last executing test programs: 7.209838343s ago: executing program 1 (id=1619): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x2a, 0x2, 0x0) (async) recvfrom(r0, &(0x7f0000000080)=""/34, 0x22, 0x12100, &(0x7f0000000300)=@sco, 0x80) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r3, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x4) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000004c0)={{r0, &(0x7f00000000c0)='aead\x00', 0x82, &(0x7f00000001c0)={@_ha_fsid={[0x8]}, {0x81, 0x3, 0x9, 0x1}}, 0x9ad, &(0x7f0000000380), &(0x7f00000003c0)=0x6}, {[0x9, 0x3, 0x8, 0x101]}, 0x9, 0x98, &(0x7f0000000400)=""/152}) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000002580)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002540)={&(0x7f00000014c0)={0x1060, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [{{0x254, 0x1, {{0x3, 0xfff}, 0x5, 0x4, 0xfffa, 0x8, 0x27, 'syz1\x00', "e50dc5ab64d8d21a7ea3eb2de8a854c35548d7152d2743811374e2632266e3d6", "48debaa03e5976701b725d6f3e544c170e4157c90bd3fe348660f866619e42ec", [{0x5, 0x1, {0x1, 0x2}}, {0x401, 0x2, {0x0, 0x2}}, {0x81, 0x6, {0x0, 0x2}}, {0x9, 0x2, {0x1, 0x600}}, {0x0, 0x8001, {0x1, 0x100}}, {0x6, 0x3, {0x3, 0x2}}, {0x1, 0x0, {0x1, 0x2}}, {0x7ff, 0xfff, {0x3, 0x100}}, {0x4, 0x401, {0x3, 0x1}}, {0x9, 0x101, {0x3, 0x3}}, {0x8, 0x4, {0x0, 0x5}}, {0x3, 0xffff, {0x3, 0x800}}, {0x0, 0x0, {0x2, 0x3}}, {0x9, 0xfff, {0x1, 0x4}}, {0x5, 0x81, {0x3, 0x6}}, {0x0, 0xfffe, {0x0, 0x9}}, {0x1, 0x96, {0x3}}, {0x7ee, 0x9, {0x0, 0x10001}}, {0x5, 0x4, {0x2}}, {0x6, 0x6, {0x0, 0x7}}, {0x1, 0x7fff, {0x0, 0xfffffff7}}, {0x45, 0x9, {0x0, 0x4b7}}, {0xe, 0x3, {0x2, 0xfffffff8}}, {0x0, 0x91, {0xd3868c0f39ec1dad, 0x4}}, {0xfffc, 0xb, {0x1, 0xe70}}, {0x9, 0xa14, {0x4, 0xffffff86}}, {0x2bc, 0x4, {0x3, 0x5}}, {0x2, 0x0, {0x2, 0x10000}}, {0xffff, 0x8, {0x0, 0x4}}, {0x6, 0x5, {0x3, 0x1800000}}, {0x7, 0x57fa, {0x3, 0x8d}}, {0x73, 0x600, {0x3, 0x40}}, {0xf643, 0xff, {0x3, 0x9}}, {0x2d80, 0xf, {0x3, 0x14}}, {0x1, 0x7, {0x2, 0x200}}, {0x9, 0xb1d, {0x3, 0x4}}, {0x2, 0x619, {0x3, 0x9}}, {0x0, 0x1ff, {0x1, 0x1}}, {0x5, 0xf77, {0x0, 0x9}}, {0x4, 0x3, {0x0, 0x3ff}}]}}}, {{0x254, 0x1, {{0x1, 0xe327}, 0x2, 0x8, 0x81, 0x5280, 0x3, 'syz1\x00', "cd106eaeb5044332d72d26bcbeb801016d770b8a08c872459519da1293676e0b", "8fe41c03db88b86efb3dcae4ba9e52073d04b390c9b1e3439b17bdbe592bc6ff", [{0x8, 0x800, {0x3, 0xe}}, {0x7, 0x4800, {0x0, 0x3778}}, {0x11c, 0x0, {0x0, 0x6}}, {0x4, 0x7, {0x0, 0xa}}, {0x75, 0xf3, {0x3, 0xfffffeff}}, {0x0, 0x4, {0x2, 0x8001}}, {0x5d, 0x2, {0x1}}, {0x1, 0x0, {0x1, 0x41}}, {0x5, 0x8, {0x2, 0x8}}, {0x8001, 0x7f, {0x2, 0x1}}, {0x7, 0xcbd, {0x0, 0xeb58580e}}, {0xf800, 0x2, {0x2, 0x8}}, {0x2, 0x2, {0x1, 0x6}}, {0x7, 0x4, {0x2, 0x84e}}, {0x1, 0x80, {0x3, 0x97aa}}, {0x5f, 0x3, {0x0, 0x4}}, {0x1, 0x4, {0x2, 0x1}}, {0x8001, 0x6, {0x3, 0xd0f3}}, {0x6, 0x6, {0x1, 0x8001}}, {0x5, 0x1, {0x1, 0x1}}, {0x5, 0xc, {0x3, 0x27cc5595}}, {0x4, 0x2, {0x3, 0x6}}, {0x972b, 0x2b5, {0x2, 0x9}}, {0x7, 0x8, {0x2, 0x1}}, {0x82b, 0x8, {0x0, 0xd09}}, {0x5, 0x5, {0x0, 0xf}}, {0x2, 0x2, {0x2, 0xd}}, {0x1000, 0xfffb, {0x0, 0xc}}, {0x1, 0x3, {0x3, 0x6236}}, {0x10, 0x4, {0x2, 0x1000}}, {0x1, 0x5, {0x0, 0x67}}, {0x1, 0x4d5, {0x3}}, {0x2, 0x7, {0x0, 0xc}}, {0x6, 0x1, {0x3, 0x81}}, {0x4, 0x20, {0x0, 0xfffffff0}}, {0x8, 0x7ff, {0xb0813fb2f77559df, 0x2}}, {0x9, 0x180, {0x0, 0x7fffffff}}, {0x9, 0x1, {0x2, 0x81}}, {0x8, 0x2, {0x3, 0x83de}}, {0x2, 0x8, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x5, 0x2, 0xfffa, 0x38, 0x1f, 'syz0\x00', "f2febaedfaf02637815304d40fbb72d25c2bb8d2bf8a1b6dcd90e911434531e6", "a2fade840d7ac779ad297e25c1ae71b045d79596776784256c7affc3f0ff12f5", [{0x7, 0x1, {0x0, 0x9}}, {0x8000, 0xffff, {0x2, 0xffffffff}}, {0x5, 0x6, {0x1, 0xc75}}, {0x200, 0x3, {0x2}}, {0x346c, 0x7ff, {0x2, 0x200}}, {0x8, 0x0, {0x1, 0x4}}, {0xd, 0xffff, {0x2, 0x7}}, {0x9, 0x6, {0x3, 0x5}}, {0x100, 0x6, {0x2, 0x400}}, {0xfffc, 0x5, {0x1, 0x70}}, {0x3, 0x2, {0x2, 0xb511}}, {0x26, 0xd, {0x1, 0x1000}}, {0xcb20, 0x2, {0x1, 0xf0d}}, {0x8, 0x81, {0x1}}, {0x3, 0x1, {0x2, 0x7}}, {0x9, 0x7, {0x3}}, {0x7fff, 0xd, {0x0, 0xffff}}, {0x0, 0x0, {0x1, 0xa63f}}, {0xe, 0xd94, {0x0, 0x8}}, {0x30, 0x8, {0x1, 0x8}}, {0x5, 0xfffc}, {0xa, 0xe36, {0x0, 0x80}}, {0x40, 0xfffa, {0x2, 0x1}}, {0x7, 0x9, {0x3, 0x200}}, {0x2, 0xbb7, {0x0, 0xc}}, {0x1, 0x6, {0x0, 0x8}}, {0x5, 0x9, {0x3, 0x5b7110f1}}, {0x9, 0x8, {0x3, 0x3ff}}, {0x101, 0x1, {0x1, 0x200}}, {0xb, 0x49e, {0x3, 0xfffffffa}}, {0xef43, 0x5, {0x2, 0x9}}, {0x81, 0x6, {0x2359c608cbae8e66, 0x4}}, {0x9, 0x1, {0x2, 0x8}}, {0x3, 0x5, {0x1, 0x8}}, {0x2, 0x7, {0x2, 0x9}}, {0x3, 0x7, {0x0, 0x400}}, {0x8a, 0x8, {0x2, 0x6}}, {0xa000, 0x5, {0x1, 0x7c}}, {0x8, 0x9, {0x1, 0x1ff}}, {0x457a, 0xe6, {0x2, 0x10000}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x81, 0x5, 0x3, 0x0, 0x18, 'syz0\x00', "066d1ba5a82838e562499570fb45324b4342eb2bf47d512422318ceb684ac2f8", "58d7735ae7ee66e89681cc49d0b08ef79f89e4e8b22373c63976fb134a1746e8", [{0x1, 0x4, {0x0, 0xad62}}, {0x9, 0x0, {0x1, 0x8}}, {0xb92, 0x2, {0x2, 0x2}}, {0xffff, 0x4, {0x1, 0x7b4}}, {0x5, 0x2, {0x3, 0xffffff2d}}, {0xfffa, 0x7, {0x2}}, {0x65d1, 0x5, {0x2, 0x1}}, {0x401, 0x8, {0x0, 0xae}}, {0xa, 0xd1cd, {0x3, 0xfffffc62}}, {0x7, 0x9, {0x1, 0x1}}, {0xffff, 0xfc01, {0x1, 0x2b9}}, {0x0, 0xfff8, {0x0, 0x3}}, {0xfff, 0x7, {0x2, 0x2}}, {0x29, 0x6, {0x3, 0x1}}, {0x6, 0xfffd, {0x2, 0x1}}, {0x10, 0x2, {0x0, 0x10000}}, {0x5, 0x400, {0x0, 0x7f}}, {0xdf, 0x5, {0x1, 0x9}}, {0x5, 0x1, {0x2, 0x1}}, {0x8001, 0xef2, {0x3, 0x6}}, {0x1, 0x8001, {0x3, 0x2}}, {0xff4c, 0x100, {0x1, 0x1ff}}, {0x1, 0xb0c, {0x3, 0x100}}, {0x3ff, 0xc, {0x3, 0x9}}, {0x8, 0x2, {0x1}}, {0x8001, 0x4f, {0x3, 0xd196}}, {0x101, 0x800, {0x3, 0x75}}, {0x5, 0x0, {0x0, 0x8}}, {0x5, 0x6, {0x0, 0x1}}, {0x3, 0xdab, {0x3, 0x7}}, {0x4, 0x4}, {0xb, 0x8, {0x1, 0x9}}, {0x7, 0x9, {0x2, 0x1}}, {0x5, 0x1000, {0x0, 0x9}}, {0x6, 0x4, {0x3, 0x1}}, {0x100, 0x2, {0x2, 0x1}}, {0x9fec, 0x3ff, {0x0, 0x31}}, {0xd52f, 0x94, {0x2, 0x8}}, {0x4, 0x6, {0x3, 0x7f}}, {0x7, 0x8001, {0x3, 0x101}}]}}}, {{0x254, 0x1, {{0x1, 0x10001}, 0x8, 0x6, 0x5, 0x24, 0x14, 'syz1\x00', "eb48320fa47723f848314b31f13dd9f74ddc578590add67cc51cc17b8b19f698", "e1b6b75f5d2db55337be63fbc5e6d7b213840bf043be47be5c0e70b31f956be9", [{0x7, 0x6, {0x1, 0x6}}, {0x8000, 0xa, {0x2, 0x8a39}}, {0x0, 0x8000, {0x0, 0xc318}}, {0x10, 0x1, {0x2, 0x2}}, {0x83c1, 0xf, {0x0, 0x7}}, {0xfffb, 0xfffe, {0x1, 0xf}}, {0x6, 0x6c7d, {0x3, 0x199}}, {0x6, 0xc, {0x3, 0x6}}, {0xfff3, 0x5768, {0x3, 0x9}}, {0x1, 0x0, {0x3, 0x31}}, {0x6, 0x8f7e, {0x1, 0x3}}, {0xa8, 0x3, {0x1, 0x3}}, {0x101, 0x7fa9, {0x1, 0xd60}}, {0x9000, 0xd0, {0x1, 0x2ebc0000}}, {0x7, 0x1ab8, {0x3, 0x3}}, {0x51, 0x9, {0x1, 0xfffffff0}}, {0x6, 0x5, {0x3, 0x8}}, {0x0, 0x3, {0x2, 0x2}}, {0x1000, 0x5, {0x1}}, {0xc8e8, 0xc817, {0x1, 0x9}}, {0x8000, 0x3, {0x2, 0x10}}, {0x3, 0x6, {0x0, 0x309}}, {0x0, 0xffff, {0x2, 0x6}}, {0x5, 0x1, {0x0, 0x5}}, {0x8, 0xe, {0x2, 0x6}}, {0x3, 0x8d, {0x3}}, {0xfff5, 0x0, {0x0, 0x834}}, {0x0, 0x10, {0x0, 0x6}}, {0xd, 0xc, {0x1, 0x29}}, {0x0, 0x1000, {0x0, 0x266ddeba}}, {0x5, 0xa, {0x3, 0x200}}, {0xfff7, 0x6, {0x2, 0xf120}}, {0x81c, 0x8, {0x2, 0x4}}, {0x832, 0x0, {0x3}}, {0x8001, 0x9, {0x0, 0x5d53}}, {0x0, 0x4, {0x3, 0x7}}, {0x8, 0x1, {0x3, 0x1}}, {0xfff, 0xfeff, {0x1, 0x100}}, {0xda2c, 0xfffb, {0x0, 0x400}}, {0x8, 0x6, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x0, 0x0, 0x7, 0x2, 0x1c, 'syz1\x00', "18e6ace6142dd20191204af5b18e570c3ce97f891e50f51a5b4387ddca1bbdab", "563d9ab462e63c606e562045912852b0bbfbea3b3bf11066c5e15271d6b143a1", [{0x6, 0xbc}, {0x1, 0x9, {0xd764280fb95ea3f, 0x6543}}, {0xf69, 0x800, {0x7a4bf0af11c86960, 0x9}}, {0x1000, 0x1, {0x3, 0x6}}, {0x2, 0x7, {0x3, 0x48}}, {0x400, 0xf574, {0x3, 0x3}}, {0x3, 0x0, {0x0, 0x7}}, {0xffff, 0x8, {0x1, 0x7}}, {0x9, 0x3, {0x1, 0xfff}}, {0x8840, 0x3, {0x3}}, {0x101, 0xfff7, {0x126e70b7618e0277, 0x2}}, {0xaae, 0x0, {0x2}}, {0x6, 0x17c, {0x0, 0xcdd}}, {0x89, 0xb, {0x1, 0x7}}, {0x3c7, 0x8001, {0x2, 0xd}}, {0x1, 0xb8d, {0x0, 0x100}}, {0xd, 0x2, {0x0, 0x100}}, {0x3, 0x6, {0x2, 0x2}}, {0x2676, 0x4e, {0x0, 0x101}}, {0x7, 0x3, {0x0, 0x3}}, {0xf5c, 0x5, {0x2, 0x1}}, {0x5, 0x4}, {0x0, 0x1, {0x3, 0xb1}}, {0x2, 0x6, {0x7, 0x6}}, {0x0, 0x80}, {0x1, 0x3, {0x0, 0x1}}, {0x1, 0xf, {0x2, 0xf4e}}, {0x3, 0x9, {0x1, 0x7}}, {0x5, 0xb07, {0x1, 0x2}}, {0x5630, 0x401, {0x1, 0x1000}}, {0x3, 0x3, {0x2, 0xfff}}, {0x1, 0x3, {0x2, 0x9ee}}, {0x9, 0xf23f, {0x1, 0x6}}, {0x2, 0x800, {0x0, 0x100}}, {0xdf, 0xb1b, {0x3, 0xf}}, {0xfff8, 0x100, {0x2, 0x9}}, {0x7, 0x7, {0x3, 0x8}}, {0x6, 0x2, {0x1, 0x1}}, {0x9, 0x4, {0x3, 0x695}}, {0x2f33, 0xeae, {0xf2c27a77f4b5df1d, 0x999b}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x0, 0x8, 0x8, 0x5, 0x0, 'syz0\x00', "bf505245de5c05a76a030bf411dc3d983e2df755a42692b7b41aa97b9892bd69", "6e011f9121dd1cbb353200329bf587d4a3280e74688607ac53f2fa614fa8193b", [{0xf792, 0xd, {0x2, 0x7}}, {0x6, 0x8001, {0x0, 0xffff}}, {0xe, 0x0, {0x1, 0x4c2}}, {0x0, 0x1, {0x3, 0x8}}, {0x4, 0x800, {0x3, 0x5}}, {0x20f2, 0x4, {0x0, 0x6}}, {0x72, 0x5, {0x2, 0xfd}}, {0x6, 0x4, {0x2, 0x7}}, {0x11f9, 0x5, {0x2, 0xb}}, {0x1, 0x1, {0x2, 0x60513edb}}, {0x8, 0x6, {0x3, 0x6}}, {0x8001, 0xa008, {0x1, 0x6}}, {0x0, 0x6, {0x3, 0x3}}, {0x5e9, 0x0, {0x0, 0x2}}, {0x1, 0x8, {0x0, 0x7}}, {0x3ff, 0x7fff, {0x1, 0x295}}, {0x6, 0x9f79, {0x3, 0x6}}, {0x2, 0x0, {0x2}}, {0xff, 0x7, {0x3, 0xfe}}, {0x2, 0x2, {0x0, 0xff}}, {0x40, 0x4, {0x0, 0x44}}, {0x476c, 0x3, {0x3, 0xfffffff9}}, {0x7, 0x7f, {0x0, 0x80000000}}, {0x5, 0x2, {0x3, 0x7f03}}, {0x1, 0x2, {0x0, 0x7}}, {0xd, 0x3, {0x3, 0x3}}, {0x101, 0x386, {0x0, 0x6}}, {0x2, 0x6, {0x0, 0xe3}}, {0xe, 0xa15f, {0x2, 0x2fae}}, {0x2, 0x1, {0x0, 0xffff}}, {0x4, 0x7, {0x2, 0x6}}, {0x4280, 0x8000, {0x1, 0x4}}, {0x8, 0x9, {0x3, 0x1}}, {0x0, 0x0, {0x2, 0x6}}, {0x3, 0x3, {0x7, 0x5}}, {0x6, 0x1, {0x3, 0x9}}, {0x401, 0x3, {0x2, 0xb}}, {0x1058, 0x5, {0x0, 0x10}}, {0x9, 0x8, {0x3, 0x8}}, {0x1da4, 0x1, {0x2, 0xe}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x80}, 0x40080) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="119c63ac843e89b98d3d9079bafa", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6.579390885s ago: executing program 0 (id=1623): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4e}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8080148}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_getrule={0x1c, 0x22, 0x100, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x20, 0x3, 0x0, 0x0, 0x0, 0x6, 0xa}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x47, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000304000000000000000000000400", @ANYRESDEC, @ANYRESHEX=r0, @ANYRESHEX], 0x50}, 0x1, 0x0, 0x0, 0x24008884}, 0x800) 6.171129646s ago: executing program 0 (id=1624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2000}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x8, 0x3, 0x3, 0xfffffffd}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x60, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x8407}, {r1, 0x2}], 0x2, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000006060101000000000000000000030057797a30000000000900020073797a31000000000000000000000000000100e301c84039caad4c9f6e12420000951627bef671c37a053f97aca2ec55bea95c45cb70d962f2e9a3a8b026c39323a756216c6fd38bb0f6bbede9c80c2213bc4fc19154637da5e231d8e385368edb72d3f7de2823db143f765b592359e030a2a2c4165826bcc555bdb2ba0489ea3d172e376daeb1488fe3e10db3113da6bf226b5c5f6a0200240931d40d6a72b63c5803036af0460febc87744e1b1f2b49362309430ead72b1d61d51852c1913f396f988aaadbdcc9491813645c6d9d42cf635c8b3346ec3609faad76c0effd1c19e0c08fd2d881"], 0x19}, 0x1, 0x0, 0x0, 0x400e004}, 0x524a72c35dd13b51) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)) (async) write$ppp(r8, 0x0, 0x0) (async) connect$netrom(r5, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 5.955397292s ago: executing program 0 (id=1625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x7fff, 0x7, 0xab5, 0xd, 0x80000001}, 0x14) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "921a0aa199c7cb42", "72c3513c56d10ae4803621f9680b6693d5dbea42b0a4d3c20e90768e7109e43d", "f72a0002", "be14f63b1f81d56d"}, 0x38) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x66) close(r0) 5.71490909s ago: executing program 0 (id=1626): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0xd}]}, 0x10) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x5, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x307000, 0x0) close(r12) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 4.450333453s ago: executing program 0 (id=1630): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) (async) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000440)="ac", 0x1}], 0x1) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, 0x0, &(0x7f0000000040)) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000005ed008500000083000000bf0900000000000055090100000000009500000000000000850000002a000000bf91000000000000b7020000020700008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0xf, 0x0, 0xa, 0xb, 0x1, 0x1, 0x6, 0xc, 0xc, 0x3, 0x1, 0x8, 0x8, 0x10, 0x5, 0x9], 0x1, [0x3, 0x8001, 0x200, 0x1, 0x0, 0x5, 0x5, 0x0, 0x90, 0x6, 0x7, 0x10, 0xaa8, 0x200, 0x4], [0x4, 0xf, 0x8, 0x0, 0x6, 0xc, 0x5, 0xa, 0x0, 0xff, 0x0, 0x8a, 0x2, 0x7b03, 0x2, 0x5]}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 4.215490357s ago: executing program 0 (id=1632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x2c020400) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x64000005}, 0x4040004) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x3, [], "44942d"}, @datasec={0x5, 0x4, 0x0, 0xf, 0x1, [{0x5, 0x9}, {0x4, 0x4, 0x4}, {0x1, 0x4, 0xc}, {0x2, 0x83, 0x1}], "84"}]}, {0x0, [0x2e, 0x61, 0x61]}}, &(0x7f00000014c0)=""/2, 0x69, 0x2, 0x1}, 0x28) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f2d0000000000000187ac1414aaa69d35a2cca84708f7abca1bac14141bbd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) (async) unshare(0x40400) (async) socket(0x2b, 0x80801, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000001c0)={@mcast2, 0x2a}) (async) r6 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r6, 0x0, 0x0, 0x20040018, 0x0, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000000)={0x2, 'caif0\x00', {}, 0x7}) unshare(0x42000600) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x300, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@loopback, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x48, 0xffaf, 0x4}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0xffff5413, {0x7}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @remote, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x39a) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000e, 0x50, 0xffffffffffffffff, 0x2e403000) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r8, 0x5}, 0x10) (async) ioctl$BTRFS_IOC_ENCODED_WRITE(r8, 0x40809440, &(0x7f0000000e80)={&(0x7f0000000700)=[{&(0x7f00000002c0)="63f8e157d7f0f914dc58c8e1deb3672130626ca342bc1f923ff761c33263eba37171dc20552267f64f97405c1b4615e387bfef01915c84cfc4e7d4d0a1adddd98b3a52c67d96152dc2bb82bb458ca740c40901b36f3046651c8cc2bf2d538511ff9b214ced7de2c74d183d3482a947799bfb7eb8a601b6049f3e4f8a710713dbeeb971ff0645629c390c0756b99a2700b2a2c36cf36748722c2db742c01d5e61e0ab66d964d0b74e88bb5608e0967eec57a1532d57ec3c186b1234737f9b89e564a34fcab311bb4382248a968be7b60871c95c228ef2c431db090c8ef8830187cb8f36", 0xe3}, {&(0x7f0000000600)="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", 0xfd}], 0x2, 0x2, 0x0, 0x6, 0xa, 0x8001, 0x1, 0x4}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYRES64=r2, @ANYBLOB="e4e2de318d16ff283f093f31fa7c281c81e24e69bb09bbd2d33744c942774361095e2e6699fc38daca73e2f7763e78c7f01856e068d86758c7385a908df68451ec1d170b937b4aa55f9a89285261fd24745fa71eed11e6e58f3edcf4818ad1ea04d1fbd5eab38efcf0e1736046642dc081185051a395772289b37abd9ffe10e599eb8ddd7c435df9d726f375c34d31099bde1b721b"], 0x198}}, 0x24000094) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 3.071154459s ago: executing program 3 (id=1639): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1}, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000002880)) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r5, 0x0, 0x10500, 0x0) sendmsg$nl_route_sched_retired(r3, 0x0, 0x4000000) recvmmsg$unix(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe8}}, 0x0) socket(0x15, 0x80000, 0x7f) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="0a006558bbbbbbbbbbbbaaaaaaaa2abb86dd6d002000009c1100fe80000000000000000000000000001aff85"], 0xd6) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fe00000000002f75000002000000850000002e00115fd2e91878d022"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$cgroup_int(r4, &(0x7f0000000200)='notify_on_release\x00', 0x2, 0x0) 2.801042064s ago: executing program 4 (id=1641): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3800000}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000180)={@local, @local, @void, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "aad70417b319969b"}}}}, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @multicast2}], 0x10) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x35dfdbf8, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xfff2, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004070}, 0x4008000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r11, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x32, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db1ac8225b997fc21693c0942f0686928c388bc6f631"}}) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000004c0)={'gretap0\x00', r10, 0x80, 0x7800, 0xa65, 0x10, {{0x1c, 0x4, 0x3, 0x0, 0x70, 0x67, 0x0, 0x4, 0x4, 0x0, @remote, @rand_addr=0x64010101, {[@cipso={0x86, 0x28, 0xffffffffffffffff, [{0x0, 0x6, 'j%\x00^'}, {0x0, 0xe, "2462f5182ca7bdbf771485d1"}, {0x1, 0x9, "ad58448ac00eb6"}, {0x0, 0x5, "ec207e"}]}, @lsrr={0x83, 0x7, 0x80, [@remote]}, @rr={0x7, 0x7, 0x54, [@broadcast]}, @timestamp_addr={0x44, 0xc, 0x7c, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @rr={0x7, 0x17, 0xf9, [@rand_addr=0x64010100, @private=0xa010101, @multicast2, @multicast2, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe0, r12, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x4}]}, 0xe0}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 2.590670894s ago: executing program 3 (id=1642): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000006, 0x42073, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f00000000c0)="06669909d9025b3008a029e50f3308cfea0b0a6a01f03f47cb80701e5a8fb641f6b1d92a814c95fd3c23c601410dcdb53dca3da5795065038e2ec901a8e6c3c581", 0x41}, {&(0x7f0000000140)="1db2451f4c668f40d306d1f32683255d5a81f2ee2b536279f3ce03229fcde4fabf1ceca3dd8d06ca1a2a16ffadf2ba45290908acce0d63f345b71a07bd8f48215bf6e743af27c742b3c31aa30a87ac309fbd37978b7fbc6d10bb4b1574d741509106604e85aa788739db", 0x6a}, {&(0x7f00000001c0)="bcd782abeb050346d191a78985956328d15a8a2ef982b556caa51e882e2662984903871d7c87ccaade39de7f7711abd7eacffb534a48e75703584b062925d9894e498036c7a9dbe33185bc7956c3e9f7bacbe23a404cc75b8c58bd0c129dba8a1e0c269189fb9f6c269920549027c25d681d9050fc1e7ed73678004da06a66c8e9a1ef80945355663bc67cdb48c844567fe89360fddf2dd72def5c4aa67dbd67fbb0f76a62dbf340f7cc3fc051a935f67a9a7bac0a6c352cb013669bb2cd048e214706ed1850d100ebbd06fe671b39007c781351e30f8f8b0fb9a0a6560266d6439d91823f016ee41492c068fc", 0xed}, {&(0x7f00000002c0)="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", 0xfd}, {&(0x7f00000003c0)="ddadbb43c85f4ed5745566c63aefb57623138c441986d35f24665202be8442125c481593947994a14cb06394442f7de6e5a295752b0c95628ebc0abfa809b0060c9662afa2dcce17594d7adcc6ea2fde77f0d9d3ab0ef9f4f509f996d46a58a0a64d1607a72bb70230f7bed6006d6dcdbb8148d5208f75aac63b1ddb6b95e0738b0356b675f1cfd9dfec891abd7c5789b8053b8eaaa060599e622c072369a4ad1f129558", 0xa4}, {&(0x7f0000000480)="f90781063eb86d8176177da09a40ec9d1e0f7bf18f40699fb1886dcc22eebd602e1363ab0d6a2f72a330289614f665000a2d8a316b998b7efb5e9134978a6a286e2e9c1c0e60b8bcad5758cc5da7d77cc8bb43c948dc1072d9ecd082ef43e4becbaeb15b080427837f55d5181d1fbba045a1b315b76f6fe62f109fc096b14eb283728a0205cfc213645962362de3667a7f5e53aecab07e2ff95ff8f37985bb97a5", 0xa1}, {&(0x7f0000000540)="60c10edff4a49d18a1b111c1e3aa19b5776ab8e8e5103a18717bb7cfe75329c45c3919e1a6f71df6edbebb719d4b9a25eda5f497ca3927a4a89b75ba3e6fcec91fcee359547944bdeed66582da9ff797d03f154617c4ce79b2fc1ed9fc4279ec81ec", 0x62}, {&(0x7f00000005c0)="322058728a6a22117e031ebabdc951801300982cc91a2132b265522447e19a19d84561089afdf72e2f00fac4cbaae4f0c1424a6ac971ca84b6bd9cef375cdb953c6d5bb7e2801a5e6e422fb0068886b9172aefdd1794613b40f5c048f0d2ccfe6ace7278f5e4a0646aa97ed0f0894b8484e0cfdeb103500a227c25dfd802b0e613ac0bade8e9044f52e08054f993797cb022b6b843705b416d5e677ae70a826c1b", 0xa1}, {&(0x7f0000000680)="60237aecb67db5cb7c45b3bca25fe1e00100e6353810dff066202f0cf99d7f31f84f16f34ea52b82e17b2b3def0db18a66525dbe4eaf2f6a1d22db7d6dce9dcfb531d749fb798d71287fe966ebdbf460cba47cdb271ad35dba6ef3bd089da225c0f612ce053c0fc1eb448d73ee4928009d416d52083dd91f272b960c015cd5b9bc3ec4e86dcf40bdba2755251c2efcd6f96ad6d61ab81ab74023349df5fdd1f40a2aca68e7e2c5c058dc0a", 0xab}], 0x9}, 0x20040000) 2.242269687s ago: executing program 2 (id=1644): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async, rerun: 64) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e00)=""/4083, 0xff3}], 0x1000000000000314, 0x0, 0x26}, 0x9}], 0x1, 0x2000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000000c0)=ANY=[], 0x78) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000006, 0x42073, 0xffffffffffffffff, 0x0) (async) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 2.11447175s ago: executing program 4 (id=1645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) recvfrom$packet(r1, 0x0, 0x0, 0x20, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r4, 0x215eb000) (async) r5 = socket(0x8, 0x3, 0x2) ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xfffffffffffffe34, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4111) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) 2.110969394s ago: executing program 2 (id=1646): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc01, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0xd94fd5c211a3c2ca}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x45004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96d", 0xe}], 0x1}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x438, 0x30, 0xffff, 0x0, 0x0, {}, [{0x424, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x1, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x1d8, 0x1b, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x10000000, 0x3, 0x5ad}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x4, 0x2, 0x8}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x60, 0x2, 0xd4, 0x6}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x85ab, 0x8, 0x0, 0x0, 0x200}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x575, 0x3, 0x6, 0xd}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x4, 0x8, 0x9}, 0x43}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x15c, 0x0, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0xfffffff8, 0x0, 0x1ff, 0xca}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0x5, 0x8, 0xc}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2cac0c1c, 0x6, 0x10000005, 0xfffffff9, 0xd4a4}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xff, 0x2, 0x7, 0x2957}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffc, 0xa, 0x1, 0xf45e, 0x1}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x402a, 0x10000, 0x7, 0x3ff, 0x3e8}, 0xa}}]}, {0x6f, 0x6, "ae3adfb85ba4b2c6b5bb29a0bd8b04ce11051f0dd080d1792e43506357301ddea43e302f7cd1ded0056a7728486235672b3e1e6a937a2cd26b2f18acc8eed1a2944bb20659fee5aa71efb1cd63e2ea24335ec944a798a48bc5e71a4fc8a1609091b762be0e4473da3a1f4e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x8c, 0x1d, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}]}, {0x58, 0x6, "10e32617f7a3cb69c1532ffd77593f35b6936c7e7b1dfeafff1351c68cf687bf53394f5fd931ea7da8c9e23bd73d4dc3963d50c676f8ce1b4fe9804f5c8701fdbfde928ee548bd0ed38958b8aad654e99f934984"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x438}}, 0x0) 2.107418132s ago: executing program 3 (id=1647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=@newqdisc={0x4c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7}, {0xffff, 0xffff}, {0x9, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2, 0x6, 0x0, 0x2, 0xff, 0xfff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x6, 0x1, '\xfc\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4004) 1.865907211s ago: executing program 4 (id=1648): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0x20a4, @remote, 0x8000}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x8b}}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @local}], 0x6c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xe7}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r1, 0x8, 0xdb, "fa20db6586085d53b9101a8ee9d21da049329150b82e0c0371484867b7451cbb6273b977e61c9092b6f677655678c24cc1d325124738203dfa5a8ec550f7cf1e2848754d1075cd4987eefd8088ad0f154d71e8425b88c90383457031c30b63ef5f95e2257647f292418aa1010424284c90c9a311e04c231da286fd59e63db57e2bbcd6533f28016d6c6e71130bcff3242720dda1cd77eee06d80136c7807e567ab6862768b2105c4dfa33257391861fb81495e5ded7f4b8dc253afce7d3105e9c38f88c8b45f55deb0e431c457a229665a3c8cf5b7cc68ccb1dc01"}, 0xe3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56741, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'veth1_to_bond\x00'}) socket$unix(0x1, 0x1, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0) 1.656987207s ago: executing program 3 (id=1649): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, 0x0) getsockopt$inet_buf(r1, 0x0, 0x19, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) 1.427266058s ago: executing program 2 (id=1650): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) (async) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) syz_80211_inject_frame(0x0, &(0x7f0000000100)=@ctrl_frame=@cf_end={{}, {0x3}, @device_b, @from_mac=@device_b}, 0x10) 1.425797914s ago: executing program 4 (id=1651): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x10) (async) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x4}, 0x1c) (async) write(r0, &(0x7f00000000c0)="8f2a0a65bd", 0x5) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) (async) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000140)="1e", 0xff80}], 0x2a0) (async) close(0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000080007b9af8ff00000000d60900000020ffb07baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608ffff010000008500000005010000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r4 = socket(0x2d, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x11d, 0x1, 0x0, 0x2) accept(r0, 0x0, &(0x7f0000000100)) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x5, 0x8}, &(0x7f00000000c0)=0x8) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x2, 0xfffe, 'gO)', 0xe, 0x81}) 1.399036117s ago: executing program 3 (id=1652): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='syz_tun\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040f0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031411d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 1.244084354s ago: executing program 4 (id=1653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8947, &(0x7f0000000200)={'bond0\x00', 0x10000}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x40}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="900000000002010400000000000000000a000005040001803c0003800c00028005000100008000002c02018014000300fe80000000000000000000000000001c14000400fe8800000000c1030b4292d62db7c24cbb416b04000000000000000000013c0002800c0002800500e4ffffff00002c00018014000300ff01000000000000000000000000000114000400fe8800000000000000000000000001011285ac681e0ce7f97ab8b5edd349979cc94c201d57bbaa2c964d6c51a0917b429cdaf2d3f825d57305cbf7f8c7b4794bad8753190b108a254c039f4b3c02b89214142bee3536550951313ba17c06d72018e94a8305f61af4ec892d4a7d21f0d5f65735dc1a41184af616d2f80a9ebbdf076bb03291bc3a7953b26191a91b6eb2726ebce2f267e4bb958d3345dd06e3fa61ea2e4b24eeb06a3768cc00f3522b0a63205620911f8ded6c"], 0x90}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) socket$nl_audit(0x10, 0x3, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000240), &(0x7f0000000380)=r6}, 0x20) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r7, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000300)='0', 0x1}], 0x1, 0xa) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000600)={r1, &(0x7f0000000080)='\\(*\x00', 0xc0, &(0x7f0000000180)={@align=0x2, {0x1000, 0x401, 0x9, 0x3}}, 0x6, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000006119040000000000950000000000000090"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000e13c0001800c0002f005000100210000002c00018014000300200100000000000000000000000000011400040000000000000000000000ffffac1e00013c0003800c00028005000100000000002c00018014000300fc00000000005098ecdd200000000000a9000400fe8000000000000000000000000000bb0c000280050001"], 0xc8}}, 0x0) 1.011095342s ago: executing program 1 (id=1654): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d", 0x7f}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884", 0x2c}, {&(0x7f0000000900)}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x30}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039042cbd7000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="11980400419804002000128008000100736974001400028008000300ac1414aa06000f0002000000"], 0x40}}, 0x0) (async) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) (async) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) (async) syz_emit_ethernet(0x1a4, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x16e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x18, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x7, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a"}]}}}}}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0400010000000008000100"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000340)={0x1, 'geneve1\x00', 0x2}, 0x18) (async) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$PPPIOCSMRU(r8, 0x40047452, &(0x7f0000000040)=0x7) 555.07054ms ago: executing program 1 (id=1655): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x37) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000140)=0x800) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000510000000400000002"], 0x50) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000600), &(0x7f0000000340)=@udp=r5, 0x1}, 0x20) (async) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r6], 0x28}}, 0x802) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b00", @ANYRESOCT=r8], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) (async) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r1], 0xb4}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40000080) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r2, @ANYRESOCT=r3], 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom(r9, &(0x7f0000000180)=""/32, 0x20, 0x40000100, &(0x7f00000005c0)=@in6={0xa, 0x4e20, 0xfffffff2, @local, 0x7}, 0x80) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080026bd7000fedbdf252d0000000600ae9714716289427d0400a2aa000005002b000300000005002b000100000005002b000100000008002c000600000008002f000800000008002c00050000000a0001007770616e310000000600060001000000"], 0x60}}, 0x10000) 515.312381ms ago: executing program 2 (id=1656): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0xe, 0x0, 0xfffffffc, 0x14, @empty, @empty, 0x1, 0x7800, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0xe, 0x0, 0xfffffffc, 0x14, @empty, @empty, 0x1, 0x7800, 0x2}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@remote}, &(0x7f00000001c0)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@remote, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d61d0da98c7a3eecceab4ef2010e", 0xe}, {&(0x7f0000000040)="75262095e10adfbf20ed97b4ddf1f3413e1fe0e198a4f8f0878064bd5177511bf8f449", 0x23}], 0x2, &(0x7f0000000200)=[@ip_retopts={{0x48, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0xf, 0x1, 0x9}, @generic={0x83, 0x12, "7efe7d023cef7c8a5b1f65f1da6a32c9"}, @rr={0x7, 0x7, 0x8, [@private=0xa010102]}, @rr={0x7, 0x17, 0x40, [@multicast2, @local, @loopback, @private=0xa010102, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast}}}], 0x88}, 0x80) socket$isdn(0x22, 0x3, 0x0) (async) r3 = socket$isdn(0x22, 0x3, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000300)) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f0000000380), {[{{@ip={@multicast2, @private=0xa010102, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'netdevsim0\x00', {}, {}, 0x16, 0x3, 0x9}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0xa, "9b613956e942c0fbf0edeba19e1a9f18df85bc973b38f23bcff885793f90"}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x6, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x7, 0x9, [0x3d, 0x20, 0x8, 0x38, 0x3d, 0x3e, 0x3b, 0x10, 0xa, 0x12, 0x10, 0x29, 0x22, 0x17, 0xa, 0x40], 0x0, 0xf, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0xffffffff, 'syzkaller1\x00', 'geneve1\x00', {0xff}, {}, 0x9e, 0x1, 0xa}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x2, 0x1}, {0x3, 0x2, 0x6}, 0x8, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f0000000380), {[{{@ip={@multicast2, @private=0xa010102, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'netdevsim0\x00', {}, {}, 0x16, 0x3, 0x9}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0xa, "9b613956e942c0fbf0edeba19e1a9f18df85bc973b38f23bcff885793f90"}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x6, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x7, 0x9, [0x3d, 0x20, 0x8, 0x38, 0x3d, 0x3e, 0x3b, 0x10, 0xa, 0x12, 0x10, 0x29, 0x22, 0x17, 0xa, 0x40], 0x0, 0xf, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0xffffffff, 'syzkaller1\x00', 'geneve1\x00', {0xff}, {}, 0x9e, 0x1, 0xa}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x2, 0x1}, {0x3, 0x2, 0x6}, 0x8, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000740)={'vxcan1\x00'}) recvmmsg(r4, &(0x7f0000001540)=[{{&(0x7f0000000780)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000800)=""/83, 0x53}, {&(0x7f0000000880)=""/154, 0x9a}, {&(0x7f0000000940)=""/127, 0x7f}, {&(0x7f00000009c0)=""/226, 0xe2}, {&(0x7f0000000ac0)=""/76, 0x4c}, {&(0x7f0000000b40)=""/228, 0xe4}, {&(0x7f0000000c40)=""/58, 0x3a}], 0x7, &(0x7f0000000d00)=""/208, 0xd0}, 0x2}, {{&(0x7f0000000e00)=@nl=@unspec, 0x80, &(0x7f0000001200)=[{&(0x7f0000000e80)=""/105, 0x69}, {&(0x7f0000000f00)=""/98, 0x62}, {&(0x7f0000000f80)=""/176, 0xb0}, {&(0x7f0000001040)=""/12, 0xc}, {&(0x7f0000001080)=""/109, 0x6d}, {&(0x7f0000001100)=""/229, 0xe5}], 0x6, &(0x7f0000001280)=""/75, 0x4b}, 0x8}, {{&(0x7f0000001300)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001380)=""/152, 0x98}], 0x1, &(0x7f0000001480)=""/160, 0xa0}, 0x40}], 0x3, 0x40000103, &(0x7f0000001600)={0x77359400}) recvmmsg(r3, &(0x7f0000003880)=[{{&(0x7f0000001640)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000016c0)=""/123, 0x7b}, {&(0x7f0000001740)=""/108, 0x6c}, {&(0x7f00000017c0)=""/57, 0x39}, {&(0x7f0000001800)=""/120, 0x78}, {&(0x7f0000001880)=""/33, 0x21}], 0x5, &(0x7f0000001940)=""/35, 0x23}, 0xc4}, {{&(0x7f0000001980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001a00)=""/88, 0x58}, {&(0x7f0000001a80)=""/253, 0xfd}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/68, 0x44}], 0x4, &(0x7f0000002c40)=""/4, 0x4}, 0x3}, {{&(0x7f0000002c80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002d00)=""/82, 0x52}, {&(0x7f0000002d80)=""/143, 0x8f}, {&(0x7f0000002e40)=""/200, 0xc8}, {&(0x7f0000002f40)=""/208, 0xd0}, {&(0x7f0000003040)=""/171, 0xab}, {&(0x7f0000003100)=""/235, 0xeb}, {&(0x7f0000003200)=""/84, 0x54}, {&(0x7f0000003280)=""/111, 0x6f}], 0x8, &(0x7f0000003380)=""/199, 0xc7}, 0xb}, {{&(0x7f0000003480)=@ax25={{0x3, @netrom}, [@null, @null, @bcast, @default, @rose, @bcast, @null, @bcast]}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003500)=""/234, 0xea}, {&(0x7f0000003600)}, {&(0x7f0000003640)=""/95, 0x5f}, {&(0x7f00000036c0)=""/84, 0x54}], 0x4, &(0x7f0000003780)=""/253, 0xfd}, 0x8}], 0x4, 0x10000, &(0x7f0000003980)={0x77359400}) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000039c0)={0x6, {{0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x1, 0x7, [{{0xa, 0x4e21, 0x5, @private1, 0x7}}, {{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0xb, @loopback, 0xf}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}, 0x80000001}}, {{0xa, 0x4e22, 0x4, @mcast1, 0x5}}, {{0xa, 0x4e22, 0x3, @private1, 0x9}}, {{0xa, 0x4e22, 0x7ff, @mcast1, 0xaf6}}]}, 0x410) (async) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000039c0)={0x6, {{0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x1, 0x7, [{{0xa, 0x4e21, 0x5, @private1, 0x7}}, {{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0xb, @loopback, 0xf}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}, 0x80000001}}, {{0xa, 0x4e22, 0x4, @mcast1, 0x5}}, {{0xa, 0x4e22, 0x3, @private1, 0x9}}, {{0xa, 0x4e22, 0x7ff, @mcast1, 0xaf6}}]}, 0x410) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000003e40), r5) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000003f40)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003f00)={&(0x7f0000003e80)={0x48, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}}, 0x812) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000004040)={'wg1\x00', 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004300)={&(0x7f0000004080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x133, 0x133, 0x6, [@ptr={0x9, 0x0, 0x0, 0x2, 0x5}, @enum={0xf, 0xa, 0x0, 0x6, 0x4, [{0xa, 0xf}, {0x8, 0x8}, {0x2, 0x50b}, {0x1, 0x10001}, {0xc, 0xaae5}, {0xf, 0x4}, {0x6, 0x5}, {0xa, 0x8}, {0xe, 0x1}, {0xd, 0x8}]}, @enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x10, 0xfffffffe}]}, @fwd={0xc}, @datasec={0x2, 0x6, 0x0, 0xf, 0x3, [{0x5, 0xfffffffa, 0x5}, {0x5, 0xe3c6, 0x6}, {0x5, 0xe, 0xfffff801}, {0x5, 0xa, 0x8}, {0x4, 0x100, 0x3}, {0x1, 0x2, 0x5}], "b15663"}, @ptr={0xd, 0x0, 0x0, 0x2, 0x2}, @const={0x7, 0x0, 0x0, 0xa, 0x4}, @enum={0x3, 0x3, 0x0, 0x6, 0x4, [{0x6, 0x2}, {0x8, 0x7}, {0x3, 0x7f}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @const={0x6}]}, {0x0, [0x30, 0x61, 0x2e, 0x5f]}}, &(0x7f0000004200)=""/223, 0x152, 0xdf, 0x0, 0xff}, 0x28) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000043c0)={0xffffffffffffffff, 0x2, 0x18}, 0xc) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000004440)=@o_path={&(0x7f0000004400)='./file0\x00', 0x0, 0x0, r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004500)={0x6, 0x4, &(0x7f0000003f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@generic={0x5, 0x7, 0x6, 0x7, 0x3}]}, &(0x7f0000003fc0)='syzkaller\x00', 0x0, 0x24, &(0x7f0000004000)=""/36, 0x40f00, 0x5, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000004340)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000004380)={0x5, 0x6, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000004480)=[r9, r10], &(0x7f00000044c0)=[{0x4, 0x5, 0xb, 0x9}, {0x0, 0x3, 0x4}, {0x2, 0x4, 0x9}]}, 0x94) bind$isdn_base(r5, &(0x7f00000045c0)={0x22, 0x9, 0x8, 0x80, 0x25}, 0x6) (async) bind$isdn_base(r5, &(0x7f00000045c0)={0x22, 0x9, 0x8, 0x80, 0x25}, 0x6) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000004600)={0x0, 0x10, 0x48, 0x9, 0xfff, 0x3, 0x4, 0x3c, {0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x800}}, 0x80000000, 0x9, 0x0, 0x9}}, &(0x7f00000046c0)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000004700)={r11, 0x1000}, 0x8) ioctl$XFS_IOC_FSCOUNTS(r8, 0x80205871, &(0x7f0000004740)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000004780)) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000004900)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004800)={0xa0, 0x0, 0x6, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffe}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000004900)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004800)={0xa0, 0x0, 0x6, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffe}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) bpf$ITER_CREATE(0x21, &(0x7f0000004940), 0x8) (async) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000004940), 0x8) r13 = syz_genetlink_get_family_id$smc(&(0x7f00000049c0), r5) sendmsg$SMC_PNETID_FLUSH(r12, &(0x7f0000004ac0)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a00)={0x48, r13, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x40005) (async) sendmsg$SMC_PNETID_FLUSH(r12, &(0x7f0000004ac0)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a00)={0x48, r13, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x40005) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) 319.158358ms ago: executing program 1 (id=1657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000006d0001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="840000008028020008001c00", @ANYRES32, @ANYBLOB="72a3a43e96ad1ae087173163d8840d0d419f975ae52a130c2590ff6295ed1e1b97faba962b343d7b399bd8e28f7a766d387e31e2d7f8c384b7cda07ca65eff5b3dce21a5e07051cf72f9a1970dc427ad65bebfb1aace3cca7b380b3f75e1a30f0f4019a5656ffee0b127a57194c30e0e215f3a1aaad31e6fcbff925df38688b5a67a349a455cfab648e7a781e6fc6994a111029293f1eb177f6a1b60ceb5481fac9826f0a3547ffa1aad94b0b4d42b94c5312344a71c440b67000000000e0000000071cf4f34e4f29be6df"], 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 316.734657ms ago: executing program 2 (id=1658): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="d0000000190001000000000000000000000000000000000000000000000000010a010102000000000000000000000000000000840f5afb594a9a1e3f00000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f"], 0xd0}, 0x1, 0x0, 0x0, 0x2001}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 249.765256ms ago: executing program 1 (id=1659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x52, &(0x7f0000000440)={&(0x7f0000000200)={0x64, r3, 0x1, 0x70bd2b, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xffffffff}}}]}, 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 216.324091ms ago: executing program 3 (id=1660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x6dd929cc289cbdf6}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) recvmmsg(r2, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000015c0)=""/209, 0xd1}, {&(0x7f00000001c0)=""/90, 0x5a}, {&(0x7f0000000f00)=""/201, 0xc9}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000002c00)=""/4088, 0xff8}, {&(0x7f00000002c0)=""/81, 0x51}], 0x6}, 0x70001}, {{0x0, 0x0, 0x0}, 0x73}, {{0x0, 0x0, 0x0}, 0x4}], 0x4, 0x102, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x70bd28, 0xfffffffd, {0xa, 0x0, 0x0, 0x0, 0x80}, [@NDA_CACHEINFO={0x14, 0x3, {0x2}}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5e145bb83a73a504}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x3c, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 180.388828ms ago: executing program 4 (id=1661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x0, 0x80}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x14, r3, 0x881056f66a146f61, 0xfffffffd, 0x25dfdbff, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x20040084}, 0x0) r4 = socket$kcm(0x11, 0xa, 0x300) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="c3000e000300"}) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x64, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x25, 0xa8, @random="3d48e7f60d864bab77e2a67e1e795e474d1c2dda2a183828955d87e504fa9d5de3"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8081) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x3, 0x400}], "098097"}, @datasec={0xa, 0x0, 0x0, 0xf, 0x1, [], "bf"}]}, {0x0, [0x2e, 0x61, 0x5f]}}, &(0x7f0000000d00)=""/205, 0x45, 0xcd, 0x1, 0x5}, 0x28) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9f21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x89}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000040)=0x52, 0x4) setsockopt$inet6_int(r7, 0x29, 0x42, &(0x7f0000000000)=0xf, 0xff09) write$tun(r0, &(0x7f00000005c0)={@void, @void, @ipv6=@generic={0xb, 0x6, "a47b7a", 0x1d6, 0x32, 0xfe, @rand_addr=' \x01\x00', @mcast2, {[@dstopts={0x33, 0x5, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x10, 0x4, [0x4, 0x7, 0x1, 0x268b]}}]}, @fragment={0x0, 0x0, 0xfe, 0x0, 0x0, 0x1a, 0x64}, @hopopts={0x1d, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2f}]}, @routing={0x29, 0x12, 0x1, 0x6, 0x0, [@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x25}, @private1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x14}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}]}], "fb4a4d910297fa353bef5486c5a7c7751d759c8c85a45a93e625b9ef307fe41d2853540a4087b7550a5c41d3ba293e28f9f78e70b4628c340a8ea4139ac55992eafbe4efda9c62bdfd9d8763db2e1b88d43da9c3e0ec47601363d34403241b81aa6fc15e6e0d5c1ad5ebe41fd1fd154ceac08e98c16abbec4807a26cc471a4b5f34827175ea0c94efa69bfdca355d20075f358b2db607b87876543b9ab66c9f007d01dc654472af2ffc9de8c80b54eedbb889bb8e50144e885e416c7e39c625a99d68b96cb744f230c300c31958059db45d8cfd68420919c6ffa5e6993a6426255ff5ee15f5d626cb6ad6cf3fae9"}}}, 0x1fe) getsockopt$inet6_buf(r7, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000080)) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x6, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @remote}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0x56, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 67.303101ms ago: executing program 2 (id=1662): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe0, &(0x7f0000000500)=""/224, 0x41100, 0x8}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=ANY=[@ANYBLOB="ac010000170001030000000000000000000000000000000000000000000000010000000000000000fe8000000000000000000000000000bb00ff7f000001ff0100000000000000000000000000010000000200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084000500fe80000000000000000000000000000d000000002b0000000200000000000000000000000000ffffe00000010000000001000000000000000000000000000000e0000002000000000000000000000000000000006c0000000200"/260], 0x1ac}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 0s ago: executing program 1 (id=1663): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000500)=0x5, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040001000800000001d8000080e30060f79e82839118dbeb2d70578f738a601c76d3b0fd9a911bfe010b7131d7b03f93f76e912af8e4d949305e4ce48a3cca13ab0045bb1709630f8f8b45a14fc176bd44736d92f1576a49bc3d6e590161a2fbdc7b6a27d8b44ddb20161b0395fa51ab8ce605afd23435b16e67861f74bb65b5d39edf1c83fbb1c93b93ec9729d218f442ad2a09c45e8e206629d75cdd85d51714df74e4b1fe016dedfadba9b7790bca28f7f6742b3d353868d0bc32e4e6b3d8a8a90600000000000067cba95518a06317ab3622ca0a6a3e440709670134fd7eb45152f90619a2c3d3eb9a51a16d47e7715a", @ANYRES8=r0, @ANYBLOB="00000000000000000000000000000000000000b076fb5a65ac0947f49ac46f9e5f040d00dbf6767d40540d5345749792b727d1bce148a27437075b125ea1ca3990b9576b8ed9a42cb54bad091fa6a70fe3b42129d4f3a829eb206a8cf23159a669c26d7f67c505e93d61d745bdeef8c56195d329507121f87e328e0351dabb38d29c8821078314ec0b0a5eaa29c631f88da408c57a603196f17d8b47a408743e5b3df70e0acefcc3075a6d", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x9}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x1a) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000004dfffffff2661fffc88f15bb5cd9a15639f1d3322e4cad650b45f635b648dfe48e6ecc1f822", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b50a0200000000007a0af8ff00000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b6090000080000004608f0ff760000001801000020696c2500000000002020207b94f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000007f9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000000)={0x3, 0x86, "a47e3a", 0x8}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @initdev, @multicast2}, &(0x7f0000000100)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x700, 0x7800, 0x4, 0x3, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x68, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x27, 0x10, [@local, @loopback, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x26}, @empty]}, @rr={0x7, 0xb, 0x7, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3e}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0xc0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x4880) kernel console output (not intermixed with test programs): reate hsr debugfs directory [ 90.372464][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.380050][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.408002][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.506493][ T5847] hsr_slave_0: entered promiscuous mode [ 90.513764][ T5847] hsr_slave_1: entered promiscuous mode [ 90.520474][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 90.527942][ T5847] Cannot create hsr debugfs directory [ 90.586725][ T5849] hsr_slave_0: entered promiscuous mode [ 90.593814][ T5849] hsr_slave_1: entered promiscuous mode [ 90.600274][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 90.606980][ T5849] Cannot create hsr debugfs directory [ 90.702663][ T5848] hsr_slave_0: entered promiscuous mode [ 90.709528][ T5848] hsr_slave_1: entered promiscuous mode [ 90.716974][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 90.722779][ T5848] Cannot create hsr debugfs directory [ 91.210556][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.232458][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.241961][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.253851][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.263030][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.275356][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.284596][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.294712][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.367904][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.377942][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.396949][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.409239][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.418202][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.429680][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.451317][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.461974][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.554950][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.568724][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.583576][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.594739][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.603877][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.615376][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.624471][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.635773][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.771356][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.784651][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.793338][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.804695][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.813284][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.824356][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.834297][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.844513][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.904862][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.912529][ T5854] Bluetooth: hci0: command tx timeout [ 91.912577][ T5854] Bluetooth: hci4: command tx timeout [ 91.912602][ T5854] Bluetooth: hci2: command tx timeout [ 91.914539][ T5851] Bluetooth: hci1: command tx timeout [ 91.936737][ T5861] Bluetooth: hci3: command tx timeout [ 92.027194][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.038938][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.049568][ T5849] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.058211][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.070483][ T5849] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.086882][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.097836][ T5849] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.106688][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.118012][ T5849] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.130662][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.161286][ T10] cfg80211: failed to load regulatory.db [ 92.175078][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.183167][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.214091][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.221648][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.255159][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.266378][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.291248][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.298826][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.344010][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.351750][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.370326][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.409474][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.416722][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.440363][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.447759][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.606967][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.720897][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.780666][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.823361][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.831029][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.890556][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.910041][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.918065][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.028113][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.090912][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.098266][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.139223][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.147010][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.179456][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.198497][ T5846] veth0_vlan: entered promiscuous mode [ 93.220456][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.269876][ T5846] veth1_vlan: entered promiscuous mode [ 93.505122][ T5845] veth0_vlan: entered promiscuous mode [ 93.528625][ T5847] veth0_vlan: entered promiscuous mode [ 93.545947][ T5846] veth0_macvtap: entered promiscuous mode [ 93.578720][ T5847] veth1_vlan: entered promiscuous mode [ 93.599950][ T5846] veth1_macvtap: entered promiscuous mode [ 93.611902][ T5845] veth1_vlan: entered promiscuous mode [ 93.678967][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.700915][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.714500][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.795788][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.817188][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.850118][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.878321][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.890737][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.933568][ T5847] veth0_macvtap: entered promiscuous mode [ 93.955156][ T5845] veth0_macvtap: entered promiscuous mode [ 93.986332][ T5847] veth1_macvtap: entered promiscuous mode [ 93.994033][ T5861] Bluetooth: hci3: command tx timeout [ 94.000291][ T5855] Bluetooth: hci2: command tx timeout [ 94.006877][ T5854] Bluetooth: hci4: command tx timeout [ 94.006888][ T5857] Bluetooth: hci0: command tx timeout [ 94.019157][ T5851] Bluetooth: hci1: command tx timeout [ 94.035230][ T5845] veth1_macvtap: entered promiscuous mode [ 94.115170][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.148493][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.192336][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.200704][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.209809][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.221151][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.246636][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.247616][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.261653][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.296425][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.349987][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.358849][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.395055][ T5849] veth0_vlan: entered promiscuous mode [ 94.403522][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.412673][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.440153][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.454131][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.525150][ T5848] veth0_vlan: entered promiscuous mode [ 94.528899][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.534443][ T5849] veth1_vlan: entered promiscuous mode [ 94.572200][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.589493][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.706618][ T5848] veth1_vlan: entered promiscuous mode [ 94.742294][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.760099][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.761040][ T5849] veth0_macvtap: entered promiscuous mode [ 94.826154][ T5849] veth1_macvtap: entered promiscuous mode [ 94.850303][ T5972] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 94.896896][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.916889][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.018848][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.060780][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.064396][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.078612][ T5848] veth0_macvtap: entered promiscuous mode [ 95.085967][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.094587][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 95.094643][ T5976] block nbd0: Unsupported socket: should be TCP or UNIX. [ 95.126155][ T5977] netlink: 'syz.2.3': attribute type 7 has an invalid length. [ 95.138550][ T5848] veth1_macvtap: entered promiscuous mode [ 95.139947][ T5977] netlink: 'syz.2.3': attribute type 8 has an invalid length. [ 95.153179][ T3518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.171871][ T3518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.239700][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.258314][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.308899][ T3518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.388959][ T3518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.417507][ T3518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.512019][ T3518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.531812][ T3518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.570789][ T3518] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.614759][ T5985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.632953][ T5982] syzkaller0: entered promiscuous mode [ 95.649739][ T5982] syzkaller0: entered allmulticast mode [ 95.669349][ T5987] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.753411][ T5585] IPVS: starting estimator thread 0... [ 95.780080][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.802341][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.861576][ T5989] IPVS: using max 25 ests per chain, 60000 per kthread [ 96.048013][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.081620][ T5854] Bluetooth: hci2: command tx timeout [ 96.082519][ T5851] Bluetooth: hci3: command tx timeout [ 96.088412][ T5855] Bluetooth: hci0: command tx timeout [ 96.097246][ T5851] Bluetooth: hci4: command tx timeout [ 96.098665][ T5861] Bluetooth: hci1: command tx timeout [ 96.108011][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.210338][ T5996] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10'. [ 96.220198][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.239945][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.398824][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.441092][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.610492][ T6004] netlink: 207288 bytes leftover after parsing attributes in process `syz.2.13'. [ 96.650060][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 96.798497][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.850237][ T6015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13'. [ 96.926381][ T6011] Zero length message leads to an empty skb [ 97.383961][ T6032] netlink: 'syz.4.18': attribute type 1 has an invalid length. [ 97.590931][ T6044] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 97.622904][ T6038] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 97.634646][ T6044] bridge1: entered allmulticast mode [ 97.649549][ T6035] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20000 [ 97.982972][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 98.190750][ T6068] syz.2.28 uses obsolete (PF_INET,SOCK_PACKET) [ 98.203027][ T6069] Illegal XDP return value 4294967283 on prog (id 5) dev N/A, expect packet loss! [ 98.913678][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36'. [ 98.929905][ T6104] openvswitch: netlink: Flow actions attr not present in new flow. [ 99.384541][ T6126] warning: `syz.2.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.559444][ T6097] syz.3.35 (6097) used greatest stack depth: 17944 bytes left [ 99.827389][ T6139] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.849861][ T6139] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.857123][ T6139] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.865052][ T6139] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.872720][ T6139] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.879770][ T6139] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.886948][ T6139] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.894030][ T6139] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.901881][ T6139] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 100.789966][ T6145] __nla_validate_parse: 6 callbacks suppressed [ 100.789990][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 100.895479][ T6149] geneve2: entered promiscuous mode [ 101.058273][ T6166] netlink: 200 bytes leftover after parsing attributes in process `syz.1.49'. [ 101.082079][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 101.129971][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 101.168260][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.50'. [ 101.566422][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 101.609642][ T6183] netlink: 'syz.0.54': attribute type 15 has an invalid length. [ 101.648665][ T6183] netlink: 'syz.0.54': attribute type 25 has an invalid length. [ 101.662155][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 101.726645][ T6191] bridge0: port 3(bond0) entered blocking state [ 101.760428][ T6191] bridge0: port 3(bond0) entered disabled state [ 101.793782][ T6191] bond0: entered allmulticast mode [ 101.805502][ T6191] bond_slave_0: entered allmulticast mode [ 101.825606][ T6191] bond_slave_1: entered allmulticast mode [ 101.856647][ T6191] bond0: entered promiscuous mode [ 101.867499][ T6191] bond_slave_0: entered promiscuous mode [ 101.879181][ T6191] bond_slave_1: entered promiscuous mode [ 101.894337][ T6191] bridge0: port 3(bond0) entered blocking state [ 101.901960][ T6191] bridge0: port 3(bond0) entered forwarding state [ 101.944243][ T6200] netlink: 136 bytes leftover after parsing attributes in process `syz.1.58'. [ 101.965776][ T6200] netlink: 36 bytes leftover after parsing attributes in process `syz.1.58'. [ 101.995489][ T6200] netlink: 'syz.1.58': attribute type 3 has an invalid length. [ 102.026250][ T6200] netlink: 1 bytes leftover after parsing attributes in process `syz.1.58'. [ 102.082933][ T6202] tc_dump_action: action bad kind [ 103.179289][ T6249] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 103.179597][ T6248] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 103.258154][ T6257] tipc: Started in network mode [ 103.288544][ T6257] tipc: Node identity ac14140f, cluster identity 4711 [ 103.314291][ T6257] tipc: New replicast peer: 255.255.255.255 [ 103.340065][ T6257] tipc: Enabled bearer , priority 10 [ 103.555758][ T6266] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.649125][ T6269] xt_CONNSECMARK: invalid mode: 0 [ 103.746606][ T24] IPVS: starting estimator thread 0... [ 103.841542][ T6276] IPVS: using max 31 ests per chain, 74400 per kthread [ 104.492432][ T10] tipc: Node number set to 2886997007 [ 105.065822][ T6321] syzkaller0: entered promiscuous mode [ 105.072181][ T6321] syzkaller0: entered allmulticast mode [ 105.099897][ T6321] tc action pedit offset -536870912 out of bounds [ 105.107617][ T6321] tc action pedit offset -536870912 out of bounds [ 105.114243][ T6321] tc action pedit offset -536870912 out of bounds [ 105.120727][ T6321] tc action pedit offset -536870912 out of bounds [ 105.127586][ T6321] tc action pedit offset -536870912 out of bounds [ 105.134450][ T6321] tc action pedit offset -536870912 out of bounds [ 105.141110][ T6321] tc action pedit offset -536870912 out of bounds [ 105.147639][ T6321] tc action pedit offset -536870912 out of bounds [ 105.154351][ T6321] tc action pedit offset -536870912 out of bounds [ 105.160843][ T6321] tc action pedit offset -536870912 out of bounds [ 105.167402][ T6321] net_ratelimit: 762 callbacks suppressed [ 105.167419][ T6321] TC_ACT_REPEAT abuse ? [ 105.235158][ T6323] netlink: 'syz.2.86': attribute type 1 has an invalid length. [ 105.275607][ T6326] sctp: [Deprecated]: syz.1.88 (pid 6326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.275607][ T6326] Use struct sctp_sack_info instead [ 106.082249][ T6359] __nla_validate_parse: 11 callbacks suppressed [ 106.082270][ T6359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.94'. [ 106.122387][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 106.153590][ T6357] veth1_macvtap: left promiscuous mode [ 106.229414][ T6359] netlink: 108 bytes leftover after parsing attributes in process `syz.1.94'. [ 106.372771][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'. [ 107.146426][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 107.280199][ T6413] chnl_net:caif_netlink_parms(): no params data found [ 107.792941][ T6451] netlink: 'syz.3.117': attribute type 61 has an invalid length. [ 107.897594][ T6451] netlink: 'syz.3.117': attribute type 61 has an invalid length. [ 107.998850][ T6451] netlink: 'syz.3.117': attribute type 61 has an invalid length. [ 108.013607][ T6451] netlink: 'syz.3.117': attribute type 61 has an invalid length. [ 108.105077][ T6451] netlink: 'syz.3.117': attribute type 61 has an invalid length. [ 108.128281][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 108.193809][ T6451] netlink: 'syz.3.117': attribute type 61 has an invalid length. [ 108.309507][ T6451] netlink: 'syz.3.117': attribute type 61 has an invalid length. [ 108.348258][ T6451] netlink: 'syz.3.117': attribute type 61 has an invalid length. [ 108.405272][ T6476] netlink: 40 bytes leftover after parsing attributes in process `syz.4.121'. [ 108.471126][ T6451] netlink: 'syz.3.117': attribute type 61 has an invalid length. [ 108.515691][ T6451] netlink: 'syz.3.117': attribute type 61 has an invalid length. [ 108.740788][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.126'. [ 108.992033][ T6494] bridge1: port 1(veth3) entered blocking state [ 109.013209][ T6494] bridge1: port 1(veth3) entered disabled state [ 109.039310][ T6494] veth3: entered allmulticast mode [ 109.078894][ T6494] veth3: entered promiscuous mode [ 109.140657][ T6498] bridge1: port 2(veth0_to_bond) entered blocking state [ 109.159909][ T6498] bridge1: port 2(veth0_to_bond) entered disabled state [ 109.172882][ T6498] veth0_to_bond: entered allmulticast mode [ 109.187294][ T6498] veth0_to_bond: entered promiscuous mode [ 109.222311][ T6490] vlan2: entered allmulticast mode [ 109.233105][ T6490] team0: entered allmulticast mode [ 109.252141][ T6490] team_slave_0: entered allmulticast mode [ 109.262742][ T6490] team_slave_1: entered allmulticast mode [ 109.274104][ T6490] bridge1: port 3(vlan2) entered blocking state [ 109.284884][ T6490] bridge1: port 3(vlan2) entered disabled state [ 109.297759][ T6490] vlan2: entered promiscuous mode [ 109.305300][ T6490] team0: entered promiscuous mode [ 109.315023][ T6490] team_slave_0: entered promiscuous mode [ 109.325835][ T6490] team_slave_1: entered promiscuous mode [ 109.380594][ T6500] team0: entered promiscuous mode [ 109.395203][ T6500] team_slave_0: entered promiscuous mode [ 109.410374][ T6500] team_slave_1: entered promiscuous mode [ 109.426268][ T6500] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 109.525976][ T6506] dvmrp0: entered allmulticast mode [ 109.590652][ T6507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.786384][ T6524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.132'. [ 109.816859][ T6526] netlink: 14 bytes leftover after parsing attributes in process `syz.3.133'. [ 111.359194][ T6593] netlink: 224 bytes leftover after parsing attributes in process `syz.1.145'. [ 112.448812][ T6602] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.480833][ T6604] bond1: (slave geneve2): making interface the new active one [ 112.491306][ T6604] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 112.586665][ T3518] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.635788][ T3518] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.665145][ T3518] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.693223][ T3518] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.961919][ T6631] netlink: 40 bytes leftover after parsing attributes in process `syz.2.149'. [ 113.039126][ T6647] validate_nla: 5 callbacks suppressed [ 113.039147][ T6647] netlink: 'syz.4.152': attribute type 1 has an invalid length. [ 113.070403][ T6647] netlink: 760 bytes leftover after parsing attributes in process `syz.4.152'. [ 113.076197][ T6643] netlink: 'syz.3.153': attribute type 17 has an invalid length. [ 113.096160][ T6646] netlink: 'syz.4.152': attribute type 1 has an invalid length. [ 113.116785][ T6646] netlink: 760 bytes leftover after parsing attributes in process `syz.4.152'. [ 113.160936][ T6643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.055387][ T6688] netlink: 56 bytes leftover after parsing attributes in process `syz.1.162'. [ 114.055465][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 114.218978][ T6688] sit1: entered promiscuous mode [ 114.225105][ T6697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.396153][ T6704] netlink: 44 bytes leftover after parsing attributes in process `syz.2.168'. [ 114.625187][ T6705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.167'. [ 114.911158][ T6734] netlink: 'syz.1.173': attribute type 6 has an invalid length. [ 114.934492][ T6734] netlink: 'syz.1.173': attribute type 23 has an invalid length. [ 114.965749][ T6734] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.083947][ T6740] syzkaller1: entered promiscuous mode [ 115.117508][ T6740] syzkaller1: entered allmulticast mode [ 115.179336][ T6749] netlink: 'syz.3.176': attribute type 2 has an invalid length. [ 115.228186][ T6749] netlink: 36 bytes leftover after parsing attributes in process `syz.3.176'. [ 115.250449][ T6740] can: request_module (can-proto-0) failed. [ 115.396079][ T6755] netlink: 'syz.1.177': attribute type 21 has an invalid length. [ 115.469366][ T6755] netlink: 156 bytes leftover after parsing attributes in process `syz.1.177'. [ 116.214581][ T6783] vlan3: entered allmulticast mode [ 116.220235][ T6783] bridge2: entered allmulticast mode [ 116.369920][ T6791] bridge2: port 1(bond1) entered blocking state [ 116.396710][ T6791] bridge2: port 1(bond1) entered disabled state [ 116.406763][ T6791] bond1: entered allmulticast mode [ 116.445839][ T6791] bond1: entered promiscuous mode [ 116.476130][ T6789] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 116.503790][ T6818] netlink: 'syz.1.186': attribute type 1 has an invalid length. [ 116.560059][ T6814] __nla_validate_parse: 3 callbacks suppressed [ 116.560081][ T6814] netlink: 48 bytes leftover after parsing attributes in process `syz.3.187'. [ 116.589935][ T6804] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.678174][ T6818] bond2: entered promiscuous mode [ 116.702099][ T6818] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.738082][ T6828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.188'. [ 116.903331][ T6816] netlink: 'syz.2.188': attribute type 4 has an invalid length. [ 117.056203][ T6835] netlink: 64 bytes leftover after parsing attributes in process `syz.3.191'. [ 117.079359][ T6839] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 117.111113][ T6839] netlink: 224 bytes leftover after parsing attributes in process `syz.4.192'. [ 117.654227][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 117.800013][ T83] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.835962][ T83] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.935871][ T83] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.036616][ T83] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.489849][ T6912] netlink: 40 bytes leftover after parsing attributes in process `syz.4.208'. [ 118.499642][ T6912] netlink: 40 bytes leftover after parsing attributes in process `syz.4.208'. [ 118.510247][ T6912] netlink: 22 bytes leftover after parsing attributes in process `syz.4.208'. [ 118.582022][ T6912] ip6erspan0: entered allmulticast mode [ 118.774937][ T6925] netlink: 280 bytes leftover after parsing attributes in process `syz.3.211'. [ 118.982842][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 119.025114][ T6933] bond0: entered promiscuous mode [ 119.030602][ T6933] bond_slave_0: entered promiscuous mode [ 119.039783][ T6933] bond_slave_1: entered promiscuous mode [ 119.048843][ T6933] batadv0: entered promiscuous mode [ 119.286001][ T6940] Cannot find add_set index 0 as target [ 121.138809][ T6896] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.371026][ T6958] xt_l2tp: missing protocol rule (udp|l2tpip) [ 121.406168][ T6958] xt_l2tp: missing protocol rule (udp|l2tpip) [ 121.510386][ T6970] x_tables: duplicate underflow at hook 2 [ 121.744602][ T6979] tipc: Enabling of bearer rejected, failed to enable media [ 121.880969][ T6979] tipc: Started in network mode [ 121.906221][ T6979] tipc: Node identity , cluster identity 4711 [ 121.927320][ T6979] tipc: Failed to set node id, please configure manually [ 121.937452][ T6979] tipc: Enabling of bearer rejected, failed to enable media [ 121.993832][ T6986] geneve2: entered promiscuous mode [ 121.999589][ T6986] geneve2: entered allmulticast mode [ 122.225038][ T6999] sctp: [Deprecated]: syz.3.227 (pid 6999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.225038][ T6999] Use struct sctp_sack_info instead [ 122.323981][ T7001] validate_nla: 2 callbacks suppressed [ 122.324005][ T7001] netlink: 'syz.2.228': attribute type 1 has an invalid length. [ 122.331692][ T7005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.365564][ T7006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.521324][ T7001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.625521][ T7026] netlink: ct family unspecified [ 122.638269][ T7026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.658698][ T7001] netlink: 14 bytes leftover after parsing attributes in process `syz.2.228'. [ 122.734856][ T7011] bond2: (slave veth5): Enslaving as an active interface with a down link [ 122.756822][ T7018] bond2: (slave dummy0): making interface the new active one [ 122.767540][ T7018] dummy0: entered promiscuous mode [ 122.776899][ T7018] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 123.028631][ T7001] bond2: (slave dummy0): Releasing active interface [ 123.059020][ T7001] dummy0 (unregistering): left promiscuous mode [ 123.262821][ T7042] vlan2: entered allmulticast mode [ 123.289221][ T7042] vlan0: entered allmulticast mode [ 123.328075][ T7042] veth0_vlan: entered allmulticast mode [ 123.430977][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 123.464063][ T7054] netlink: 'syz.1.240': attribute type 5 has an invalid length. [ 123.473156][ T7054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 123.491881][ T7054] geneve3: entered promiscuous mode [ 123.501901][ T7054] geneve3: entered allmulticast mode [ 123.556332][ T42] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 123.573759][ T42] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 123.591094][ T42] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 123.609994][ T42] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 123.870265][ T7066] batadv_slave_1: entered promiscuous mode [ 123.886670][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.243'. [ 123.990366][ T7072] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 124.102720][ T7075] netlink: 548 bytes leftover after parsing attributes in process `syz.0.246'. [ 124.142281][ T7065] batadv_slave_1: left promiscuous mode [ 124.501746][ T7096] netlink: 'syz.4.252': attribute type 1 has an invalid length. [ 125.251957][ T7133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.261'. [ 125.397504][ T7140] netlink: 20 bytes leftover after parsing attributes in process `syz.4.264'. [ 125.679560][ T7153] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 125.774425][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 125.825604][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 126.064122][ T7166] netlink: 'syz.4.269': attribute type 1 has an invalid length. [ 126.075348][ T7166] netlink: 'syz.4.269': attribute type 2 has an invalid length. [ 126.100262][ T7166] pim6reg: entered allmulticast mode [ 126.121983][ T7166] pim6reg: left allmulticast mode [ 126.225617][ T5585] IPVS: starting estimator thread 0... [ 126.240271][ T7148] IPVS: nq: FWM 3 0x00000003 - no destination available [ 126.321575][ T7170] IPVS: using max 25 ests per chain, 60000 per kthread [ 126.562981][ T7181] netlink: 108 bytes leftover after parsing attributes in process `syz.4.271'. [ 126.937596][ T7190] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 126.957296][ T7190] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 127.121038][ T7196] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.151162][ T7203] bridge_slave_1: left allmulticast mode [ 127.169787][ T7203] bridge_slave_1: left promiscuous mode [ 127.210214][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.360088][ T7196] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.505539][ T7196] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.775907][ T7196] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.832108][ T7229] __nla_validate_parse: 4 callbacks suppressed [ 127.832129][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 128.061152][ T42] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.083571][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 128.101500][ T42] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.138330][ T7243] netlink: 'syz.3.291': attribute type 8 has an invalid length. [ 128.140608][ T42] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.196782][ T42] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.685676][ T7272] netlink: 32 bytes leftover after parsing attributes in process `syz.4.297'. [ 128.869962][ T7283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.301'. [ 128.899469][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 128.947749][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 128.982826][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 129.044606][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'. [ 129.346412][ T7302] clip:clip_setentry: non-CLIP VCC [ 129.406994][ T7309] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^ô§÷&ªáï×àJ†?=\þlµ[[¹úi5„ž` [ 130.156463][ T7331] netlink: 120 bytes leftover after parsing attributes in process `syz.1.314'. [ 130.185136][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 130.189338][ T7331] netlink: 'syz.1.314': attribute type 1 has an invalid length. [ 130.246862][ T7328] team0: Port device syz_tun added [ 130.252342][ T7341] netlink: 'syz.3.316': attribute type 1 has an invalid length. [ 130.306509][ T5858] dummy0: entered promiscuous mode [ 130.341065][ T5858] dummy0: left promiscuous mode [ 130.816552][ T7371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.825637][ T7371] IPv6: NLM_F_CREATE should be set when creating new route [ 130.833355][ T7371] IPv6: NLM_F_CREATE should be set when creating new route [ 130.947721][ T7377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.950210][ T7372] openvswitch: netlink: IPv4 tunnel dst address is zero [ 131.157411][ T7387] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 131.165839][ T7388] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 131.484719][ T7398] netlink: 'syz.4.330': attribute type 1 has an invalid length. [ 131.821142][ T7409] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 132.512772][ T7437] netlink: 'syz.1.340': attribute type 1 has an invalid length. [ 132.530846][ T7437] nbd: error processing sock list [ 132.803168][ T7447] syzkaller0: entered promiscuous mode [ 132.827471][ T7447] syzkaller0: entered allmulticast mode [ 132.854570][ T7449] syzkaller1: entered promiscuous mode [ 132.879610][ T7449] syzkaller1: entered allmulticast mode [ 133.122293][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.132100][ T73] wlan0: Trigger new scan to find an IBSS to join [ 133.187625][ T7465] syzkaller0: entered promiscuous mode [ 133.213219][ T7465] syzkaller0: entered allmulticast mode [ 133.610916][ T7477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.628207][ T7477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.640858][ T7477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.704791][ T7477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.753670][ T7477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.793120][ T7483] __nla_validate_parse: 6 callbacks suppressed [ 133.793140][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.355'. [ 133.823214][ T7484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.863558][ T7477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.986744][ T7488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.357'. [ 134.020305][ T7488] nbd: must specify at least one socket [ 134.300078][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 134.310162][ T7498] netlink: 'syz.4.360': attribute type 1 has an invalid length. [ 134.453057][ T7498] bond2: entered promiscuous mode [ 134.470878][ T7498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.531140][ T7500] bond2: (slave bridge3): making interface the new active one [ 134.539534][ T7500] bridge3: entered promiscuous mode [ 134.548127][ T7500] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 135.149087][ T7530] netlink: 40 bytes leftover after parsing attributes in process `syz.3.369'. [ 135.181624][ T7530] netlink: 40 bytes leftover after parsing attributes in process `syz.3.369'. [ 135.835500][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 135.870523][ T7551] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.376'. [ 136.251927][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'. [ 136.327683][ T7571] netlink: 48 bytes leftover after parsing attributes in process `syz.3.380'. [ 136.352336][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 136.380033][ T7568] netlink: 'syz.0.381': attribute type 21 has an invalid length. [ 136.467268][ T7576] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 138.151831][ T147] wlan0: Trigger new scan to find an IBSS to join [ 139.051783][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.558590][ T7599] tipc: Started in network mode [ 145.572345][ T7599] tipc: Node identity 8aef83a7408c, cluster identity 4711 [ 145.592526][ T7599] tipc: Enabled bearer , priority 0 [ 145.607229][ T7599] syzkaller0: entered promiscuous mode [ 145.625989][ T7599] syzkaller0: entered allmulticast mode [ 145.679966][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 145.692814][ T7599] tipc: Resetting bearer [ 145.759810][ T7595] tipc: Resetting bearer [ 145.792949][ T7595] tipc: Disabling bearer [ 145.807721][ T7610] netlink: 'syz.3.394': attribute type 5 has an invalid length. [ 145.827220][ T7610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.394'. [ 146.000415][ T7620] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.397'. [ 146.059097][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 146.168255][ T7626] Bluetooth: MGMT ver 1.23 [ 146.230521][ T7631] netlink: 104 bytes leftover after parsing attributes in process `syz.4.400'. [ 146.529741][ T7641] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 146.850981][ T7649] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 146.903392][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 147.082491][ T7658] netlink: 'syz.0.405': attribute type 4 has an invalid length. [ 147.114323][ T7658] netlink: 224 bytes leftover after parsing attributes in process `syz.0.405'. [ 147.128052][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.411'. [ 147.904385][ T7705] syz.0.417 uses old SIOCAX25GETINFO [ 147.985514][ T7702] syzkaller1: entered promiscuous mode [ 148.001667][ T7702] syzkaller1: entered allmulticast mode [ 148.245299][ T7723] raw_sendmsg: syz.0.418 forgot to set AF_INET. Fix it! [ 148.618702][ T7741] wg1 speed is unknown, defaulting to 1000 [ 148.636850][ T7744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.426'. [ 148.653110][ T7745] netlink: 'syz.3.424': attribute type 9 has an invalid length. [ 148.665948][ T7741] wg1 speed is unknown, defaulting to 1000 [ 148.666114][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 148.730972][ T7741] wg1 speed is unknown, defaulting to 1000 [ 149.504077][ T7765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.703617][ T7776] netlink: 'syz.3.434': attribute type 19 has an invalid length. [ 149.881669][ T7787] IPVS: length: 80 != 24 [ 150.105744][ T7741] infiniband syz0: set active [ 150.113374][ T10] wg1 speed is unknown, defaulting to 1000 [ 150.139201][ T7741] infiniband syz0: added wg1 [ 150.287254][ T7741] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 150.304853][ T7741] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 150.323204][ T7741] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 150.378492][ T7741] RDS/IB: syz0: added [ 150.384268][ T7741] smc: adding ib device syz0 with port count 1 [ 150.440048][ T7741] smc: ib device syz0 port 1 has no pnetid [ 150.573155][ T5858] wg1 speed is unknown, defaulting to 1000 [ 150.594488][ T7741] wg1 speed is unknown, defaulting to 1000 [ 150.818542][ T7819] bond3: entered promiscuous mode [ 150.850487][ T7834] __nla_validate_parse: 4 callbacks suppressed [ 150.850509][ T7834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.446'. [ 150.853129][ T7819] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.946256][ T7827] netlink: 140 bytes leftover after parsing attributes in process `syz.0.445'. [ 150.961540][ T7827] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 151.046807][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 151.127106][ T7842] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 151.169432][ T7844] netlink: 'syz.0.450': attribute type 2 has an invalid length. [ 151.190213][ T7844] netlink: 224 bytes leftover after parsing attributes in process `syz.0.450'. [ 151.379678][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 151.494301][ T7741] wg1 speed is unknown, defaulting to 1000 [ 151.536823][ T7860] ip6gretap0: entered promiscuous mode [ 151.725725][ T7872] netlink: 'syz.3.457': attribute type 61 has an invalid length. [ 151.823202][ T7874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.907664][ T7880] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 152.164373][ T7892] lo: entered allmulticast mode [ 152.186050][ T7892] lo: left allmulticast mode [ 152.332916][ T7899] netlink: 'syz.0.467': attribute type 2 has an invalid length. [ 152.352971][ T7741] wg1 speed is unknown, defaulting to 1000 [ 152.362810][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.465'. [ 152.679437][ T7914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.469'. [ 152.719694][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'. [ 152.729130][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'. [ 152.813637][ T7913] bridge0: port 3(bond0) entered disabled state [ 152.820461][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.828655][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.916580][ T7913] team0: left promiscuous mode [ 152.932752][ T7913] team_slave_0: left promiscuous mode [ 152.950998][ T7913] team_slave_1: left promiscuous mode [ 153.038996][ T7913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.053959][ T7913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.125160][ T7913] bridge1: left allmulticast mode [ 153.160842][ T7921] bond4: entered promiscuous mode [ 153.167294][ T7921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.193916][ T7923] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.204677][ T7923] bond5: entered promiscuous mode [ 153.210436][ T7923] bond4: (slave bond5): Enslaving as an active interface with an up link [ 153.230835][ T7892] wg1 speed is unknown, defaulting to 1000 [ 153.238786][ T7928] netlink: 'syz.0.469': attribute type 2 has an invalid length. [ 153.259041][ T73] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.273716][ T73] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.285075][ T73] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.320438][ T73] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.622534][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.474'. [ 153.736343][ T7741] wg1 speed is unknown, defaulting to 1000 [ 153.892041][ T7952] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 153.980549][ T7952] bond1: entered promiscuous mode [ 153.986504][ T7952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.995834][ T7954] bond1: entered allmulticast mode [ 154.041323][ T7952] bond1: (slave bridge4): making interface the new active one [ 154.049789][ T7952] bridge4: entered promiscuous mode [ 154.056163][ T7952] bridge4: entered allmulticast mode [ 154.067231][ T7952] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 154.112960][ T147] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.124748][ T147] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.141550][ T147] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.169264][ T147] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.189115][ T7741] wg1 speed is unknown, defaulting to 1000 [ 154.707035][ T7978] netlink: 'syz.3.484': attribute type 29 has an invalid length. [ 154.720126][ T7978] netlink: 'syz.3.484': attribute type 29 has an invalid length. [ 155.158450][ T7990] netlink: 'syz.0.487': attribute type 20 has an invalid length. [ 155.216004][ T7990] netlink: 'syz.0.487': attribute type 21 has an invalid length. [ 155.615276][ T8003] syzkaller0: entered promiscuous mode [ 156.058783][ T8007] IPVS: Scheduler module ip_vs_sip not found [ 156.448280][ T8017] netlink: 'syz.1.496': attribute type 4 has an invalid length. [ 156.605368][ T8023] __nla_validate_parse: 12 callbacks suppressed [ 156.605391][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 156.665070][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 157.997007][ T8013] xfrm0: entered promiscuous mode [ 158.002547][ T8013] xfrm0: entered allmulticast mode [ 158.265559][ T8037] netlink: 'syz.1.500': attribute type 1 has an invalid length. [ 158.272920][ T8039] netlink: 400 bytes leftover after parsing attributes in process `syz.2.501'. [ 158.297139][ T8039] netlink: 'syz.2.501': attribute type 2 has an invalid length. [ 158.298155][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'. [ 158.310386][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 158.373471][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 158.824732][ T8065] vxcan2: entered allmulticast mode [ 158.896970][ T8072] syzkaller0: entered promiscuous mode [ 158.917501][ T8072] syzkaller0: entered allmulticast mode [ 158.977015][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 159.006777][ T8077] netem: incorrect ge model size [ 159.032598][ T8077] netem: change failed [ 159.122044][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'. [ 159.256596][ T8091] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 159.497492][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 160.267701][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.275778][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.410116][ T8133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.428484][ T8133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.554165][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.571939][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.596380][ T3518] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.630982][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.798764][ T8149] netlink: 'syz.0.526': attribute type 13 has an invalid length. [ 160.828646][ T8149] netlink: 'syz.0.526': attribute type 17 has an invalid length. [ 161.056051][ T8149] bridge0: port 3(bond0) entered blocking state [ 161.063054][ T8149] bridge0: port 3(bond0) entered forwarding state [ 161.080285][ T8149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.099860][ T8149] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.133103][ T8149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.649013][ T8182] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.538'. [ 161.695389][ T8180] netlink: 52 bytes leftover after parsing attributes in process `syz.3.537'. [ 162.000287][ T8186] syzkaller0: entered promiscuous mode [ 162.021010][ T8186] syzkaller0: entered allmulticast mode [ 162.150691][ T8190] wg1 speed is unknown, defaulting to 1000 [ 162.475392][ T8203] sctp: [Deprecated]: syz.1.546 (pid 8203) Use of int in max_burst socket option. [ 162.475392][ T8203] Use struct sctp_assoc_value instead [ 162.606808][ T8201] Cannot find add_set index 2 as target [ 162.641594][ T8201] netlink: 48 bytes leftover after parsing attributes in process `syz.2.545'. [ 162.833470][ T8210] Cannot find set identified by id 0 to match [ 163.302901][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 163.781787][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.791289][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.239605][ T8229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.268711][ T8229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.787786][ T8224] wg1 speed is unknown, defaulting to 1000 [ 164.847231][ T8237] tipc: Started in network mode [ 164.858558][ T8237] tipc: Node identity 0ef292fc8369, cluster identity 4711 [ 164.882344][ T8237] tipc: Enabled bearer , priority 0 [ 164.903711][ T8238] syzkaller0: entered promiscuous mode [ 164.926357][ T8238] syzkaller0: entered allmulticast mode [ 164.949277][ T8245] tipc: Resetting bearer [ 164.959818][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.970317][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.986350][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.997688][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.011863][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.021095][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.037290][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.055843][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.277425][ T8266] netlink: 36 bytes leftover after parsing attributes in process `syz.0.556'. [ 165.317706][ T8223] tipc: Resetting bearer [ 165.338842][ T8223] tipc: Disabling bearer [ 165.690529][ T8277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.559'. [ 165.983386][ T8284] geneve3: entered promiscuous mode [ 166.018094][ T3518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.027870][ T3518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.153919][ T3518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.190351][ T3518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.197375][ T8306] --map-set only usable from mangle table [ 166.496734][ T8318] syzkaller1: entered promiscuous mode [ 166.508014][ T8318] syzkaller1: entered allmulticast mode [ 166.561985][ T8320] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.572'. [ 166.674334][ T8334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.575'. [ 166.718041][ T8334] veth1_to_team: entered promiscuous mode [ 166.734455][ T8334] veth1: entered promiscuous mode [ 166.747628][ T8334] hsr2: entered promiscuous mode [ 166.748231][ T8337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.576'. [ 166.821646][ T8337] netlink: 'syz.0.576': attribute type 1 has an invalid length. [ 166.932856][ T8349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.576'. [ 166.944424][ T8337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.990056][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'. [ 167.010564][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 167.024109][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 167.080789][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 167.295306][ T8365] netlink: 64 bytes leftover after parsing attributes in process `syz.3.584'. [ 167.346674][ T8367] netlink: 64 bytes leftover after parsing attributes in process `syz.3.584'. [ 167.689372][ T8379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.587'. [ 167.739092][ T8379] x_tables: ip6_tables: mac match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 168.427941][ T8396] wg1 speed is unknown, defaulting to 1000 [ 169.197441][ T8430] Bluetooth: MGMT ver 1.23 [ 170.286588][ T8469] netlink: 'syz.3.612': attribute type 10 has an invalid length. [ 170.369045][ T8469] team0: Port device dummy0 added [ 170.770509][ T8475] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 170.776994][ T8479] syzkaller0: entered promiscuous mode [ 170.790390][ T8479] syzkaller0: entered allmulticast mode [ 171.141071][ T8493] netlink: 'syz.3.619': attribute type 1 has an invalid length. [ 171.169652][ T8493] netlink: 'syz.3.619': attribute type 2 has an invalid length. [ 171.519376][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 172.034910][ T8507] netlink: zone id is out of range [ 172.040815][ T8507] netlink: zone id is out of range [ 172.047205][ T8507] netlink: zone id is out of range [ 172.052901][ T8507] netlink: zone id is out of range [ 172.058624][ T8507] netlink: zone id is out of range [ 172.064440][ T8507] netlink: zone id is out of range [ 172.069849][ T8507] netlink: zone id is out of range [ 172.075902][ T8507] netlink: zone id is out of range [ 172.081176][ T8507] netlink: zone id is out of range [ 172.087499][ T8507] netlink: zone id is out of range [ 172.183154][ T8533] __nla_validate_parse: 8 callbacks suppressed [ 172.183177][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 172.940797][ T8553] wg1 speed is unknown, defaulting to 1000 [ 173.234446][ T8576] netlink: 208 bytes leftover after parsing attributes in process `syz.4.643'. [ 173.656334][ T8588] Bluetooth: MGMT ver 1.23 [ 173.806155][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'. [ 173.839976][ T8595] netlink: 'syz.1.645': attribute type 1 has an invalid length. [ 173.869555][ T8595] netlink: 'syz.1.645': attribute type 2 has an invalid length. [ 173.908724][ T8595] netlink: 'syz.1.645': attribute type 1 has an invalid length. [ 173.954384][ T8595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.645'. [ 175.391164][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 175.485418][ T8650] sctp: [Deprecated]: syz.0.655 (pid 8650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.485418][ T8650] Use struct sctp_sack_info instead [ 175.559888][ T8643] 8021q: adding VLAN 0 to HW filter on device bond6 [ 175.815017][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.657'. [ 175.906423][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 175.931876][ T8652] syzkaller0: entered promiscuous mode [ 175.937960][ T8652] syzkaller0: entered allmulticast mode [ 175.981257][ T8666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.127241][ T8668] wg1 speed is unknown, defaulting to 1000 [ 176.379554][ T8674] bond7: Unable to set up delay as MII monitoring is disabled [ 176.426235][ T8674] bond7 (unregistering): Released all slaves [ 176.445064][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 176.480428][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 177.094878][ T8712] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 177.112896][ T5855] Bluetooth: hci3: command 0x0405 tx timeout [ 177.363505][ T8683] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.372897][ T8683] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.781640][ T8683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.821509][ T8683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.209198][ T8683] sit1: left promiscuous mode [ 178.217752][ T8683] bond2: left promiscuous mode [ 178.226727][ T8683] geneve3: left promiscuous mode [ 178.234212][ T8683] geneve3: left allmulticast mode [ 178.470338][ T8716] wg1 speed is unknown, defaulting to 1000 [ 178.470365][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.476776][ T8716] syz0: Port: 1 Link DOWN [ 178.490975][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 178.501266][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 256 - 0 [ 178.521977][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.532416][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 178.543332][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 256 - 0 [ 178.623885][ T8249] wg1 speed is unknown, defaulting to 1000 [ 178.701147][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.717538][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 178.727216][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 256 - 0 [ 178.737661][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.748027][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 178.757506][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 256 - 0 [ 179.099854][ T8749] netlink: 224 bytes leftover after parsing attributes in process `syz.3.678'. [ 179.533133][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 179.546850][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 179.562432][ T8767] netlink: 'syz.0.682': attribute type 15 has an invalid length. [ 179.578003][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 179.757953][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.685'. [ 179.822190][ T8773] bond7 (unregistering): Released all slaves [ 179.948511][ T8780] netlink: 996 bytes leftover after parsing attributes in process `syz.3.687'. [ 180.050622][ T8785] netlink: 72 bytes leftover after parsing attributes in process `syz.0.688'. [ 180.177014][ T8795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.692'. [ 180.192234][ T8795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.692'. [ 180.206283][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 180.272280][ T8800] nbd: illegal input index -16777216 [ 181.331485][ T8846] syzkaller0: entered promiscuous mode [ 181.337301][ T8846] syzkaller0: entered allmulticast mode [ 181.965569][ T8883] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 183.205303][ T8956] xt_cluster: node mask cannot exceed total number of nodes [ 183.297786][ T8956] syzkaller1: entered promiscuous mode [ 183.310188][ T8956] syzkaller1: entered allmulticast mode [ 183.406544][ T8956] macvtap1: entered promiscuous mode [ 183.420573][ T8956] bridge0: entered promiscuous mode [ 183.433329][ T8956] bridge0: port 3(macvtap1) entered blocking state [ 183.465405][ T8956] bridge0: port 3(macvtap1) entered disabled state [ 183.493918][ T8956] macvtap1: entered allmulticast mode [ 183.517908][ T8956] bridge0: entered allmulticast mode [ 183.563420][ T8956] macvtap1: left allmulticast mode [ 183.578932][ T8956] bridge0: left allmulticast mode [ 183.597072][ T8956] bridge0: left promiscuous mode [ 183.978658][ T8985] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 184.884635][ T9076] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 184.974974][ T9075] __nla_validate_parse: 17 callbacks suppressed [ 184.974995][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 185.015794][ T9074] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.207655][ T9074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.219760][ T9074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.347724][ T9082] syzkaller1: entered promiscuous mode [ 185.364013][ T9082] syzkaller1: entered allmulticast mode [ 185.417083][ T9034] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.463932][ T9034] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.501963][ T9088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.749'. [ 185.528441][ T9097] netlink: 'syz.0.750': attribute type 11 has an invalid length. [ 185.606577][ T9034] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.626423][ T9034] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.658043][ T9034] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.688730][ T9034] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.766368][ T9034] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.789166][ T9034] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.218789][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 186.299565][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.759'. [ 186.369139][ T8725] IPVS: starting estimator thread 0... [ 186.492341][ T9135] IPVS: using max 28 ests per chain, 67200 per kthread [ 186.567597][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 186.591140][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 186.653519][ T9147] netlink: 'syz.3.765': attribute type 27 has an invalid length. [ 186.729178][ T9147] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 186.743275][ T9147] vlan2: left allmulticast mode [ 186.748509][ T9147] vlan0: left allmulticast mode [ 186.754296][ T9147] veth0_vlan: left allmulticast mode [ 186.762569][ T9147] bond1: left promiscuous mode [ 186.767775][ T9147] bridge4: left promiscuous mode [ 186.774718][ T9147] bond1: left allmulticast mode [ 186.779759][ T9147] bridge4: left allmulticast mode [ 186.785816][ T9147] hsr2: left promiscuous mode [ 186.799082][ T9154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.767'. [ 186.825072][ T9149] ip6gretap0: left promiscuous mode [ 186.840455][ T9149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.855156][ T9149] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.870146][ T9149] net_ratelimit: 8 callbacks suppressed [ 186.870157][ T9149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.928148][ T9160] netlink: 14 bytes leftover after parsing attributes in process `syz.2.767'. [ 186.931133][ T9151] gre1: entered allmulticast mode [ 186.968953][ T9148] wg1 speed is unknown, defaulting to 1000 [ 187.216313][ T30] audit: type=1800 audit(1777221309.839:2): pid=9162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.768" name="memory.events" dev="tmpfs" ino=842 res=0 errno=0 [ 187.529795][ T9185] netlink: 40 bytes leftover after parsing attributes in process `syz.3.776'. [ 187.583237][ T9187] tipc: Can't bind to reserved service type 0 [ 187.588920][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.777'. [ 187.794028][ T9186] 8021q: adding VLAN 0 to HW filter on device bond8 [ 187.830768][ T9182] wg1 speed is unknown, defaulting to 1000 [ 189.093870][ T9236] pimreg: entered allmulticast mode [ 190.217704][ T9283] team0: Port device syz_tun removed [ 190.249426][ T9283] bridge_slave_0: left allmulticast mode [ 190.261458][ T9283] bridge_slave_0: left promiscuous mode [ 190.277195][ T9283] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.302660][ T9283] bridge_slave_1: left allmulticast mode [ 190.331570][ T9283] bridge_slave_1: left promiscuous mode [ 190.353781][ T9283] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.414378][ T9283] bond0: (slave bond_slave_0): Releasing backup interface [ 190.470076][ T9283] bond0: (slave bond_slave_1): Releasing backup interface [ 190.494588][ T9283] team0: Port device team_slave_0 removed [ 190.508551][ T9283] team0: Port device team_slave_1 removed [ 190.524390][ T9283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.546990][ T9283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.568372][ T9283] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.728570][ T9311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.820492][ T9316] __nla_validate_parse: 1 callbacks suppressed [ 190.820513][ T9316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.802'. [ 190.822023][ T9311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.800'. [ 190.881741][ T9316] netlink: 'syz.4.802': attribute type 1 has an invalid length. [ 190.930085][ T9316] netlink: 248 bytes leftover after parsing attributes in process `syz.4.802'. [ 191.004208][ T9326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.025190][ T9311] ip6tnl2: entered allmulticast mode [ 191.085139][ T1178] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 191.260195][ T9032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.269642][ T9032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.294400][ T9343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.315471][ T9344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.855598][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 192.043768][ T9377] netlink: 'syz.4.816': attribute type 1 has an invalid length. [ 192.181961][ T9382] netlink: 48 bytes leftover after parsing attributes in process `syz.2.817'. [ 192.247462][ T9384] netlink: 48 bytes leftover after parsing attributes in process `syz.1.818'. [ 192.283935][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.818'. [ 192.322923][ T9384] netlink: 68 bytes leftover after parsing attributes in process `syz.1.818'. [ 192.346731][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.818'. [ 192.357998][ T9384] netlink: 68 bytes leftover after parsing attributes in process `syz.1.818'. [ 193.100343][ T9427] netlink: 'syz.1.825': attribute type 1 has an invalid length. [ 193.239167][ T9427] bond3: entered promiscuous mode [ 193.251834][ T9427] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.317221][ T9433] wg1 speed is unknown, defaulting to 1000 [ 193.575067][ T9447] netlink: 'syz.3.831': attribute type 21 has an invalid length. [ 193.754105][ T9456] netlink: 'syz.1.833': attribute type 2 has an invalid length. [ 194.559477][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.951631][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 194.970513][ T9498] can: request_module (can-proto-0) failed. [ 195.040670][ T9496] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 195.079797][ T9496] bond3 (unregistering): Released all slaves [ 195.149588][ T9508] netlink: 'syz.4.846': attribute type 1 has an invalid length. [ 195.234691][ T9508] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 195.376517][ T9496] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 195.397899][ T9496] bond3 (unregistering): Released all slaves [ 195.464639][ T9521] syzkaller1: tun_chr_ioctl cmd 35108 [ 195.650130][ T9496] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 195.767034][ T9496] bond3 (unregistering): Released all slaves [ 196.146737][ T9546] netlink: 'syz.1.855': attribute type 4 has an invalid length. [ 196.194772][ T9546] __nla_validate_parse: 7 callbacks suppressed [ 196.194790][ T9546] netlink: 17 bytes leftover after parsing attributes in process `syz.1.855'. [ 196.484772][ T9558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.858'. [ 196.618964][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 196.835178][ T9570] bond4 (unregistering): Released all slaves [ 197.007116][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'. [ 197.712087][ T9606] netlink: 556 bytes leftover after parsing attributes in process `syz.4.869'. [ 197.953087][ T9609] dvmrp0: entered allmulticast mode [ 198.086890][ T9622] netlink: 64 bytes leftover after parsing attributes in process `syz.1.873'. [ 198.221912][ T9633] netlink: 472 bytes leftover after parsing attributes in process `syz.4.874'. [ 200.778911][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 200.802707][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 201.013941][ T9644] netlink: 296 bytes leftover after parsing attributes in process `syz.4.879'. [ 201.060961][ T9650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.174704][ T9655] ±ÿ: renamed from lo (while UP) [ 201.318201][ T9661] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 201.383366][ T9670] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.882'. [ 201.411100][ T9649] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 201.508141][ T9675] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 201.833676][ T9681] wg1 speed is unknown, defaulting to 1000 [ 202.654096][ T9710] bridge3: entered promiscuous mode [ 202.665507][ T9710] bridge3: entered allmulticast mode [ 202.871633][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 204.115205][ T9656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.355542][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 204.366467][ T9750] netlink: 'syz.4.904': attribute type 3 has an invalid length. [ 204.400727][ T9750] netlink: 'syz.4.904': attribute type 1 has an invalid length. [ 204.509878][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 204.811324][ T9774] macsec0: entered allmulticast mode [ 204.824550][ T9776] netlink: 'syz.3.911': attribute type 1 has an invalid length. [ 204.833679][ T9774] veth1_macvtap: entered allmulticast mode [ 204.852601][ T9774] macsec0: left allmulticast mode [ 204.865231][ T9774] veth1_macvtap: left allmulticast mode [ 204.899758][ T9774] netlink: 'syz.4.910': attribute type 2 has an invalid length. [ 204.956721][ T9776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.960120][ T9782] netlink: 'syz.1.912': attribute type 4 has an invalid length. [ 205.018801][ T9785] netlink: 'syz.1.912': attribute type 4 has an invalid length. [ 205.029219][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.911'. [ 205.110042][ T9778] bond3: (slave veth3): Enslaving as an active interface with a down link [ 205.230367][ T9782] netlink: 36 bytes leftover after parsing attributes in process `syz.1.912'. [ 205.275584][ T9776] bond3: (slave bridge6): Enslaving as an active interface with a down link [ 205.725275][ T9823] netlink: 64 bytes leftover after parsing attributes in process `syz.1.917'. [ 205.738928][ T9795] syzkaller0: entered promiscuous mode [ 205.759598][ T9795] syzkaller0: entered allmulticast mode [ 205.953883][ T9833] netlink: 'syz.4.918': attribute type 2 has an invalid length. [ 205.988432][ T9834] netlink: 36 bytes leftover after parsing attributes in process `syz.1.920'. [ 206.024472][ T9834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.920'. [ 206.050431][ T9834] netlink: 36 bytes leftover after parsing attributes in process `syz.1.920'. [ 206.959222][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.925'. [ 208.446912][ T9850] bond4: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 208.471873][ T9850] bond4 (unregistering): Released all slaves [ 208.589228][ T9855] bridge0: entered allmulticast mode [ 208.613388][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 208.661309][ T9853] netlink: 60 bytes leftover after parsing attributes in process `syz.4.928'. [ 208.695360][ T9853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.928'. [ 209.040232][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 209.241799][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 209.472822][ T9890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.936'. [ 209.485843][ T9884] macsec1: entered promiscuous mode [ 209.597478][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.936'. [ 209.625510][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.936'. [ 209.758024][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'. [ 210.078995][ T9899] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 210.465936][ T9917] netlink: 'syz.0.945': attribute type 1 has an invalid length. [ 210.536025][ T9917] bond3: entered promiscuous mode [ 210.542755][ T9917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.597865][ T9915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.625404][ T9915] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 210.638853][ T9915] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 210.694189][ T9915] bond3: (slave ip6gre1): making interface the new active one [ 210.729597][ T9915] ip6gre1: entered promiscuous mode [ 210.738681][ T9915] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 211.497835][ T9946] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 211.991498][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 211.991658][ T5857] Bluetooth: hci4: command 0x0406 tx timeout [ 211.997648][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 212.309655][ T9981] __nla_validate_parse: 5 callbacks suppressed [ 212.309674][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 212.395284][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.958'. [ 212.516937][ T9986] vxcan3: entered promiscuous mode [ 212.655458][ T9989] wg1 speed is unknown, defaulting to 1000 [ 213.049878][T10005] netlink: zone id is out of range [ 213.076092][T10005] netlink: zone id is out of range [ 213.100708][T10005] netlink: zone id is out of range [ 213.116243][T10005] netlink: zone id is out of range [ 213.142887][T10005] netlink: zone id is out of range [ 213.146231][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.965'. [ 213.172333][T10005] netlink: zone id is out of range [ 213.197785][T10005] netlink: zone id is out of range [ 213.201557][T10006] netlink: 'syz.0.965': attribute type 2 has an invalid length. [ 213.221555][T10005] netlink: zone id is out of range [ 213.248785][T10005] netlink: zone id is out of range [ 213.266660][T10005] netlink: zone id is out of range [ 213.524719][T10002] wg1 speed is unknown, defaulting to 1000 [ 213.909240][T10019] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 214.654208][T10003] wg1 speed is unknown, defaulting to 1000 [ 214.769478][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 214.833970][T10055] ip6gre2: entered promiscuous mode [ 215.073900][T10055] syzkaller0: entered promiscuous mode [ 215.091620][T10055] syzkaller0: entered allmulticast mode [ 215.258776][T10046] wg1 speed is unknown, defaulting to 1000 [ 217.824260][T10064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.871582][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 221.458068][T10086] bridge0: left allmulticast mode [ 221.470243][T10086] geneve3: left promiscuous mode [ 221.478202][T10086] gre1: left allmulticast mode [ 221.511984][T10090] syzkaller1: entered promiscuous mode [ 221.518394][T10090] syzkaller1: entered allmulticast mode [ 221.530388][T10094] tipc: Enabled bearer , priority 10 [ 221.595367][ T8994] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.617756][ T8994] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.640109][ T8994] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.698090][ T8994] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.854435][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 222.189420][T10119] netlink: 'syz.4.989': attribute type 1 has an invalid length. [ 222.383559][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 222.409954][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 222.427760][T10125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.992'. [ 222.434086][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'. [ 222.459564][T10123] netlink: 'syz.4.991': attribute type 18 has an invalid length. [ 222.503487][T10132] netlink: 'syz.2.993': attribute type 13 has an invalid length. [ 222.607570][T10128] nbd0: detected capacity change from 0 to 63 [ 222.655355][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.994'. [ 222.767089][T10142] netlink: 'syz.1.995': attribute type 1 has an invalid length. [ 222.794454][T10142] netlink: 1008 bytes leftover after parsing attributes in process `syz.1.995'. [ 222.831801][ T5861] block nbd0: Receive control failed (result -104) [ 223.230659][T10146] netlink: 44 bytes leftover after parsing attributes in process `syz.4.996'. [ 223.282914][T10146] netlink: 216 bytes leftover after parsing attributes in process `syz.4.996'. [ 223.311547][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.996'. [ 223.504666][T10146] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.528439][T10146] net_ratelimit: 354 callbacks suppressed [ 223.528451][T10146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.773488][T10183] netlink: 'syz.3.1005': attribute type 1 has an invalid length. [ 224.635015][T10235] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 224.653882][T10235] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 225.390625][T10241] bridge0: port 3(bond0) entered disabled state [ 225.551669][T10241] bridge3: left promiscuous mode [ 225.557676][T10241] bridge3: left allmulticast mode [ 225.586048][T10241] bond3: left promiscuous mode [ 225.611656][T10241] ip6gre1: left promiscuous mode [ 225.727804][T10257] tipc: Cannot configure node identity twice [ 225.745638][T10257] tipc: Cannot configure node identity twice [ 225.780076][T10259] netlink: 'syz.1.1027': attribute type 6 has an invalid length. [ 225.964146][ T9036] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.974732][T10259] openvswitch: netlink: Invalid VLAN frame [ 225.987666][ T9036] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.017734][ T9036] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.070882][ T9036] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.548171][T10299] netlink: 'syz.4.1038': attribute type 12 has an invalid length. [ 227.190690][T10332] netlink: 'syz.2.1045': attribute type 1 has an invalid length. [ 229.285676][T10283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.298686][T10335] netlink: 'syz.4.1046': attribute type 10 has an invalid length. [ 229.330422][T10335] __nla_validate_parse: 14 callbacks suppressed [ 229.330444][T10335] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1046'. [ 229.986558][T10374] xt_ecn: cannot match TCP bits for non-tcp packets [ 230.203800][T10381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1059'. [ 230.492816][T10397] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 230.496572][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 230.659220][T10397] 8021q: adding VLAN 0 to HW filter on device bond4 [ 230.761814][T10398] bond4: entered allmulticast mode [ 231.033781][T10412] wg1 speed is unknown, defaulting to 1000 [ 231.815970][T10444] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.1078'. [ 231.885574][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'. [ 232.166424][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 232.203306][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 232.608423][T10471] syzkaller1: entered promiscuous mode [ 232.637089][T10471] syzkaller1: entered allmulticast mode [ 232.771907][T10473] tipc: Bearer : already 2 bearers with priority 10 [ 232.799956][T10473] tipc: Bearer : trying with adjusted priority [ 232.815607][ T9002] tipc: Subscription rejected, illegal request [ 232.836876][T10473] tipc: Enabling of bearer rejected, failed to enable media [ 233.115349][T10484] wg1 speed is unknown, defaulting to 1000 [ 233.116293][T10488] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 233.288647][T10500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1092'. [ 233.291142][T10502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1092'. [ 233.324357][T10505] netlink: 'syz.2.1092': attribute type 1 has an invalid length. [ 233.333323][T10502] netlink: 'syz.2.1092': attribute type 1 has an invalid length. [ 233.343793][T10502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1092'. [ 233.708211][T10519] bond10: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 233.722329][T10519] bond10 (unregistering): Released all slaves [ 233.907874][T10527] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 234.469426][T10537] Cannot find set identified by id 0 to match [ 234.566385][T10546] wg1 speed is unknown, defaulting to 1000 [ 234.824817][T10565] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 234.867739][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 234.879985][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1110'. [ 235.368976][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'. [ 235.520345][T10598] syzkaller0: entered promiscuous mode [ 235.578626][T10598] syzkaller0: entered allmulticast mode [ 235.640766][T10610] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1115'. [ 235.655145][T10610] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1115'. [ 235.670326][T10610] netlink: 'syz.2.1115': attribute type 5 has an invalid length. [ 235.687648][T10610] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1115'. [ 236.124615][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'. [ 236.136357][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'. [ 236.297451][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 236.345961][T10639] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1122'. [ 236.468307][T10643] syzkaller0: entered promiscuous mode [ 236.531768][T10643] syzkaller0: entered allmulticast mode [ 236.752983][T10658] netlink: 'syz.3.1126': attribute type 1 has an invalid length. [ 236.986523][T10658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.562827][T10694] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 237.593686][ T5861] Bluetooth: hci3: command 0x0405 tx timeout [ 238.392815][T10725] wg1 speed is unknown, defaulting to 1000 [ 238.506327][T10731] netlink: 'syz.1.1146': attribute type 1 has an invalid length. [ 238.645862][T10730] netlink: 'syz.1.1146': attribute type 1 has an invalid length. [ 239.446937][T10761] netlink: 'syz.1.1152': attribute type 1 has an invalid length. [ 239.928164][T10761] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.953546][T10767] netlink: 'syz.1.1152': attribute type 1 has an invalid length. [ 239.975832][T10763] bond4: (slave veth3): making interface the new active one [ 239.984761][T10763] bond4: (slave veth3): Enslaving as an active interface with an up link [ 240.025170][T10768] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 240.035522][T10768] bond4: (slave batadv1): Enslaving as a backup interface with an up link [ 240.376929][T10787] netlink: 'syz.1.1158': attribute type 29 has an invalid length. [ 240.385441][T10787] __nla_validate_parse: 4 callbacks suppressed [ 240.388172][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 240.589756][T10801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1162'. [ 240.744260][T10803] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1160'. [ 240.982248][T10798] wg1 speed is unknown, defaulting to 1000 [ 241.389257][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1170'. [ 241.405445][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1170'. [ 241.631049][T10838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1172'. [ 241.918086][T10842] wg1 speed is unknown, defaulting to 1000 [ 242.015207][T10852] sctp: [Deprecated]: syz.2.1174 (pid 10852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.015207][T10852] Use struct sctp_sack_info instead [ 242.120849][T10858] sctp: [Deprecated]: syz.2.1174 (pid 10858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.120849][T10858] Use struct sctp_sack_info instead [ 242.165472][T10845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.218546][T10863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'. [ 242.224798][T10860] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 243.108307][T10892] openvswitch: netlink: IP tunnel dst address not specified [ 243.138955][T10892] openvswitch: netlink: IP tunnel dst address not specified [ 243.155019][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 243.168125][T10892] openvswitch: netlink: IP tunnel dst address not specified [ 243.195046][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 243.195203][T10892] openvswitch: netlink: IP tunnel dst address not specified [ 243.210605][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 243.971222][T10925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.993867][T10925] netlink: 'syz.1.1192': attribute type 10 has an invalid length. [ 244.013277][T10925] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 244.623567][ T8250] IPVS: starting estimator thread 0... [ 244.731520][T10972] IPVS: using max 25 ests per chain, 60000 per kthread [ 244.773400][T10975] netlink: 'syz.0.1205': attribute type 39 has an invalid length. [ 244.900786][T10978] tipc: Bearer : already 2 bearers with priority 10 [ 244.914993][T10978] tipc: Bearer : trying with adjusted priority [ 244.928934][T10978] tipc: Enabling of bearer rejected, failed to enable media [ 245.163527][T10998] netlink: 'syz.4.1213': attribute type 1 has an invalid length. [ 245.224878][T11001] tipc: Started in network mode [ 245.235043][T11001] tipc: Node identity fff, cluster identity 10 [ 245.251925][T11001] tipc: Node number set to 4095 [ 245.258469][T11001] tipc: Cannot configure node identity twice [ 245.265760][ T9016] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.297578][ T9016] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.327791][ T9016] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.365672][ T9016] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.457587][T11010] __nla_validate_parse: 11 callbacks suppressed [ 245.457608][T11010] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1217'. [ 245.501550][T11009] syzkaller1: entered promiscuous mode [ 245.523439][T11009] syzkaller1: entered allmulticast mode [ 245.635254][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 245.652332][T11009] syzkaller0: entered promiscuous mode [ 245.691432][T11009] syzkaller0: entered allmulticast mode [ 245.717273][T11022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1217'. [ 245.756815][T11009] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 245.949337][T11030] tipc: MTU too low for tipc bearer [ 246.088979][T11036] netlink: 57 bytes leftover after parsing attributes in process `syz.3.1224'. [ 246.143604][T11036] batadv1: entered promiscuous mode [ 246.169226][T11024] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1221'. [ 246.330807][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 246.430809][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'. [ 246.452280][T11042] netlink: 'syz.1.1227': attribute type 30 has an invalid length. [ 246.572967][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'. [ 246.592777][T11042] netlink: 'syz.1.1227': attribute type 30 has an invalid length. [ 246.833531][T11059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1232'. [ 247.005236][T11059] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1232'. [ 247.453734][T11081] bond10: entered promiscuous mode [ 247.482177][T11081] 8021q: adding VLAN 0 to HW filter on device bond10 [ 247.656560][T11094] wg1 speed is unknown, defaulting to 1000 [ 247.989740][T11119] tc_dump_action: action bad kind [ 248.217702][T11125] netlink: 'syz.4.1252': attribute type 5 has an invalid length. [ 248.225646][T11127] bridge0: port 4(vlan2) entered blocking state [ 248.240076][T11125] netlink: 'syz.4.1252': attribute type 6 has an invalid length. [ 248.247231][T11127] bridge0: port 4(vlan2) entered disabled state [ 248.270917][T11127] vlan2: entered allmulticast mode [ 248.289393][T11127] geneve0: entered allmulticast mode [ 248.329494][T11127] vlan2: entered promiscuous mode [ 248.348697][T11127] geneve0: entered promiscuous mode [ 248.442905][T11133] netlink: 'syz.2.1254': attribute type 1 has an invalid length. [ 248.549526][T11140] openvswitch: netlink: Flow key attr not present in new flow. [ 248.638585][T11133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 248.696481][T11132] bond3 (unregistering): Released all slaves [ 248.907327][T11140] wg1 speed is unknown, defaulting to 1000 [ 249.762819][T11155] wg1 speed is unknown, defaulting to 1000 [ 249.860283][T11195] bridge6: entered promiscuous mode [ 249.865796][T11195] bridge6: entered allmulticast mode [ 249.875498][T11195] team0: Port device bridge6 added [ 250.029058][T11195] bridge0: port 3(team0) entered blocking state [ 250.042410][T11195] bridge0: port 3(team0) entered disabled state [ 250.054673][T11195] team0: entered allmulticast mode [ 250.067092][T11195] team_slave_0: entered allmulticast mode [ 250.091586][T11195] team_slave_1: entered allmulticast mode [ 250.105657][T11195] team0: entered promiscuous mode [ 250.110976][T11195] team_slave_0: entered promiscuous mode [ 250.117993][T11195] team_slave_1: entered promiscuous mode [ 250.872559][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 251.007331][T11217] geneve4: entered promiscuous mode [ 251.013275][T11217] geneve4: entered allmulticast mode [ 251.476037][T11231] __nla_validate_parse: 10 callbacks suppressed [ 251.476058][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 251.515433][T11224] wg1 speed is unknown, defaulting to 1000 [ 251.558687][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 251.580837][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 251.680523][T11239] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 251.739457][T11239] syzkaller0: entered promiscuous mode [ 251.760699][T11239] syzkaller0: entered allmulticast mode [ 251.903494][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1280'. [ 252.641439][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1284'. [ 252.790511][T11263] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 252.803288][ T25] block nbd0: Possible stuck request ffff888027705080: control (read@0,1024B). Runtime 30 seconds [ 252.818007][ T25] block nbd0: Possible stuck request ffff888027705240: control (read@1024,1024B). Runtime 30 seconds [ 252.831240][ T25] block nbd0: Possible stuck request ffff888027705400: control (read@2048,1024B). Runtime 30 seconds [ 252.846658][ T25] block nbd0: Possible stuck request ffff8880277055c0: control (read@3072,1024B). Runtime 30 seconds [ 252.902031][T11270] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1288'. [ 253.068721][T11276] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1290'. [ 253.487038][T11286] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 253.560548][T11298] syz_tun: entered allmulticast mode [ 254.184650][T11321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1302'. [ 254.208833][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1301'. [ 254.231574][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 254.250443][T11321] netlink: 'syz.0.1302': attribute type 1 has an invalid length. [ 254.580915][T11335] tipc: Enabled bearer , priority 14 [ 254.641599][T11344] bridge_slave_0: left allmulticast mode [ 254.647515][T11344] bridge_slave_0: left promiscuous mode [ 254.687487][T11344] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.734867][T11344] bridge_slave_1: left allmulticast mode [ 254.755546][T11344] bridge_slave_1: left promiscuous mode [ 254.763419][T11344] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.807207][T11344] veth0_to_bond: left allmulticast mode [ 254.813061][T11344] veth0_to_bond: left promiscuous mode [ 254.824150][T11344] bridge1: port 2(veth0_to_bond) entered disabled state [ 254.931579][T11344] bond0: (slave bond_slave_0): Releasing backup interface [ 254.989661][T11344] bond0: (slave bond_slave_1): Releasing backup interface [ 255.044090][T11344] team_slave_0: left promiscuous mode [ 255.050065][T11344] team_slave_0: left allmulticast mode [ 255.058524][T11344] team0: Port device team_slave_0 removed [ 255.065433][T11344] team_slave_1: left promiscuous mode [ 255.072435][T11344] team_slave_1: left allmulticast mode [ 255.083716][T11344] team0: Port device team_slave_1 removed [ 255.091164][T11344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.100297][T11344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.120183][T11344] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 255.160782][T11348] 0ªX¹¦À: renamed from caif0 [ 255.179044][T11348] tipc: Disabling bearer [ 255.241982][T11348] 0ªX¹¦À: entered allmulticast mode [ 255.284399][T11348] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 255.387039][T11339] syzkaller1: entered promiscuous mode [ 255.409358][T11339] syzkaller1: entered allmulticast mode [ 255.663835][T11384] wg1 speed is unknown, defaulting to 1000 [ 255.790607][T11401] bond0: left allmulticast mode [ 255.810304][T11401] bond_slave_0: left allmulticast mode [ 255.826200][T11401] bond_slave_1: left allmulticast mode [ 255.836363][T11401] bond0: left promiscuous mode [ 255.849742][T11401] bond_slave_0: left promiscuous mode [ 255.870552][T11401] bond_slave_1: left promiscuous mode [ 255.893431][T11406] nft_compat: unsupported protocol 0 [ 255.894994][T11401] bridge0: port 3(bond0) entered disabled state [ 255.967380][T11401] bridge_slave_0: left allmulticast mode [ 255.989663][T11401] bridge_slave_0: left promiscuous mode [ 256.012088][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.022373][T11401] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.042528][T11401] bridge_slave_1: left allmulticast mode [ 256.054847][T11401] bridge_slave_1: left promiscuous mode [ 256.068054][T11401] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.093378][T11401] vlan2: left promiscuous mode [ 256.103367][T11401] geneve0: left promiscuous mode [ 256.138239][T11401] bond0: (slave bond_slave_0): Releasing backup interface [ 256.188153][T11401] bond0: (slave bond_slave_1): Releasing backup interface [ 256.218301][T11401] team0: Port device team_slave_0 removed [ 256.240829][T11401] team0: Port device team_slave_1 removed [ 256.258833][T11401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.279414][T11401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.296338][T11401] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 256.385858][T11399] wg1 speed is unknown, defaulting to 1000 [ 256.548964][T11415] __nla_validate_parse: 3 callbacks suppressed [ 256.548986][T11415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1320'. [ 257.654317][T11453] bond6: Removing last arp target with arp_interval on [ 257.825252][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 258.076129][T11469] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1337'. [ 258.363636][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'. [ 258.820275][T11498] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1342'. [ 258.884470][T11501] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1342'. [ 259.148689][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1340'. [ 259.604371][T11524] netlink: 'syz.4.1349': attribute type 1 has an invalid length. [ 259.765657][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1351'. [ 259.767621][T11524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1349'. [ 259.774930][T11534] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1351'. [ 259.843946][T11530] bond12: (slave geneve3): making interface the new active one [ 259.858505][T11532] netlink: 'syz.0.1343': attribute type 10 has an invalid length. [ 259.868182][T11530] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 259.878976][ T3570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.892100][ T3570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.904123][T11524] 8021q: adding VLAN 0 to HW filter on device bond12 [ 259.924604][T11532] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.934879][T11532] bond0: (slave team0): Enslaving as an active interface with an up link [ 259.944879][ T3570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.957561][ T3570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.986778][T11524] tipc: Resetting bearer [ 261.089687][ T30] audit: type=1804 audit(1777221383.709:3): pid=11562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1356" name="/newroot/268/cgroup.controllers" dev="tmpfs" ino=1393 res=1 errno=0 [ 261.113960][ T30] audit: type=1800 audit(1777221383.709:4): pid=11562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1356" name="cgroup.controllers" dev="tmpfs" ino=1393 res=0 errno=0 [ 262.531932][T11516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.764077][T11566] netlink: 'syz.1.1358': attribute type 3 has an invalid length. [ 262.787300][T11566] netlink: 'syz.1.1358': attribute type 3 has an invalid length. [ 262.934190][T11577] netlink: 'syz.2.1361': attribute type 17 has an invalid length. [ 262.962839][T11577] netlink: 'syz.2.1361': attribute type 49 has an invalid length. [ 263.043806][T11587] __nla_validate_parse: 2 callbacks suppressed [ 263.043830][T11587] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1364'. [ 263.153734][T11587] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1364'. [ 263.218961][T11593] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1366'. [ 263.247627][T11580] netlink: 'syz.2.1361': attribute type 17 has an invalid length. [ 263.296359][T11580] netlink: 'syz.2.1361': attribute type 49 has an invalid length. [ 263.341663][T11580] netlink: 'syz.2.1361': attribute type 17 has an invalid length. [ 263.384137][T11580] netlink: 'syz.2.1361': attribute type 49 has an invalid length. [ 263.494224][T11597] wg1 speed is unknown, defaulting to 1000 [ 263.539609][T11610] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1368'. [ 263.566634][T11610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1368'. [ 263.655744][T11614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1368'. [ 263.855885][T11616] syzkaller0: entered promiscuous mode [ 263.857974][T11618] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1371'. [ 263.884306][T11616] syzkaller0: entered allmulticast mode [ 263.977678][T11619] ipip0: entered promiscuous mode [ 264.157142][T11625] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 264.164789][T11625] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 264.220146][T11632] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 264.305802][T11639] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1376'. [ 264.627551][T11646] validate_nla: 1 callbacks suppressed [ 264.627571][T11646] netlink: 'syz.4.1379': attribute type 21 has an invalid length. [ 264.659270][T11646] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1379'. [ 264.694146][T11646] netlink: 'syz.4.1379': attribute type 4 has an invalid length. [ 264.738896][T11646] netlink: 'syz.4.1379': attribute type 5 has an invalid length. [ 264.774834][T11646] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1379'. [ 264.856206][T11653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.266574][T11664] wg1 speed is unknown, defaulting to 1000 [ 266.320463][T11717] netlink: 'syz.2.1393': attribute type 49 has an invalid length. [ 282.873268][ T25] block nbd0: Possible stuck request ffff888027705080: control (read@0,1024B). Runtime 60 seconds [ 282.884326][ T25] block nbd0: Possible stuck request ffff888027705240: control (read@1024,1024B). Runtime 60 seconds [ 282.895396][ T25] block nbd0: Possible stuck request ffff888027705400: control (read@2048,1024B). Runtime 60 seconds [ 282.906504][ T25] block nbd0: Possible stuck request ffff8880277055c0: control (read@3072,1024B). Runtime 60 seconds [ 284.828884][ T5215] udevd[5215]: worker [10100] /devices/virtual/block/nbd0 is taking a long time [ 286.489904][T11721] __nla_validate_parse: 2 callbacks suppressed [ 286.489927][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1397'. [ 286.521511][T11727] netlink: 420 bytes leftover after parsing attributes in process `syz.4.1400'. [ 286.676713][T11722] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1399'. [ 286.698556][T11733] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1402'. [ 286.715832][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1402'. [ 286.725863][T11733] tc_dump_action: action bad kind [ 286.733347][T11737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1403'. [ 286.788188][T11722] team0: Port device dummy0 removed [ 286.834051][T11735] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 287.027918][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'. [ 287.462518][T11762] syzkaller0: entered promiscuous mode [ 287.502001][T11762] syzkaller0: entered allmulticast mode [ 288.068106][T11788] netlink: 'syz.4.1413': attribute type 3 has an invalid length. [ 288.091924][T11788] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1413'. [ 288.254328][T11800] x_tables: duplicate underflow at hook 2 [ 288.489015][T11813] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 288.521146][T11810] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 288.737402][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1423'. [ 288.800820][T11821] netlink: 'syz.3.1423': attribute type 1 has an invalid length. [ 288.830128][T11821] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1423'. [ 289.075221][T11844] netlink: 'syz.3.1430': attribute type 1 has an invalid length. [ 289.264196][T11851] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 289.286171][T11851] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 289.394568][T11854] xt_CT: No such helper "snmp_trap" [ 289.464550][T11855] bond7: (slave bridge9): Enslaving as an active interface with a down link [ 289.490722][T11844] macvlan2: entered promiscuous mode [ 289.498055][T11844] macvlan2: entered allmulticast mode [ 289.505619][T11844] bond7: entered promiscuous mode [ 289.514792][T11844] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 289.524878][T11844] bond7: left promiscuous mode [ 289.636810][T11848] wg1 speed is unknown, defaulting to 1000 [ 289.767386][T11876] netlink: 'syz.2.1439': attribute type 1 has an invalid length. [ 289.859961][T11876] 8021q: adding VLAN 0 to HW filter on device bond4 [ 289.923847][T11878] bond4: (slave geneve4): making interface the new active one [ 289.934723][T11878] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 289.947662][T11874] syzkaller0: entered promiscuous mode [ 289.965930][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.987843][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.007053][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.090136][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.079723][T11926] xt_hashlimit: size too large, truncated to 1048576 [ 291.560671][T11939] __nla_validate_parse: 4 callbacks suppressed [ 291.560692][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'. [ 291.580820][T11935] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1455'. [ 291.591578][T11935] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 291.624802][T11939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.644660][T11939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.776480][T11943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1456'. [ 291.928445][T11943] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1456'. [ 292.700343][T11976] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1462'. [ 292.765464][T11973] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1462'. [ 293.765842][T12022] syzkaller0: entered promiscuous mode [ 293.790712][T12022] syzkaller0: entered allmulticast mode [ 293.837648][T12022] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 294.228682][T12051] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1480'. [ 294.298428][T12054] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1481'. [ 294.842983][ T3570] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 294.940085][T11172] nci: nci_rsp_packet: unsupported rsp opcode 0xf35 [ 295.488355][T12108] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1492'. [ 295.661189][T12110] netlink: 'syz.1.1493': attribute type 4 has an invalid length. [ 295.669876][T12110] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1493'. [ 295.680201][T12088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.974298][T12123] netlink: 'syz.4.1496': attribute type 8 has an invalid length. [ 296.106058][T12133] smc: net device wlan0 applied user defined pnetid SYZ0 [ 296.242217][T12141] netlink: 'syz.3.1502': attribute type 1 has an invalid length. [ 296.325067][T12141] bond8: entered promiscuous mode [ 296.332752][T12141] 8021q: adding VLAN 0 to HW filter on device bond8 [ 296.365120][T12146] bond8: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 296.379170][T12146] bond8: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 296.390340][T12146] bond8: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 296.606404][T12156] __nla_validate_parse: 2 callbacks suppressed [ 296.606424][T12156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1508'. [ 296.725814][T12157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1508'. [ 296.745819][T12168] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1506'. [ 296.762829][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'. [ 296.799497][T12155] netlink: 'syz.3.1506': attribute type 3 has an invalid length. [ 296.963037][T12179] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1513'. [ 297.045318][T12179] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1513'. [ 297.091872][T12186] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1513'. [ 297.271755][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1516'. [ 297.551757][T12215] netlink: zone id is out of range [ 297.573150][T12215] netlink: get zone limit has 4 unknown bytes [ 297.782788][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1523'. [ 297.922097][T12235] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1525'. [ 297.957025][T12239] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 298.390601][T12254] syzkaller0: entered promiscuous mode [ 298.404172][T12254] syzkaller0: entered allmulticast mode [ 298.669720][ T8725] IPVS: starting estimator thread 0... [ 298.727911][T12279] delete_channel: no stack [ 298.751716][T12279] delete_channel: no stack [ 298.783159][T12277] IPVS: using max 27 ests per chain, 64800 per kthread [ 298.936058][T12291] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 299.457139][T12307] wg1 speed is unknown, defaulting to 1000 [ 299.985898][T12332] x_tables: duplicate underflow at hook 3 [ 300.502738][T12359] tipc: Enabled bearer , priority 0 [ 300.542028][T12353] netlink: 'syz.3.1562': attribute type 21 has an invalid length. [ 300.568699][T12351] syzkaller0: entered promiscuous mode [ 300.574570][T12351] syzkaller0: entered allmulticast mode [ 300.580847][T12351] tipc: Resetting bearer [ 300.589875][T12363] netlink: 'syz.4.1563': attribute type 1 has an invalid length. [ 300.603036][T12353] netlink: 'syz.3.1562': attribute type 4 has an invalid length. [ 300.613854][T12353] netlink: 'syz.3.1562': attribute type 5 has an invalid length. [ 300.622683][T12351] openvswitch: netlink: Flow actions attr not present in new flow. [ 300.839294][ T12] tipc: Resetting bearer [ 300.849448][T12349] tipc: Resetting bearer [ 303.538126][T12349] tipc: Disabling bearer [ 303.596150][ T8250] tipc: Node number set to 3395519399 [ 303.703701][T12376] __nla_validate_parse: 13 callbacks suppressed [ 303.703722][T12376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1566'. [ 303.894078][T12389] netlink: 'syz.4.1570': attribute type 2 has an invalid length. [ 304.005638][T12392] openvswitch: netlink: Duplicate key (type 21). [ 304.042968][T12389] netlink: 'syz.4.1570': attribute type 8 has an invalid length. [ 304.051602][T12385] 8021q: adding VLAN 0 to HW filter on device bond10 [ 304.067156][T12389] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1570'. [ 304.078278][T12385] team0: Port device bond10 added [ 304.140956][T12394] lo speed is unknown, defaulting to 1000 [ 304.148723][T12391] netlink: 'syz.1.1571': attribute type 5 has an invalid length. [ 304.201675][T12401] netlink: 'syz.3.1573': attribute type 2 has an invalid length. [ 304.212246][T12401] netlink: 'syz.3.1573': attribute type 2 has an invalid length. [ 304.232714][T12394] lo speed is unknown, defaulting to 1000 [ 304.246444][T12394] lo speed is unknown, defaulting to 1000 [ 304.679538][T12419] x_tables: duplicate underflow at hook 2 [ 304.700046][T12418] x_tables: duplicate underflow at hook 2 [ 304.872973][T12429] syzkaller0: entered promiscuous mode [ 304.892458][T12429] syzkaller0: entered allmulticast mode [ 304.984722][T12434] sctp: [Deprecated]: syz.2.1582 (pid 12434) Use of int in max_burst socket option. [ 304.984722][T12434] Use struct sctp_assoc_value instead [ 305.009567][T12394] infiniband sqz0: set down [ 305.012287][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'. [ 305.014746][ T8725] lo speed is unknown, defaulting to 1000 [ 305.030995][T12394] infiniband sqz0: added lo [ 305.034100][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'. [ 305.040857][T12394] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 305.047234][T12436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1579'. [ 305.055715][T12394] infiniband sqz0: Couldn't open port 1 [ 305.072359][T12394] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 305.088607][T12394] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 305.109315][T12394] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 305.186801][T12394] RDS/IB: sqz0: added [ 305.191040][T12394] smc: adding ib device sqz0 with port count 1 [ 305.198363][T12394] smc: ib device sqz0 port 1 has no pnetid [ 305.205428][ T8249] lo speed is unknown, defaulting to 1000 [ 305.213045][T12394] lo speed is unknown, defaulting to 1000 [ 305.281854][T12441] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1583'. [ 306.020364][T12467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1590'. [ 306.066407][T12473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.069912][T12394] lo speed is unknown, defaulting to 1000 [ 306.157407][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'. [ 306.277600][T12482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1592'. [ 306.809488][T12394] lo speed is unknown, defaulting to 1000 [ 307.015298][T12507] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1596'. [ 307.925103][T12394] lo speed is unknown, defaulting to 1000 [ 307.927153][ T3570] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.962544][ T3570] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.975766][ T3570] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.987866][ T3570] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.999895][ T3570] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.010273][ T3570] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 308.019794][ T3570] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.035698][ T3570] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 308.178976][T12541] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 308.271068][T12546] 8021q: VLANs not supported on sit0 [ 308.795751][T12394] lo speed is unknown, defaulting to 1000 [ 308.805632][T12545] wg1 speed is unknown, defaulting to 1000 [ 309.033495][T12570] __nla_validate_parse: 4 callbacks suppressed [ 309.033517][T12570] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1610'. [ 309.072135][T12569] dvmrp0: left allmulticast mode [ 309.077918][T12569] pimreg: left allmulticast mode [ 309.700158][T12394] lo speed is unknown, defaulting to 1000 [ 310.418381][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1620'. [ 310.432774][T12608] wg1 speed is unknown, defaulting to 1000 [ 310.560162][T12613] netlink: 'syz.0.1622': attribute type 10 has an invalid length. [ 310.623840][T12613] veth0_vlan: left promiscuous mode [ 310.635709][T12613] veth0_vlan: entered promiscuous mode [ 310.651852][T12613] team0: Device veth0_vlan failed to register rx_handler [ 310.904570][T12617] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1623'. [ 311.089122][T12608] lo speed is unknown, defaulting to 1000 [ 311.935453][T12632] syzkaller0: entered promiscuous mode [ 311.941950][T12632] syzkaller0: entered allmulticast mode [ 312.969703][ T25] block nbd0: Possible stuck request ffff888027705080: control (read@0,1024B). Runtime 90 seconds [ 312.981028][ T25] block nbd0: Possible stuck request ffff888027705240: control (read@1024,1024B). Runtime 90 seconds [ 312.992602][ T25] block nbd0: Possible stuck request ffff888027705400: control (read@2048,1024B). Runtime 90 seconds [ 313.004011][ T25] block nbd0: Possible stuck request ffff8880277055c0: control (read@3072,1024B). Runtime 90 seconds [ 313.453119][T12660] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1633'. [ 313.573420][T12653] wg1 speed is unknown, defaulting to 1000 [ 313.707350][T12663] netlink: 'syz.4.1634': attribute type 2 has an invalid length. [ 313.813414][T12663] macsec1: entered promiscuous mode [ 313.826175][T12663] dummy0: entered promiscuous mode [ 313.852887][T12663] macsec1: entered allmulticast mode [ 313.881927][T12663] dummy0: entered allmulticast mode [ 313.920156][T12663] dummy0: left allmulticast mode [ 313.928431][T12663] dummy0: left promiscuous mode [ 313.965350][T12667] xt_connbytes: Forcing CT accounting to be enabled [ 314.028897][T12667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1636'. [ 314.061465][T12667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1636'. [ 314.266972][T12674] syzkaller0: entered promiscuous mode [ 314.290776][T12674] syzkaller0: entered allmulticast mode [ 314.585099][T12653] lo speed is unknown, defaulting to 1000 [ 314.600182][T12684] tipc: Enabled bearer , priority 0 [ 314.798661][T12684] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 314.821041][T12684] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 314.851801][T12684] veth1_virt_wifi: entered allmulticast mode [ 314.868612][T12684] veth1_virt_wifi: left allmulticast mode [ 314.888485][T12691] tipc: Resetting bearer [ 315.388789][T12707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1647'. [ 315.554789][T12710] syzkaller0: entered promiscuous mode [ 315.564141][T12710] syzkaller0: entered allmulticast mode [ 316.033762][T12737] netlink: 'syz.2.1650': attribute type 10 has an invalid length. [ 316.145615][T12737] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 316.164501][T12730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.387284][T12748] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1653'. [ 316.416731][T12748] netlink: 'syz.4.1653': attribute type 10 has an invalid length. [ 316.455740][T12748] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1653'. [ 316.624126][T12759] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1653'. [ 316.634263][T12748] dummy0: entered promiscuous mode [ 316.656437][T12748] bridge0: port 1(dummy0) entered blocking state [ 316.664811][T12748] bridge0: port 1(dummy0) entered disabled state [ 316.674099][T12748] dummy0: entered allmulticast mode [ 316.707421][T12741] syzkaller0: entered promiscuous mode [ 316.717004][T12741] syzkaller0: entered allmulticast mode [ 317.085082][T12772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1658'. [ 317.258629][T12779] ------------[ cut here ]------------ [ 317.265048][T12779] !cfg80211_chandef_valid(chandef) [ 317.265067][T12779] WARNING: net/wireless/chan.c:796 at cfg80211_chandef_dfs_required+0xe06/0xec0, CPU#1: syz.4.1661/12779 [ 317.283646][T12779] Modules linked in: [ 317.287858][T12779] CPU: 1 UID: 0 PID: 12779 Comm: syz.4.1661 Not tainted syzkaller #0 PREEMPT(full) [ 317.297744][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 317.307962][T12779] RIP: 0010:cfg80211_chandef_dfs_required+0xe06/0xec0 [ 317.315320][T12779] Code: de e8 ce 6d b3 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 7f 69 b3 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 41 f4 ff ff e8 6b 69 b3 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 2e f4 ff ff e8 58 7c a6 00 89 d1 80 e1 [ 317.335495][T12779] RSP: 0018:ffffc90003117700 EFLAGS: 00010283 [ 317.341765][T12779] RAX: ffffffff8b126785 RBX: ffff88804863d7f8 RCX: 0000000000080000 [ 317.350286][T12779] RDX: ffffc9000e292000 RSI: 00000000000005cc RDI: 00000000000005cd [ 317.360434][T12779] RBP: ffffc90003117890 R08: ffffffff8225adbf R09: ffff8880b873f5e8 [ 317.369683][T12779] R10: dffffc0000000000 R11: ffffed100aed254a R12: 0000000000000006 [ 317.377961][T12779] R13: dffffc0000000000 R14: ffffc90003117a00 R15: dffffc0000000000 [ 317.386274][T12779] FS: 00007f61522cd6c0(0000) GS:ffff888125313000(0000) knlGS:0000000000000000 [ 317.395621][T12779] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.402588][T12779] CR2: 000000110c328f7f CR3: 000000007d1da000 CR4: 00000000003526f0 [ 317.411014][T12779] Call Trace: [ 317.414524][T12779] [ 317.417592][T12779] ? kvfree_call_rcu+0x9f/0x430 [ 317.422810][T12779] ? ieee80211_free_chanctx+0x2dc/0x390 [ 317.428531][T12779] ? __pfx_ieee80211_free_chanctx+0x10/0x10 [ 317.431522][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 317.442197][T12779] ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10 [ 317.449289][T12779] _ieee80211_link_use_channel+0x27a/0x7f0 [ 317.454257][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.455535][T12779] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 317.455581][T12779] ? __pfx__ieee80211_link_use_channel+0x10/0x10 [ 317.455610][T12779] ? rcu_is_watching+0x15/0xb0 [ 317.455648][T12779] ieee80211_set_monitor_channel+0x692/0x8e0 [ 317.455675][T12779] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 317.455696][T12779] ? __mutex_trylock_common+0x158/0x260 [ 317.455742][T12779] cfg80211_set_monitor_channel+0x22d/0x5f0 [ 317.455771][T12779] cfg80211_wext_siwfreq+0x713/0x850 [ 317.455800][T12779] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 317.455837][T12779] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 317.455860][T12779] ioctl_standard_call+0xcb/0x1b0 [ 317.455888][T12779] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 317.455908][T12779] wext_ioctl_dispatch+0xee/0x410 [ 317.455931][T12779] ? __pfx_ioctl_standard_call+0x10/0x10 [ 317.455961][T12779] wext_handle_ioctl+0x10f/0x1d0 [ 317.455990][T12779] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 317.456013][T12779] ? do_futex+0x333/0x420 [ 317.456033][T12779] ? file_init_path+0x434/0x590 [ 317.456070][T12779] sock_ioctl+0x159/0x7f0 [ 317.456103][T12779] ? __pfx_sock_ioctl+0x10/0x10 [ 317.456132][T12779] ? __fget_files+0x2a/0x420 [ 317.577994][T12792] netlink: 'syz.3.1660': attribute type 3 has an invalid length. [ 317.581062][T12779] ? __fget_files+0x3a0/0x420 [ 317.594171][T12779] ? __fget_files+0x2a/0x420 [ 317.599097][T12779] ? bpf_lsm_file_ioctl+0x9/0x20 [ 317.604432][T12779] ? __pfx_sock_ioctl+0x10/0x10 [ 317.609495][T12779] __se_sys_ioctl+0xfc/0x170 [ 317.614407][T12779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.620618][T12779] do_syscall_64+0x15f/0xf80 [ 317.625327][T12779] ? trace_irq_disable+0x3b/0x140 [ 317.630827][T12779] ? clear_bhb_loop+0x40/0x90 [ 317.635943][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.642222][T12779] RIP: 0033:0x7f615139cdd9 [ 317.646978][T12779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.667572][T12779] RSP: 002b:00007f61522cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.676646][T12779] RAX: ffffffffffffffda RBX: 00007f6151615fa0 RCX: 00007f615139cdd9 [ 317.684815][T12779] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000006 [ 317.693220][T12779] RBP: 00007f6151432d69 R08: 0000000000000000 R09: 0000000000000000 [ 317.701265][T12779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.709329][T12779] R13: 00007f6151616038 R14: 00007f6151615fa0 R15: 00007fff9bb668e8 [ 317.717690][T12779] [ 317.720755][T12779] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 317.728164][T12779] CPU: 1 UID: 0 PID: 12779 Comm: syz.4.1661 Not tainted syzkaller #0 PREEMPT(full) [ 317.737667][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 317.748468][T12779] Call Trace: [ 317.751792][T12779] [ 317.754941][T12779] vpanic+0x56c/0xa60 [ 317.759153][T12779] ? __pfx__printk+0x10/0x10 [ 317.764333][T12779] ? __pfx_vpanic+0x10/0x10 [ 317.768987][T12779] ? is_bpf_text_address+0x292/0x2b0 [ 317.774338][T12779] ? is_bpf_text_address+0x26/0x2b0 [ 317.779615][T12779] panic+0xc5/0xd0 [ 317.783399][T12779] ? __pfx_panic+0x10/0x10 [ 317.787883][T12779] __warn+0x315/0x4c0 [ 317.791921][T12779] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 317.798132][T12779] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 317.804687][T12779] __report_bug+0x29a/0x540 [ 317.809256][T12779] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 317.815723][T12779] ? __pfx___report_bug+0x10/0x10 [ 317.820901][T12779] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 317.826676][T12779] ? mac80211_hwsim_config+0x129/0xd00 [ 317.832256][T12779] ? __pfx___mutex_lock+0x10/0x10 [ 317.837536][T12779] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 317.843622][T12779] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 317.850247][T12779] report_bug+0x16a/0x220 [ 317.854725][T12779] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 317.861189][T12779] ? cfg80211_chandef_dfs_required+0xe08/0xec0 [ 317.867468][T12779] handle_bug+0x9c/0x200 [ 317.871820][T12779] exc_invalid_op+0x1a/0x50 [ 317.876341][T12779] asm_exc_invalid_op+0x1a/0x20 [ 317.881207][T12779] RIP: 0010:cfg80211_chandef_dfs_required+0xe06/0xec0 [ 317.888339][T12779] Code: de e8 ce 6d b3 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 7f 69 b3 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 41 f4 ff ff e8 6b 69 b3 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 2e f4 ff ff e8 58 7c a6 00 89 d1 80 e1 [ 317.908055][T12779] RSP: 0018:ffffc90003117700 EFLAGS: 00010283 [ 317.914507][T12779] RAX: ffffffff8b126785 RBX: ffff88804863d7f8 RCX: 0000000000080000 [ 317.922503][T12779] RDX: ffffc9000e292000 RSI: 00000000000005cc RDI: 00000000000005cd [ 317.930591][T12779] RBP: ffffc90003117890 R08: ffffffff8225adbf R09: ffff8880b873f5e8 [ 317.938679][T12779] R10: dffffc0000000000 R11: ffffed100aed254a R12: 0000000000000006 [ 317.946754][T12779] R13: dffffc0000000000 R14: ffffc90003117a00 R15: dffffc0000000000 [ 317.954921][T12779] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 317.960056][T12779] ? cfg80211_chandef_dfs_required+0xe05/0xec0 [ 317.966437][T12779] ? kvfree_call_rcu+0x9f/0x430 [ 317.971403][T12779] ? ieee80211_free_chanctx+0x2dc/0x390 [ 317.977059][T12779] ? __pfx_ieee80211_free_chanctx+0x10/0x10 [ 317.983207][T12779] ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10 [ 317.989911][T12779] _ieee80211_link_use_channel+0x27a/0x7f0 [ 317.995742][T12779] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 318.002627][T12779] ? __pfx__ieee80211_link_use_channel+0x10/0x10 [ 318.009130][T12779] ? rcu_is_watching+0x15/0xb0 [ 318.013955][T12779] ieee80211_set_monitor_channel+0x692/0x8e0 [ 318.020369][T12779] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 318.026894][T12779] ? __mutex_trylock_common+0x158/0x260 [ 318.032477][T12779] cfg80211_set_monitor_channel+0x22d/0x5f0 [ 318.038569][T12779] cfg80211_wext_siwfreq+0x713/0x850 [ 318.043892][T12779] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 318.049986][T12779] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 318.056088][T12779] ioctl_standard_call+0xcb/0x1b0 [ 318.061326][T12779] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 318.068041][T12779] wext_ioctl_dispatch+0xee/0x410 [ 318.073112][T12779] ? __pfx_ioctl_standard_call+0x10/0x10 [ 318.078869][T12779] wext_handle_ioctl+0x10f/0x1d0 [ 318.083919][T12779] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 318.089748][T12779] ? do_futex+0x333/0x420 [ 318.094091][T12779] ? file_init_path+0x434/0x590 [ 318.099317][T12779] sock_ioctl+0x159/0x7f0 [ 318.103696][T12779] ? __pfx_sock_ioctl+0x10/0x10 [ 318.108563][T12779] ? __fget_files+0x2a/0x420 [ 318.113295][T12779] ? __fget_files+0x3a0/0x420 [ 318.117988][T12779] ? __fget_files+0x2a/0x420 [ 318.122595][T12779] ? bpf_lsm_file_ioctl+0x9/0x20 [ 318.128333][T12779] ? __pfx_sock_ioctl+0x10/0x10 [ 318.133379][T12779] __se_sys_ioctl+0xfc/0x170 [ 318.137990][T12779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.144263][T12779] do_syscall_64+0x15f/0xf80 [ 318.148986][T12779] ? trace_irq_disable+0x3b/0x140 [ 318.154117][T12779] ? clear_bhb_loop+0x40/0x90 [ 318.158819][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.164817][T12779] RIP: 0033:0x7f615139cdd9 [ 318.169345][T12779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.189659][T12779] RSP: 002b:00007f61522cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.198547][T12779] RAX: ffffffffffffffda RBX: 00007f6151615fa0 RCX: 00007f615139cdd9 [ 318.206815][T12779] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000006 [ 318.214894][T12779] RBP: 00007f6151432d69 R08: 0000000000000000 R09: 0000000000000000 [ 318.223257][T12779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.231420][T12779] R13: 00007f6151616038 R14: 00007f6151615fa0 R15: 00007fff9bb668e8 [ 318.239429][T12779] [ 318.242880][T12779] Kernel Offset: disabled [ 318.247354][T12779] Rebooting in 86400 seconds..