] bridge1 (unregistering): left allmulticast mode [ 677.223322][T18492] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 677.324967][T18492]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.336019][T18492] bond_slave_0: left allmulticast mode [ 677.346822][T18492]  (unregistering): (slave veth0_to_bond): Releasing backup interface [ 677.358061][T18492] veth0_to_bond: left allmulticast mode [ 677.366443][T18492]  (unregistering): Released all slaves [ 677.381343][T18492] bond1 (unregistering): Released all slaves [ 677.402007][T18492] bond2 (unregistering): Released all slaves [ 677.425985][T18492] bond3 (unregistering): Released all slaves [ 677.454596][T18492] bond4 (unregistering): Released all slaves [ 677.477634][T18492] bond5 (unregistering): Released all slaves [ 677.527818][T18492] bond0 (unregistering): Released all slaves [ 677.561449][T18492] bond6 (unregistering): Released all slaves [ 677.583796][T18492] bond7 (unregistering): Released all slaves [ 677.620947][T18625] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 677.622187][T18494] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.807122][T18634] erspan0: entered promiscuous mode [ 677.836930][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3042'. [ 677.931295][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 678.040222][T15826] Bluetooth: hci2: command tx timeout [ 678.392985][T18492] : left promiscuous mode [ 678.558499][T18642] ±ïª¨úrBº“€ speed is unknown, defaulting to 1000 [ 678.609382][T18492] tipc: Disabling bearer [ 678.611324][T18492] tipc: Disabling bearer [ 678.634765][T18492] tipc: Left network mode [ 678.639483][T18642] hsr0 speed is unknown, defaulting to 1000 [ 678.941829][T18676] netlink: 'syz.0.3047': attribute type 1 has an invalid length. [ 679.390898][T15826] Bluetooth: hci5: command 0x0406 tx timeout [ 679.712642][T18691] netlink: 'syz.5.3052': attribute type 11 has an invalid length. [ 679.712687][T18691] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3052'. [ 680.023926][T18697] veth1_macvtap: left promiscuous mode [ 680.030954][T18697] macsec0: entered allmulticast mode [ 680.119717][ T5624] Bluetooth: hci2: command tx timeout [ 680.145029][T18700] veth1_macvtap: entered promiscuous mode [ 680.145078][T18700] veth1_macvtap: entered allmulticast mode [ 680.145200][T18700] macsec0: left allmulticast mode [ 680.145220][T18700] veth1_macvtap: left allmulticast mode [ 680.223571][T18708] netlink: 'syz.3.3055': attribute type 2 has an invalid length. [ 680.299998][T18706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3054'. [ 680.503967][T18719] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3057'. [ 680.565790][T18716] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3057'. [ 681.072688][T18729] netlink: 'syz.0.3058': attribute type 32 has an invalid length. [ 681.072734][T18729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 681.090657][T18727] netlink: 'syz.0.3058': attribute type 32 has an invalid length. [ 681.090683][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 681.161593][T18709] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 681.177243][T18709] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 681.299084][T18726] netlink: 'syz.0.3058': attribute type 12 has an invalid length. [ 681.299126][T18726] netlink: 'syz.0.3058': attribute type 29 has an invalid length. [ 681.299155][T18726] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3058'. [ 681.299179][T18726] netlink: 'syz.0.3058': attribute type 2 has an invalid length. [ 681.448384][T18729] bond15: Setting coupled_control to off (0) [ 681.628923][T18727] bond16: Setting coupled_control to off (0) [ 682.098166][T18747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3061'. [ 682.098210][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3061'. [ 682.446160][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 682.521342][T18760] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3063'. [ 683.141345][T18516] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.152271][T18516] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.152802][T18516] bridge_slave_0: entered allmulticast mode [ 683.184745][T18516] bridge_slave_0: entered promiscuous mode [ 683.206061][T18516] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.208776][T18516] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.208953][T18516] bridge_slave_1: entered allmulticast mode [ 683.247139][T18516] bridge_slave_1: entered promiscuous mode [ 683.477740][T18777] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 683.752207][T18516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.777977][T18516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.463450][T18492] hsr_slave_0: left promiscuous mode [ 684.479317][T18492] hsr_slave_1: left promiscuous mode [ 684.505656][T18492] veth1_macvtap: left promiscuous mode [ 684.505731][T18492] veth0_macvtap: left promiscuous mode [ 684.505848][T18492] veth1_vlan: left promiscuous mode [ 684.527155][T18492] veth0_vlan: left promiscuous mode [ 684.888344][T18812] openvswitch: netlink: Duplicate or invalid key (type 0). [ 685.414696][ T8328] smbdirect: ib_dev[syz1] removed [ 685.543577][T18492] team0 (unregistering): Port device team_slave_1 removed [ 685.568722][T18492] team0 (unregistering): Port device team_slave_0 removed [ 685.718243][T18492] smc: removing net device team0 with user defined pnetid SYZ2 [ 685.782104][T18516] team0: Port device team_slave_0 added [ 685.805806][T18814] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 685.867065][T18516] team0: Port device team_slave_1 added [ 686.181410][T18516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.181672][T18516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.181958][T18516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.186725][T18516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.186958][T18516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.187191][T18516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.551693][T18826] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3072'. [ 686.754426][T18516] hsr_slave_0: entered promiscuous mode [ 686.760597][T18516] hsr_slave_1: entered promiscuous mode [ 686.764865][T18516] debugfs: 'hsr0' already exists in 'hsr' [ 686.764889][T18516] Cannot create hsr debugfs directory [ 686.833503][T18492] IPVS: stop unused estimator thread 0... [ 687.546991][T18859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3080'. [ 687.564039][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.637269][T18864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3080'. [ 687.916173][T18871] syzkaller0: entered promiscuous mode [ 687.916222][T18871] syzkaller0: entered allmulticast mode [ 687.948870][T18491] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.951682][T18492] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.999421][T18871] tipc: Enabled bearer , priority 0 [ 688.016363][T18870] tipc: Resetting bearer [ 688.125104][T18870] tipc: Disabling bearer [ 688.145436][T18882] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3084'. [ 688.160257][ T8328] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.160382][ T8328] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.163424][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 688.228551][T18516] netdevsim netdevsim4 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.539349][T18894] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3090'. [ 688.644931][T18516] netdevsim netdevsim4 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.730390][T18903] netlink: 'syz.6.3091': attribute type 1 has an invalid length. [ 688.834468][T18516] netdevsim netdevsim4 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.172074][T18516] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.302776][T18920] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3093'. [ 689.607790][T18930] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3095'. [ 689.625960][T18933] netlink: 'syz.5.3094': attribute type 21 has an invalid length. [ 689.626020][T18933] IPv6: NLM_F_CREATE should be specified when creating new route [ 689.626105][T18933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 689.626115][T18933] IPv6: NLM_F_CREATE should be set when creating new route [ 689.626179][T18933] IPv6: NLM_F_CREATE should be set when creating new route [ 689.626203][T18933] IPv6: NLM_F_CREATE should be set when creating new route [ 689.627019][T18933] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3094'. [ 689.758463][T18936] netlink: 'syz.3.3097': attribute type 2 has an invalid length. [ 689.758520][T18936] netlink: 'syz.3.3097': attribute type 2 has an invalid length. [ 689.896053][T18943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3098'. [ 689.901975][T18942] netlink: 'syz.3.3097': attribute type 39 has an invalid length. [ 690.020042][T18494] IPVS: starting estimator thread 0... [ 690.026182][T18948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3097'. [ 690.043438][T18951] x_tables: duplicate underflow at hook 3 [ 690.110764][T18950] IPVS: using max 26 ests per chain, 62400 per kthread [ 690.378211][T18960] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component [ 691.473669][T18982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3107'. [ 691.520549][T18982] Cannot find add_set index 65532 as target [ 693.625041][T18516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 693.634832][T18516] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 693.640704][T18516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 693.657798][T18516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 693.660914][T18516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 693.693459][T18516] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 693.812119][T18516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 693.832569][T18516] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 693.868089][T19002] tipc: Started in network mode [ 693.868143][T19002] tipc: Node identity ac14140f, cluster identity 4711 [ 693.868450][T19002] tipc: New replicast peer: 255.255.255.255 [ 693.869205][T19002] tipc: Enabled bearer , priority 10 [ 693.898261][T18984] ±ïª¨úrBº“€ speed is unknown, defaulting to 1000 [ 694.468710][T18516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.545849][T19034] bond1: option downdelay: invalid value (18446744073709551615) [ 694.555857][T19034] bond1: option downdelay: allowed values 0 - 2147483647 [ 694.567995][T19034] bond1 (unregistering): Released all slaves [ 694.662746][T18516] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.712112][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.712262][ T8328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.715304][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.715406][ T8328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.838130][T18516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 695.111438][ T10] tipc: Node number set to 2886997007 [ 695.344716][T19052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3117'. [ 695.344764][T19052] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3117'. [ 695.509478][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3118'. [ 695.578235][T19052] veth3: entered promiscuous mode [ 696.395746][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3123'. [ 696.573604][T19101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3122'. [ 696.836142][T18516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.951458][T19113] xt_bpf: check failed: parse error [ 697.154406][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3129'. [ 697.205198][T19128] ipvlan2: entered allmulticast mode [ 697.211140][T19128] syz_tun: entered allmulticast mode [ 697.350532][T19135] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3130'. [ 697.655107][T19149] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3130'. [ 697.831827][T19119] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.831897][T19119] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.865980][T18494] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x9a [ 697.868482][T19135] syzkaller0: entered promiscuous mode [ 697.868505][T19135] syzkaller0: entered allmulticast mode [ 697.908452][T19163] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3132'. [ 697.952042][T19161] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3133'. [ 698.091185][T19119] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.102295][T19119] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.294147][T19119] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.305571][T19119] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.385593][T18516] veth0_vlan: entered promiscuous mode [ 698.445711][T19119] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.456560][T19119] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.485735][T19176] syzkaller0: entered promiscuous mode [ 698.492197][T19176] syzkaller0: entered allmulticast mode [ 698.532530][T18516] veth1_vlan: entered promiscuous mode [ 698.716731][T18516] veth0_macvtap: entered promiscuous mode [ 698.738530][T18516] veth1_macvtap: entered promiscuous mode [ 698.865200][T18516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.887610][T18516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.921746][T18493] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.921831][T18493] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.922144][T18493] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.922169][T18493] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.061411][ T8328] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.061479][ T8328] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.199325][ T8328] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.199387][ T8328] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.199440][ T8328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.199474][ T8328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.200998][ T8328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.201041][ T8328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.628936][T19153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 700.895627][T19216] tc action pedit unable to extract header offset for header type (0x5) [ 700.895678][T19216] tc action pedit unable to extract header offset for header type (0x5) [ 700.895718][T19216] tc action pedit unable to extract header offset for header type (0x5) [ 700.895735][T19216] tc action pedit unable to extract header offset for header type (0x5) [ 700.895750][T19216] tc action pedit unable to extract header offset for header type (0x5) [ 700.895765][T19216] tc action pedit unable to extract header offset for header type (0x5) [ 700.895782][T19216] tc action pedit unable to extract header offset for header type (0x5) [ 700.895799][T19216] tc action pedit unable to extract header offset for header type (0x5) [ 700.895816][T19216] tc action pedit unable to extract header offset for header type (0x5) [ 700.895833][T19216] tc action pedit unable to extract header offset for header type (0x5) [ 700.895863][T19216] 0: reclassify loop, rule prio 0, protocol 800 [ 700.940711][T19224] 0: reclassify loop, rule prio 0, protocol 800 [ 701.011627][ T8328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.011676][ T8328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.101714][T19233] netlink: 'syz.3.3144': attribute type 10 has an invalid length. [ 701.322389][T18490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.322434][T18490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.453853][T19243] __nla_validate_parse: 3 callbacks suppressed [ 701.463000][T19243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3147'. [ 701.539740][T19243] bond1: entered promiscuous mode [ 701.540213][T19243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 701.709827][T19254] veth0: entered promiscuous mode [ 702.247545][T19248] veth0: left promiscuous mode [ 702.288053][T19264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3151'. [ 702.472453][T19270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3153'. [ 703.005721][T19290] nbd: couldn't find device at index 15663104 [ 703.051418][T15826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 703.057825][T15826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 703.066820][T15826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 703.067965][T15826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 703.068603][T15826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 703.169035][T19284] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 703.183981][T19284] gretap1: entered promiscuous mode [ 703.200652][T19284] gretap1: entered allmulticast mode [ 703.848195][T19315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3167'. [ 703.975054][T19321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3168'. [ 703.989171][T19321] netlink: 'syz.3.3168': attribute type 5 has an invalid length. [ 703.998385][T19321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3168'. [ 704.044480][T19321] geneve2: entered promiscuous mode [ 704.044532][T19321] geneve2: entered allmulticast mode [ 704.055194][T19322] netlink: 'syz.6.3169': attribute type 30 has an invalid length. [ 704.055216][T19322] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3169'. [ 704.060945][T18494] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 704.060988][T18494] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 704.061020][T18494] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 704.061051][T18494] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 704.366489][T19291] ±ïª¨úrBº“€ speed is unknown, defaulting to 1000 [ 705.150009][ T5624] Bluetooth: hci4: command tx timeout [ 705.176413][T19355] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 705.454183][T19364] sctp: [Deprecated]: syz.3.3177 (pid 19364) Use of struct sctp_assoc_value in delayed_ack socket option. [ 705.454183][T19364] Use struct sctp_sack_info instead [ 705.551051][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056162800: rx timeout, send abort [ 705.551807][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056162800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 705.744774][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3182'. [ 705.759352][T19373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 705.792168][T19373] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3182'. [ 705.801672][T19373] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3182'. [ 706.121442][T19291] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.121661][T19291] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.122323][T19291] bridge_slave_0: entered allmulticast mode [ 706.124649][T19291] bridge_slave_0: entered promiscuous mode [ 706.127657][T19291] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.127836][T19291] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.127962][T19291] bridge_slave_1: entered allmulticast mode [ 706.130406][T19291] bridge_slave_1: entered promiscuous mode [ 706.253047][T19291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.266683][T19291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.495517][T19406] __nla_validate_parse: 1 callbacks suppressed [ 706.495576][T19406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3190'. [ 706.751576][T19291] team0: Port device team_slave_0 added [ 706.754891][T19291] team0: Port device team_slave_1 added [ 706.832017][T19419] netlink: 'syz.5.3195': attribute type 9 has an invalid length. [ 706.945595][T19291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.945646][T19291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.945674][T19291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.962046][T19291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.962066][T19291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.962093][T19291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.209094][T19291] hsr_slave_0: entered promiscuous mode [ 707.218786][T19291] hsr_slave_1: entered promiscuous mode [ 707.225927][T19291] debugfs: 'hsr0' already exists in 'hsr' [ 707.230229][ T5624] Bluetooth: hci4: command tx timeout [ 707.232387][T19291] Cannot create hsr debugfs directory [ 707.536936][T19436] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 707.984934][T19291] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.994482][T19291] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.198558][T19291] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.209079][T19291] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.377773][T19471] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3208'. [ 708.722983][T19291] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.723102][T19291] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.744585][T19479] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3209'. [ 708.776036][T19291] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.779830][T19291] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.310864][ T5624] Bluetooth: hci4: command tx timeout [ 710.519148][T19434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 710.608668][T19291] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 710.643722][T19291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 710.647164][T19291] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 710.686479][T19291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 710.695548][T19291] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 710.730669][T19291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 710.741676][T19291] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 710.772420][T19291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 710.965351][T19498] bond2: option mode: invalid value (10) [ 710.982301][T19498] bond2 (unregistering): Released all slaves [ 711.127537][T19510] netlink: 252 bytes leftover after parsing attributes in process `syz.5.3215'. [ 711.390248][ T5624] Bluetooth: hci4: command tx timeout [ 711.489798][T19503] syzkaller0: entered promiscuous mode [ 711.495876][T19503] syzkaller0: entered allmulticast mode [ 711.508254][T19524] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3217'. [ 711.509277][T19524] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3217'. [ 711.509296][T19524] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3217'. [ 714.580592][T19291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.661199][T19291] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.712527][T18491] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.712661][T18491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.720569][T18491] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.720674][T18491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.696596][T19599] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3236'. [ 715.696655][T19599] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3236'. [ 715.728933][T19599] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3236'. [ 715.741863][T19599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3236'. [ 716.069176][T19617] IPVS: Unknown mcast interface: macvlan1 [ 716.307442][T19625] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 716.325157][T19625] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 716.325590][T19634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3242'. [ 716.334497][T19629] tunl0: entered promiscuous mode [ 716.338370][T19629] netlink: 'syz.4.3242': attribute type 3 has an invalid length. [ 716.338391][T19629] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3242'. [ 716.391891][T19632] netlink: 'syz.3.3243': attribute type 1 has an invalid length. [ 716.392731][T19632] netlink: 'syz.3.3243': attribute type 2 has an invalid length. [ 716.486041][T19640] netlink: 'syz.6.3240': attribute type 1 has an invalid length. [ 716.486093][T19640] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3240'. [ 716.557407][T19643] netlink: 'syz.5.3245': attribute type 13 has an invalid length. [ 716.569299][T19635] vlan1: entered promiscuous mode [ 716.574782][T19635] bridge0: entered promiscuous mode [ 716.607492][T19291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.623944][T19635] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3240'. [ 716.746710][T19643] veth0: entered promiscuous mode [ 716.780667][T19646] veth0: left promiscuous mode [ 716.780959][T19647] netlink: 'syz.3.3246': attribute type 12 has an invalid length. [ 716.780998][T19647] netlink: 'syz.3.3246': attribute type 29 has an invalid length. [ 716.781015][T19647] netlink: 'syz.3.3246': attribute type 2 has an invalid length. [ 716.781032][T19647] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3246'. [ 717.033776][T19291] veth0_vlan: entered promiscuous mode [ 717.065621][T19291] veth1_vlan: entered promiscuous mode [ 717.154750][T19668] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3248'. [ 717.193856][T19291] veth0_macvtap: entered promiscuous mode [ 717.215385][T19291] veth1_macvtap: entered promiscuous mode [ 717.258645][T19291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.269387][T19291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.626432][T19682] team0 (unregistering): Port device team_slave_0 removed [ 717.652167][T19682] team0 (unregistering): Port device team_slave_1 removed [ 717.876751][T19689] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3247'. [ 719.914730][T18490] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.952915][ T8328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.953271][ T8328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.970436][T18493] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.067794][T19690] netlink: 'syz.5.3247': attribute type 2 has an invalid length. [ 720.244929][T19696] netlink: 'syz.4.3253': attribute type 12 has an invalid length. [ 720.332154][T19699] nbd: error processing sock list [ 720.387665][T19696] bond1: option primary_reselect: invalid value (255) [ 720.397981][T19696] bond1 (unregistering): Released all slaves [ 720.446969][T19697] vlan0: entered promiscuous mode [ 720.447204][T19697] vlan0: entered allmulticast mode [ 720.447220][T19697] veth0_vlan: entered allmulticast mode [ 720.520234][T19702] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3255'. [ 720.532914][T18491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.532955][T18491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.706273][T19719] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3258'. [ 720.741579][T19725] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3255'. [ 720.787056][T18491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.787092][T18491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.022007][T19717] syzkaller0: entered promiscuous mode [ 721.022062][T19717] syzkaller0: entered allmulticast mode [ 721.324937][T19742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3260'. [ 721.324972][T19742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3260'. [ 721.377982][T19746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3260'. [ 724.028565][T19737] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.030897][T19737] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.192326][T19737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.215491][T19737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.279014][T19756] __nla_validate_parse: 1 callbacks suppressed [ 724.280993][T19756] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3263'. [ 724.380058][T19754] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3262'. [ 724.394881][T19754] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 724.441759][T18491] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.442856][T18491] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.442931][T18491] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.442975][T18491] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.684041][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3264'. [ 724.837981][T19767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3267'. [ 725.059309][T19777] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 725.227682][T19780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3267'. [ 725.245535][T19782] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3267'. [ 726.102665][T19833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3278'. [ 726.327201][T19843] validate_nla: 3 callbacks suppressed [ 726.338386][T19843] netlink: 'syz.5.3281': attribute type 39 has an invalid length. [ 726.436164][T19846] netlink: 'syz.0.3282': attribute type 1 has an invalid length. [ 726.581253][T19846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 727.249819][T19880] netlink: 'syz.0.3287': attribute type 29 has an invalid length. [ 727.249863][T19880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3287'. [ 727.388587][T19879] sctp: [Deprecated]: syz.3.3288 (pid 19879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 727.388587][T19879] Use struct sctp_sack_info instead [ 727.393514][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3285'. [ 727.636918][T19894] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3290'. [ 727.896043][T19901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.915154][T19902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 728.365549][ T5624] Bluetooth: hci1: unexpected cc 0x2003 length: 10 > 9 [ 729.312726][T19980] __nla_validate_parse: 5 callbacks suppressed [ 729.312778][T19980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3306'. [ 729.312903][T19980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 729.312921][T19980] IPv6: NLM_F_CREATE should be set when creating new route [ 729.513478][T19985] dvmrp8: entered allmulticast mode [ 729.530671][T19985] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3307'. [ 729.545733][T19995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3312'. [ 729.810823][T20004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3315'. [ 729.959363][T20007] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3316'. [ 730.031776][T20016] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3318'. [ 730.054331][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3315'. [ 730.063326][T20015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3315'. [ 730.186644][T20018] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 730.308677][T20024] tun1: tun_chr_ioctl cmd 1074025675 [ 730.308721][T20024] tun1: persist disabled [ 730.463406][T20028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 730.463448][T20028] IPv6: NLM_F_CREATE should be set when creating new route [ 730.704323][T20028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.728193][T20028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.952745][T20035] netlink: 'syz.3.3324': attribute type 11 has an invalid length. [ 730.952788][T20035] netlink: 'syz.3.3324': attribute type 4 has an invalid length. [ 730.952840][T20035] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3324'. [ 731.050130][T20043] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3325'. [ 731.181387][T18489] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.181452][T18489] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.181477][T18489] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 60382 - 0 [ 731.181514][T18489] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.181537][T18489] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.181559][T18489] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 60382 - 0 [ 731.181871][T18489] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.181896][T18489] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.181918][T18489] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 60382 - 0 [ 731.182124][T20053] bridge0: port 3(veth1_to_bridge) entered blocking state [ 731.182224][T20053] bridge0: port 3(veth1_to_bridge) entered disabled state [ 731.182417][T20053] veth1_to_bridge: entered allmulticast mode [ 731.188187][T20053] veth1_to_bridge: entered promiscuous mode [ 731.202436][T18489] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.202488][T18489] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.202513][T18489] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 60382 - 0 [ 731.416654][T20058] IPv4: Oversized IP packet from 127.202.26.0 [ 731.455582][T20060] raw_sendmsg: syz.0.3331 forgot to set AF_INET. Fix it! [ 732.373704][T20108] netlink: 'syz.0.3343': attribute type 1 has an invalid length. [ 732.392418][T20108] netlink: 'syz.0.3343': attribute type 1 has an invalid length. [ 732.404703][T20108] netlink: 'syz.0.3343': attribute type 1 has an invalid length. [ 732.728558][ T31] audit: type=1107 audit(1788628305.648:7): pid=20128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 732.865996][T20132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.656114][T20161] netlink: 'syz.0.3359': attribute type 5 has an invalid length. [ 733.719453][T20167] openvswitch: netlink: Actions may not be safe on all matching packets [ 734.315521][T20187] bridge2: entered promiscuous mode [ 734.315588][T20187] bridge2: entered allmulticast mode [ 734.471138][T18491] IPVS: starting estimator thread 0... [ 734.571677][T20201] IPVS: using max 25 ests per chain, 60000 per kthread [ 734.790614][T20228] __nla_validate_parse: 15 callbacks suppressed [ 734.801405][T20228] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3376'. [ 734.942780][T20233] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 734.943207][T20233] gretap2: entered promiscuous mode [ 734.943225][T20233] gretap2: entered allmulticast mode [ 735.096790][T20242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3379'. [ 735.096987][T20242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3379'. [ 735.679932][T20265] netlink: 'syz.5.3389': attribute type 1 has an invalid length. [ 735.778397][T20261] sctp: [Deprecated]: syz.4.3388 (pid 20261) Use of int in max_burst socket option. [ 735.778397][T20261] Use struct sctp_assoc_value instead [ 736.435846][T20316] netlink: 'syz.0.3400': attribute type 83 has an invalid length. [ 739.378963][T20315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 739.823480][T20359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.967718][T20364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.986285][T20364] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3412'. [ 740.185416][T20381] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 740.364099][T20385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3419'. [ 740.374068][T20383] sctp: [Deprecated]: syz.6.3418 (pid 20383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.374068][T20383] Use struct sctp_sack_info instead [ 740.404784][T20383] netlink: 'syz.6.3418': attribute type 20 has an invalid length. [ 740.404827][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3418'. [ 740.423232][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3419'. [ 740.438027][T20383] netlink: 'syz.6.3418': attribute type 20 has an invalid length. [ 740.446708][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3418'. [ 740.495622][T20385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3419'. [ 740.612728][T18494] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.612782][T18494] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.612836][T18494] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.612868][T18494] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.794356][T20391] tipc: Enabling of bearer rejected, failed to enable media [ 740.834980][T15826] Bluetooth: hci1: command 0x0406 tx timeout [ 740.981401][T20403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3425'. [ 742.220664][T20428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3433'. [ 742.299147][T20431] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3431'. [ 742.407868][T20440] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3436'. [ 742.565740][T20446] netlink: 'syz.6.3437': attribute type 1 has an invalid length. [ 742.724249][T20450] openvswitch: netlink: Duplicate or invalid key (type 0). [ 742.845762][T20448] sctp: [Deprecated]: syz.3.3438 (pid 20448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 742.845762][T20448] Use struct sctp_sack_info instead [ 743.112818][T20469] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 743.113049][T20469] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 743.113279][T20469] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 743.113479][T20469] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 743.113683][T20469] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 743.113897][T20469] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 743.696456][T20497] netlink: 'syz.3.3453': attribute type 3 has an invalid length. [ 744.047488][T20497] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 744.554237][T20533] netlink: 'syz.6.3462': attribute type 27 has an invalid length. [ 744.564041][T20533] netlink: 'syz.6.3462': attribute type 27 has an invalid length. [ 744.585613][T20538] bond0: option miimon: invalid value (18446744071829782528) [ 744.594867][T20538] bond0: option miimon: allowed values 0 - 2147483647 [ 744.940820][T20554] FAULT_INJECTION: forcing a failure. [ 744.940820][T20554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.940890][T20554] CPU: 0 UID: 0 PID: 20554 Comm: syz.5.3467 Not tainted syzkaller #0 PREEMPT(full) [ 744.940912][T20554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 744.940922][T20554] Call Trace: [ 744.940930][T20554] [ 744.940938][T20554] dump_stack_lvl+0xe8/0x150 [ 744.940972][T20554] should_fail_ex+0x410/0x560 [ 744.941109][T20554] _copy_from_user+0x2d/0xb0 [ 744.941151][T20554] ___sys_sendmsg+0x1c6/0x360 [ 744.941222][T20554] ? __lock_acquire+0x6df/0x2e50 [ 744.941245][T20554] ? __pfx____sys_sendmsg+0x10/0x10 [ 744.941298][T20554] ? __fget_files+0x2a/0x420 [ 744.941321][T20554] ? __fget_files+0x3a2/0x420 [ 744.941350][T20554] __x64_sys_sendmsg+0x1b1/0x290 [ 744.941371][T20554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 744.941408][T20554] do_syscall_64+0x166/0x520 [ 744.941436][T20554] ? trace_irq_disable+0x3b/0x140 [ 744.941452][T20554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.941471][T20554] ? clear_bhb_loop+0x70/0xc0 [ 744.941493][T20554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.941509][T20554] RIP: 0033:0x7f8863d9e159 [ 744.941528][T20554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.941543][T20554] RSP: 002b:00007f8864c80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.941573][T20554] RAX: ffffffffffffffda RBX: 00007f8864025fa0 RCX: 00007f8863d9e159 [ 744.941585][T20554] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 744.941595][T20554] RBP: 00007f8864c80090 R08: 0000000000000000 R09: 0000000000000000 [ 744.941606][T20554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.941616][T20554] R13: 00007f8864026038 R14: 00007f8864025fa0 R15: 00007fff4b810278 [ 744.941645][T20554] [ 745.263257][T20561] __nla_validate_parse: 43 callbacks suppressed [ 745.263318][T20561] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3469'. [ 746.704259][T20614] netlink: 'syz.6.3486': attribute type 4 has an invalid length. [ 746.714903][T20617] netlink: 'syz.6.3486': attribute type 4 has an invalid length. [ 746.877998][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3488'. [ 746.889049][T20625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3488'. [ 746.957627][T20617] bond2: (slave bond_slave_0): Device is not our slave [ 746.957678][T20617] bond2: option active_slave: invalid value (bond_slave_0) [ 746.969434][T20617] bond2 (unregistering): Released all slaves [ 747.015014][T20636] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1614701658/1614701660 [ 747.025474][T20636] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1614701658/1614701659 [ 747.077280][T20629] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1614701658/1614701660 [ 747.077342][T20629] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1614701658/1614701659 [ 747.166449][T20641] net_ratelimit: 27 callbacks suppressed [ 747.166513][T20641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.425540][T20653] geneve2: entered promiscuous mode [ 747.709169][T20674] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3498'. [ 747.868989][T20680] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3499'. [ 747.931089][T20684] netlink: 'syz.0.3501': attribute type 20 has an invalid length. [ 747.931143][T20684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3501'. [ 747.990973][T18489] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.992051][ T8328] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.992090][ T8328] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.992121][ T8328] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.035901][T20687] FAULT_INJECTION: forcing a failure. [ 748.035901][T20687] name failslab, interval 1, probability 0, space 0, times 0 [ 748.051718][T20687] CPU: 1 UID: 0 PID: 20687 Comm: syz.3.3502 Not tainted syzkaller #0 PREEMPT(full) [ 748.051750][T20687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 748.051763][T20687] Call Trace: [ 748.051772][T20687] [ 748.051782][T20687] dump_stack_lvl+0xe8/0x150 [ 748.051819][T20687] should_fail_ex+0x410/0x560 [ 748.051852][T20687] ? __alloc_skb+0x1db/0x7a0 [ 748.051979][T20687] should_failslab+0xa8/0x100 [ 748.052021][T20687] ? __alloc_skb+0x1db/0x7a0 [ 748.052048][T20687] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 748.052088][T20687] ? __alloc_skb+0x18d/0x7a0 [ 748.052119][T20687] ? __alloc_skb+0x1db/0x7a0 [ 748.052156][T20687] __alloc_skb+0x1db/0x7a0 [ 748.052188][T20687] netlink_sendmsg+0x5d4/0xb40 [ 748.052275][T20687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.052307][T20687] ? apparmor_socket_sendmsg+0x98/0x360 [ 748.052425][T20687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.052447][T20687] sock_sendmsg_nosec+0x13a/0x180 [ 748.052474][T20687] ____sys_sendmsg+0x54e/0x850 [ 748.052507][T20687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.052539][T20687] ? import_iovec+0x73/0xa0 [ 748.052564][T20687] ___sys_sendmsg+0x2a5/0x360 [ 748.052585][T20687] ? __lock_acquire+0x6df/0x2e50 [ 748.052611][T20687] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.052670][T20687] ? __fget_files+0x2a/0x420 [ 748.052695][T20687] ? __fget_files+0x3a2/0x420 [ 748.052731][T20687] __x64_sys_sendmsg+0x1b1/0x290 [ 748.052756][T20687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 748.052822][T20687] do_syscall_64+0x166/0x520 [ 748.052851][T20687] ? trace_irq_disable+0x3b/0x140 [ 748.052871][T20687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.052892][T20687] ? clear_bhb_loop+0x70/0xc0 [ 748.052917][T20687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.052938][T20687] RIP: 0033:0x7f34bd79e159 [ 748.052959][T20687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.052977][T20687] RSP: 002b:00007f34be64a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.053001][T20687] RAX: ffffffffffffffda RBX: 00007f34bda25fa0 RCX: 00007f34bd79e159 [ 748.053016][T20687] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 748.053029][T20687] RBP: 00007f34be64a090 R08: 0000000000000000 R09: 0000000000000000 [ 748.053042][T20687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.053054][T20687] R13: 00007f34bda26038 R14: 00007f34bda25fa0 R15: 00007ffc4b2f2fa8 [ 748.053095][T20687] [ 748.317563][T20693] netlink: 'syz.0.3503': attribute type 1 has an invalid length. [ 748.407476][T20693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 748.411302][T20693] netlink: 'syz.0.3503': attribute type 1 has an invalid length. [ 748.485767][T20693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 748.953167][T18490] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.953236][T18490] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.953307][T18490] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.953347][T18490] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.113585][T20725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 749.171736][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3514'. [ 749.172379][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3514'. [ 749.178739][T20733] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3514'. [ 749.452997][T20739] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3516'. [ 749.810327][T20755] netlink: 'syz.6.3515': attribute type 10 has an invalid length. [ 749.907628][T20755] dummy0: entered promiscuous mode [ 749.923189][T20765] netlink: 'syz.3.3522': attribute type 12 has an invalid length. [ 750.083181][T20767] netlink: 'syz.3.3522': attribute type 12 has an invalid length. [ 750.168273][T20776] vlan2: entered allmulticast mode [ 750.174278][T20776] bond0: entered allmulticast mode [ 750.181138][T20776] bond_slave_0: entered allmulticast mode [ 750.181168][T20776] bond_slave_1: entered allmulticast mode [ 750.268592][T20781] tunl0: entered promiscuous mode [ 750.283034][T20781] netlink: 'syz.6.3525': attribute type 4 has an invalid length. [ 750.291779][T20781] __nla_validate_parse: 14 callbacks suppressed [ 750.300382][T20781] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3525'. [ 750.315213][T20781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3525'. [ 750.765446][T20794] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 751.043459][T20807] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 751.043986][T20807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 751.157618][T20807] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3530'. [ 751.184417][T20813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3533'. [ 751.194448][T20813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3533'. [ 751.204798][T20813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3533'. [ 751.214897][T20813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3533'. [ 751.215116][T20813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3533'. [ 751.215276][T20813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3533'. [ 751.215449][T20813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3533'. [ 751.334065][T20814] netlink: 'syz.4.3532': attribute type 12 has an invalid length. [ 751.416793][ T31] audit: type=1804 audit(1788628324.338:8): pid=20821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3536" name="/newroot/107/cgroup.controllers" dev="tmpfs" ino=558 res=1 errno=0 [ 751.441734][ T31] audit: type=1800 audit(1788628324.368:9): pid=20821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3536" name="cgroup.controllers" dev="tmpfs" ino=558 res=0 errno=0 [ 751.776369][T20834] netlink: 'syz.6.3540': attribute type 1 has an invalid length. [ 752.417240][T20839] ip6t_rt: unknown flags 36 [ 752.594248][T20842] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 752.633968][T20842] netlink: 'syz.6.3543': attribute type 62 has an invalid length. [ 752.644562][T20847] xt_hashlimit: size too large, truncated to 1048576 [ 752.644815][T20847] xt_hashlimit: max too large, truncated to 1048576 [ 752.644902][T20847] xt_hashlimit: overflow, rate too high: 0 [ 753.326349][T20892] sctp: [Deprecated]: syz.5.3558 (pid 20892) Use of int in maxseg socket option. [ 753.326349][T20892] Use struct sctp_assoc_value instead [ 753.458766][T20895] netlink: 'syz.5.3559': attribute type 23 has an invalid length. [ 754.322224][T20918] netlink: 'syz.6.3565': attribute type 33 has an invalid length. [ 754.794789][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.795015][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.795219][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.795393][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.795545][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.795789][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.795949][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.796109][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.796888][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.797040][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.797199][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.797348][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.797497][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.797652][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.797801][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.797981][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.798139][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.798288][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.803351][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.803514][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.804910][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.805070][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.805220][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.805369][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.805517][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.805665][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.806515][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.806690][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.808069][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.808229][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.808379][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.808530][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.808680][T20941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 757.564873][T20931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 757.567725][T20947] __nla_validate_parse: 42 callbacks suppressed [ 757.567749][T20947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3572'. [ 758.001227][T20984] netlink: 'syz.5.3581': attribute type 1 has an invalid length. [ 758.133577][T20984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 758.135744][T20992] syzkaller1: entered promiscuous mode [ 758.135765][T20992] syzkaller1: entered allmulticast mode [ 758.203334][T20987] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3580'. [ 758.608919][T21013] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3589'. [ 758.608979][T21013] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3589'. [ 758.950612][ T31] audit: type=1107 audit(1788628331.868:10): pid=21029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 760.528886][T21077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3606'. [ 760.546771][T21080] tipc: Started in network mode [ 760.546825][T21080] tipc: Node identity ac14142f, cluster identity 4711 [ 760.547189][T21080] tipc: New replicast peer: 0.0.0.0 [ 760.547674][T21080] tipc: Enabled bearer , priority 10 [ 760.695849][T21086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3609'. [ 760.932412][T21096] vlan0: entered allmulticast mode [ 760.940787][T21096] bond0: entered allmulticast mode [ 760.940847][T21096] bond_slave_0: entered allmulticast mode [ 760.940869][T21096] bond_slave_1: entered allmulticast mode [ 761.552764][T21119] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3614'. [ 761.855381][T18437] tipc: Node number set to 2886997039 [ 761.925610][T21135] FAULT_INJECTION: forcing a failure. [ 761.925610][T21135] name failslab, interval 1, probability 0, space 0, times 0 [ 761.939973][T21135] CPU: 1 UID: 0 PID: 21135 Comm: syz.5.3619 Not tainted syzkaller #0 PREEMPT(full) [ 761.940004][T21135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 761.940018][T21135] Call Trace: [ 761.940027][T21135] [ 761.940037][T21135] dump_stack_lvl+0xe8/0x150 [ 761.940077][T21135] should_fail_ex+0x410/0x560 [ 761.940117][T21135] ? __alloc_skb+0x1db/0x7a0 [ 761.940152][T21135] should_failslab+0xa8/0x100 [ 761.940182][T21135] ? __alloc_skb+0x1db/0x7a0 [ 761.940219][T21135] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 761.940252][T21135] ? __alloc_skb+0x18d/0x7a0 [ 761.940283][T21135] ? __alloc_skb+0x1db/0x7a0 [ 761.940321][T21135] __alloc_skb+0x1db/0x7a0 [ 761.940356][T21135] netlink_ack+0x136/0xb30 [ 761.940381][T21135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 761.940410][T21135] ? __pfx_nl80211_post_doit+0x10/0x10 [ 761.940555][T21135] netlink_rcv_skb+0x2a4/0x4a0 [ 761.940581][T21135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 761.940614][T21135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 761.940658][T21135] ? down_read+0x2be/0x330 [ 761.940710][T21135] genl_rcv+0x28/0x40 [ 761.940736][T21135] netlink_unicast+0x7bd/0x940 [ 761.940769][T21135] netlink_sendmsg+0x813/0xb40 [ 761.940797][T21135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.940824][T21135] ? apparmor_socket_sendmsg+0x98/0x360 [ 761.940853][T21135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.940871][T21135] sock_sendmsg_nosec+0x13a/0x180 [ 761.940895][T21135] ____sys_sendmsg+0x54e/0x850 [ 761.940918][T21135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 761.940944][T21135] ? import_iovec+0x73/0xa0 [ 761.940965][T21135] ___sys_sendmsg+0x2a5/0x360 [ 761.940985][T21135] ? __lock_acquire+0x6df/0x2e50 [ 761.941014][T21135] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.941078][T21135] ? __fget_files+0x2a/0x420 [ 761.941106][T21135] ? __fget_files+0x3a2/0x420 [ 761.941145][T21135] __x64_sys_sendmsg+0x1b1/0x290 [ 761.941173][T21135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 761.941230][T21135] do_syscall_64+0x166/0x520 [ 761.941258][T21135] ? trace_irq_disable+0x3b/0x140 [ 761.941274][T21135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.941292][T21135] ? clear_bhb_loop+0x70/0xc0 [ 761.941312][T21135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.941328][T21135] RIP: 0033:0x7f8863d9e159 [ 761.941344][T21135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.941359][T21135] RSP: 002b:00007f8864c80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.941379][T21135] RAX: ffffffffffffffda RBX: 00007f8864025fa0 RCX: 00007f8863d9e159 [ 761.941390][T21135] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 761.941401][T21135] RBP: 00007f8864c80090 R08: 0000000000000000 R09: 0000000000000000 [ 761.941411][T21135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.941420][T21135] R13: 00007f8864026038 R14: 00007f8864025fa0 R15: 00007fff4b810278 [ 761.941447][T21135] [ 762.966612][T21164] netlink: 'syz.6.3627': attribute type 4 has an invalid length. [ 763.097643][T21173] netlink: 'syz.4.3630': attribute type 1 has an invalid length. [ 763.108210][T21173] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3630'. [ 763.583647][T21186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 763.585996][T21185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3634'. [ 763.586026][T21185] netlink: 'syz.0.3634': attribute type 20 has an invalid length. [ 763.586038][T21185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3634'. [ 763.588107][T21185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3634'. [ 763.588137][T21185] netlink: 'syz.0.3634': attribute type 20 has an invalid length. [ 763.588150][T21185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3634'. [ 764.161892][T21215] ±ÿª¨úrBº“€: renamed from team_slave_0 [ 764.233383][T21218] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3642'. [ 764.255696][T21219] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3642'. [ 764.409110][T21226] syzkaller0: entered promiscuous mode [ 764.420674][T21226] syzkaller0: entered allmulticast mode [ 764.475392][T21228] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3645'. [ 764.485693][T21228] netlink: 120 bytes leftover after parsing attributes in process `syz.6.3645'. [ 764.496598][T21228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3645'. [ 764.847927][T21240] netlink: 'syz.0.3646': attribute type 7 has an invalid length. [ 764.870668][T21230] FAULT_INJECTION: forcing a failure. [ 764.870668][T21230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.894465][T21230] CPU: 1 UID: 0 PID: 21230 Comm: syz.6.3647 Not tainted syzkaller #0 PREEMPT(full) [ 764.894503][T21230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 764.894514][T21230] Call Trace: [ 764.894523][T21230] [ 764.894533][T21230] dump_stack_lvl+0xe8/0x150 [ 764.894570][T21230] should_fail_ex+0x410/0x560 [ 764.894608][T21230] _copy_from_user+0x2d/0xb0 [ 764.894632][T21230] kstrtouint_from_user+0xd6/0x180 [ 764.894672][T21230] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 764.894711][T21230] ? lock_acquire+0x115/0x350 [ 764.894735][T21230] proc_fail_nth_write+0x8e/0x210 [ 764.894799][T21230] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 764.894835][T21230] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 764.894864][T21230] vfs_write+0x296/0xba0 [ 764.894907][T21230] ? __pfx_vfs_write+0x10/0x10 [ 764.894935][T21230] ? __fget_files+0x2a/0x420 [ 764.894983][T21230] ? __fget_files+0x3a2/0x420 [ 764.895007][T21230] ? __fget_files+0x2a/0x420 [ 764.895040][T21230] ksys_write+0x150/0x270 [ 764.895073][T21230] ? __pfx_ksys_write+0x10/0x10 [ 764.895112][T21230] do_syscall_64+0x166/0x520 [ 764.895141][T21230] ? trace_irq_disable+0x3b/0x140 [ 764.895160][T21230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.895180][T21230] ? clear_bhb_loop+0x70/0xc0 [ 764.895206][T21230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.895227][T21230] RIP: 0033:0x7fb30675e98e [ 764.895247][T21230] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 764.895264][T21230] RSP: 002b:00007fb30759efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 764.895288][T21230] RAX: ffffffffffffffda RBX: 00007fb30759f6c0 RCX: 00007fb30675e98e [ 764.895303][T21230] RDX: 0000000000000001 RSI: 00007fb30759f0a0 RDI: 0000000000000004 [ 764.895315][T21230] RBP: 00007fb30759f090 R08: 0000000000000000 R09: 0000000000000000 [ 764.895327][T21230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.895339][T21230] R13: 00007fb306a26038 R14: 00007fb306a25fa0 R15: 00007ffef5055dc8 [ 764.895375][T21230] [ 765.053009][T21240] netlink: 'syz.0.3646': attribute type 7 has an invalid length. [ 765.577275][T21257] netlink: 'syz.4.3652': attribute type 1 has an invalid length. [ 765.819049][T21270] ip6gretap0: entered allmulticast mode [ 765.917600][T21271] sock: sock_set_timeout: `syz.3.3654' (pid 21271) tries to set negative timeout [ 765.917670][T21271] sock: sock_set_timeout: `syz.3.3654' (pid 21271) tries to set negative timeout [ 765.917709][T21271] sock: sock_set_timeout: `syz.3.3654' (pid 21271) tries to set negative timeout [ 765.917732][T21271] sock: sock_set_timeout: `syz.3.3654' (pid 21271) tries to set negative timeout [ 765.917754][T21271] sock: sock_set_timeout: `syz.3.3654' (pid 21271) tries to set negative timeout [ 765.917776][T21271] sock: sock_set_timeout: `syz.3.3654' (pid 21271) tries to set negative timeout [ 765.917799][T21271] sock: sock_set_timeout: `syz.3.3654' (pid 21271) tries to set negative timeout [ 765.917821][T21271] sock: sock_set_timeout: `syz.3.3654' (pid 21271) tries to set negative timeout [ 765.917843][T21271] sock: sock_set_timeout: `syz.3.3654' (pid 21271) tries to set negative timeout [ 766.247572][T21289] batadv_slave_0: entered promiscuous mode [ 766.276702][T21289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.383800][T21289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.430560][T15826] Bluetooth: hci6: command 0x0406 tx timeout [ 766.565238][T21294] gretap0: entered promiscuous mode [ 766.573951][T21300] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 766.642241][T21294] 0ªî{X¹¦: renamed from gretap0 [ 766.665645][T21294] 0ªî{X¹¦: left promiscuous mode [ 766.673040][T21294] 0ªî{X¹¦: entered allmulticast mode [ 767.300354][T21322] bond2: option all_slaves_active: invalid value (222) [ 767.330080][T21322] bond2 (unregistering): Released all slaves [ 767.498454][T21335] sch_fq: defrate 0 ignored. [ 768.095833][T21359] vlan0: entered promiscuous mode [ 768.104964][T21359] vlan0: entered allmulticast mode [ 768.105005][T21359] bridge0: entered allmulticast mode [ 768.903726][T21393] __nla_validate_parse: 15 callbacks suppressed [ 768.912662][T21393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3684'. [ 769.048736][T21395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3684'. [ 769.163614][T21407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3687'. [ 769.195309][T21395] hsr_slave_1 (unregistering): left promiscuous mode [ 769.220185][T21408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3687'. [ 769.297886][T21403] veth0: entered promiscuous mode [ 769.351910][T21408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3687'. [ 769.445144][T21402] veth0: left promiscuous mode [ 769.765734][T21423] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3689'. [ 769.765788][T21423] netlink: 'syz.6.3689': attribute type 9 has an invalid length. [ 770.023826][T21431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3693'. [ 770.059729][T21431] x_tables: duplicate underflow at hook 2 [ 770.185835][T21439] macsec1: entered promiscuous mode [ 770.266350][T21441] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3695'. [ 770.785407][T21461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3703'. [ 770.978034][T21469] netlink: 'syz.6.3704': attribute type 6 has an invalid length. [ 770.987873][T21457] 8021q: adding VLAN 0 to HW filter on device bond2 [ 771.123924][T21436] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 771.123975][T21436] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 771.209332][T21472] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3706'. [ 771.568839][T21487] IPv6: sit2: Disabled Multicast RS [ 771.588625][T21436] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 771.598638][T21436] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 771.606650][T21486] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 771.606650][T21486] Please contact the netfilter-devel mailing list or update your nftables rules. [ 771.627360][T21492] netlink: 'syz.3.3710': attribute type 2 has an invalid length. [ 771.660968][T21486] netlink: 'syz.5.3709': attribute type 1 has an invalid length. [ 771.666581][T21492] net_ratelimit: 25 callbacks suppressed [ 771.666604][T21492] netlink: zone id is out of range [ 771.666619][T21492] netlink: del zone limit has 4 unknown bytes [ 771.800097][T21491] bond3: (slave bridge3): making interface the new active one [ 771.808634][T21491] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 771.813041][T21436] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 771.813066][T21436] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 772.218197][T21436] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 772.244577][T21436] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 772.398392][T21436] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 772.398438][T21436] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 772.578234][T21436] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 772.578289][T21436] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 772.841830][T21436] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 772.854189][T21436] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 772.862810][T21436] CPU: 0 UID: 0 PID: 21436 Comm: syz.0.3695 Not tainted syzkaller #0 PREEMPT(full) [ 772.872577][T21436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 772.882682][T21436] RIP: 0010:klist_remove+0x156/0x340 [ 772.888105][T21436] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd db 5c f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be db 5c f6 49 8b 44 24 58 48 89 44 24 08 [ 772.908764][T21436] RSP: 0018:ffffc9000495f820 EFLAGS: 00010202 [ 772.915209][T21436] RAX: 000000000000000b RBX: ffff88802d699f40 RCX: ffffffff9a9db501 [ 772.923731][T21436] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 772.931877][T21436] RBP: ffffc9000495f920 R08: ffffffff905f94e3 R09: 1ffffffff20bf29c [ 772.939886][T21436] R10: dffffc0000000000 R11: fffffbfff20bf29d R12: 0000000000000000 [ 772.948064][T21436] R13: 1ffff1100ac88c0c R14: ffff888056446060 R15: dffffc0000000000 [ 772.956183][T21436] FS: 00007fd3fcc2f6c0(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 772.965419][T21436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.972214][T21436] CR2: 00007f9aaa591e9c CR3: 000000004870e000 CR4: 00000000003526f0 [ 772.980297][T21436] Call Trace: [ 772.983699][T21436] [ 772.986810][T21436] ? __pfx_klist_remove+0x10/0x10 [ 772.991860][T21436] ? kobject_move+0x5e2/0x720 [ 772.996552][T21436] ? __pfx_kobject_move+0x10/0x10 [ 773.001766][T21436] ? do_raw_spin_unlock+0xf5/0x200 [ 773.007089][T21436] ? get_device_parent+0x366/0x3a0 [ 773.012414][T21436] device_move+0x18e/0x720 [ 773.016945][T21436] hci_conn_del_sysfs+0xb8/0x1a0 [ 773.022128][T21436] hci_conn_del+0xc3d/0x1200 [ 773.026986][T21436] hci_conn_hash_flush+0x189/0x260 [ 773.032207][T21436] hci_dev_close_sync+0x7fc/0x10c0 [ 773.037528][T21436] ? __pfx___mutex_lock+0x10/0x10 [ 773.042822][T21436] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 773.048416][T21436] ? do_raw_spin_lock+0x12b/0x2f0 [ 773.053485][T21436] hci_dev_do_close+0x30/0xc0 [ 773.058353][T21436] hci_rfkill_set_block+0x1f4/0x290 [ 773.063652][T21436] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 773.069408][T21436] rfkill_set_block+0x19f/0x4d0 [ 773.074720][T21436] rfkill_fop_write+0x43b/0x560 [ 773.079603][T21436] ? common_file_perm+0x20e/0x2b0 [ 773.084654][T21436] ? __pfx_rfkill_fop_write+0x10/0x10 [ 773.090407][T21436] ? security_file_permission+0x60/0x260 [ 773.096417][T21436] ? rw_verify_area+0x203/0x4c0 [ 773.101436][T21436] ? __pfx_rfkill_fop_write+0x10/0x10 [ 773.107115][T21436] vfs_write+0x296/0xba0 [ 773.111393][T21436] ? __pfx_vfs_write+0x10/0x10 [ 773.116188][T21436] ? __fget_files+0x2a/0x420 [ 773.120811][T21436] ? __fget_files+0x2a/0x420 [ 773.125428][T21436] ? __fget_files+0x3a2/0x420 [ 773.130232][T21436] ? __fget_files+0x2a/0x420 [ 773.134863][T21436] ksys_write+0x150/0x270 [ 773.139233][T21436] ? __pfx_ksys_write+0x10/0x10 [ 773.144120][T21436] do_syscall_64+0x166/0x520 [ 773.148739][T21436] ? trace_irq_disable+0x3b/0x140 [ 773.153781][T21436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.159963][T21436] ? clear_bhb_loop+0x70/0xc0 [ 773.164750][T21436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.170663][T21436] RIP: 0033:0x7fd3fbd9e159 [ 773.175089][T21436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.194892][T21436] RSP: 002b:00007fd3fcc2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.203318][T21436] RAX: ffffffffffffffda RBX: 00007fd3fc025fa0 RCX: 00007fd3fbd9e159 [ 773.211660][T21436] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 773.219636][T21436] RBP: 00007fd3fbe35024 R08: 0000000000000000 R09: 0000000000000000 [ 773.227710][T21436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.235817][T21436] R13: 00007fd3fc026038 R14: 00007fd3fc025fa0 R15: 00007ffe851ceca8 [ 773.244167][T21436] [ 773.247314][T21436] Modules linked in: [ 773.252828][T21436] ---[ end trace 0000000000000000 ]--- [ 773.368637 ** replaying previous printk message ** [ 773.368637][T21436] RIP: 0010:klist_remove+0x156/0x340 [ 773.368693][T21436] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd db 5c f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be db 5c f6 49 8b 44 24 58 48 89 44 24 08 [ 773.368713][T21436] RSP: 0018:ffffc9000495f820 EFLAGS: 00010202 [ 773.368732][T21436] RAX: 000000000000000b RBX: ffff88802d699f40 RCX: ffffffff9a9db501 [ 773.368745][T21436] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 773.368757][T21436] RBP: ffffc9000495f920 R08: ffffffff905f94e3 R09: 1ffffffff20bf29c [ 773.368771][T21436] R10: dffffc0000000000 R11: fffffbfff20bf29d R12: 0000000000000000 [ 773.368784][T21436] R13: 1ffff1100ac88c0c R14: ffff888056446060 R15: dffffc0000000000 [ 773.368798][T21436] FS: 00007fd3fcc2f6c0(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 773.368814][T21436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 773.368828][T21436] CR2: 00007f0178a829b0 CR3: 000000004870e000 CR4: 00000000003526f0 [ 773.368872][T21436] Kernel panic - not syncing: Fatal exception [ 773.477011][T21436] Kernel Offset: disabled [ 773.481349][T21436] Rebooting in 86400 seconds..