last executing test programs: 2.936410432s ago: executing program 0 (id=20314): r0 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) sendmsg$kcm(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x40040) pipe(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r5, 0x58, &(0x7f0000000500)}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x68, r6, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010003704000000000500000000000000", @ANYRES32=r7, @ANYBLOB="c3040580000000002800128008000100677265001c00028005000a000000000008000700ac1414aa0500130001"], 0x48}, 0x1, 0x0, 0x0, 0x2050}, 0x48000) sendmmsg$inet(r2, &(0x7f0000001580)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @private=0x1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)}}], 0x1, 0x40000) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 2.612680818s ago: executing program 2 (id=20317): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000a80)=""/110, 0x6e}, {0x0}], 0x2, 0xa, 0x6c8) pipe(&(0x7f0000000300)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000}, 0x38) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x10, 0x2f, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x20040000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$alg(r9, &(0x7f0000000100)=""/12, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c001180090001"], 0xb0}, 0x1, 0x0, 0x0, 0x40014}, 0x40) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r5) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYBLOB="e76a8f2c9c6893a8e621a65464a12c55d66a3cbc6b26c8d0e5c5"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) sendto$inet(r0, &(0x7f0000000080)="81efcdc3412b", 0x6, 0x0, 0x0, 0x0) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 2.59343647s ago: executing program 0 (id=20318): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read(r3, &(0x7f0000000080)=""/38, 0x26) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f0000000980)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0x7, 0x403}]}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) 2.462459447s ago: executing program 4 (id=20319): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) 2.13266743s ago: executing program 1 (id=20321): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000240)=@ethtool_pauseparam={0x12, 0x0, 0x8, 0x2}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="00000000001200"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f0000000540)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000010000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="317e18d63a8c74c274386d0d8550", 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendto$phonet(r0, &(0x7f0000000100)="f3f4a3aeb22f9258752da8b02199c6af2c618c90c538a0281b370a9b6344b18eda6b0302b00eb6758dc010590e8365c4171e00474e611046487f4b49b650702ebd53c29d6b514e45fddcc486ac62e158546fdd292f869a0b3dd961de9193fa44e9997bf6eb67d4b7a7456d9ff560c0918ad5e0045fa9a8cd5f32cd2e5bf60f1f6830c31322c42afc735d0c47cecc8873464ee2a5ff59a3e58b0e5ad1dde93fd3802a793a6f1b55f04398d7a82798a43121852e95f775893c15830aba9b4d81000577ac87d9afd19dbc79ada5b6d65cc34f446068705deab80bdba3421b67d5257f5ae57718490d5047f3e08271c745ae6518535841fc6e", 0xf7, 0x40, &(0x7f0000000200)={0x23, 0x5b, 0x5, 0xbb}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r7, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x4000000) mmap(&(0x7f0000370000/0x4000)=nil, 0x4000, 0xa, 0x10, r6, 0xf4cff000) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x40}}, 0x4010) 2.070686711s ago: executing program 4 (id=20322): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 1.990587634s ago: executing program 2 (id=20324): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000ff030040000000000300000085000000410000009500000000000000f58c5856db41e07e97fe6bda78f954f4cd2185cabfe6eebe5b083bf032531e49d8c9ab7fb9fdb0faba8f53c0b48ee194cfff2c135f929ee30e3e1f9d5d6460db4e637e605eae78c31f0289b31c91748cfdb253457833078c598aea9e0b96c22cc7e14565eb77237e4b35fc698648aa04c73b0df61bcfa4d70154e943414cfb222a9a01"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x80000000, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r5, r5, 0x6, 0x20, 0x0, 0x9, 0x5f, 0xc08, 0x1012, 0xc3, 0x1, 0x5, 'syz0\x00'}) getsockname$packet(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r2, &(0x7f00000001c0)="11eb03", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r6, &(0x7f0000000940)="338df03cff547a4e05f7c6cb84abc90124a6a9d675aa4f8b543ec3d524656e6ea23c7fc32456abe2e2463c0e75815b53ab78553149bfbfeb01a6d3653073b3d80432bb8e6625874ce2efc19e17f4110d840b6d747751932a02dcce8281fb02b95f9ebf9477e3d5005ee95a8431", &(0x7f0000000840)=""/218}, 0x20) 1.886212543s ago: executing program 1 (id=20326): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000240)=@ethtool_pauseparam={0x12, 0x0, 0x8, 0x2}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f0000000540)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000010000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="317e18d63a8c74c274386d0d8550", 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendto$phonet(r0, &(0x7f0000000100)="f3f4a3aeb22f9258752da8b02199c6af2c618c90c538a0281b370a9b6344b18eda6b0302b00eb6758dc010590e8365c4171e00474e611046487f4b49b650702ebd53c29d6b514e45fddcc486ac62e158546fdd292f869a0b3dd961de9193fa44e9997bf6eb67d4b7a7456d9ff560c0918ad5e0045fa9a8cd5f32cd2e5bf60f1f6830c31322c42afc735d0c47cecc8873464ee2a5ff59a3e58b0e5ad1dde93fd3802a793a6f1b55f04398d7a82798a43121852e95f775893c15830aba9b4d81000577ac87d9afd19dbc79ada5b6d65cc34f446068705deab80bdba3421b67d5257f5ae57718490d5047f3e08271c745ae6518535841fc6e", 0xf7, 0x40, &(0x7f0000000200)={0x23, 0x5b, 0x5, 0xbb}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r7, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x4000000) mmap(&(0x7f0000370000/0x4000)=nil, 0x4000, 0xa, 0x10, r6, 0xf4cff000) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x40}}, 0x4010) 1.884681261s ago: executing program 4 (id=20327): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x98, r5, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:mtrr_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040080}, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r3) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x6a, @empty}, 0x1c) listen(0xffffffffffffffff, 0x10040) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x360, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x50, 0x80, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x3}}}, {{@ip={@broadcast, @multicast2, 0xff, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x84}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}, {{@ip={@loopback, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xa, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='NLBL_UNLBL\x00', 0x24000, &(0x7f0000000040)={@align, {0x81, 0x51d6, 0x4, 0xffffffffffff7c7f}}, 0x4, 0x0, &(0x7f00000000c0)=0x1}, {[0x3, 0x2, 0xffffffff, 0x6]}, 0x2, 0x17, &(0x7f0000000100)=""/23}) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}}, 0x0) 1.761981748s ago: executing program 2 (id=20329): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0xf8, 0x8, 0x2, @mcast1, @mcast1, 0x7800, 0x40, 0x9234, 0x7fffffff}}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x4, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x14, 0x0, 0x4, 0x0, "c4f40c848d97a447"}}, 0x48}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@multicast2, @loopback, 0x0}, &(0x7f0000000380)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400}, 0x4000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r5, 0x7ca8e000) writev(r6, &(0x7f0000000080)=[{0x0}], 0x1) 1.707616829s ago: executing program 1 (id=20330): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x10}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000"], 0x14}}, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c002400244000ff88ff000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 1.56066319s ago: executing program 0 (id=20331): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read(r3, &(0x7f0000000080)=""/38, 0x26) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0x7, 0x403}]}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) 1.420911459s ago: executing program 4 (id=20332): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) 1.404601694s ago: executing program 3 (id=20333): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbff"], 0xfc}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@private1, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000500410009002abdf000000000000333a0f91af30000000004000ab7bdb9293a0e"], 0x18}}, 0x4004080) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 1.093556734s ago: executing program 4 (id=20334): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fc"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read(r0, &(0x7f0000000080)=""/38, 0x26) 968.274092ms ago: executing program 1 (id=20335): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000240)=@ethtool_pauseparam={0x12, 0x0, 0x8, 0x2}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="00000000001200"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f0000000540)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000010000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="317e18d63a8c74c274386d0d8550", 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendto$phonet(r0, &(0x7f0000000100)="f3f4a3aeb22f9258752da8b02199c6af2c618c90c538a0281b370a9b6344b18eda6b0302b00eb6758dc010590e8365c4171e00474e611046487f4b49b650702ebd53c29d6b514e45fddcc486ac62e158546fdd292f869a0b3dd961de9193fa44e9997bf6eb67d4b7a7456d9ff560c0918ad5e0045fa9a8cd5f32cd2e5bf60f1f6830c31322c42afc735d0c47cecc8873464ee2a5ff59a3e58b0e5ad1dde93fd3802a793a6f1b55f04398d7a82798a43121852e95f775893c15830aba9b4d81000577ac87d9afd19dbc79ada5b6d65cc34f446068705deab80bdba3421b67d5257f5ae57718490d5047f3e08271c745ae6518535841fc6e", 0xf7, 0x40, &(0x7f0000000200)={0x23, 0x5b, 0x5, 0xbb}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r7, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x4000000) mmap(&(0x7f0000370000/0x4000)=nil, 0x4000, 0xa, 0x10, r6, 0xf4cff000) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x40}}, 0x4010) 927.45184ms ago: executing program 2 (id=20336): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000240)=@ethtool_pauseparam={0x12, 0x0, 0x8, 0x2}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="00000000001200"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f0000000540)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000010000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="317e18d63a8c74c274386d0d8550", 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendto$phonet(r0, &(0x7f0000000100)="f3f4a3aeb22f9258752da8b02199c6af2c618c90c538a0281b370a9b6344b18eda6b0302b00eb6758dc010590e8365c4171e00474e611046487f4b49b650702ebd53c29d6b514e45fddcc486ac62e158546fdd292f869a0b3dd961de9193fa44e9997bf6eb67d4b7a7456d9ff560c0918ad5e0045fa9a8cd5f32cd2e5bf60f1f6830c31322c42afc735d0c47cecc8873464ee2a5ff59a3e58b0e5ad1dde93fd3802a793a6f1b55f04398d7a82798a43121852e95f775893c15830aba9b4d81000577ac87d9afd19dbc79ada5b6d65cc34f446068705deab80bdba3421b67d5257f5ae57718490d5047f3e08271c745ae6518535841fc6e", 0xf7, 0x40, &(0x7f0000000200)={0x23, 0x5b, 0x5, 0xbb}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r7, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x4000000) mmap(&(0x7f0000370000/0x4000)=nil, 0x4000, 0xa, 0x10, r6, 0xf4cff000) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x40}}, 0x4010) 890.424049ms ago: executing program 4 (id=20337): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x4, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r10, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r12, 0xfffffdc8, &(0x7f0000000340)}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c0504000600"], 0x42) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, 0x0, 0x0) 885.629423ms ago: executing program 3 (id=20338): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @multicast}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}}) 593.267865ms ago: executing program 1 (id=20339): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000ff030040000000000300000085000000410000009500000000000000f58c5856db41e07e97fe6bda78f954f4cd2185cabfe6eebe5b083bf032531e49d8c9ab7fb9fdb0faba8f53c0b48ee194cfff2c135f929ee30e3e1f9d5d6460db4e637e605eae78c31f0289b31c91748cfdb253457833078c598aea9e0b96c22cc7e14565eb77237e4b35fc698648aa04c73b0df61bcfa4d70154e943414cfb222a9a01"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x80000000, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r5, r5, 0x6, 0x20, 0x0, 0x9, 0x5f, 0xc08, 0x1012, 0xc3, 0x1, 0x5, 'syz0\x00'}) getsockname$packet(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r2, &(0x7f00000001c0)="11eb03", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r6, &(0x7f0000000940)="338df03cff547a4e05f7c6cb84abc90124a6a9d675aa4f8b543ec3d524656e6ea23c7fc32456abe2e2463c0e75815b53ab78553149bfbfeb01a6d3653073b3d80432bb8e6625874ce2efc19e17f4110d840b6d747751932a02dcce8281fb02b95f9ebf9477e3d5005ee95a8431", &(0x7f0000000840)=""/218}, 0x20) 490.87573ms ago: executing program 3 (id=20340): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000240)=@ethtool_pauseparam={0x12, 0x0, 0x8, 0x2}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f0000000540)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000010000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="317e18d63a8c74c274386d0d8550", 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendto$phonet(r0, &(0x7f0000000100)="f3f4a3aeb22f9258752da8b02199c6af2c618c90c538a0281b370a9b6344b18eda6b0302b00eb6758dc010590e8365c4171e00474e611046487f4b49b650702ebd53c29d6b514e45fddcc486ac62e158546fdd292f869a0b3dd961de9193fa44e9997bf6eb67d4b7a7456d9ff560c0918ad5e0045fa9a8cd5f32cd2e5bf60f1f6830c31322c42afc735d0c47cecc8873464ee2a5ff59a3e58b0e5ad1dde93fd3802a793a6f1b55f04398d7a82798a43121852e95f775893c15830aba9b4d81000577ac87d9afd19dbc79ada5b6d65cc34f446068705deab80bdba3421b67d5257f5ae57718490d5047f3e08271c745ae6518535841fc6e", 0xf7, 0x40, &(0x7f0000000200)={0x23, 0x5b, 0x5, 0xbb}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r7, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x4000000) mmap(&(0x7f0000370000/0x4000)=nil, 0x4000, 0xa, 0x10, r6, 0xf4cff000) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x40}}, 0x4010) 451.974665ms ago: executing program 2 (id=20341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000002200000009"], 0x33) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000400)={0x29, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @ra, @jumbo={0xc2, 0x4, 0x7fffffff}]}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f1700ec3ffd0700001500000017000040006100005f2e"], 0x0, 0x37, 0x0, 0x0, 0x1000}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r1, 0x0, &(0x7f00000003c0)=""/61}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x5, 0xa, 0x0, 0x0, 0x87}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000080000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3bf45c42995560a99952bed40cf5a804000000db7e2378d5afd35f4c16827f55b3af494e39ecfb33020000030090c332b6a99a8d872b8e88a94cb519f5c17631af956a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xffffffff, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000000)=']@-^)\xbf:]($^\x00', 0x345900, &(0x7f0000000100)={@align=0x5, {0x40, 0x9, 0x2, 0x7}}, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x9}) sendmsg$sock(r6, &(0x7f0000000ac0)={&(0x7f0000000600)=@phonet={0x23, 0xa, 0x4}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)="c1d431f5a00104799b2d8d6729780765cc9c600eacc5ac4e8f0b1b573b5dfb6d6272986f355070f67711a79f593bf1019e9061662002", 0x36}, {&(0x7f00000006c0)="fcc63a7f074968aba2fd252340e32d4dbbd84042d0c343ce85ecfa01ff4d6015146ce36fa55f915ab67424d5a07615fb04b1a08139a3f3df601c752f95baffdd67b7a931cd5db79b52a4930abb94c3b8eac54ff6a3baa5b8da5af9982f954cf9eb46ccfcd8cad28241515eb8235932e49def014d93b720e315e6525d764c41ba0e9f5d5af2f741ab930cffa70f98588d804ff689ae9caa26d033ed581073e77e", 0xa0}, {&(0x7f00000007c0)="778aad66becb663d455d47bfceda1bb12082657a8eb9466625806729a1e18407bc5859aecf0ef34400ad8670a77a17fb2b1360a0da7cd1e3b998df0a59a5e9a702cd76f66a66210fd59b5ea45a7d6f5d493e09f686bd3b679f3344cdd25c0e0bfc496932058adcbf71db96d65f30d39d3fdecb7e9b499f0d2f14bec74a802c741c91733e3c1014b71d6a8f2ccf0a8d9d00d1519c10a5d063ff296c212c3fcc63c78d39c50082595d6c5e58561d2cae8439696c9075ea828aa80219532b358e14360cf30c20e0491747aa4829d8d63b5dd5899d98e0713527ab215007e559cc25a1a5c8cdca0b262f2ee056", 0xeb}, {&(0x7f00000008c0)="0b01693b6f59a4ae485f3cb5c78606a96ad487560f0e3a180dd94540843774f9f33ceeabbf985be3ac0e8cd78e5b425bcce9f0ecd408f3d668cc3234b22c17bfc0d564a85f13e6", 0x47}, {&(0x7f0000000940)="67af57bc31a36359e9cffa4c87ce40e6e71095a4638f66bdd8f86d77fae3014e9c3cc5d6abc04a0cbd57ebcea2d54c4782f66fa1c940bf80a36b7fb9a2fc01ee661134d1c760cf63fea6ffcd22eb1e9cd36a93c511b22bcf7141b4b3226a5ed0905ead5fef13d9128afbd250ea71bbe4d0e2981180be9982d7eb62da3c167d5e0f0ce091fa100c0fa1af99024b75c8e9415234e6b1e3d0e1b9ca16aea0e39934dc96a1ece47d8f15b7ce22cc2d2c6b206d771e28d2b7dc0e76ff5deb26fdefc31e302dea77862a20e7bb99e6a5e56956ff", 0xd1}], 0x5}, 0x4000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x0, 0x168, 0x10, 0x160, 0xb, 0x330, 0x250, 0x250, 0x330, 0x250, 0x3, 0x0, {[{{@ipv6={@loopback, @remote, [0xff6a], [], 'lo\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x6f}, 0x6000000, 0xf8, 0x160, 0x0, {0x0, 0x28e}, [@common=@hl={{0x28}, {0x0, 0x13}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0xfffffffe, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r6) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mkdirat$cgroup(r12, &(0x7f0000000000)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000b40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000005c0)={0x1c, r11, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x44020) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r10, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xae}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 451.214924ms ago: executing program 0 (id=20342): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x98, r5, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:mtrr_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040080}, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r3) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x6a, @empty}, 0x1c) listen(0xffffffffffffffff, 0x10040) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x360, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x50, 0x80, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x3}}}, {{@ip={@broadcast, @multicast2, 0xff, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x84}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}, {{@ip={@loopback, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xa, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='NLBL_UNLBL\x00', 0x24000, &(0x7f0000000040)={@align, {0x81, 0x51d6, 0x4, 0xffffffffffff7c7f}}, 0x4, 0x0, &(0x7f00000000c0)=0x1}, {[0x3, 0x2, 0xffffffff, 0x6]}, 0x2, 0x17, &(0x7f0000000100)=""/23}) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}}, 0x0) 368.437765ms ago: executing program 1 (id=20343): r0 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) sendmsg$kcm(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x40040) pipe(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r5, 0x58, &(0x7f0000000500)}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x68, r6, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010003704000000000500000000000000", @ANYRES32=r7, @ANYBLOB="c3040580000000002800128008000100677265001c00028005000a000000000008000700ac1414aa0500130001"], 0x48}, 0x1, 0x0, 0x0, 0x2050}, 0x48000) sendmmsg$inet(r2, &(0x7f0000001580)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @private=0x1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)}}], 0x1, 0x40000) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 309.468543ms ago: executing program 3 (id=20344): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) 209.180217ms ago: executing program 3 (id=20345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x10}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000"], 0x14}}, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c002400244000ff88ff000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 151.990358ms ago: executing program 0 (id=20346): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x14, 0x3, 0x8, 0x7, 0x141, 0xffffffffffffffff, 0xfca1, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f00000006c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000640)=""/11, 0xb}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000240)}}], 0x2, 0x40000000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x9, 0x20000003, 0x5, 0x3, 0x100, 0x7, 0x5, 0xdce, 0x1, 0xa, 0x1a, 0x1d, 0x0, 0xffff8004, 0x9}}]}}]}, 0x170}}, 0x24040004) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, 0xc80, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={@remote, 0x54, r3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xb}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x400c804) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xfff3, 0x5}, {0xfff2, 0xffff}, {0x1, 0xffe4}}}, 0x24}}, 0x20044800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x700, 0x7800, 0x4, 0x200, {{0x17, 0x4, 0x0, 0x3, 0x5c, 0x65, 0x0, 0x8, 0x2f, 0x0, @multicast1, @multicast2, {[@noop, @timestamp_prespec={0x44, 0x44, 0xfe, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x8}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1}, {@rand_addr=0x64010100, 0xf0b2}, {@private=0xa010100, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0xd}, {@local, 0x101}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @dev}, &(0x7f0000000300)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="44030000", @ANYRES16=0x0, @ANYBLOB="000026bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff0700003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=r3, @ANYBLOB="e400028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400fffeffff38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB='\b\x00', @ANYRES32=r10, @ANYBLOB="f800028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000e0000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b7570000000000000257072f84fbbb0c30000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB], 0x344}, 0x1, 0x0, 0x0, 0x40080}, 0x24000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad5600008100006c78400000e000"/25, 0x19) 100.627321ms ago: executing program 3 (id=20347): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xfffffffd}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYRESOCT=r0], 0xcc}}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1) ioctl$XFS_IOC_START_COMMIT(r2, 0x8916, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="e5", 0x1}], 0x1000000000000032) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, &(0x7f00000003c0)) syz_emit_ethernet(0x162, &(0x7f0000001b00)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf886dd67c8ba2c012c0600ff020000000000000000000000000001fe80000000000000000000000000000d330d000000000000c910ff010000000000000000000000000001c20400000006071800000003040f0300040000000000000000000000000000000730000000010a020f00000001000000000001010000000000000700000000000000010400000000000002000000200000000401800001000000000000000000000000000000000000000000000200004e2100004e2000000001000000040000000000000000000000950000a74f0000000300000400000000070000000500000080000000800000000500000000000000000000000200000003000000f000000003000000060000004c00000001800000000000047500000090ffff655a0000000900000002ffffffff000000080000000900000010fffff09200000fff00000800000000050000007f00000800000030f0912cbf7c83114465ea01738ef23941604d44498a5351dfb8345668e5e5159f72d353550094c7a8008b0f5cf4ca4ec113de587fc9a626b93642e76a1bc47eb48164"], 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r5, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl(r0, 0x204, &(0x7f00000001c0)="158c3f78d68c2b1c5558af6de79d7c1f73cee5a344500aa3997e4e274ac629a8058f03e2fb7fe9b6693d9f6dbf10729b9e65b9bb31474c7914ef6f788e5f36") r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f0000000400000008000000080000000000000028dc87811364f4653acdaf57fe0ecaa37cddf10a0fda097353591360c03b66c25ca87e7c8988bf29ca4797ce185b9b26959949ef8c18889317032a4900000000000078d585762fcda1695d64a2caae73d2f436be4e594b970cc24c9c31f6ccfc31bb00700e6f327653ce362230f4734a45bdf64539b14bb10f487bc142c22a4f0e4495fcb71d58a0ca5153f2932d26bbe394f94a5593b23e19992f0ef21723de9598f4cccad5503319490ade4848d41ae4e9196d700d1d664cd34b2c91e4f8272fcf695fa50bed6c712a6f5706f006b3d63260d39f40c4fc9f1e77db", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fddfffff000000000008000018110000", @ANYBLOB="0000000000000000b7080800000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r8, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r8, @ANYRESOCT=r7, @ANYBLOB="54f6e76af45de03efae8f542716d2eeabbccec4a87da5b36fb384d1707cd576942329f867edc9c62bcdc2517f032f110205cc93e036204fbe0887fb88f9098a5dcf0bce76d7d03b73d0d4048cf5093f9965af87264e97b9d0218efa7acc772496e5c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) 49.227571ms ago: executing program 2 (id=20348): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0xf8, 0x8, 0x2, @mcast1, @mcast1, 0x7800, 0x40, 0x9234, 0x7fffffff}}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x4, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x14, 0x0, 0x4, 0x0, "c4f40c848d97a447"}}, 0x48}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@multicast2, @loopback, 0x0}, &(0x7f0000000380)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x400}, 0x4000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r5, 0x7ca8e000) writev(r6, &(0x7f0000000080)=[{0x0}], 0x1) 0s ago: executing program 0 (id=20349): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000240)=@ethtool_pauseparam={0x12, 0x0, 0x8, 0x2}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="00000000001200"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f0000000540)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000010000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="317e18d63a8c74c274386d0d8550", 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendto$phonet(r0, &(0x7f0000000100)="f3f4a3aeb22f9258752da8b02199c6af2c618c90c538a0281b370a9b6344b18eda6b0302b00eb6758dc010590e8365c4171e00474e611046487f4b49b650702ebd53c29d6b514e45fddcc486ac62e158546fdd292f869a0b3dd961de9193fa44e9997bf6eb67d4b7a7456d9ff560c0918ad5e0045fa9a8cd5f32cd2e5bf60f1f6830c31322c42afc735d0c47cecc8873464ee2a5ff59a3e58b0e5ad1dde93fd3802a793a6f1b55f04398d7a82798a43121852e95f775893c15830aba9b4d81000577ac87d9afd19dbc79ada5b6d65cc34f446068705deab80bdba3421b67d5257f5ae57718490d5047f3e08271c745ae6518535841fc6e", 0xf7, 0x40, &(0x7f0000000200)={0x23, 0x5b, 0x5, 0xbb}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r7, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x4000000) mmap(&(0x7f0000370000/0x4000)=nil, 0x4000, 0xa, 0x10, r6, 0xf4cff000) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x40}}, 0x4010) kernel console output (not intermixed with test programs): [ 1329.004083][T18742] bridge13: left allmulticast mode [ 1329.043913][T18742] bond16: left promiscuous mode [ 1329.051236][T18742] bridge14: left promiscuous mode [ 1329.395482][T18766] tipc: Resetting bearer [ 1329.687564][ T65] bond20: (slave bridge18): link status up again after 0 ms [ 1329.716039][ T65] bond28: (slave ip6gretap2): link status up again after 0 ms [ 1329.726088][ T1124] bond20: (slave bridge18): link status up again after 0 ms [ 1329.744941][ T3593] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1329.756694][ T3593] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.758247][ T1124] bond28: (slave ip6gretap2): link status up again after 0 ms [ 1329.777242][ T3593] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 41066 - 0 [ 1329.782784][ T65] bond20: (slave bridge18): link status up again after 0 ms [ 1329.800235][ T3593] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 256 - 0 [ 1329.831046][ T3593] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1329.843209][ T65] bond20: (slave bridge18): link status up again after 0 ms [ 1329.849727][ T3593] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.854495][ T1124] bond28: (slave ip6gretap2): link status up again after 0 ms [ 1329.883892][ T3593] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 41066 - 0 [ 1329.896253][ T65] bond20: (slave bridge18): link status up again after 0 ms [ 1329.904594][ T1124] bond28: (slave ip6gretap2): link status up again after 0 ms [ 1329.913037][ T3593] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 256 - 0 [ 1329.935982][ T65] bond28: (slave ip6gretap2): link status up again after 0 ms [ 1329.990090][T18792] netlink: 'syz.4.19303': attribute type 12 has an invalid length. [ 1329.991271][ T9883] syzkaller0 speed is unknown, defaulting to 1000 [ 1330.052452][ T3593] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1330.071179][ T3593] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.107073][ T3593] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 41066 - 0 [ 1330.143274][ T3593] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 256 - 0 [ 1330.174351][ T3593] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1330.198021][ T3593] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.222827][ T3593] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 41066 - 0 [ 1330.250148][ T3593] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 256 - 0 [ 1330.262780][T18820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19306'. [ 1330.453565][T18820] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1330.727218][T18823] bond25: (slave veth23): Enslaving as an active interface with an up link [ 1330.742032][T18837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19306'. [ 1330.832069][T18828] netlink: 200 bytes leftover after parsing attributes in process `syz.3.19306'. [ 1331.039124][T18837] bond25: (slave bridge24): Enslaving as an active interface with an up link [ 1331.155281][T18765] syzkaller0 speed is unknown, defaulting to 1000 [ 1332.802287][T18898] hsr0: entered promiscuous mode [ 1332.887412][T18901] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19315'. [ 1332.917737][T18901] hsr_slave_0: left promiscuous mode [ 1332.925525][T18901] hsr_slave_1: left promiscuous mode [ 1332.934655][T18901] hsr0 (unregistering): left promiscuous mode [ 1333.064144][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19317'. [ 1333.718397][T18838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1333.954727][T18935] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1333.980957][T18935] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1334.120019][T18938] block nbd4: server does not support multiple connections per device. [ 1334.142364][T18938] block nbd4: shutting down sockets [ 1334.430489][T18952] netlink: 'syz.3.19324': attribute type 1 has an invalid length. [ 1334.643393][T18952] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1334.751337][T18965] macvlan4: entered promiscuous mode [ 1334.770253][T18965] macvlan4: entered allmulticast mode [ 1334.803328][T18960] bond26: (slave ip6gretap3): making interface the new active one [ 1334.815538][T18960] bond26: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1335.127411][ T65] net_ratelimit: 72 callbacks suppressed [ 1335.127437][ T65] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1335.155066][T18979] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19328'. [ 1335.186329][ T65] bond20: (slave bridge18): failed to get link speed/duplex [ 1335.286989][ T3593] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1335.316378][ T3593] bond20: (slave bridge18): failed to get link speed/duplex [ 1335.416185][ T1124] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1335.466058][ T65] bond20: (slave bridge18): failed to get link speed/duplex [ 1335.635967][ T3593] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1335.676537][ T3593] bond20: (slave bridge18): failed to get link speed/duplex [ 1335.708676][T18313] IPVS: ip_vs_send_async error -13 [ 1335.768441][ T3595] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1335.781664][T19000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1335.829644][ T3595] bond20: (slave bridge18): failed to get link speed/duplex [ 1335.877747][T18953] syzkaller0 speed is unknown, defaulting to 1000 [ 1336.075928][T19017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19335'. [ 1336.334344][T19031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19336'. [ 1336.524117][T19038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19338'. [ 1337.015262][T19021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19335'. [ 1337.015435][T19028] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19336'. [ 1337.137822][T19048] netlink: 68 bytes leftover after parsing attributes in process `syz.2.19341'. [ 1337.613216][T19057] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19344'. [ 1337.772591][T19057] dummy0 (unregistering): left allmulticast mode [ 1338.700147][T19079] netlink: 'syz.4.19349': attribute type 13 has an invalid length. [ 1338.726563][T19079] netlink: 'syz.4.19349': attribute type 17 has an invalid length. [ 1338.809441][T19079] erspan0: left promiscuous mode [ 1339.087580][T19079] bridge0: left promiscuous mode [ 1339.167079][T19079] 8021q: adding VLAN 0 to HW filter on device  [ 1339.887079][T19079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1339.943528][T19079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1340.041786][T19079] veth1_vlan: left promiscuous mode [ 1340.072167][T19079] veth0_vlan: left promiscuous mode [ 1340.102630][T19079] veth0_vlan: entered promiscuous mode [ 1340.154535][T19079] veth1_vlan: entered promiscuous mode [ 1340.200147][T19079] veth1_macvtap: left promiscuous mode [ 1340.215577][T19079] veth1_macvtap: entered promiscuous mode [ 1340.289881][T19079] net_ratelimit: 32 callbacks suppressed [ 1340.289907][T19079] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1340.546427][T19076] syzkaller1: entered promiscuous mode [ 1340.566615][T19076] syzkaller1: entered allmulticast mode [ 1340.577839][ T1124] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.616763][ T36] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1340.629311][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.776398][ T3593] bond20: (slave bridge18): failed to get link speed/duplex [ 1340.812535][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.836261][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.860492][T19106] netlink: 'syz.3.19354': attribute type 3 has an invalid length. [ 1340.977683][ T1124] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1341.023807][ T1124] bond20: (slave bridge18): failed to get link speed/duplex [ 1341.125922][ T36] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1341.176022][ T36] bond20: (slave bridge18): failed to get link speed/duplex [ 1341.240088][ T3593] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1341.296689][ T1124] bond20: (slave bridge18): failed to get link speed/duplex [ 1341.329243][T19115] dvmrp0: left allmulticast mode [ 1341.347955][T19115] batadv_slave_1: left allmulticast mode [ 1341.506905][ T36] bond20: (slave bridge18): failed to get link speed/duplex [ 1342.491055][T19140] : renamed from bond0 (while UP) [ 1342.518496][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19361'. [ 1342.597578][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19361'. [ 1342.613995][T19142] netlink: 'syz.1.19362': attribute type 1 has an invalid length. [ 1342.669899][T19140] team1: entered promiscuous mode [ 1342.693470][T19140] team1: entered allmulticast mode [ 1342.711378][T19140] 8021q: adding VLAN 0 to HW filter on device team1 [ 1342.735186][T19146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19362'. [ 1342.760487][T19143] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 1342.906182][T19143] team2: entered promiscuous mode [ 1342.945936][T19143] team2: entered allmulticast mode [ 1342.955679][T19143] 8021q: adding VLAN 0 to HW filter on device team2 [ 1343.189955][T19145] bond26: (slave geneve5): making interface the new active one [ 1343.216841][T19145] bond26: (slave geneve5): Enslaving as an active interface with an up link [ 1343.255784][T19146] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1343.319849][T19149] tipc: Resetting bearer [ 1343.877284][ T3593] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 1343.886567][ T3593] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 1343.955423][ T3593] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 1343.980860][ T3593] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 1344.166995][T19165] netlink: 68 bytes leftover after parsing attributes in process `syz.1.19367'. [ 1344.213261][T19166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19366'. [ 1345.366854][ T3595] net_ratelimit: 42 callbacks suppressed [ 1345.366882][ T3595] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1345.416443][ T3595] bond20: (slave bridge18): failed to get link speed/duplex [ 1345.516011][ T36] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1345.544268][ T3593] bond20: (slave bridge18): failed to get link speed/duplex [ 1345.636236][ T3595] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1345.679185][ T3595] bond20: (slave bridge18): failed to get link speed/duplex [ 1345.734291][T19202] tipc: Enabling of bearer rejected, already enabled [ 1345.757806][ T1124] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1345.806010][ T1124] bond20: (slave bridge18): failed to get link speed/duplex [ 1345.923357][T19207] erspan0: entered promiscuous mode [ 1345.959786][T19212] netlink: 108 bytes leftover after parsing attributes in process `syz.0.19375'. [ 1346.793180][T19207] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.814816][T19207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.899206][T19207] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check. [ 1346.916375][T19206] netlink: 'syz.4.19378': attribute type 12 has an invalid length. [ 1346.939650][T19209] bond0: left promiscuous mode [ 1346.953072][T19209] 8021q: adding VLAN 0 to HW filter on device 60X [ 1346.999909][T19209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1347.016905][T19209] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1347.242300][ T65] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.268992][ T65] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.289659][ T65] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.313689][ T65] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.335264][T19244] netlink: 68 bytes leftover after parsing attributes in process `syz.3.19382'. [ 1347.482094][T19254] netlink: 'syz.0.19387': attribute type 1 has an invalid length. [ 1347.588118][T19261] bond13: (slave geneve5): making interface the new active one [ 1347.599348][T19261] bond13: (slave geneve5): Enslaving as an active interface with an up link [ 1347.619176][ T48] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1347.652256][T19254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19387'. [ 1347.680002][ T48] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1347.703795][ T48] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1347.735434][ T48] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1347.761605][T19254] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1347.983856][T19261] tipc: Resetting bearer [ 1348.036270][ T9883] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1348.080057][T19277] netlink: 'syz.2.19393': attribute type 12 has an invalid length. [ 1348.194150][T19286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19394'. [ 1348.438689][T19271] syzkaller0: entered promiscuous mode [ 1348.461868][T19271] syzkaller0: entered allmulticast mode [ 1348.669885][T19300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19397'. [ 1348.700411][ T9883] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1348.779590][T19302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19398'. [ 1349.034553][T19309] netlink: 'syz.0.19400': attribute type 13 has an invalid length. [ 1353.840700][T19302] veth0: entered promiscuous mode [ 1353.849241][T19302] macvtap1: entered promiscuous mode [ 1353.854893][T19302] macvtap1: entered allmulticast mode [ 1353.860643][T19302] veth0: entered allmulticast mode [ 1353.880435][T19307] veth0: left allmulticast mode [ 1353.886501][T19307] veth0: left promiscuous mode [ 1353.891465][T19307] macvtap1: left promiscuous mode [ 1353.902843][T19307] macvtap1: left allmulticast mode [ 1354.157090][ T9] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1354.247386][ T13] net_ratelimit: 6 callbacks suppressed [ 1354.247411][ T13] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1354.323696][T19322] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19404'. [ 1354.333624][ T3593] bond20: (slave bridge18): failed to get link speed/duplex [ 1354.426038][ T48] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1354.481466][ T3593] bond20: (slave bridge18): failed to get link speed/duplex [ 1354.501747][T19332] netlink: 'syz.3.19407': attribute type 12 has an invalid length. [ 1354.539880][T19332] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1354.570129][T19333] tipc: Enabling of bearer rejected, already enabled [ 1354.626665][ T9314] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1354.675681][T19338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19410'. [ 1354.826174][ T9] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1354.896444][ T9314] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1354.936215][ T9314] bond20: (slave bridge18): failed to get link speed/duplex [ 1355.027430][ T13] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1355.066506][ T13] bond20: (slave bridge18): failed to get link speed/duplex [ 1355.166614][ T13] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1355.181683][T19355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19413'. [ 1356.542697][T19392] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19420'. [ 1356.824937][T19401] netlink: 'syz.3.19422': attribute type 4 has an invalid length. [ 1356.931258][T19404] netlink: 'syz.1.19423': attribute type 12 has an invalid length. [ 1356.963948][T19371] syzkaller0 speed is unknown, defaulting to 1000 [ 1357.542687][T19423] netlink: 68 bytes leftover after parsing attributes in process `syz.4.19426'. [ 1357.582268][T19414] syzkaller1: entered promiscuous mode [ 1357.626434][T19414] syzkaller1: entered allmulticast mode [ 1358.358278][T19444] bond10: (slave lo): Releasing backup interface [ 1358.383351][T19444] bond10: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1358.435177][T19444] batman_adv: batadv0: Removing interface: dummy0 [ 1358.462458][T19444] bridge_slave_0: left allmulticast mode [ 1358.477477][T19444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.491116][T19444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.514680][T19444] veth0_to_bond: left allmulticast mode [ 1358.524244][T19444] veth0_to_bond: left promiscuous mode [ 1358.530786][T19444] bridge13: port 2(veth0_to_bond) entered disabled state [ 1358.549984][T19444] bond0: (slave bond_slave_0): Releasing backup interface [ 1358.568418][T19444] bond_slave_0: left promiscuous mode [ 1358.593301][T19444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1358.601567][T19444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.989973][T19459] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19432'. [ 1359.040242][T19454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19431'. [ 1359.198823][T19454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19431'. [ 1359.597137][T19460] tipc: Resetting bearer [ 1359.690007][T19460] bridge0: port 3(vlan5) entered disabled state [ 1360.888330][T19468] netlink: 'syz.2.19435': attribute type 12 has an invalid length. [ 1360.913375][T19456] syzkaller0 speed is unknown, defaulting to 1000 [ 1360.986816][ T3593] net_ratelimit: 45 callbacks suppressed [ 1360.986842][ T3593] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1361.027980][ T9314] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.042219][ T9314] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1361.051294][ T9314] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1361.071605][T19486] netlink: 'syz.1.19439': attribute type 12 has an invalid length. [ 1361.090826][ T9314] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.132289][ T9314] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1361.152495][ T9314] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1361.161952][ T9314] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.171340][ T9314] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1361.180420][ T9314] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1361.211107][ T9314] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.237063][ T9314] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1361.270988][ T9314] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1361.299440][T19502] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 1361.332814][T19502] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 1361.465233][T19508] netlink: 68 bytes leftover after parsing attributes in process `syz.1.19443'. [ 1361.496139][ T48] bond20: (slave bridge18): failed to get link speed/duplex [ 1361.516213][ T36] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1361.628179][ T13] bond20: (slave bridge18): failed to get link speed/duplex [ 1361.646297][ T13] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1361.797841][ T4282] block nbd4: Receive control failed (result -32) [ 1361.891068][ T3593] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1361.925952][ T3593] bond20: (slave bridge18): failed to get link speed/duplex [ 1361.974163][T19515] lo: entered allmulticast mode [ 1361.983685][T19517] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19445'. [ 1361.994702][T19515] lo: left allmulticast mode [ 1362.016118][ T3593] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1362.067393][ T9314] bond20: (slave bridge18): failed to get link speed/duplex [ 1362.146127][ T3593] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1362.254755][T19525] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19457'. [ 1364.193098][T19565] netlink: 68 bytes leftover after parsing attributes in process `syz.3.19455'. [ 1364.581165][T19577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19458'. [ 1364.998012][T19586] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19459'. [ 1365.192338][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19460'. [ 1365.247783][T19590] syzkaller1: entered promiscuous mode [ 1365.273071][T19590] syzkaller1: entered allmulticast mode [ 1365.962508][T19621] netlink: 'syz.0.19465': attribute type 13 has an invalid length. [ 1365.990569][T19621] netlink: 'syz.0.19465': attribute type 17 has an invalid length. [ 1367.776882][T19621] erspan0: left promiscuous mode [ 1368.008685][T19621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.030080][T19658] netlink: 'syz.4.19468': attribute type 10 has an invalid length. [ 1368.071712][T19621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1368.429496][T19621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1368.445653][T19621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1368.488470][T19621] net_ratelimit: 64 callbacks suppressed [ 1368.488495][T19621] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1368.536251][ T1124] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1368.549291][ T36] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1368.559797][ T36] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1368.570793][ T36] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1368.590545][ T36] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1368.620508][ T9314] bond20: (slave bridge18): failed to get link speed/duplex [ 1368.651859][ T36] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1368.681601][ T36] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1368.720650][ T36] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1368.743214][ T36] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1368.779979][ T1124] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1368.792898][T19677] netlink: 'syz.2.19473': attribute type 13 has an invalid length. [ 1368.812704][ T1124] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1369.326321][ T48] bond20: (slave bridge18): link status up again after 0 ms [ 1369.346265][ T48] bond28: (slave ip6gretap2): link status up again after 0 ms [ 1369.356200][ T48] bond20: (slave bridge18): link status up again after 0 ms [ 1369.366381][ T48] bond28: (slave ip6gretap2): link status up again after 0 ms [ 1369.376299][ T48] bond20: (slave bridge18): link status up again after 0 ms [ 1369.386336][ T48] bond28: (slave ip6gretap2): link status up again after 0 ms [ 1369.396522][ T1124] bond20: (slave bridge18): link status up again after 0 ms [ 1369.425490][T19668] syzkaller0 speed is unknown, defaulting to 1000 [ 1369.916394][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19479'. [ 1370.170319][T19707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19480'. [ 1370.180463][T19701] syzkaller1: entered promiscuous mode [ 1370.190273][T19701] syzkaller1: entered allmulticast mode [ 1370.200765][T19707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19480'. [ 1370.643299][T19713] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19481'. [ 1370.739576][T19715] netlink: 76 bytes leftover after parsing attributes in process `syz.4.19483'. [ 1370.762803][T19713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19481'. [ 1370.763565][T19715] netlink: 108 bytes leftover after parsing attributes in process `syz.4.19483'. [ 1370.818701][T19715] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1370.887919][T19715] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1371.068169][T19723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19486'. [ 1371.101452][T19723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19486'. [ 1371.646906][T19736] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 1371.667106][T19736] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 1372.334228][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19494'. [ 1372.438908][T19757] syzkaller1: entered promiscuous mode [ 1372.460561][T19757] syzkaller1: entered allmulticast mode [ 1372.585974][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1372.594692][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1373.566574][ T9314] net_ratelimit: 53 callbacks suppressed [ 1373.566597][ T9314] bond20: (slave bridge18): failed to get link speed/duplex [ 1373.596148][ T9314] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1373.625016][T19790] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 1373.692791][T19790] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1373.737703][T19790] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1373.876573][ T1124] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1373.916461][ T1124] bond20: (slave bridge18): failed to get link speed/duplex [ 1374.096209][ T1124] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1374.136047][ T13] bond20: (slave bridge18): failed to get link speed/duplex [ 1374.225922][ T1124] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1374.256823][ T48] bond20: (slave bridge18): failed to get link speed/duplex [ 1374.357323][ T48] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1374.396263][ T48] bond20: (slave bridge18): failed to get link speed/duplex [ 1376.622212][ T48] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.675950][ T48] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.707048][ T48] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.736802][ T1124] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.896167][T19861] netlink: 'syz.4.19515': attribute type 1 has an invalid length. [ 1377.008304][T19861] bond20: entered promiscuous mode [ 1377.027631][T19864] tipc: Enabled bearer , priority 0 [ 1377.314503][T19862] nbd3: detected capacity change from 0 to 63 [ 1377.337016][T19876] block nbd3: NBD_DISCONNECT [ 1377.379353][T19876] block nbd3: Disconnected due to user request. [ 1377.409399][T19876] block nbd3: shutting down sockets [ 1377.459553][ C0] blk_print_req_error: 138 callbacks suppressed [ 1377.459594][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.475379][ C0] buffer_io_error: 138 callbacks suppressed [ 1377.475402][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1377.533237][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.543158][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1377.555328][T19890] __nla_validate_parse: 6 callbacks suppressed [ 1377.555349][T19890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19521'. [ 1377.555799][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.581492][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1377.589420][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.598646][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1377.606948][T19664] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.637395][T19664] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1377.670066][T19664] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.698248][T19861] bond19: (slave team0): Releasing backup interface [ 1377.702910][T19664] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1377.739710][T19664] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.767932][T19664] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1377.787463][T19664] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.817771][T19664] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1377.843743][T19664] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.871939][T19664] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1377.911116][T19664] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1377.950601][T19664] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1377.968806][T19664] ldm_validate_partition_table(): Disk read failed. [ 1377.997462][T19664] Dev nbd3: unable to read RDB block 0 [ 1378.005277][T19664] nbd3: unable to read partition table [ 1378.072996][T19664] ldm_validate_partition_table(): Disk read failed. [ 1378.092408][T19664] Dev nbd3: unable to read RDB block 0 [ 1378.097707][T19861] veth0_to_bond: left allmulticast mode [ 1378.118648][T19664] nbd3: unable to read partition table [ 1378.127068][T19861] veth0_to_bond: left promiscuous mode [ 1378.144898][T19861] bridge15: port 2(veth0_to_bond) entered disabled state [ 1378.459646][T19864] syzkaller0: entered promiscuous mode [ 1378.475599][T19864] syzkaller0: entered allmulticast mode [ 1378.654874][T19863] tipc: Resetting bearer [ 1378.719752][T19863] tipc: Disabling bearer [ 1378.746636][T19860] bond20: left promiscuous mode [ 1378.841527][ T1124] net_ratelimit: 28 callbacks suppressed [ 1378.841551][ T1124] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1378.916331][ T1124] bond20: (slave bridge18): failed to get link speed/duplex [ 1379.005949][ T48] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1379.046200][ T48] bond20: (slave bridge18): failed to get link speed/duplex [ 1379.137987][ T48] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1379.176064][ T48] bond20: (slave bridge18): failed to get link speed/duplex [ 1379.290435][T19916] netlink: 'syz.4.19526': attribute type 1 has an invalid length. [ 1380.014641][ T9314] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.044632][ T9314] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.152666][ T9314] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.169287][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.231538][ T13] bond20: (slave bridge18): failed to get link speed/duplex [ 1380.268039][ T13] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1380.444725][T19950] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.459739][T19950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1380.564616][T19967] netlink: 'syz.3.19534': attribute type 1 has an invalid length. [ 1380.581122][T19968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19536'. [ 1380.682347][T19950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1380.704611][T19950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1380.730906][T19950] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1380.766072][ T36] bond20: (slave bridge18): failed to get link speed/duplex [ 1380.781171][T19953] netlink: 'syz.1.19535': attribute type 12 has an invalid length. [ 1380.976100][ T48] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.991344][ T48] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.017550][ T48] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.119677][ T48] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.294638][ T9314] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1381.345765][ T9314] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1381.354337][T16675] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1381.438285][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1381.484719][T19994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19539'. [ 1381.511378][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1381.811019][T16675] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1382.182237][T20016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19541'. [ 1382.197666][ T1124] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1382.206868][ T1124] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1383.091256][T20028] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19543'. [ 1383.230300][ T1124] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1383.267657][ T1124] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1383.404453][T20037] netlink: 'syz.2.19545': attribute type 3 has an invalid length. [ 1383.895200][T20052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19547'. [ 1383.956574][ T36] net_ratelimit: 32 callbacks suppressed [ 1383.956598][ T36] bond20: (slave bridge18): failed to get link speed/duplex [ 1384.146060][ T13] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1384.213000][T20042] block nbd2: NBD_DISCONNECT [ 1384.236166][ T13] bond20: (slave bridge18): failed to get link speed/duplex [ 1384.300049][ T3593] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1384.420560][T20053] vlan5: entered promiscuous mode [ 1384.536627][ T9314] bond20: (slave bridge18): failed to get link speed/duplex [ 1384.567341][ T9314] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1384.727574][ T36] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1384.769191][ T3595] bond20: (slave bridge18): failed to get link speed/duplex [ 1384.823078][T20075] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19550'. [ 1384.856123][ T3595] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1384.916824][ T3595] bond20: (slave bridge18): failed to get link speed/duplex [ 1385.534836][T20097] xt_hashlimit: max too large, truncated to 1048576 [ 1386.379020][T20123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19560'. [ 1386.391049][T20064] syzkaller0 speed is unknown, defaulting to 1000 [ 1386.948121][T20142] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19562'. [ 1386.956796][T20128] ip6gre5: entered allmulticast mode [ 1387.316301][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1387.316327][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1387.432593][T20155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19563'. [ 1387.701417][T20161] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.19565'. [ 1387.802491][T20161] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1387.860089][T20161] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1387.911322][T20161] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1388.011763][T20161] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1388.696416][T20182] netlink: 68 bytes leftover after parsing attributes in process `syz.4.19570'. [ 1388.951679][T20192] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19573'. [ 1389.049070][ T9314] net_ratelimit: 56 callbacks suppressed [ 1389.049096][ T9314] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1389.196266][ T9314] bond20: (slave bridge18): failed to get link speed/duplex [ 1389.246420][ T9314] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1389.269964][T20198] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19574'. [ 1389.337390][ T36] bond20: (slave bridge18): failed to get link speed/duplex [ 1389.376417][ T3593] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1389.476103][ T3593] bond20: (slave bridge18): failed to get link speed/duplex [ 1389.534863][ T3593] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1389.626631][ T13] bond20: (slave bridge18): failed to get link speed/duplex [ 1389.687466][ T13] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1389.777339][ T3595] bond20: (slave bridge18): failed to get link speed/duplex [ 1389.877180][T20217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19576'. [ 1389.978587][T20221] netlink: 'syz.0.19577': attribute type 1 has an invalid length. [ 1389.997620][T20221] netlink: 224 bytes leftover after parsing attributes in process `syz.0.19577'. [ 1390.202843][T20221] netlink: 'syz.0.19577': attribute type 10 has an invalid length. [ 1390.230582][T20221] netlink: 'syz.0.19577': attribute type 10 has an invalid length. [ 1390.970570][T20248] dvmrp8: entered allmulticast mode [ 1391.326810][T20255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19582'. [ 1391.352418][T20253] netlink: 68 bytes leftover after parsing attributes in process `syz.2.19583'. [ 1391.625199][T20259] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19584'. [ 1391.935028][T20264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19585'. [ 1391.994576][T20264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19585'. [ 1392.671619][T16675] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1392.695530][T20282] netlink: 'syz.4.19589': attribute type 12 has an invalid length. [ 1392.717367][T16675] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1392.748870][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1393.188135][T20301] lo: Caught tx_queue_len zero misconfig [ 1393.466125][T16675] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1393.709137][T16675] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1394.711685][T20336] __nla_validate_parse: 6 callbacks suppressed [ 1394.711706][T20336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19600'. [ 1394.910632][T20318] geneve6: entered promiscuous mode [ 1394.965023][T20338] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19600'. [ 1394.986232][T20330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19598'. [ 1394.996750][T20338] nbd: nbd64 already in use [ 1395.025826][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.071756][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.109346][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.197458][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.208074][T20342] netlink: 68 bytes leftover after parsing attributes in process `syz.3.19601'. [ 1395.226606][ T36] net_ratelimit: 58 callbacks suppressed [ 1395.226632][ T36] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1395.280589][T20348] netlink: 'syz.4.19603': attribute type 12 has an invalid length. [ 1395.298762][T19664] udevd[19664]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1395.308814][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1395.391954][ T1124] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.425322][T20347] netlink: 'syz.1.19602': attribute type 13 has an invalid length. [ 1395.434896][ T1124] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.446951][T20347] netlink: 'syz.1.19602': attribute type 17 has an invalid length. [ 1395.451661][ T1124] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.472263][ T1124] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.650499][T20362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19605'. [ 1395.653322][T20363] netlink: 'syz.2.19607': attribute type 4 has an invalid length. [ 1395.688021][T20363] netlink: 17 bytes leftover after parsing attributes in process `syz.2.19607'. [ 1395.700075][T20347] bridge0: left promiscuous mode [ 1395.705532][T20347] bond0: left promiscuous mode [ 1395.712739][T20347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.723386][T20364] netlink: 68 bytes leftover after parsing attributes in process `syz.4.19606'. [ 1395.742499][T20347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.802911][T20369] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 1395.861429][T20369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19607'. [ 1395.895031][T20347] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1395.918587][T20347] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1395.943304][T20347] veth1_vlan: left promiscuous mode [ 1395.966748][T20347] veth0_vlan: left promiscuous mode [ 1395.981659][T20347] veth0_vlan: entered promiscuous mode [ 1395.993738][T20347] veth1_vlan: entered promiscuous mode [ 1396.028330][T20347] veth0_macvtap: left promiscuous mode [ 1396.043892][T20347] veth0_macvtap: entered promiscuous mode [ 1396.089163][T20347] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 1396.162089][ T48] bridge0: port 3(vlan5) entered blocking state [ 1396.168710][ T48] bridge0: port 3(vlan5) entered forwarding state [ 1396.287152][ T1124] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.308083][ T1124] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.358121][ T1124] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.485224][T20379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19610'. [ 1396.667845][ T48] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1396.702379][T20380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19608'. [ 1396.746842][ T1124] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.817707][ T3593] bond20: (slave bridge18): failed to get link speed/duplex [ 1397.009192][ T3593] bond20: (slave bridge18): failed to get link speed/duplex [ 1397.164578][T20394] netlink: 'syz.4.19613': attribute type 3 has an invalid length. [ 1397.206543][ T1124] bond28: (slave ip6gretap2): failed to get link speed/duplex [ 1397.291252][T20394] nbd: nbd4 already in use [ 1397.311758][T20394] block nbd4: NBD_DISCONNECT [ 1397.333281][T20394] block nbd4: Send disconnect failed -32 [ 1397.356186][T20394] block nbd4: shutting down sockets [ 1397.676943][T20397] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 1397.696957][T20397] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 1397.721078][T20397] veth1_macvtap: left promiscuous mode [ 1398.266833][ T36] wlan1: Trigger new scan to find an IBSS to join [ 1398.401463][T20397] team1: left promiscuous mode [ 1398.408984][T20397] team1: left allmulticast mode [ 1398.417062][T20397] team2: left promiscuous mode [ 1398.423578][T20397] team2: left allmulticast mode [ 1398.507091][T20402] 8021q: adding VLAN 0 to HW filter on device  [ 1398.574917][T20402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1398.587350][T20402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1398.604457][T20402] veth1_vlan: left promiscuous mode [ 1398.611827][T20402] veth0_vlan: left promiscuous mode [ 1398.618883][T20402] veth0_vlan: entered promiscuous mode [ 1398.629547][T20402] veth1_vlan: entered promiscuous mode [ 1398.641780][T20402] veth1_macvtap: left promiscuous mode [ 1398.650942][T20402] veth1_macvtap: entered promiscuous mode [ 1398.752231][T20402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.780897][T20402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1398.820273][T20402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1398.830649][T20402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1398.842444][T20402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1398.854626][T20402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1398.864351][T20402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1398.873733][T20402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1398.885497][T20402] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1398.928453][T20402] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1398.939988][T20402] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1398.953431][T20402] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1398.969292][T20402] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1398.981024][T20402] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1398.989836][T20402] erspan0: entered promiscuous mode [ 1399.023307][T20402] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1399.037600][T20402] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1399.049686][T20402] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1399.075296][T20402] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1399.089004][T20402] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1399.099307][T20402] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1399.110321][T20402] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1399.120855][T20402] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1399.141960][T20402] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1399.154381][T20402] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1399.184368][T20402] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 1399.202637][T20404] netlink: 'syz.1.19616': attribute type 12 has an invalid length. [ 1399.217552][ T3593] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1399.229031][ T3593] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.240111][ T3593] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1399.252465][ T3593] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1399.274789][ T3593] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.284697][ T3593] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1399.318817][ T13] bond17: (slave veth21): link status definitely up, 10000 Mbps full duplex [ 1399.348731][ T13] bond17: (slave veth23): link status definitely up, 10000 Mbps full duplex [ 1399.365676][ T13] bond17: (slave veth21): making interface the new active one [ 1399.384848][ T13] bond17: active interface up! [ 1399.408141][ T9] bridge0: entered promiscuous mode [ 1399.543187][ T48] bridge15: port 1(veth25) entered blocking state [ 1399.549994][ T48] bridge15: port 1(veth25) entered forwarding state [ 1399.578930][ T48] bridge15: port 3(veth27) entered blocking state [ 1399.585648][ T48] bridge15: port 3(veth27) entered forwarding state [ 1399.623817][ T3593] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1399.633771][ T3593] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.645234][ T3593] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1399.655231][ T3593] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1399.665364][ T3593] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.676715][ T3593] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1399.686784][ T3593] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1399.701728][ T3593] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.720599][ T3593] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 59890 - 0 [ 1399.740445][ T3593] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 1399.775302][ T3593] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1399.777411][T20441] __nla_validate_parse: 4 callbacks suppressed [ 1399.777428][T20441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19622'. [ 1399.807744][ T3593] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.852000][ T3593] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 59890 - 0 [ 1399.889610][ T3593] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 1399.920120][ T3593] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1399.959888][ T3593] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.986432][ T3593] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 59890 - 0 [ 1399.996294][ T3593] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 1400.005527][ T3593] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1400.014345][ T3593] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.023040][ T3593] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 59890 - 0 [ 1400.033637][ T3593] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 1400.093313][ T3593] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1400.122338][ T3593] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1400.151894][T20457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19627'. [ 1400.292352][T20466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19625'. [ 1400.370047][T20446] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1400.422328][T20446] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.445626][T20446] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 59890 - 0 [ 1400.476571][T20446] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1400.564226][ T3593] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1400.585090][ T3593] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1400.894463][T20446] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1400.923380][T20446] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.943902][T20446] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 59890 - 0 [ 1400.963587][T20446] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1401.074966][ T9314] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1401.099202][ T9615] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1401.116056][ T9314] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1401.226243][ T13] wlan1: Trigger new scan to find an IBSS to join [ 1401.244204][T20474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19628'. [ 1401.257129][ T9615] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1401.267992][T20488] bridge11: entered promiscuous mode [ 1401.273448][T20488] bridge11: entered allmulticast mode [ 1401.281942][ T9615] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1401.320766][T20488] team0: Port device bridge11 added [ 1401.397216][T20492] bridge12: entered promiscuous mode [ 1401.413324][T20492] bridge12: entered allmulticast mode [ 1401.429346][T20492] team0: Port device bridge12 added [ 1401.445475][T20494] bridge0: port 1(team0) entered blocking state [ 1401.456692][T20494] bridge0: port 1(team0) entered disabled state [ 1401.464125][T20494] team0: entered allmulticast mode [ 1401.486023][T20494] bond9: entered allmulticast mode [ 1401.524200][T20494] team0: entered promiscuous mode [ 1401.540842][T20494] bond9: entered promiscuous mode [ 1401.648769][T20446] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1401.677374][T20446] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.699606][T20446] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 59890 - 0 [ 1401.725358][T20446] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1401.748265][ T9314] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1401.766362][ T9314] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1401.776366][T16675] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1401.788818][ T3593] bridge0: port 1(team0) entered blocking state [ 1401.795281][ T3593] bridge0: port 1(team0) entered listening state [ 1401.812467][ T3593] bridge0: port 1(team0) entered disabled state [ 1401.889245][T20446] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1401.900247][T20446] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.912676][T20446] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 59890 - 0 [ 1401.932585][T20503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19632'. [ 1401.932742][T20446] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1402.009368][T16675] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1402.027995][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.040446][ T9314] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1402.070675][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.249063][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19633'. [ 1402.281415][ T3593] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1402.292480][ T3593] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1402.309136][ T3593] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 59890 - 0 [ 1402.319268][ T3593] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 1402.332549][T20510] bond24: (slave team_slave_1): Releasing backup interface [ 1402.344222][T20510] team0: Port device gtp0 removed [ 1402.352427][T20510] bond6: (slave geneve3): Releasing active interface [ 1402.364778][T20510] bond7: (slave gretap1): Releasing active interface [ 1402.365417][T20515] netlink: 68 bytes leftover after parsing attributes in process `syz.3.19634'. [ 1402.387733][T20510] bond8: (slave ip6gre1): Releasing backup interface [ 1402.400279][T20510] bond10: (slave gretap2): Releasing active interface [ 1402.411149][T20510] : (slave veth9): Releasing backup interface [ 1402.423637][T20510] bond12: (slave veth17): Releasing active interface [ 1402.434090][T20510] bond13: (slave veth19): Releasing active interface [ 1402.445461][T20510] bond15: (slave bond16): Releasing backup interface [ 1402.452645][T20510] bond15: (slave bond16): the permanent HWaddr of slave - f2:3c:f3:d5:35:a5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1402.497957][T20510] bond15: (slave gretap3): Releasing backup interface [ 1402.520081][T20510] bond18: (slave bond19): Releasing backup interface [ 1402.533799][T20510] bond20: (slave bridge18): Releasing backup interface [ 1402.541745][T20510] bond20: (slave bridge18): the permanent HWaddr of slave - 36:18:41:0d:f6:14 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1402.561524][T20510] bond20: (slave bridge19): Releasing backup interface [ 1402.572769][T20510] bond21: (slave bridge20): Releasing active interface [ 1402.583473][T20510] bond22: (slave bridge22): Releasing backup interface [ 1402.593783][T20510] bond25: (slave geneve5): Releasing active interface [ 1402.604727][T20510] bond27: (slave veth23): Releasing active interface [ 1402.612170][T20510] bond27: (slave veth23): the permanent HWaddr of slave - 4a:d5:0e:f4:87:c6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1402.630633][T20510] bond27: (slave veth25): making interface the new active one [ 1402.651204][T20510] bond27: (slave veth25): Releasing active interface [ 1402.661266][T20510] bond27: (slave bridge24): Releasing active interface [ 1402.672563][T20510] bond28: (slave ip6gretap2): Releasing backup interface [ 1402.681260][T20510] bond28: (slave ip6gretap2): the permanent HWaddr of slave - 1a:45:c4:95:63:d4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1402.705034][T20510] bond28: (slave veth27): Removing an active aggregator [ 1402.718784][T20510] bond28: (slave veth27): Releasing backup interface [ 1402.751964][ T3593] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1402.762235][ T3593] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1402.772581][ T3593] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 59890 - 0 [ 1402.781690][ T3593] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 1402.795603][T20522] netlink: 'syz.0.19636': attribute type 4 has an invalid length. [ 1402.852251][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1402.880462][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1402.914742][ T36] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 59890 - 0 [ 1402.946607][T20527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19637'. [ 1402.954906][ T36] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 1403.014284][ T9314] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1403.035252][ T9314] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1403.063370][ T9314] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 59890 - 0 [ 1403.092627][ T9314] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 1403.389617][T20542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19639'. [ 1403.760381][T20559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19642'. [ 1404.269933][ T3593] wlan1: Trigger new scan to find an IBSS to join [ 1405.180142][ T3593] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 1405.413281][T20583] __nla_validate_parse: 1 callbacks suppressed [ 1405.413302][T20583] netlink: 68 bytes leftover after parsing attributes in process `syz.1.19648'. [ 1405.492617][T20587] netlink: 'syz.0.19646': attribute type 1 has an invalid length. [ 1405.802559][T20594] netlink: 'syz.1.19651': attribute type 1 has an invalid length. [ 1405.953975][T20594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19651'. [ 1406.045108][T20599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19651'. [ 1406.070346][T20594] bond27: (slave gretap3): making interface the new active one [ 1406.083059][T20594] bond27: (slave gretap3): Enslaving as an active interface with an up link [ 1406.152059][T20599] macvlan3: entered promiscuous mode [ 1406.158143][T20599] macvlan3: entered allmulticast mode [ 1406.186658][ C1] ip6_tnl_xmit_ctl: 7 callbacks suppressed [ 1406.186681][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1406.341173][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19653'. [ 1406.404732][T20603] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.19653'. [ 1406.424731][T20609] ipt_rpfilter: unknown options [ 1406.493390][T20613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19655'. [ 1406.631485][T20614] netlink: 3 bytes leftover after parsing attributes in process `syz.0.19654'. [ 1406.672123][T20614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19654'. [ 1406.712918][T20614] netlink: 3 bytes leftover after parsing attributes in process `syz.0.19654'. [ 1406.752104][T20614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19654'. [ 1406.799486][T20618] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1406.816306][T20618] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1406.935335][T20624] bond8: entered allmulticast mode [ 1406.979962][T20624] dvmrp8: entered allmulticast mode [ 1407.005593][T20623] bond8: left allmulticast mode [ 1407.466213][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1407.466425][T18313] IPVS: ip_vs_send_async error -13 [ 1407.613659][T20649] netlink: 'syz.2.19665': attribute type 12 has an invalid length. [ 1407.757359][T20649] macsec0: entered promiscuous mode [ 1407.809261][T20649] macsec0 (unregistering): left promiscuous mode [ 1408.504773][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.539524][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.582613][T20695] bond8: entered allmulticast mode [ 1409.611224][T20692] bond8: left allmulticast mode [ 1410.076249][T20670] syzkaller0 speed is unknown, defaulting to 1000 [ 1410.676529][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1410.727410][T20721] __nla_validate_parse: 10 callbacks suppressed [ 1410.727434][T20721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19682'. [ 1411.157571][T20729] netlink: 'syz.4.19684': attribute type 29 has an invalid length. [ 1411.172080][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19684'. [ 1411.189701][T20728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19683'. [ 1411.201909][T20729] netlink: 'syz.4.19684': attribute type 29 has an invalid length. [ 1411.216075][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19684'. [ 1411.244593][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19681'. [ 1411.246251][T20729] netlink: 'syz.4.19684': attribute type 29 has an invalid length. [ 1411.263858][T20717] xt_hashlimit: size too large, truncated to 1048576 [ 1411.286843][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19684'. [ 1411.322764][T20729] netlink: 'syz.4.19684': attribute type 29 has an invalid length. [ 1411.363013][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19684'. [ 1411.405314][T20729] netlink: 'syz.4.19684': attribute type 29 has an invalid length. [ 1411.429602][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19684'. [ 1411.450289][T20733] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19685'. [ 1411.456500][T20729] netlink: 'syz.4.19684': attribute type 29 has an invalid length. [ 1411.490926][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19684'. [ 1411.535338][T20729] netlink: 'syz.4.19684': attribute type 29 has an invalid length. [ 1411.557214][T20729] netlink: 'syz.4.19684': attribute type 29 has an invalid length. [ 1411.566173][T20729] netlink: 'syz.4.19684': attribute type 29 has an invalid length. [ 1411.574807][T20729] netlink: 'syz.4.19684': attribute type 29 has an invalid length. [ 1411.668455][T20739] bond0: option arp_missed_max: invalid value (0) [ 1411.685915][T20739] bond0: option arp_missed_max: allowed values 1 - 255 [ 1412.464400][T20767] tipc: Failed to remove unknown binding: 66,0,0/1:1079156060/1079156061 [ 1412.572900][T20772] tipc: Failed to remove unknown binding: 66,0,0/1:1079156060/1079156061 [ 1412.791711][T20780] bond8: entered allmulticast mode [ 1412.816924][T20779] bond8: left allmulticast mode [ 1413.226150][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1413.234104][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1413.304906][T20762] xt_HMARK: proto mask must be zero with L3 mode [ 1413.512306][ T9615] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1413.537196][ T9615] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1413.626583][ T9615] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1414.057692][ T9615] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1414.086840][ T9615] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1414.167569][ T9615] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1414.506643][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1416.064975][T20855] __nla_validate_parse: 54 callbacks suppressed [ 1416.064999][T20855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19708'. [ 1416.465177][T20871] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19710'. [ 1417.016267][T20886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19713'. [ 1417.194523][T20892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19716'. [ 1418.075122][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19719'. [ 1418.182026][T20915] xt_l2tp: invalid flags combination: 8 [ 1418.220721][T20915] validate_nla: 42 callbacks suppressed [ 1418.220742][T20915] netlink: 'syz.4.19719': attribute type 1 has an invalid length. [ 1418.333509][T20915] gre0: entered promiscuous mode [ 1418.356616][T20915] gre0: entered allmulticast mode [ 1418.708043][T20894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19716'. [ 1419.045228][T20939] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1419.049693][T20937] netlink: 68 bytes leftover after parsing attributes in process `syz.1.19723'. [ 1419.336669][T20921] syzkaller0 speed is unknown, defaulting to 1000 [ 1419.635013][T20957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19727'. [ 1420.335234][T20965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19728'. [ 1420.733413][T20982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19731'. [ 1421.594673][T21010] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19737'. [ 1422.222623][T21026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19742'. [ 1422.957883][T21057] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19749'. [ 1423.294014][T21050] syzkaller0 speed is unknown, defaulting to 1000 [ 1423.384853][T21068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19751'. [ 1423.853429][T21073] xt_hashlimit: size too large, truncated to 1048576 [ 1424.986346][T21093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19758'. [ 1425.313861][T21106] netlink: 220 bytes leftover after parsing attributes in process `syz.1.19762'. [ 1425.330003][T21106] netlink: 'syz.1.19762': attribute type 2 has an invalid length. [ 1425.344862][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19760'. [ 1425.385055][T21099] openvswitch: netlink: Invalid VLAN frame [ 1425.385223][T21106] netlink: 'syz.1.19762': attribute type 1 has an invalid length. [ 1425.929938][T21120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19767'. [ 1426.298600][T21121] tipc: Resetting bearer [ 1426.337983][T21121] bridge0: port 3(vlan5) entered disabled state [ 1426.554682][T21127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19769'. [ 1426.796554][T21141] block nbd2: not configured, cannot reconfigure [ 1426.823325][T21143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19771'. [ 1427.321591][T21133] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 1427.360658][T21133] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 1427.532097][ T3593] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.561960][ T3593] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.588431][ T3593] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.607066][ T3593] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.945967][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1428.003630][T21166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19776'. [ 1428.342339][T21174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19779'. [ 1428.460088][T21184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19780'. [ 1428.596208][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1429.507039][T21208] dvmrp8: entered allmulticast mode [ 1429.527758][T21174] syzkaller0 speed is unknown, defaulting to 1000 [ 1429.864812][T21220] tipc: Resetting bearer [ 1430.748329][T21241] netlink: zone id is out of range [ 1430.768708][T21241] netlink: zone id is out of range [ 1430.784338][T21241] netlink: zone id is out of range [ 1430.807024][T21241] netlink: zone id is out of range [ 1430.841831][T21241] netlink: zone id is out of range [ 1430.885932][T21241] netlink: zone id is out of range [ 1430.917631][T21241] netlink: zone id is out of range [ 1430.973190][T21241] netlink: zone id is out of range [ 1431.009334][T21241] netlink: zone id is out of range [ 1431.063940][T21241] netlink: zone id is out of range [ 1431.580154][T21253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19793'. [ 1431.616991][T21253] tunl0: Caught tx_queue_len zero misconfig [ 1431.789471][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1432.249026][ T1486] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1432.277884][ T1486] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1432.339232][ T1486] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1432.455185][ T1486] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1432.476282][T21261] syzkaller0 speed is unknown, defaulting to 1000 [ 1432.586103][ T1486] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1432.736312][ T1486] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1432.772835][T21290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19797'. [ 1432.854630][T21295] netlink: 48 bytes leftover after parsing attributes in process `syz.4.19797'. [ 1433.127357][T21303] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1433.227392][T21303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19800'. [ 1434.026251][ T30] audit: type=1800 audit(1780015932.123:29): pid=21306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.19801" name="memory.events" dev="tmpfs" ino=20275 res=0 errno=0 [ 1434.238120][T21325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19805'. [ 1434.257001][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1434.297487][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1434.319974][T21323] tipc: Resetting bearer [ 1434.477961][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1434.528581][T21337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19805'. [ 1434.639725][T21343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19807'. [ 1434.689214][T21331] syzkaller1: entered promiscuous mode [ 1434.703026][T21331] syzkaller1: entered allmulticast mode [ 1434.772579][T21339] gre0: left promiscuous mode [ 1434.859186][T21339] gre0: left allmulticast mode [ 1435.125923][T16675] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1435.246526][ T13] wlan1: Trigger new scan to find an IBSS to join [ 1435.626055][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1435.776339][T21369] net_ratelimit: 168 callbacks suppressed [ 1435.776362][T21369] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1435.849945][T21375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19810'. [ 1436.030509][T21376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19810'. [ 1436.418113][T21380] netlink: 'syz.0.19813': attribute type 32 has an invalid length. [ 1438.266176][ T3595] wlan1: Trigger new scan to find an IBSS to join [ 1438.481690][T21339] bridge15: port 3(veth27) entered disabled state [ 1438.488564][T21339] bridge15: port 1(veth25) entered disabled state [ 1438.640235][T21339] syzkaller1: left promiscuous mode [ 1438.658769][T21339] syzkaller1: left allmulticast mode [ 1438.672499][T21328] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 1438.761246][T21392] netlink: 76 bytes leftover after parsing attributes in process `syz.0.19813'. [ 1438.772451][ T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1438.781896][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 1438.793388][ T13] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 59890 - 0 [ 1438.802112][ T13] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 1438.811172][ T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1438.819786][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 1438.837706][ T13] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 59890 - 0 [ 1438.855962][ T13] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 1438.893914][ T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1438.938021][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 1438.973801][ T13] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 59890 - 0 [ 1439.008987][ T13] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 1439.022521][T21400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19815'. [ 1439.038079][ T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.090924][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 1439.109021][T21402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19815'. [ 1439.125404][ T13] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 59890 - 0 [ 1439.166271][ T13] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 1439.217305][T21406] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19817'. [ 1439.305598][T21406] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19817'. [ 1439.378759][T21406] netlink: 324 bytes leftover after parsing attributes in process `syz.2.19817'. [ 1439.545263][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19819'. [ 1439.600009][T21417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19819'. [ 1439.607139][T21422] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19820'. [ 1439.719791][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19819'. [ 1440.746284][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1441.226252][ T13] wlan1: Trigger new scan to find an IBSS to join [ 1442.144200][ T3593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.823003][T21538] __nla_validate_parse: 7 callbacks suppressed [ 1443.823027][T21538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19836'. [ 1443.860425][T21540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1443.894388][T21540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19835'. [ 1443.963403][T21542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19836'. [ 1445.408319][T21598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19839'. [ 1445.713970][T21503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1445.979180][T21610] bridge26: entered promiscuous mode [ 1445.987894][T21610] bridge26: entered allmulticast mode [ 1446.001783][T21610] team0: Port device bridge26 added [ 1446.029637][T21616] netlink: 68 bytes leftover after parsing attributes in process `syz.3.19844'. [ 1446.064253][T21619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19843'. [ 1446.168415][T21610] bridge27: entered promiscuous mode [ 1446.180169][T21610] bridge27: entered allmulticast mode [ 1446.200625][T21610] team0: Port device bridge27 added [ 1446.323055][T21632] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1446.505032][T21636] netlink: 'syz.2.19847': attribute type 12 has an invalid length. [ 1446.529029][T21637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19846'. [ 1446.600606][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19848'. [ 1446.979019][T21641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19848'. [ 1447.016589][T21645] syzkaller0: entered promiscuous mode [ 1447.032814][T21645] syzkaller0: entered allmulticast mode [ 1447.545227][T21656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19849'. [ 1447.982433][T21655] tipc: Resetting bearer [ 1448.360897][T21357] syzkaller0 speed is unknown, defaulting to 1000 [ 1448.716568][ T9896] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1448.724606][T21671] tipc: Resetting bearer [ 1448.745179][ T9896] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1448.937238][ T9896] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1449.106425][ T9896] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1450.958663][T21723] __nla_validate_parse: 1 callbacks suppressed [ 1450.958686][T21723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19862'. [ 1451.398724][T21732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19863'. [ 1452.080633][T21753] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1452.538989][T21760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19868'. [ 1452.916069][T21766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19869'. [ 1453.080540][T21767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19869'. [ 1453.409356][T21770] erspan0: left promiscuous mode [ 1453.434894][T21771] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19871'. [ 1453.556248][T21770] bridge0: left promiscuous mode [ 1453.572725][T21770] 8021q: adding VLAN 0 to HW filter on device  [ 1454.166613][T21770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1454.195024][T21770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1454.284904][T21770] veth1_vlan: left promiscuous mode [ 1454.316662][T21770] veth0_vlan: left promiscuous mode [ 1454.338032][T21801] xt_hashlimit: size too large, truncated to 1048576 [ 1454.353990][T21770] veth0_vlan: entered promiscuous mode [ 1454.385610][T21770] veth1_vlan: entered promiscuous mode [ 1454.450265][T21770] veth1_macvtap: left promiscuous mode [ 1454.497968][T21770] veth1_macvtap: entered promiscuous mode [ 1454.747545][T21806] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1454.927156][T21770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1455.066536][T21770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1455.120982][T21770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1455.132087][T21770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1455.149397][T21770] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1455.192025][T21770] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1455.204128][T21770] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1455.217733][T21770] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1455.236973][T21770] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1455.253924][T21770] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1455.263288][T21770] erspan0: entered promiscuous mode [ 1455.299314][T21770] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1455.313634][T21770] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1455.329000][T21770] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1455.343021][T21770] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1455.354220][T21770] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1455.375518][T21770] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1455.394532][T21770] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1455.409015][T21770] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1455.433007][T21770] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1455.448579][T21770] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1455.483433][T21770] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 1455.522584][ T5994] bridge0: entered promiscuous mode [ 1455.736093][ T3593] bridge15: port 1(veth25) entered blocking state [ 1455.742745][ T3593] bridge15: port 1(veth25) entered forwarding state [ 1455.753400][ T3593] bridge15: port 3(veth27) entered blocking state [ 1455.760174][ T3593] bridge15: port 3(veth27) entered forwarding state [ 1455.780317][T21800] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1455.805490][ T3595] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.814331][T21800] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1455.835961][ T3595] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.844271][T21800] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1455.856806][ T3595] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 49674 - 0 [ 1455.884137][ T3595] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 1456.016622][ T5994] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1456.040323][ T5994] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1456.068611][T21793] tipc: Resetting bearer [ 1456.296061][ T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1456.348326][ T3595] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1456.379606][ T3595] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.390186][ T9882] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1456.417942][T21822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19877'. [ 1456.440930][ T3595] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 49674 - 0 [ 1456.461978][ T3595] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 1456.492776][ T3595] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1456.524279][ T3595] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.552549][ T3595] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 49674 - 0 [ 1456.584882][ T3595] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 1456.630341][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1456.670269][ T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1456.681822][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1456.723117][ T3595] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1456.751641][ T3595] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.779263][ T3595] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 49674 - 0 [ 1456.796936][T21823] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19879'. [ 1456.819625][ T3595] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 1456.870525][T21829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19878'. [ 1457.026181][ T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1457.116440][ T36] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1457.136127][ T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1457.199064][T21834] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1457.333128][T21844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19881'. [ 1458.353041][T21865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19884'. [ 1458.396277][T21871] dvmrp0: entered allmulticast mode [ 1459.850825][T21886] netlink: 'syz.3.19888': attribute type 14 has an invalid length. [ 1460.212874][T21893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19889'. [ 1461.146579][ C1] ip6_tnl_xmit_ctl: 10 callbacks suppressed [ 1461.146642][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1461.224355][T21901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19891'. [ 1461.270531][T21904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19892'. [ 1461.465980][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1461.823151][T21922] xt_hl: Unknown TTL match mode: 237 [ 1462.015205][T21928] syzkaller0: entered promiscuous mode [ 1462.039898][T21911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19891'. [ 1462.060249][T21928] syzkaller0: entered allmulticast mode [ 1462.642755][T21942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19899'. [ 1463.237783][T21957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19901'. [ 1463.470640][T21947] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1464.093377][T21969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19905'. [ 1464.784961][T21975] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19906'. [ 1465.115121][T21979] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1465.236012][T21979] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.229055][T21979] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1466.258861][T21979] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.400787][T21979] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1466.425207][T21979] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.554231][T21979] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1466.588010][T21979] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.809781][T22006] netlink: 180 bytes leftover after parsing attributes in process `syz.4.19911'. [ 1466.901858][ T9314] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1466.958643][ T9314] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.096372][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1467.112109][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.165353][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1467.195162][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.411476][ T1124] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1467.453884][ T1124] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.620142][T22028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19918'. [ 1467.675574][T22030] netlink: 80 bytes leftover after parsing attributes in process `syz.2.19919'. [ 1468.117093][T22042] geneve0: Caught tx_queue_len zero misconfig [ 1468.186168][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1468.906835][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1468.915665][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1469.163703][T22069] netlink: 80 bytes leftover after parsing attributes in process `syz.3.19926'. [ 1469.226175][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1469.546296][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1470.189396][T22087] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19932'. [ 1470.416060][T22092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19933'. [ 1471.462926][T22119] netlink: 68 bytes leftover after parsing attributes in process `syz.3.19939'. [ 1472.695121][T22135] lo speed is unknown, defaulting to 1000 [ 1472.740983][T22135] lo speed is unknown, defaulting to 1000 [ 1472.790299][T22135] lo speed is unknown, defaulting to 1000 [ 1472.899233][T22140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19945'. [ 1473.023329][T22144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19946'. [ 1473.252637][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19948'. [ 1473.703150][T22135] infiniband syz0: set down [ 1473.708532][T21357] lo speed is unknown, defaulting to 1000 [ 1473.728945][T22135] infiniband syz0: added lo [ 1473.815571][T22135] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1473.832938][T22135] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1473.854191][T22135] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1473.900171][T22164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1473.959736][T22135] RDS/IB: syz0: added [ 1473.978602][T22135] smc: adding ib device syz0 with port count 1 [ 1474.002098][T22135] smc: ib device syz0 port 1 has no pnetid [ 1474.129102][ T9882] lo speed is unknown, defaulting to 1000 [ 1474.156843][T22135] lo speed is unknown, defaulting to 1000 [ 1474.184482][T22170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19949'. [ 1474.262015][T22171] netlink: 68 bytes leftover after parsing attributes in process `syz.4.19950'. [ 1474.946629][T22135] lo speed is unknown, defaulting to 1000 [ 1476.229394][T22135] lo speed is unknown, defaulting to 1000 [ 1476.741562][T22182] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1476.782588][ T9882] IPVS: starting estimator thread 0... [ 1476.876456][T22202] IPVS: using max 30 ests per chain, 72000 per kthread [ 1477.068488][T22135] lo speed is unknown, defaulting to 1000 [ 1478.247731][T22221] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19955'. [ 1478.294673][T22135] lo speed is unknown, defaulting to 1000 [ 1478.896974][T22226] netlink: 68 bytes leftover after parsing attributes in process `syz.4.19963'. [ 1479.186889][T22228] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19964'. [ 1479.419193][T22233] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19967'. [ 1479.452535][T22233] netlink: 47 bytes leftover after parsing attributes in process `syz.2.19967'. [ 1479.487174][T22233] netlink: 'syz.2.19967': attribute type 6 has an invalid length. [ 1479.522025][T22233] netlink: 'syz.2.19967': attribute type 6 has an invalid length. [ 1479.568313][T22239] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1479.669245][T22250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19970'. [ 1481.252440][T22285] netlink: 68 bytes leftover after parsing attributes in process `syz.2.19975'. [ 1481.627790][T22296] netlink: 68 bytes leftover after parsing attributes in process `syz.2.19979'. [ 1481.778977][T22299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19980'. [ 1481.901481][T22302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19982'. [ 1482.280874][T22309] : renamed from bond_slave_0 [ 1482.409143][T22311] .30{X: left promiscuous mode [ 1482.652122][T22311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.767344][T22311] veth1: left promiscuous mode [ 1483.005208][T22311] veth0_vlan: left promiscuous mode [ 1483.031701][T22311] veth0_vlan: entered promiscuous mode [ 1483.070189][T22311] tipc: Resetting bearer [ 1483.092527][T22311] veth1_macvtap: entered promiscuous mode [ 1483.167156][T22311] mac80211_hwsim hwsim6 ;: left promiscuous mode [ 1483.196965][T22311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1483.244193][T22311] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1483.275241][T22311] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1483.329434][T22311] bridge0: left promiscuous mode [ 1483.358345][T22311] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1483.398124][T22311] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 1483.432889][T22311] veth1: entered promiscuous mode [ 1483.450388][T22311] mac80211_hwsim hwsim6 ;: entered promiscuous mode [ 1483.480217][T22311] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1483.505396][T22311] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1483.529110][T22311] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1483.564812][T22311] .30{X: entered promiscuous mode [ 1483.591290][T22311] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1483.615268][T22311] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1483.643608][T22311] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1483.684873][T22311] 8021q: adding VLAN 0 to HW filter on device  [ 1483.724731][T22311] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1483.751207][T22311] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1483.781194][T22311] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1483.793217][T22311] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1483.813932][T22311] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1483.822918][T22311] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1483.834328][T22311] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1483.843606][T22311] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1483.853338][T22311] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1483.862327][T22311] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1483.874188][T22311] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1483.886486][T22311] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1483.898677][T22311] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1483.908073][T22311] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1483.917464][T22311] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1483.929595][T22311] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1483.942720][T22311] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1483.957045][T22311] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1483.975557][T22311] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1484.033792][T22311] 8021q: adding VLAN 0 to HW filter on device team1 [ 1484.044561][T22311] 8021q: adding VLAN 0 to HW filter on device team2 [ 1484.067369][T22311] A link change request failed with some changes committed already. Interface bridge0.4 may have been left with an inconsistent configuration, please check. [ 1484.087804][T22310] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1484.111935][T22310] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1484.142541][T22310] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 1484.358450][T21357] uyz0: Port: 1 Link ACTIVE [ 1484.358552][ T65] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1484.397108][ T65] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.400864][T22347] __nla_validate_parse: 3 callbacks suppressed [ 1484.400882][T22347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19988'. [ 1484.421922][ T65] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1484.422314][ T65] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1484.422383][ T65] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.459360][ T65] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1484.729418][T22347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.787797][ T65] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1484.815572][ T65] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.817628][T22351] netlink: 68 bytes leftover after parsing attributes in process `syz.4.19989'. [ 1484.832380][ T65] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1484.908949][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1484.933501][ T3593] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1484.952701][ T3593] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.963209][ T3593] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1485.202223][T22358] netlink: 68 bytes leftover after parsing attributes in process `syz.2.19992'. [ 1485.550780][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1486.188803][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1486.469234][T22385] syzkaller0: entered promiscuous mode [ 1486.496663][T22385] syzkaller0: entered allmulticast mode [ 1486.548866][T22399] netlink: 68 bytes leftover after parsing attributes in process `syz.2.20004'. [ 1486.681378][T22401] netlink: 'syz.4.20003': attribute type 29 has an invalid length. [ 1486.743034][T22401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20003'. [ 1486.775565][T22405] netlink: 80 bytes leftover after parsing attributes in process `syz.0.20005'. [ 1492.528537][T22397] hsr0: entered promiscuous mode [ 1492.605321][T22411] hsr0: left promiscuous mode [ 1492.942592][T22427] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1492.961690][T22427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20011'. [ 1492.992561][T22427] netlink: zone id is out of range [ 1492.998256][T22427] netlink: zone id is out of range [ 1493.022114][T22427] netlink: zone id is out of range [ 1493.035413][T22427] netlink: zone id is out of range [ 1493.060869][T22427] netlink: zone id is out of range [ 1493.080123][T22429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20011'. [ 1493.106283][T22427] netlink: zone id is out of range [ 1493.118703][T22427] netlink: zone id is out of range [ 1493.155890][T22427] netlink: zone id is out of range [ 1493.161583][T22427] netlink: zone id is out of range [ 1493.162289][T22435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20008'. [ 1493.169007][T22427] netlink: zone id is out of range [ 1493.465099][ T3595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1493.489914][ T3595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.525646][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20008'. [ 1493.669886][T22449] netlink: 80 bytes leftover after parsing attributes in process `syz.3.20016'. [ 1493.712882][T22451] xt_hashlimit: invalid rate [ 1493.915135][T22456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20017'. [ 1494.085372][T22463] netlink: 80 bytes leftover after parsing attributes in process `syz.4.20018'. [ 1494.495063][T22467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20020'. [ 1494.860888][T22482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20024'. [ 1494.900796][T22482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20024'. [ 1495.146385][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1496.270592][ T3595] wlan1: Trigger new scan to find an IBSS to join [ 1496.810774][T22511] syzkaller0: entered promiscuous mode [ 1496.839063][T22511] syzkaller0: entered allmulticast mode [ 1497.260513][T22535] xt_hashlimit: size too large, truncated to 1048576 [ 1499.291339][T22506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1499.337541][ T48] wlan1: Trigger new scan to find an IBSS to join [ 1500.286371][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1502.286455][ T48] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 1504.117224][ T9882] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1504.160141][ T9882] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1504.205023][T22546] tipc: Resetting bearer [ 1504.304325][T22561] __nla_validate_parse: 1 callbacks suppressed [ 1504.304350][T22561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20036'. [ 1504.421588][ T4282] block nbd2: Receive control failed (result -1) [ 1504.456099][ T5994] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1504.881779][T22573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20039'. [ 1504.987010][ T5994] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1505.167395][T22582] netlink: 68 bytes leftover after parsing attributes in process `syz.0.20037'. [ 1505.220485][T22573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20039'. [ 1505.778719][T22589] netlink: 68 bytes leftover after parsing attributes in process `syz.2.20042'. [ 1505.923610][T22591] netlink: 'syz.3.20043': attribute type 142 has an invalid length. [ 1507.446654][T22625] netlink: 68 bytes leftover after parsing attributes in process `syz.4.20051'. [ 1507.707660][T22634] netlink: 'syz.0.20054': attribute type 13 has an invalid length. [ 1507.718144][T22634] netlink: 'syz.0.20054': attribute type 17 has an invalid length. [ 1507.978243][T22630] bridge0: port 1(team0) entered disabled state [ 1507.993899][T22637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20054'. [ 1508.053953][T22639] netlink: 68 bytes leftover after parsing attributes in process `syz.3.20055'. [ 1509.014259][T22630] tipc: Resetting bearer [ 1509.199727][T22634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.223844][T22634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.354957][T22634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1509.366175][T22634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1509.388116][T22634] net_ratelimit: 13 callbacks suppressed [ 1509.388140][T22634] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1509.453325][ T36] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1509.512017][ T36] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1509.535358][ T36] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1509.569202][ T36] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1509.635072][T22651] netlink: 48 bytes leftover after parsing attributes in process `syz.3.20058'. [ 1509.721256][T22654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20060'. [ 1509.779866][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.807205][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.837493][ T9314] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1509.878305][ T9314] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1510.970052][T22671] tipc: Resetting bearer [ 1511.087162][T22679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20063'. [ 1511.398839][T22682] netlink: 68 bytes leftover after parsing attributes in process `syz.2.20064'. [ 1511.534775][T22685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20065'. [ 1511.835629][T22691] netlink: 68 bytes leftover after parsing attributes in process `syz.4.20068'. [ 1512.025407][T22697] netlink: 80 bytes leftover after parsing attributes in process `syz.0.20080'. [ 1512.204537][T22704] netlink: 48 bytes leftover after parsing attributes in process `syz.0.20072'. [ 1512.837473][T22716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1512.897455][T22724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1512.943408][T22724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20075'. [ 1513.177056][ T9882] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1513.198311][ T9882] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1513.348737][ T9882] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1513.534637][T22713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20074'. [ 1513.554022][ T9882] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1513.786018][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1513.860477][ T9882] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1513.946282][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1514.031147][ T9882] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1515.408952][T22748] tipc: Resetting bearer [ 1515.834341][T22757] syzkaller0: entered promiscuous mode [ 1515.853794][T22757] syzkaller0: entered allmulticast mode [ 1515.874212][T22759] netlink: 'syz.2.20087': attribute type 12 has an invalid length. [ 1516.244387][ T30] audit: type=1804 audit(1780016014.343:30): pid=22769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.20091" name="/newroot/3856/cgroup.controllers" dev="tmpfs" ino=19495 res=1 errno=0 [ 1516.314468][T22766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1516.337300][T22773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1516.350613][ T30] audit: type=1800 audit(1780016014.383:31): pid=22769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.20091" name="cgroup.controllers" dev="tmpfs" ino=19495 res=0 errno=0 [ 1516.396477][T22773] __nla_validate_parse: 2 callbacks suppressed [ 1516.396501][T22773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20090'. [ 1516.415006][T22765] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 1516.655073][T22780] netlink: 80 bytes leftover after parsing attributes in process `syz.2.20094'. [ 1516.706677][T22778] netlink: 68 bytes leftover after parsing attributes in process `syz.1.20093'. [ 1516.885578][T22786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20096'. [ 1516.908301][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1517.724942][T22807] netlink: 'syz.1.20099': attribute type 12 has an invalid length. [ 1518.230843][T22817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20104'. [ 1518.423117][T22821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20104'. [ 1519.149473][T22824] syzkaller1: entered promiscuous mode [ 1519.178478][T22824] syzkaller1: entered allmulticast mode [ 1519.403398][T22835] netlink: 80 bytes leftover after parsing attributes in process `syz.4.20107'. [ 1519.403797][T22824] bond12: left promiscuous mode [ 1519.433315][T22824] bridge7: left promiscuous mode [ 1519.446762][T22824] bond13: left promiscuous mode [ 1519.461616][T22824] bond13: left allmulticast mode [ 1519.471450][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1519.511441][T22839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20108'. [ 1519.514737][T22824] bond15: left promiscuous mode [ 1519.566962][T22824] gretap2: left allmulticast mode [ 1519.593380][T22824] bond18: left promiscuous mode [ 1519.620751][T22824] bridge14: left promiscuous mode [ 1519.650475][T22824] ipvlan2: left allmulticast mode [ 1519.674668][T22824] bond18: left allmulticast mode [ 1519.693032][T22824] bridge14: left allmulticast mode [ 1519.713271][T22824] vlan10: left promiscuous mode [ 1519.737084][T22824] bond20: left promiscuous mode [ 1519.763370][T22824] bridge15: left promiscuous mode [ 1519.777996][T22824] vlan10: left allmulticast mode [ 1519.784127][T22824] bond20: left allmulticast mode [ 1519.792693][T22824] bridge15: left allmulticast mode [ 1519.801084][T22824] bond22: left promiscuous mode [ 1519.806947][T22824] bridge16: left promiscuous mode [ 1519.813003][T22824] ipvlan3: left allmulticast mode [ 1519.819228][T22824] ipvlan4: left allmulticast mode [ 1519.824693][T22824] bond22: left allmulticast mode [ 1519.831915][T22824] bridge16: left allmulticast mode [ 1519.840138][T22824] macvlan5: left promiscuous mode [ 1519.846341][T22824] macvlan5: left allmulticast mode [ 1519.852396][T22824] ip6gre4: left promiscuous mode [ 1519.858456][T22824] ip6gre4: left allmulticast mode [ 1519.868714][T22824] ip6gre5: left allmulticast mode [ 1519.875211][T22824] geneve6: left promiscuous mode [ 1519.883937][T22824] macvlan3: left promiscuous mode [ 1519.890169][T22824] macvlan3: left allmulticast mode [ 1519.909625][T22824] syzkaller1: left promiscuous mode [ 1519.917756][T22824] syzkaller1: left allmulticast mode [ 1519.941355][T22826] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 1520.380470][T22846] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1520.748497][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1521.098713][T22870] netlink: 'syz.1.20112': attribute type 12 has an invalid length. [ 1521.279966][ T3593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1521.300099][ T3593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.525139][T22886] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1521.539113][T22886] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.550038][T22886] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1521.779058][T22892] netlink: 68 bytes leftover after parsing attributes in process `syz.1.20120'. [ 1521.799199][T22886] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1521.867128][T22886] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.914479][T22886] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1522.025976][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1522.034635][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1522.448190][T22902] netlink: 80 bytes leftover after parsing attributes in process `syz.1.20133'. [ 1522.595530][T22886] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1522.687362][T22886] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.721907][T22886] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1522.877027][T22886] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1522.921947][T22886] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.979282][T22886] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1523.078877][T22913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20124'. [ 1523.926770][T22914] tipc: Resetting bearer [ 1523.956986][T18313] IPVS: ip_vs_send_async error -13 [ 1524.267528][ T9314] wlan1: Trigger new scan to find an IBSS to join [ 1524.430861][T22921] netlink: 'syz.4.20127': attribute type 12 has an invalid length. [ 1524.687044][ T3593] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1524.721483][ T3593] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1524.734751][ T3593] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1524.944176][ T3593] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1524.981764][ T3593] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1525.009559][ T3593] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1525.163562][ T9314] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1525.179206][ T9314] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1525.192659][ T9314] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1525.352124][ T3595] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1525.357411][T22951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20134'. [ 1525.380809][ T3595] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1525.397159][ T3595] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1525.665279][T22953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20134'. [ 1526.571294][T22985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20139'. [ 1526.598305][T22989] netlink: 'syz.4.20140': attribute type 12 has an invalid length. [ 1526.607455][T22982] netlink: 'syz.3.20138': attribute type 1 has an invalid length. [ 1526.628395][T22982] netlink: 'syz.3.20138': attribute type 2 has an invalid length. [ 1526.649399][T22982] netlink: 14 bytes leftover after parsing attributes in process `syz.3.20138'. [ 1526.910040][T22982] bond0 (unregistering): Released all slaves [ 1526.922936][T22985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20139'. [ 1527.227207][ T36] wlan1: Trigger new scan to find an IBSS to join [ 1527.410793][T23012] tap0: tun_chr_ioctl cmd 1074025681 [ 1527.514090][T23014] debugfs: '1^!Y [ 1527.514090][T23014] 3UH5rBn\' already exists in 'ieee80211' [ 1527.527417][T23012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20144'. [ 1527.687755][T23023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20147'. [ 1528.185294][T23032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20147'. [ 1530.266569][ T9314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.408253][T23071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20150'. [ 1534.992732][T23061] bridge0: port 1(team0) entered disabled state [ 1535.453253][T23061] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 1535.466016][T23061] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 1535.474507][T23061] ip6tnl7: left allmulticast mode [ 1535.507896][T23078] netlink: 'syz.2.20151': attribute type 12 has an invalid length. [ 1535.527457][ T48] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.556279][ T48] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.580667][ T48] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.612204][ T48] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.705261][T23084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20152'. [ 1536.435387][T23095] 8021q: adding VLAN 0 to HW filter on device 60X [ 1536.501125][T23095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1536.550945][T23095] veth1_vlan: left promiscuous mode [ 1536.593496][T23095] veth0_vlan: left promiscuous mode [ 1536.614513][T23095] veth0_vlan: entered promiscuous mode [ 1536.649956][T23095] veth1_vlan: entered promiscuous mode [ 1536.689747][T23095] geneve0: entered promiscuous mode [ 1536.782796][T23095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1537.033908][T23095] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 1537.127888][ T3593] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.149414][ T3593] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20003 - 0 [ 1537.177616][ T3593] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.210511][ T3593] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20003 - 0 [ 1537.257659][ T3593] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.269019][ T3593] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20003 - 0 [ 1537.299427][ T3593] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.323812][ T3593] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20003 - 0 [ 1537.375145][T23121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20162'. [ 1537.389839][T23122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20159'. [ 1537.482037][T23127] netlink: 'syz.4.20165': attribute type 12 has an invalid length. [ 1537.702660][T23129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20164'. [ 1537.819484][T23129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20164'. [ 1537.844357][T23145] netlink: 'syz.2.20177': attribute type 12 has an invalid length. [ 1537.878733][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.910775][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.064678][T23129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20164'. [ 1538.576028][T23162] netlink: 68 bytes leftover after parsing attributes in process `syz.0.20171'. [ 1538.767878][T23170] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 1538.962063][T23181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20176'. [ 1539.278234][T23192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20179'. [ 1539.294038][T23190] tipc: Resetting bearer [ 1539.578635][T23170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1539.669432][T23194] netlink: 'syz.4.20180': attribute type 12 has an invalid length. [ 1539.713143][ T9896] syzkaller0 speed is unknown, defaulting to 1000 [ 1540.268619][ T3595] wlan1: Trigger new scan to find an IBSS to join [ 1540.316466][T23224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20183'. [ 1540.851608][T23243] netlink: 'syz.3.20193': attribute type 12 has an invalid length. [ 1540.861809][T23247] __nla_validate_parse: 4 callbacks suppressed [ 1540.861831][T23247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20194'. [ 1541.101005][T23253] netlink: 36 bytes leftover after parsing attributes in process `syz.3.20196'. [ 1541.104767][T23255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20197'. [ 1541.329293][T23260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20196'. [ 1541.500083][T23262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20208'. [ 1541.546000][T23265] netlink: 68 bytes leftover after parsing attributes in process `syz.2.20199'. [ 1541.691012][T23267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20208'. [ 1542.492303][T23286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20203'. [ 1542.577477][T23288] netlink: 68 bytes leftover after parsing attributes in process `syz.2.20205'. [ 1542.678795][T23296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20204'. [ 1542.706502][ T9896] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1542.731700][ T9896] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1542.776996][ T9896] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1542.953692][T23294] netlink: 'syz.1.20206': attribute type 12 has an invalid length. [ 1543.056675][ T9896] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1543.236801][ T9896] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1543.306477][ T48] wlan1: Trigger new scan to find an IBSS to join [ 1543.628406][ T9896] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1544.096660][T23339] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1544.437449][T23347] netlink: 'syz.0.20220': attribute type 12 has an invalid length. [ 1545.487328][T23365] tipc: Resetting bearer [ 1545.796408][T23394] netlink: 'syz.2.20232': attribute type 1 has an invalid length. [ 1545.805539][T23394] netlink: 'syz.2.20232': attribute type 2 has an invalid length. [ 1546.034582][T23400] netlink: 'syz.3.20234': attribute type 12 has an invalid length. [ 1546.148127][T23403] __nla_validate_parse: 20 callbacks suppressed [ 1546.148149][T23403] netlink: 68 bytes leftover after parsing attributes in process `syz.0.20236'. [ 1546.250627][T23409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20238'. [ 1546.266542][ T1124] wlan1: Trigger new scan to find an IBSS to join [ 1546.533875][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20238'. [ 1546.864678][T23437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20244'. [ 1546.936108][T23442] netlink: 14 bytes leftover after parsing attributes in process `syz.4.20245'. [ 1546.949961][T23443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20243'. [ 1547.009575][T23442]  (unregistering): Released all slaves [ 1547.064798][T23437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20244'. [ 1547.171159][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.224881][T23428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20241'. [ 1547.285220][T23449] netlink: 68 bytes leftover after parsing attributes in process `syz.4.20246'. [ 1547.303389][T23451] netlink: 'syz.0.20247': attribute type 12 has an invalid length. [ 1547.522760][T23456] netlink: 68 bytes leftover after parsing attributes in process `syz.4.20249'. [ 1548.384875][T23481] netlink: 'syz.4.20258': attribute type 12 has an invalid length. [ 1548.469269][T23487] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 1548.487590][T23487] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 1549.789892][T23529] netlink: 'syz.1.20271': attribute type 1 has an invalid length. [ 1549.813471][T23529] netlink: 'syz.1.20271': attribute type 2 has an invalid length. [ 1549.886524][ T1124] smbdirect: ib_dev[syz1] removed [ 1549.913289][T23529] bond0 (unregistering): Released all slaves [ 1549.949372][T23534] netlink: 'syz.3.20273': attribute type 12 has an invalid length. [ 1550.016017][T23534] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1550.577910][T23555] netlink: 'syz.3.20279': attribute type 29 has an invalid length. [ 1550.611519][T23555] netlink: 'syz.3.20279': attribute type 29 has an invalid length. [ 1550.631611][T23555] netlink: 'syz.3.20279': attribute type 29 has an invalid length. [ 1550.649796][T23555] netlink: 'syz.3.20279': attribute type 29 has an invalid length. [ 1550.687534][T23566] hsr0: entered promiscuous mode [ 1551.166993][T23580] __nla_validate_parse: 84 callbacks suppressed [ 1551.167018][T23580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20285'. [ 1551.398241][T23582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20285'. [ 1551.454434][T23587] validate_nla: 59 callbacks suppressed [ 1551.454455][T23587] netlink: 'syz.2.20286': attribute type 12 has an invalid length. [ 1551.524957][T23589] sch_tbf: burst 0 is lower than device lo mtu (1294) ! [ 1551.707983][T23592] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1551.727019][T23592] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1551.768385][T23594] netlink: 68 bytes leftover after parsing attributes in process `syz.0.20288'. [ 1551.779275][T23596] netlink: 68 bytes leftover after parsing attributes in process `syz.4.20289'. [ 1551.954851][T23608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20291'. [ 1552.044863][T23609] netlink: 68 bytes leftover after parsing attributes in process `syz.4.20302'. [ 1552.341720][T23623] netlink: 'syz.1.20293': attribute type 29 has an invalid length. [ 1552.402330][T23623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20293'. [ 1552.406973][T23627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20296'. [ 1552.417110][T23625] netlink: 68 bytes leftover after parsing attributes in process `syz.4.20295'. [ 1552.507990][T23621] netlink: 'syz.1.20293': attribute type 29 has an invalid length. [ 1552.523572][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20293'. [ 1552.568553][T23621] netlink: 'syz.1.20293': attribute type 29 has an invalid length. [ 1552.579878][T23621] netlink: 'syz.1.20293': attribute type 29 has an invalid length. [ 1552.601685][T23621] netlink: 'syz.1.20293': attribute type 29 has an invalid length. [ 1552.639338][T23621] netlink: 'syz.1.20293': attribute type 29 has an invalid length. [ 1552.676936][T23634] netlink: 'syz.4.20297': attribute type 12 has an invalid length. [ 1552.702770][T23621] netlink: 'syz.1.20293': attribute type 29 has an invalid length. [ 1552.766104][T23621] netlink: 'syz.1.20293': attribute type 29 has an invalid length. [ 1556.549227][T23781] __nla_validate_parse: 85 callbacks suppressed [ 1556.549870][T23781] netlink: 68 bytes leftover after parsing attributes in process `syz.1.20335'. [ 1556.709229][T23792] netlink: 68 bytes leftover after parsing attributes in process `syz.2.20336'. [ 1556.792307][T23786] validate_nla: 61 callbacks suppressed [ 1556.792330][T23786] netlink: 'syz.3.20338': attribute type 12 has an invalid length. [ 1557.011754][T23800] netlink: 68 bytes leftover after parsing attributes in process `syz.3.20340'. [ 1557.113687][T23802] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1557.330324][T23816] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1557.406464][T23814] [ 1557.408878][T23814] ====================================================== [ 1557.415933][T23814] WARNING: possible circular locking dependency detected [ 1557.422990][T23814] syzkaller #0 Not tainted [ 1557.427431][T23814] ------------------------------------------------------ [ 1557.434562][T23814] syz.3.20347/23814 is trying to acquire lock: [ 1557.440743][T23814] ffffffff8ea85640 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 1557.449898][T23814] [ 1557.449898][T23814] but task is already holding lock: [ 1557.457305][T23814] ffff88802638a7f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1557.466930][T23814] [ 1557.466930][T23814] which lock already depends on the new lock. [ 1557.466930][T23814] [ 1557.477451][T23814] [ 1557.477451][T23814] the existing dependency chain (in reverse order) is: [ 1557.486488][T23814] [ 1557.486488][T23814] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 1557.494174][T23814] __might_fault+0xcb/0x130 [ 1557.499409][T23814] _copy_from_user+0x28/0xb0 [ 1557.504749][T23814] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 1557.511723][T23814] ip_generic_getfrag+0x149/0x2d0 [ 1557.517385][T23814] __ip6_append_data+0x39cd/0x3f60 [ 1557.523237][T23814] ip6_append_data+0x10f/0x280 [ 1557.528578][T23814] rawv6_sendmsg+0x12d3/0x18e0 [ 1557.534033][T23814] ____sys_sendmsg+0x80a/0x9f0 [ 1557.539358][T23814] ___sys_sendmsg+0x2a5/0x360 [ 1557.544601][T23814] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1557.550178][T23814] do_syscall_64+0x174/0x580 [ 1557.555312][T23814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.561727][T23814] [ 1557.561727][T23814] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1557.569561][T23814] lock_sock_nested+0x41/0x100 [ 1557.574954][T23814] inet_shutdown+0x6a/0x390 [ 1557.579987][T23814] nbd_mark_nsock_dead+0x2e9/0x560 [ 1557.585619][T23814] recv_work+0x1c2e/0x1d40 [ 1557.590652][T23814] process_scheduled_works+0xb5d/0x1860 [ 1557.596736][T23814] worker_thread+0xa53/0xfc0 [ 1557.601883][T23814] kthread+0x389/0x470 [ 1557.606514][T23814] ret_from_fork+0x514/0xb70 [ 1557.611644][T23814] ret_from_fork_asm+0x1a/0x30 [ 1557.616950][T23814] [ 1557.616950][T23814] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1557.624637][T23814] __mutex_lock+0x1a3/0x1550 [ 1557.629805][T23814] nbd_queue_rq+0x37b/0x1100 [ 1557.634954][T23814] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1557.641061][T23814] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1557.647948][T23814] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1557.654463][T23814] blk_mq_run_hw_queue+0x348/0x4f0 [ 1557.660104][T23814] blk_mq_dispatch_list+0xd16/0xe10 [ 1557.665842][T23814] blk_mq_flush_plug_list+0x48d/0x570 [ 1557.671862][T23814] __blk_flush_plug+0x3ed/0x4d0 [ 1557.677291][T23814] __submit_bio+0x28d/0x580 [ 1557.682487][T23814] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1557.688930][T23814] block_read_full_folio+0x599/0x830 [ 1557.694762][T23814] filemap_read_folio+0x137/0x3b0 [ 1557.700356][T23814] do_read_cache_folio+0x358/0x590 [ 1557.706055][T23814] read_part_sector+0xb6/0x2b0 [ 1557.711351][T23814] adfspart_check_ICS+0xb1/0x960 [ 1557.716835][T23814] bdev_disk_changed+0x817/0x1770 [ 1557.722400][T23814] blkdev_get_whole+0x380/0x510 [ 1557.727804][T23814] bdev_open+0x31e/0xd30 [ 1557.732592][T23814] blkdev_open+0x470/0x610 [ 1557.737563][T23814] do_dentry_open+0x822/0x13a0 [ 1557.742884][T23814] vfs_open+0x3b/0x340 [ 1557.747963][T23814] path_openat+0x2e08/0x3860 [ 1557.753249][T23814] do_file_open+0x23e/0x4a0 [ 1557.758381][T23814] do_sys_openat2+0x113/0x200 [ 1557.763590][T23814] __x64_sys_openat+0x138/0x170 [ 1557.768981][T23814] do_syscall_64+0x174/0x580 [ 1557.774109][T23814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.780877][T23814] [ 1557.780877][T23814] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1557.788121][T23814] __mutex_lock+0x1a3/0x1550 [ 1557.793433][T23814] nbd_queue_rq+0xc6/0x1100 [ 1557.798853][T23814] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1557.805152][T23814] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1557.812139][T23814] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1557.818707][T23814] blk_mq_run_hw_queue+0x348/0x4f0 [ 1557.824426][T23814] blk_mq_dispatch_list+0xd16/0xe10 [ 1557.830446][T23814] blk_mq_flush_plug_list+0x48d/0x570 [ 1557.836372][T23814] __blk_flush_plug+0x3ed/0x4d0 [ 1557.841850][T23814] __submit_bio+0x28d/0x580 [ 1557.847190][T23814] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1557.853386][T23814] block_read_full_folio+0x599/0x830 [ 1557.859670][T23814] filemap_read_folio+0x137/0x3b0 [ 1557.865351][T23814] do_read_cache_folio+0x358/0x590 [ 1557.871015][T23814] read_part_sector+0xb6/0x2b0 [ 1557.876585][T23814] adfspart_check_ICS+0xb1/0x960 [ 1557.882080][T23814] bdev_disk_changed+0x817/0x1770 [ 1557.887691][T23814] blkdev_get_whole+0x380/0x510 [ 1557.893276][T23814] bdev_open+0x31e/0xd30 [ 1557.898124][T23814] blkdev_open+0x470/0x610 [ 1557.903105][T23814] do_dentry_open+0x822/0x13a0 [ 1557.908416][T23814] vfs_open+0x3b/0x340 [ 1557.913039][T23814] path_openat+0x2e08/0x3860 [ 1557.918299][T23814] do_file_open+0x23e/0x4a0 [ 1557.923363][T23814] do_sys_openat2+0x113/0x200 [ 1557.928595][T23814] __x64_sys_openat+0x138/0x170 [ 1557.934022][T23814] do_syscall_64+0x174/0x580 [ 1557.939177][T23814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.945731][T23814] [ 1557.945731][T23814] -> #3 (set->srcu){.+.+}-{0:0}: [ 1557.952877][T23814] __synchronize_srcu+0xca/0x300 [ 1557.958352][T23814] elevator_switch+0x1e8/0x7a0 [ 1557.963661][T23814] elevator_change+0x2cc/0x450 [ 1557.968979][T23814] elevator_set_default+0x36c/0x430 [ 1557.974717][T23814] blk_register_queue+0x3e9/0x4e0 [ 1557.980372][T23814] __add_disk+0x677/0xd50 [ 1557.985325][T23814] add_disk_fwnode+0xfb/0x480 [ 1557.990626][T23814] nbd_dev_add+0x72c/0xb50 [ 1557.995572][T23814] nbd_init+0x168/0x1f0 [ 1558.000253][T23814] do_one_initcall+0x250/0x870 [ 1558.005542][T23814] do_initcall_level+0x104/0x190 [ 1558.011073][T23814] do_initcalls+0x59/0xa0 [ 1558.015941][T23814] kernel_init_freeable+0x2a6/0x3e0 [ 1558.021687][T23814] kernel_init+0x1d/0x1d0 [ 1558.026632][T23814] ret_from_fork+0x514/0xb70 [ 1558.031839][T23814] ret_from_fork_asm+0x1a/0x30 [ 1558.037139][T23814] [ 1558.037139][T23814] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1558.045090][T23814] __mutex_lock+0x1a3/0x1550 [ 1558.050241][T23814] elevator_change+0x1b3/0x450 [ 1558.055829][T23814] elevator_set_none+0xb5/0x140 [ 1558.061437][T23814] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1558.067893][T23814] nbd_start_device+0x17f/0xb10 [ 1558.073818][T23814] nbd_genl_connect+0x165b/0x1cf0 [ 1558.079402][T23814] genl_family_rcv_msg_doit+0x22a/0x330 [ 1558.085522][T23814] genl_rcv_msg+0x61c/0x7a0 [ 1558.090586][T23814] netlink_rcv_skb+0x232/0x4b0 [ 1558.095888][T23814] genl_rcv+0x28/0x40 [ 1558.100538][T23814] netlink_unicast+0x75c/0x8e0 [ 1558.106049][T23814] netlink_sendmsg+0x813/0xb40 [ 1558.111377][T23814] ____sys_sendmsg+0x972/0x9f0 [ 1558.116675][T23814] ___sys_sendmsg+0x2a5/0x360 [ 1558.121999][T23814] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1558.127497][T23814] do_syscall_64+0x174/0x580 [ 1558.132632][T23814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.139062][T23814] [ 1558.139062][T23814] -> #1 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 1558.147798][T23814] blk_alloc_queue+0x546/0x680 [ 1558.153158][T23814] __blk_mq_alloc_disk+0x197/0x390 [ 1558.159009][T23814] nbd_dev_add+0x499/0xb50 [ 1558.163966][T23814] nbd_init+0x168/0x1f0 [ 1558.168668][T23814] do_one_initcall+0x250/0x870 [ 1558.174061][T23814] do_initcall_level+0x104/0x190 [ 1558.179565][T23814] do_initcalls+0x59/0xa0 [ 1558.184445][T23814] kernel_init_freeable+0x2a6/0x3e0 [ 1558.190204][T23814] kernel_init+0x1d/0x1d0 [ 1558.195074][T23814] ret_from_fork+0x514/0xb70 [ 1558.200222][T23814] ret_from_fork_asm+0x1a/0x30 [ 1558.205556][T23814] [ 1558.205556][T23814] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1558.212816][T23814] __lock_acquire+0x15a5/0x2cf0 [ 1558.218251][T23814] lock_acquire+0x106/0x350 [ 1558.223308][T23814] fs_reclaim_acquire+0x71/0x100 [ 1558.228791][T23814] prepare_alloc_pages+0x152/0x650 [ 1558.234441][T23814] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1558.240780][T23814] alloc_pages_mpol+0x235/0x490 [ 1558.246180][T23814] folio_alloc_mpol_noprof+0x39/0x160 [ 1558.252088][T23814] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1558.257909][T23814] do_wp_page+0x118a/0x4cc0 [ 1558.263117][T23814] handle_mm_fault+0x1698/0x3170 [ 1558.268777][T23814] do_user_addr_fault+0x75b/0x1340 [ 1558.274543][T23814] exc_page_fault+0x6a/0xc0 [ 1558.279599][T23814] asm_exc_page_fault+0x26/0x30 [ 1558.285048][T23814] rep_movs_alternative+0x4a/0x90 [ 1558.290645][T23814] _copy_to_iter+0x255/0x17d0 [ 1558.295855][T23814] __skb_datagram_iter+0xf8/0x980 [ 1558.301516][T23814] skb_copy_datagram_iter+0xb5/0x240 [ 1558.307364][T23814] qrtr_recvmsg+0x1fd/0x970 [ 1558.312418][T23814] sock_recvmsg+0x172/0x1b0 [ 1558.317470][T23814] sock_read_iter+0x251/0x320 [ 1558.322677][T23814] do_iter_readv_writev+0x619/0x8c0 [ 1558.328406][T23814] vfs_readv+0x288/0x840 [ 1558.333271][T23814] do_readv+0x154/0x2e0 [ 1558.337961][T23814] do_syscall_64+0x174/0x580 [ 1558.343077][T23814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.349601][T23814] [ 1558.349601][T23814] other info that might help us debug this: [ 1558.349601][T23814] [ 1558.359877][T23814] Chain exists of: [ 1558.359877][T23814] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 1558.359877][T23814] [ 1558.372693][T23814] Possible unsafe locking scenario: [ 1558.372693][T23814] [ 1558.380192][T23814] CPU0 CPU1 [ 1558.385630][T23814] ---- ---- [ 1558.391161][T23814] rlock(&mm->mmap_lock); [ 1558.395612][T23814] lock(sk_lock-AF_INET6); [ 1558.402660][T23814] lock(&mm->mmap_lock); [ 1558.409884][T23814] lock(fs_reclaim); [ 1558.413879][T23814] [ 1558.413879][T23814] *** DEADLOCK *** [ 1558.413879][T23814] [ 1558.422112][T23814] 2 locks held by syz.3.20347/23814: [ 1558.427487][T23814] #0: ffff88801facae20 (sk_lock-AF_QIPCRTR){+.+.}-{0:0}, at: qrtr_recvmsg+0xd0/0x970 [ 1558.437111][T23814] #1: ffff88802638a7f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1558.447087][T23814] [ 1558.447087][T23814] stack backtrace: [ 1558.452999][T23814] CPU: 1 UID: 0 PID: 23814 Comm: syz.3.20347 Not tainted syzkaller #0 PREEMPT(full) [ 1558.453020][T23814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1558.453030][T23814] Call Trace: [ 1558.453040][T23814] [ 1558.453049][T23814] dump_stack_lvl+0xe8/0x150 [ 1558.453072][T23814] print_circular_bug+0x2e1/0x300 [ 1558.453094][T23814] check_noncircular+0x12e/0x150 [ 1558.453115][T23814] __lock_acquire+0x15a5/0x2cf0 [ 1558.453134][T23814] ? __lock_acquire+0x6b5/0x2cf0 [ 1558.453151][T23814] ? __lock_acquire+0x6b5/0x2cf0 [ 1558.453168][T23814] ? prepare_alloc_pages+0x152/0x650 [ 1558.453190][T23814] lock_acquire+0x106/0x350 [ 1558.453205][T23814] ? prepare_alloc_pages+0x152/0x650 [ 1558.453228][T23814] ? unwind_next_frame+0xa6/0x2550 [ 1558.453245][T23814] ? lock_acquire+0x106/0x350 [ 1558.453263][T23814] fs_reclaim_acquire+0x71/0x100 [ 1558.453284][T23814] ? prepare_alloc_pages+0x152/0x650 [ 1558.453304][T23814] prepare_alloc_pages+0x152/0x650 [ 1558.453328][T23814] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1558.453345][T23814] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1558.453369][T23814] ? __pfx_policy_nodemask+0x10/0x10 [ 1558.453383][T23814] ? is_bpf_text_address+0x26/0x2b0 [ 1558.453400][T23814] ? kernel_text_address+0xa5/0xe0 [ 1558.453423][T23814] alloc_pages_mpol+0x235/0x490 [ 1558.453446][T23814] folio_alloc_mpol_noprof+0x39/0x160 [ 1558.453462][T23814] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1558.453479][T23814] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1558.453497][T23814] do_wp_page+0x118a/0x4cc0 [ 1558.453518][T23814] ? __pte_offset_map+0x29/0x240 [ 1558.453540][T23814] ? __pfx_do_wp_page+0x10/0x10 [ 1558.453556][T23814] ? do_raw_spin_lock+0x12b/0x2f0 [ 1558.453577][T23814] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1558.453601][T23814] handle_mm_fault+0x1698/0x3170 [ 1558.453624][T23814] ? handle_mm_fault+0xf1/0x3170 [ 1558.453645][T23814] ? __pfx_handle_mm_fault+0x10/0x10 [ 1558.453668][T23814] ? __lock_acquire+0x6b5/0x2cf0 [ 1558.453684][T23814] ? lock_mm_and_find_vma+0xa7/0x340 [ 1558.453706][T23814] do_user_addr_fault+0x75b/0x1340 [ 1558.453728][T23814] exc_page_fault+0x6a/0xc0 [ 1558.453746][T23814] asm_exc_page_fault+0x26/0x30 [ 1558.453761][T23814] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1558.453782][T23814] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1558.453796][T23814] RSP: 0018:ffffc90012187638 EFLAGS: 00050206 [ 1558.453811][T23814] RAX: ffffffff84af5501 RBX: ffff8880811c8020 RCX: 0000000000000b00 [ 1558.453823][T23814] RDX: 0000000000000000 RSI: ffff8880811c8520 RDI: 0000200000001000 [ 1558.453834][T23814] RBP: ffffc900121877b0 R08: ffff8880811c901f R09: 1ffff11010239203 [ 1558.453845][T23814] R10: dffffc0000000000 R11: ffffed1010239204 R12: 1ffff92002430f47 [ 1558.453856][T23814] R13: 0000200000000b00 R14: ffffc90012187a48 R15: 0000000000001000 [ 1558.453870][T23814] ? _copy_to_iter+0x1f1/0x17d0 [ 1558.453890][T23814] _copy_to_iter+0x255/0x17d0 [ 1558.453907][T23814] ? do_raw_spin_lock+0x12b/0x2f0 [ 1558.453930][T23814] ? __pfx__copy_to_iter+0x10/0x10 [ 1558.453945][T23814] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1558.453968][T23814] ? lockdep_hardirqs_on+0x7a/0x110 [ 1558.453983][T23814] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1558.454005][T23814] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 1558.454027][T23814] __skb_datagram_iter+0xf8/0x980 [ 1558.454046][T23814] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1558.454067][T23814] skb_copy_datagram_iter+0xb5/0x240 [ 1558.454087][T23814] qrtr_recvmsg+0x1fd/0x970 [ 1558.454109][T23814] ? __pfx_qrtr_recvmsg+0x10/0x10 [ 1558.454125][T23814] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1558.454147][T23814] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1558.454166][T23814] ? security_socket_recvmsg+0x7e/0x2c0 [ 1558.454183][T23814] ? __pfx_qrtr_recvmsg+0x10/0x10 [ 1558.454200][T23814] sock_recvmsg+0x172/0x1b0 [ 1558.454222][T23814] sock_read_iter+0x251/0x320 [ 1558.454242][T23814] ? __pfx_sock_read_iter+0x10/0x10 [ 1558.454264][T23814] ? preempt_schedule_thunk+0x16/0x30 [ 1558.454289][T23814] do_iter_readv_writev+0x619/0x8c0 [ 1558.454314][T23814] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1558.454338][T23814] ? bpf_lsm_file_permission+0x9/0x20 [ 1558.454358][T23814] ? security_file_permission+0x75/0x260 [ 1558.454377][T23814] ? rw_verify_area+0x2a6/0x4d0 [ 1558.454398][T23814] vfs_readv+0x288/0x840 [ 1558.454414][T23814] ? __pfx_futex_wake+0x10/0x10 [ 1558.454437][T23814] ? __pfx_vfs_readv+0x10/0x10 [ 1558.454465][T23814] ? __fget_files+0x2a/0x420 [ 1558.454484][T23814] ? __fget_files+0x3a0/0x420 [ 1558.454500][T23814] ? __fget_files+0x2a/0x420 [ 1558.454520][T23814] do_readv+0x154/0x2e0 [ 1558.454537][T23814] ? __pfx_do_readv+0x10/0x10 [ 1558.454556][T23814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.454571][T23814] do_syscall_64+0x174/0x580 [ 1558.454586][T23814] ? trace_irq_disable+0x3b/0x140 [ 1558.454608][T23814] ? clear_bhb_loop+0x40/0x90 [ 1558.454624][T23814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.454639][T23814] RIP: 0033:0x7fdd5739ce59 [ 1558.454653][T23814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.454665][T23814] RSP: 002b:00007fdd581e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1558.454681][T23814] RAX: ffffffffffffffda RBX: 00007fdd57615fa0 RCX: 00007fdd5739ce59 [ 1558.454692][T23814] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 1558.454701][T23814] RBP: 00007fdd57432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1558.454711][T23814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1558.454720][T23814] R13: 00007fdd57616038 R14: 00007fdd57615fa0 R15: 00007ffc75a0ca78 [ 1558.454738][T23814] [ 1559.049995][T23822] netlink: 68 bytes leftover after parsing attributes in process `syz.0.20349'.