last executing test programs: 2m27.937109188s ago: executing program 2 (id=17942): socket$nl_generic(0x10, 0x3, 0x10) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2m27.666301616s ago: executing program 2 (id=17944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m27.367121557s ago: executing program 2 (id=17946): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)) write$nci(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="610307"], 0x52) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000001d0000000800e95a", @ANYRES32=0x0, @ANYBLOB="38002f800c0002000000000000000000280003801c0003800600010000000000080002000200000006000300a3aa0000080001"], 0x54}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r2], 0x5c}}, 0x800) 2m24.60165665s ago: executing program 2 (id=17962): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x255fdbfb, {0xa, 0x80, 0x80}, [@RTA_UID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff25, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 2m24.600381484s ago: executing program 0 (id=17963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 2m24.470517616s ago: executing program 0 (id=17966): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x0, 0x0}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) tee(r2, r6, 0x8f5, 0x0) write(r4, 0x0, 0x0) 2m24.242850578s ago: executing program 0 (id=17969): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0x2, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 2m24.052021495s ago: executing program 2 (id=17970): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 2m23.870637169s ago: executing program 0 (id=17972): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0xa}, {0xfff2, 0x10}, {0xfff1, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004844}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2m23.72104166s ago: executing program 0 (id=17975): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 2m23.606282385s ago: executing program 2 (id=17976): mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61f0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044095}, 0x52fd794718c63698) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2m23.458556591s ago: executing program 0 (id=17978): syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}, 0x1, 0x0, 0x0, 0x420c4}, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) socket(0x14, 0x2, 0x4) listen(r0, 0x0) 2m8.558561806s ago: executing program 32 (id=17976): mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61f0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044095}, 0x52fd794718c63698) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2m8.323088398s ago: executing program 33 (id=17978): syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}, 0x1, 0x0, 0x0, 0x420c4}, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) socket(0x14, 0x2, 0x4) listen(r0, 0x0) 59.239596414s ago: executing program 5 (id=18299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 58.672025569s ago: executing program 5 (id=18307): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000680), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) r2 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r2, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 58.474127872s ago: executing program 5 (id=18308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) 58.22884257s ago: executing program 5 (id=18310): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x35, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={@loopback, 0x1, 0x0, 0x20, 0x0, [{@loopback}, {@empty}]}}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) close(r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000040)=0x1) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010102}, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 57.866320959s ago: executing program 5 (id=18313): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x24020400) socket(0x1d, 0x2, 0x6) unshare(0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r1], 0x38}}, 0x10) 56.888910701s ago: executing program 3 (id=18319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x259fdc02, {0x0, 0x0, 0x0, r4, {0xfff2, 0xfff6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 56.398217713s ago: executing program 3 (id=18321): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 55.917753664s ago: executing program 3 (id=18324): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40810) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, 0x0, 0x0) listen(r2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 55.086249555s ago: executing program 5 (id=18327): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0x0, [0xb, 0xffffffffffffffff, 0xe, 0xc0000000000000, 0x8000, 0xc], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) 54.33042034s ago: executing program 3 (id=18333): openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x280401, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x13, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ldst={0x0, 0x0, 0x6, 0xb, 0x6, 0x0, 0x15}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @ldst={0x3, 0x2, 0x0, 0xb, 0x9, 0xffffffffffffffff, 0xfffffffffffffff0}], &(0x7f0000000940)='syzkaller\x00', 0xfffffffa, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a00), &(0x7f0000000a40)=[{0x2, 0x2, 0xb, 0xb}, {0x3, 0x2, 0xc, 0x2}, {0x5, 0x10000, 0x10, 0x1}], 0x10, 0x8db5}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r4}, 0xc) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f0000000380), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x8, 0xa3, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x8}, 0x18) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r8, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x6, 0xb, &(0x7f0000000180)=""/11, 0x41000, 0x12, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x5, 0x800, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7], 0x0, 0x10, 0x4}, 0x94) 54.099388344s ago: executing program 3 (id=18335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x2000c0c2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) clock_gettime(0xc, 0x0) setsockopt$inet_int(r4, 0x0, 0xd, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xf03a0005) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) 53.006841254s ago: executing program 3 (id=18345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c002400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 39.674424282s ago: executing program 34 (id=18327): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0x0, [0xb, 0xffffffffffffffff, 0xe, 0xc0000000000000, 0x8000, 0xc], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) 37.68665538s ago: executing program 35 (id=18345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c002400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 7.946010866s ago: executing program 4 (id=18390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003c00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808fffeffea0800", @ANYRES32=r1, @ANYBLOB="06001c00"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4148b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0xa}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r4, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7.347859889s ago: executing program 4 (id=18393): unshare(0x28000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) unshare(0x30080) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x758, 0x190, 0x360, 0x450, 0x0, 0x0, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x32, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 0x4000, 0x50}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x8000007f], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x48000000}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@loopback, 0x5, 0xc}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x1, 0x9, 0x3}}, @common=@rt={{0x138}, {0x0, [0x0, 0xc], 0x0, 0x0, 0x1, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @empty, @remote, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x3, 0x0, 0x0, 0xf, 0x1, 0x7}]}, {0x0, [0x4f, 0x0]}}, 0x0, 0x28, 0x0, 0x9}, 0x28) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'tunl0\x00'}]}, 0x30}}, 0xc000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) 6.866879093s ago: executing program 4 (id=18397): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000002c0)=0xc5, 0x4) recvmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005a40)=""/25, 0x19}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000001000)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0x4004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0xa4}}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0xfffd, 0xfffffffe, @mcast1, 0xa}}, {{0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x10c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd26, 0x70bd2b, 0x8}}]}, 0x10c}}, 0x24000058) 6.211228922s ago: executing program 4 (id=18400): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000009, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) r0 = socket(0x11, 0x2, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x93}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a6631e5", @ANYRES32=0x0, @ANYBLOB="a19001000e2c00002c00128009000100626f6e64000000001c000280080007000200000005000600010000000800030006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f1, 0x6}, {0x10007, 0x30000080}]}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.505303741s ago: executing program 1 (id=18402): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4085, 0xff5}], 0x1}, 0x100) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001c80)=@delqdisc={0x18c, 0x25, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1, 0x7}, {0x9, 0x10}, {0xf, 0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x4}}}}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x4, 0x0, 0x2, 0x5, 0x3, 0x2}}, {0x8, 0x2, [0x2, 0xfffa]}}, {{0x1c, 0x1, {0x4, 0xb, 0x7, 0x9, 0x0, 0x9, 0x3, 0x5}}, {0xe, 0x2, [0x9, 0x490, 0x83, 0x3, 0xffff]}}, {{0x1c, 0x1, {0x62, 0x5, 0x6, 0xa, 0x2, 0x4, 0xf0, 0x6}}, {0x10, 0x2, [0x4, 0x28, 0x4, 0x0, 0xf00b, 0x8]}}, {{0x1c, 0x1, {0x6, 0x1, 0x7ff, 0x1, 0x1, 0x5, 0xde, 0x1}}, {0x6, 0x2, [0x1000]}}, {{0x1c, 0x1, {0x2, 0x4, 0xf, 0x1, 0x0, 0xaa85, 0x9, 0x6}}, {0x10, 0x2, [0x9, 0x4, 0x743, 0xe, 0x2, 0x0]}}, {{0x1c, 0x1, {0x4, 0xd, 0x4, 0x1cc, 0x1, 0x9, 0xfffffff7, 0x2}}, {0x8, 0x2, [0x1, 0x9]}}, {{0x1c, 0x1, {0x74, 0x8, 0x200, 0x10001, 0x1, 0x7, 0x9, 0x6}}, {0x10, 0x2, [0x0, 0xffff, 0x8, 0x9, 0x1, 0x0]}}, {{0x1c, 0x1, {0x9, 0x12, 0x1, 0x9, 0x1, 0x6, 0x3, 0x2}}, {0x8, 0x2, [0x8, 0x9]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x18c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind(r0, &(0x7f0000000240)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x80) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r6, r6, 0x2f}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="2f0000001000000004"], 0x20) write$tun(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed202889fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 5.475222639s ago: executing program 4 (id=18403): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], &(0x7f0000000f40)=""/4079, 0x4a, 0xfef, 0x6, 0x4}, 0x28) r0 = socket(0x10, 0x803, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x406, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10004}, 0x80, 0x0}, 0x4404c004) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) write$nci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="710509030306002e031f7d0004060300c105"], 0x29) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x1}}) 4.738706509s ago: executing program 1 (id=18405): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000009200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000e1ffffffffffffff000000000000000000"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01050008000a00", @ANYRES32, @ANYBLOB, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x400c010) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 4.344222469s ago: executing program 6 (id=18407): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x6020400) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) unshare(0x2a060400) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0xf5, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) 4.279447012s ago: executing program 1 (id=18408): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@broadcast, @in=@empty, 0x4e21, 0x4, 0x4e20, 0x0, 0x2}, {0x40, 0xae, 0xffffffff, 0x9, 0x9, 0x9, 0x9, 0x5}, {0x10000, 0x7, 0x8}, 0x2, 0x6e6bbf, 0x1, 0x2a515e8a9e1e315e, 0x1}, {{@in6=@loopback, 0x4d2, 0x3c}, 0xa, @in=@multicast2, 0x3503, 0x4, 0x0, 0x48, 0x54, 0x1ff, 0x1}}, 0xe8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25}, [@jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x100, 0x60000000, 0x0, 0x5b, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c"}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000004000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200e000"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 4.088040534s ago: executing program 1 (id=18409): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x6, 0x8002, 0x71a6, 0x4, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={r2, 0x5}, &(0x7f0000000380)=0x8) r3 = socket$netlink(0x10, 0x3, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x34, r5, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000080)=0x84, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r6], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r0, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.029127845s ago: executing program 6 (id=18410): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000000000ae3ff62791c38e3d14ec66e16bf69f66"], 0x28}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) ioctl(r0, 0x8b29, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r3, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x400002, @loopback, 0xfffffffd}}, 0x0, 0x8, 0x300, 0x0, 0x54, 0x4}, 0x9c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x7}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xb, 0x3, 0x18, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x700, 0x10, 0x7ff, 0x3}}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={@remote, 0x11, r9}) 2.298255829s ago: executing program 6 (id=18411): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x2) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r5, &(0x7f0000000000)=""/106, 0x6a) 2.285361586s ago: executing program 1 (id=18412): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$inet(0x2, 0x3, 0xa) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000001a00)=0x7, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 2.260770278s ago: executing program 4 (id=18413): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r5) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r8, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x14}], 0x1}, 0x44) 1.935308546s ago: executing program 1 (id=18414): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}}], {0x14, 0x10}}, 0x3c}}, 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 1.31219648s ago: executing program 6 (id=18415): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) 934.945455ms ago: executing program 6 (id=18416): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200087ad, &(0x7f0000e68000)={0x2, 0x4e20, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) close(0x3) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x160, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12a}, @nested={0x148, 0x1, 0x0, 0x1, [@typed={0x142, 0x6, 0x0, 0x0, @str='=\xfb,ZL\x8b\xcevF\xf1\xcb\x90\xc3\xae\x89]0\xc0\xb1\xb7P\x1b\xcc\x0e\xa2\xd1\xdb\xd2Nd4\xd4\xc5\x85\xe55;\'\xa22\xe9 \xecbH\nWO\ta\xdeo\xad\xd4\xb2S\xfby\x86\xe6\xac\'\x8c\b\x86a\xa9ZH\x18\xb0K\x90\xcc\xd5\xa7\xa1b\x11{\xedu\xc3{\x18\xf7J7\xb2\xfao\xfdK\xdciH\x02\xcb\xbe\x84\x16A\xcc \x1ay\xe4\x19<\xc0\xfa\xfb\x89\x9cH\xe1\xce\x80\x04N\x14\x05\x1cr\x9f!\xcd8NpA\xf3EJ\xa4\x12;\xd7\xf9\xdcQ\x99\x9dH\x15\x1f\xe9\x05w\xf4\xed\x0fd\xb7$\x8b\xba\x89\xc3,\x00\x00\xf7\x8d\xa9\xc1\x8cp0t\x12f\x14\x82`N\xd8Kg\x84gg(\'\x84\x9c\xf0\x95\xadl\xa4\xc6\xdd\xab\xbaq\x03K8\xb3H\xd5\xa0=e]\x96\xa5P\xfc\xf4\xa59\xf2\x97\xeb\xf0g\xd9+\x00\xc6\x00\x1dm\"\x84\xae\xab=V\xf3Q\x16\xbe\x9a\x1c\xf3\x11\x06\xbe\xfe\xad3\n\xcbi\xc1\xca~\x0e\x00\x00\x00\x00\x00\x00\x00V\x81\xaa\x7f^\xb81rI9|\xbf$Z\xc2\xf3\xd5m\xb5\x02>s\xed\x9b\xcegH\xba\x1f/\xa8\x13\xf0\xea\x1c\x06p\xf3;\x178\xbc\xfa\x11K\'\x02\xb1\xdd3\xc1\x8d\xa2i\xf5*S\'\xe2\xd9'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 6 (id=18417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0x2, 0x20000000, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4006, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) kernel console output (not intermixed with test programs): 805.999426][ T9661] netlink: 'syz.1.16523': attribute type 2 has an invalid length. [ 806.111506][ T1058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.119789][ T1058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.128013][ T1058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.136199][ T1058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.468412][ T9669] lo speed is unknown, defaulting to 1000 [ 810.485446][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16545'. [ 810.913682][ T9701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 811.172855][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16550'. [ 811.500797][ T9736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16552'. [ 811.502601][ T9738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16551'. [ 811.546102][ T9740] netlink: 'syz.0.16553': attribute type 1 has an invalid length. [ 811.566741][ T9740] netlink: 'syz.0.16553': attribute type 4 has an invalid length. [ 811.585390][ T9740] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.16553'. [ 811.620230][ T9741] netlink: 'syz.0.16553': attribute type 1 has an invalid length. [ 811.657692][ T9741] netlink: 'syz.0.16553': attribute type 4 has an invalid length. [ 811.674328][ T9741] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.16553'. [ 811.865369][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.873574][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.881792][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.889981][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.050665][ T9757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16560'. [ 812.188829][ T9749] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.196403][ T9749] bridge0: port 1(1¾x9ÿ) entered disabled state [ 812.621598][T12428] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xe8 [ 812.693489][ T9749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.725583][ T9749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.200141][ T9749] veth1_vlan: left allmulticast mode [ 813.319091][T12428] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.348116][T12428] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.374188][T12428] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 813.428333][T12428] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.442447][T12428] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.452111][T12428] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 813.470949][T12428] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.489877][T12428] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.508363][T12428] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 813.526817][T12428] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.549000][T12428] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.568312][T12428] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 813.863778][ T9802] netlink: 'syz.1.16571': attribute type 1 has an invalid length. [ 813.897570][ T9802] bond10: entered promiscuous mode [ 813.903251][ T9802] 8021q: adding VLAN 0 to HW filter on device bond10 [ 813.946255][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16571'. [ 813.956050][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16571'. [ 814.003054][ T9802] bond10: (slave bridge11): making interface the new active one [ 814.011280][ T9802] bridge11: entered promiscuous mode [ 814.018652][ T9802] bond10: (slave bridge11): Enslaving as an active interface with an up link [ 814.126524][ T9814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16576'. [ 814.332028][ T9825] lo: Caught tx_queue_len zero misconfig [ 814.768586][ T9853] geneve1: Caught tx_queue_len zero misconfig [ 814.839400][ T9858] lo speed is unknown, defaulting to 1000 [ 814.854622][ T9858] lo speed is unknown, defaulting to 1000 [ 814.867138][ T9858] lo speed is unknown, defaulting to 1000 [ 814.876475][ T9858] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 814.893072][ T9858] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 814.911550][ T9858] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 814.945970][ T9858] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 814.981742][ T9858] lo speed is unknown, defaulting to 1000 [ 814.992864][ T9858] lo speed is unknown, defaulting to 1000 [ 815.001166][ T9858] lo speed is unknown, defaulting to 1000 [ 815.009284][ T9858] lo speed is unknown, defaulting to 1000 [ 815.017412][ T9858] lo speed is unknown, defaulting to 1000 [ 815.491354][ T9886] netlink: 'syz.0.16602': attribute type 4 has an invalid length. [ 815.501870][ T9886] netlink: 'syz.0.16602': attribute type 4 has an invalid length. [ 815.527959][ T9774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 815.728510][ T9893] __nla_validate_parse: 6 callbacks suppressed [ 815.728528][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16605'. [ 815.762205][ T9891] syzkaller1: entered promiscuous mode [ 815.770614][ T9891] syzkaller1: entered allmulticast mode [ 815.800099][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16608'. [ 815.851760][ T9902] netlink: 7 bytes leftover after parsing attributes in process `syz.0.16608'. [ 815.894869][ T9901] syzkaller1: entered promiscuous mode [ 815.907311][ T9901] syzkaller1: entered allmulticast mode [ 816.499959][ T9940] sctp: [Deprecated]: syz.1.16625 (pid 9940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 816.499959][ T9940] Use struct sctp_sack_info instead [ 816.606548][ T9945] bridge0: port 3(dummy0) entered disabled state [ 816.613155][ T9945] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.646082][ T9945] team_slave_0: left promiscuous mode [ 816.653010][ T9945] team_slave_1: left promiscuous mode [ 816.797171][ T9945] tipc: Resetting bearer [ 816.861115][ T9945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.110876][ T5734] syz1: Port: 1 Link DOWN [ 817.115329][ T1058] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.132395][ T1058] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.165503][ T1058] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 50472 - 0 [ 817.197145][ T1058] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 817.224013][ T1058] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.251720][ T1058] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.277894][ T1058] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 50472 - 0 [ 817.295822][ T1058] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 817.324661][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16633'. [ 817.326608][ T1058] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.347431][ T1058] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.364238][ T1058] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 50472 - 0 [ 817.372923][ T1058] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 817.382012][ T1058] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.391658][ T1058] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.400991][ T1058] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 50472 - 0 [ 817.411817][ T1058] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 817.724711][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16638'. [ 817.742372][ T9976] syzkaller1: entered promiscuous mode [ 817.761707][ T9976] syzkaller1: entered allmulticast mode [ 818.429031][T10003] geneve4: entered promiscuous mode [ 818.446157][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.478681][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.508654][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.537343][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.740537][T10013] netlink: 'syz.0.16648': attribute type 1 has an invalid length. [ 818.787918][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16649'. [ 818.830558][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16650'. [ 818.878735][T10013] bond6: entered promiscuous mode [ 818.885918][T10022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16650'. [ 818.898586][T10013] 8021q: adding VLAN 0 to HW filter on device bond6 [ 819.011543][T10021] bond6: (slave bridge11): making interface the new active one [ 819.038224][T10021] bridge11: entered promiscuous mode [ 819.063622][T10021] bridge11: left promiscuous mode [ 819.398280][T10031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16653'. [ 819.649974][T10039] netlink: 'syz.2.16656': attribute type 1 has an invalid length. [ 820.325188][T10036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16653'. [ 820.419563][T10039] 8021q: adding VLAN 0 to HW filter on device bond15 [ 820.538152][T10040] bond15: (slave veth5): Enslaving as an active interface with a down link [ 820.593563][T10041] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 820.611044][T10041] bond15: (slave batadv1): making interface the new active one [ 820.643052][T10041] batadv1: entered promiscuous mode [ 820.658602][T10041] bond15: (slave batadv1): Enslaving as an active interface with an up link [ 820.822433][T10059] lo speed is unknown, defaulting to 1000 [ 821.417107][T10059] lo speed is unknown, defaulting to 1000 [ 821.667283][T10087] netlink: 'syz.4.16669': attribute type 1 has an invalid length. [ 821.699444][T10087] __nla_validate_parse: 1 callbacks suppressed [ 821.699462][T10087] netlink: 476 bytes leftover after parsing attributes in process `syz.4.16669'. [ 821.780496][T10087] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.16669'. [ 821.936014][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16671'. [ 822.855599][T10128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16684'. [ 823.161559][T10135] lo speed is unknown, defaulting to 1000 [ 823.319441][T10143] 8021q: adding VLAN 0 to HW filter on device bond11 [ 823.709452][T10135] lo speed is unknown, defaulting to 1000 [ 824.298498][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16702'. [ 824.337479][T10182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16702'. [ 824.565315][T10162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 824.708305][T10189] lo speed is unknown, defaulting to 1000 [ 824.795070][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16707'. [ 825.272277][T10189] lo speed is unknown, defaulting to 1000 [ 825.498702][T10213] netlink: 'syz.3.16714': attribute type 1 has an invalid length. [ 825.527807][T10213] bond10: entered promiscuous mode [ 825.533056][T10213] bond10: entered allmulticast mode [ 825.539164][T10213] 8021q: adding VLAN 0 to HW filter on device bond10 [ 825.619173][ T158] nci: nci_rsp_packet: unknown rsp opcode 0x606 [ 825.726551][T10213] macvlan1: entered promiscuous mode [ 825.731870][T10213] macvlan1: entered allmulticast mode [ 825.756613][T10213] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 826.307898][T10207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 826.593748][T10235] netlink: 84 bytes leftover after parsing attributes in process `syz.4.16721'. [ 826.638151][T10235] netlink: 72 bytes leftover after parsing attributes in process `syz.4.16721'. [ 826.684896][T10235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16721'. [ 826.748327][T10241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16723'. [ 826.870976][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16725'. [ 827.175665][T10255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16731'. [ 827.346744][T10262] syzkaller1: entered promiscuous mode [ 827.374449][T10262] syzkaller1: entered allmulticast mode [ 827.563674][T10265] RDS: rds_bind could not find a transport for 0:b3::, load rds_tcp or rds_rdma? [ 827.655379][T10271] lo speed is unknown, defaulting to 1000 [ 827.901461][T10282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16738'. [ 828.037928][T10271] lo speed is unknown, defaulting to 1000 [ 828.462559][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16741'. [ 828.800102][T10297] netlink: 'syz.4.16743': attribute type 1 has an invalid length. [ 828.836651][T10297] bond8: entered promiscuous mode [ 828.842662][T10297] 8021q: adding VLAN 0 to HW filter on device bond8 [ 828.905953][T10297] bond8: (slave veth9): making interface the new active one [ 828.922306][T10297] veth9: entered promiscuous mode [ 828.932499][T10297] bond8: (slave veth9): Enslaving as an active interface with an up link [ 829.397702][T10316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16751'. [ 829.599378][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16755'. [ 829.616136][T10326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16755'. [ 830.415344][T10267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 833.274664][T12428] batadv1: left promiscuous mode [ 833.286742][T10338] lo speed is unknown, defaulting to 1000 [ 833.685707][T10352] tipc: Resetting bearer [ 834.284206][T10338] lo speed is unknown, defaulting to 1000 [ 834.295031][ T1058] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.306422][ T1058] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.330083][ T1058] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.341524][ T1058] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.351231][ T1058] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.359768][ T1058] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.406109][ T1058] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.430039][ T1058] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.477827][T10386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16777'. [ 834.819204][T10395] bridge0: port 2(vlan3) entered blocking state [ 834.825690][T10395] bridge0: port 2(vlan3) entered listening state [ 834.866407][T10395] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.882918][T10395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.915469][T10395] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 834.982569][T12428] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.992102][T12428] bridge0: port 1(bridge_slave_0) entered listening state [ 835.009849][ T69] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 835.114645][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16787'. [ 835.179374][T10416] batman_adv: batadv0: Interface activated: vlan1 [ 835.186624][T10416] erspan0: left promiscuous mode [ 835.243079][T10423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16789'. [ 835.268330][T10416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.302812][T10416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.402857][T10416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.413003][T10416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 835.426844][T10416] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 835.743816][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16795'. [ 835.931574][T10458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16803'. [ 837.023787][T10505] batman_adv: batadv0: Interface deactivated: vlan1 [ 837.213016][T10505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.263029][T10503] netlink: 144 bytes leftover after parsing attributes in process `syz.1.16831'. [ 837.330430][T10509] lo speed is unknown, defaulting to 1000 [ 837.447008][T10516] netlink: 'syz.1.16825': attribute type 1 has an invalid length. [ 837.552474][T10516] 8021q: adding VLAN 0 to HW filter on device bond12 [ 837.617484][T10522] bond12: (slave veth11): Enslaving as an active interface with a down link [ 837.711699][T10531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16832'. [ 837.716423][T10516] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 837.749527][T10516] bond12: (slave batadv1): making interface the new active one [ 837.765351][T10516] batadv1: entered promiscuous mode [ 837.775280][T10516] bond12: (slave batadv1): Enslaving as an active interface with an up link [ 837.792723][T10509] lo speed is unknown, defaulting to 1000 [ 838.115376][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16835'. [ 838.174783][T10546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16835'. [ 838.409409][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16839'. [ 838.904819][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 839.639714][T10601] __nla_validate_parse: 2 callbacks suppressed [ 839.639732][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16857'. [ 839.670604][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16859'. [ 839.701236][T10607] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.16860'. [ 839.981338][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16862'. [ 839.998343][T10625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16865'. [ 840.094746][T10629] netlink: 'syz.4.16866': attribute type 1 has an invalid length. [ 840.610578][T10640] syzkaller1: entered promiscuous mode [ 840.626872][T10640] syzkaller1: entered allmulticast mode [ 840.648565][T10654] netlink: 'syz.4.16871': attribute type 1 has an invalid length. [ 840.676168][T10654] netlink: 'syz.4.16871': attribute type 4 has an invalid length. [ 840.684195][T10654] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.16871'. [ 840.849499][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16875'. [ 840.888580][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16875'. [ 841.227516][T10686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16885'. [ 841.467258][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16888'. [ 841.882177][T10702] lo speed is unknown, defaulting to 1000 [ 842.240008][T10702] lo speed is unknown, defaulting to 1000 [ 842.255957][T10714] rdma_rxe: rxe_newlink: failed to add lo [ 842.530908][T10738] xt_hashlimit: size too large, truncated to 1048576 [ 842.658439][T10748] syzkaller1: entered promiscuous mode [ 842.673038][T10748] syzkaller1: entered allmulticast mode [ 843.247328][T10772] RDS: rds_bind could not find a transport for ::a00:0:0:0, load rds_tcp or rds_rdma? [ 843.277786][T10775] lo speed is unknown, defaulting to 1000 [ 843.592386][T10775] lo speed is unknown, defaulting to 1000 [ 843.730352][T10781] lo speed is unknown, defaulting to 1000 [ 844.007774][T10794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.418470][T10781] lo speed is unknown, defaulting to 1000 [ 844.865433][T10821] __nla_validate_parse: 5 callbacks suppressed [ 844.865451][T10821] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16934'. [ 844.906478][T10819] lo speed is unknown, defaulting to 1000 [ 845.008981][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16938'. [ 845.156363][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16942'. [ 845.208088][T10843] netlink: 92 bytes leftover after parsing attributes in process `syz.0.16942'. [ 845.277431][T10819] lo speed is unknown, defaulting to 1000 [ 845.290988][T10847] netlink: 'syz.0.16945': attribute type 1 has an invalid length. [ 845.468700][T10847] 8021q: adding VLAN 0 to HW filter on device bond7 [ 845.539538][T10851] bond7: (slave veth13): Enslaving as an active interface with a down link [ 845.557725][T10854] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 845.566434][T10854] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 846.240215][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16954'. [ 846.268851][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16954'. [ 846.320463][T10874] netlink: 'syz.0.16952': attribute type 1 has an invalid length. [ 846.338622][T10874] netlink: 'syz.0.16952': attribute type 1 has an invalid length. [ 846.354195][T10880] lo speed is unknown, defaulting to 1000 [ 846.375444][T10874] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 846.822690][T10903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16963'. [ 846.931300][T10880] lo speed is unknown, defaulting to 1000 [ 847.064498][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 847.307866][T10932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16974'. [ 847.399615][ T1058] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 848.159856][T10959] netlink: set zone limit has 4 unknown bytes [ 848.170207][T10964] ip6tnl0: Caught tx_queue_len zero misconfig [ 848.196549][T10965] netlink: set zone limit has 4 unknown bytes [ 848.252320][T10969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16989'. [ 848.587673][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16996'. [ 848.853229][T10995] lo speed is unknown, defaulting to 1000 [ 848.915249][T12435] batadv1: left promiscuous mode [ 849.147248][T11003] syzkaller0: entered promiscuous mode [ 849.153321][T11003] syzkaller0: entered allmulticast mode [ 849.160131][T10995] lo speed is unknown, defaulting to 1000 [ 850.256422][T10929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.265383][ C0] bridge0: port 2(vlan3) entered learning state [ 850.274130][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 850.548311][T11045] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 854.083388][T11099] __nla_validate_parse: 2 callbacks suppressed [ 854.083405][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17029'. [ 854.250494][T11099] 8021q: adding VLAN 0 to HW filter on device bond16 [ 854.369042][T11101] bond16: (slave veth13): Enslaving as an active interface with an up link [ 854.412655][T11106] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 854.441346][T11106] bond16: (slave batadv2): Enslaving as an active interface with an up link [ 854.446817][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17034'. [ 854.858089][T11133] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 854.921121][T11133] ip6gre2: entered allmulticast mode [ 854.945236][T11133] team0: Device ip6gre2 is of different type [ 854.973483][T11136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17040'. [ 855.202952][T11143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17044'. [ 855.734744][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17058'. [ 856.535961][T11075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 857.108127][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17066'. [ 860.938485][T11216] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17070'. [ 861.101825][T11222] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17073'. [ 861.263113][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17080'. [ 861.382694][T11241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17079'. [ 861.438047][T11241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17079'. [ 861.452715][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17079'. [ 861.549990][T11251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17085'. [ 861.561000][T11253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17086'. [ 861.575779][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17084'. [ 861.842880][T11266] netlink: 22 bytes leftover after parsing attributes in process `syz.3.17090'. [ 861.888627][T11265] tipc: Enabled bearer , priority 0 [ 861.989721][T11265] syzkaller0: entered promiscuous mode [ 861.997151][T11265] syzkaller0: entered allmulticast mode [ 862.003195][T11265] tipc: Resetting bearer [ 862.011975][T11261] lo speed is unknown, defaulting to 1000 [ 862.037353][T11262] tipc: Resetting bearer [ 863.074890][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 865.487234][T11262] tipc: Disabling bearer [ 865.496728][T11261] lo speed is unknown, defaulting to 1000 [ 865.516446][T11293] netlink: 'syz.2.17099': attribute type 1 has an invalid length. [ 865.625535][ C0] bridge0: port 2(vlan3) entered forwarding state [ 865.631996][ C0] bridge0: topology change detected, propagating [ 865.638712][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.645966][ C1] bridge0: topology change detected, propagating [ 865.655832][T11290] lo speed is unknown, defaulting to 1000 [ 866.022422][T11290] lo speed is unknown, defaulting to 1000 [ 866.517694][T11333] __nla_validate_parse: 3 callbacks suppressed [ 866.517711][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17117'. [ 866.879129][T11350] sctp: [Deprecated]: syz.1.17125 (pid 11350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 866.879129][T11350] Use struct sctp_sack_info instead [ 867.043328][T11359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.533245][T11381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17138'. [ 867.962009][T11394] lo speed is unknown, defaulting to 1000 [ 868.031850][T11399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17145'. [ 872.150571][T11423] netlink: 148 bytes leftover after parsing attributes in process `syz.1.17153'. [ 872.164098][T11394] lo speed is unknown, defaulting to 1000 [ 872.728217][T11481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17162'. [ 872.959553][T11486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17163'. [ 873.061554][T11486] 8021q: adding VLAN 0 to HW filter on device bond13 [ 873.088556][T11495] 8021q: adding VLAN 0 to HW filter on device bond13 [ 873.096024][T11495] bond13: (slave wireguard1): The slave device specified does not support setting the MAC address [ 873.109429][T11495] bond13: (slave wireguard1): Error -95 calling set_mac_address [ 874.220153][T11537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17178'. [ 874.461296][T11547] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.17181'. [ 874.541402][T11550] syzkaller1: entered promiscuous mode [ 874.556789][T11550] syzkaller1: entered allmulticast mode [ 874.980060][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17187'. [ 875.182633][T11572] netlink: 'syz.0.17190': attribute type 3 has an invalid length. [ 875.214150][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17190'. [ 875.479449][T11586] syzkaller1: entered promiscuous mode [ 875.493275][T11586] syzkaller1: entered allmulticast mode [ 876.166352][T11620] bond8: left promiscuous mode [ 876.184054][T11620] geneve3: left promiscuous mode [ 876.201278][T11620] geneve3: left allmulticast mode [ 876.216849][T11620] ip6gre2: left allmulticast mode [ 876.233508][T11620] gtp3: left promiscuous mode [ 876.245716][T11620] gtp3: left allmulticast mode [ 876.259141][T11620] bond10: left promiscuous mode [ 876.274247][T11620] bridge11: left promiscuous mode [ 876.542614][T11631] netlink: 'syz.4.17209': attribute type 13 has an invalid length. [ 877.260214][T11666] lo speed is unknown, defaulting to 1000 [ 877.773254][T11666] lo speed is unknown, defaulting to 1000 [ 880.202065][T11767] lo speed is unknown, defaulting to 1000 [ 880.565858][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17246'. [ 880.738357][T11767] lo speed is unknown, defaulting to 1000 [ 881.693870][T11728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 882.149275][T11800] bond12: entered promiscuous mode [ 882.548443][T11813] lo speed is unknown, defaulting to 1000 [ 882.945176][T11813] lo speed is unknown, defaulting to 1000 [ 883.354621][T11851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17272'. [ 883.401600][T11851] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17272'. [ 883.414788][T11851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17272'. [ 883.445636][T11851] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17272'. [ 883.701959][T11865] syzkaller1: entered promiscuous mode [ 883.729614][T11865] syzkaller1: entered allmulticast mode [ 883.860688][T11874] netlink: 'syz.0.17281': attribute type 1 has an invalid length. [ 883.913607][T11874] 8021q: adding VLAN 0 to HW filter on device bond8 [ 883.993355][T11876] bond8: (slave ip6gretap1): making interface the new active one [ 884.016600][T11876] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 884.223072][T11886] lo speed is unknown, defaulting to 1000 [ 884.569226][T11886] lo speed is unknown, defaulting to 1000 [ 884.698992][T11901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17289'. [ 885.132899][T11917] netlink: 'syz.3.17296': attribute type 1 has an invalid length. [ 885.176324][T11921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17298'. [ 885.296765][T11922] veth15: entered promiscuous mode [ 885.305111][T11922] veth15: entered allmulticast mode [ 885.320001][T11925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17300'. [ 885.331548][T11925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17300'. [ 885.486465][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17303'. [ 885.496093][T11917] bond13: entered promiscuous mode [ 885.501924][T11917] 8021q: adding VLAN 0 to HW filter on device bond13 [ 885.812903][T11944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17307'. [ 886.156561][T11956] syzkaller1: entered promiscuous mode [ 886.171269][T11956] syzkaller1: entered allmulticast mode [ 886.883403][T11991] syzkaller1: entered promiscuous mode [ 886.893074][T11991] syzkaller1: entered allmulticast mode [ 886.956987][T11995] tipc: Enabled bearer , priority 0 [ 887.095234][T11995] syzkaller0: entered promiscuous mode [ 887.105774][T11995] syzkaller0: entered allmulticast mode [ 887.122580][T11995] tipc: Resetting bearer [ 887.201689][T11994] tipc: Resetting bearer [ 888.831684][T12037] netlink: 1484 bytes leftover after parsing attributes in process `syz.2.17345'. [ 888.841787][T12037] netlink: 1484 bytes leftover after parsing attributes in process `syz.2.17345'. [ 889.080193][T12043] netlink: 'syz.3.17347': attribute type 4 has an invalid length. [ 889.141330][T12045] netlink: 'syz.3.17347': attribute type 4 has an invalid length. [ 891.162433][T11994] tipc: Disabling bearer [ 891.204153][T12049] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 891.346730][T12056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17352'. [ 891.409134][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17354'. [ 892.546231][T12138] netlink: 'syz.1.17386': attribute type 1 has an invalid length. [ 892.585868][T12138] 8021q: adding VLAN 0 to HW filter on device bond14 [ 892.732292][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17388'. [ 893.093150][T12155] netlink: 64 bytes leftover after parsing attributes in process `syz.4.17393'. [ 893.113680][T12155] syzkaller1: entered promiscuous mode [ 893.120132][T12155] syzkaller1: entered allmulticast mode [ 893.591531][ T9] lo speed is unknown, defaulting to 1000 [ 893.599775][ T9] syz2: Port: 1 Link ACTIVE [ 893.745400][T12178] bond15: entered allmulticast mode [ 893.799806][T12184] vxcan1: entered promiscuous mode [ 893.807791][T12184] vxcan1: entered allmulticast mode [ 893.813962][T12184] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address [ 893.825523][T12184] bond15: (slave vxcan1): Error -95 calling set_mac_address [ 894.159600][T12201] bond9: entered allmulticast mode [ 894.195098][T12201] macvlan4: entered promiscuous mode [ 894.200505][T12201] macvlan4: entered allmulticast mode [ 894.237863][T12201] bond9: entered promiscuous mode [ 894.253751][T12201] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 894.272121][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17412'. [ 894.299228][T12201] bond9: left promiscuous mode [ 894.307278][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17412'. [ 894.594640][T12219] tipc: Failed to remove unknown binding: 66,1,1/2886997007:39427088/39427090 [ 894.621404][T12219] tipc: Failed to remove unknown binding: 66,1,1/2886997007:39427088/39427090 [ 894.636776][T12221] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.17418'. [ 894.652952][T12219] tipc: Failed to remove unknown binding: 66,1,1/2886997007:39427088/39427090 [ 894.776580][T12080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 894.832247][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17421'. [ 894.860229][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17421'. [ 895.714318][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 898.974936][T12287] netlink: 'syz.0.17442': attribute type 11 has an invalid length. [ 899.195595][T12306] lo speed is unknown, defaulting to 1000 [ 899.393381][T12306] lo speed is unknown, defaulting to 1000 [ 899.817190][T12328] bond4: (slave lo): Releasing backup interface [ 899.836208][T12328] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 899.858951][T12328] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 899.947924][T12332] vlan0: left allmulticast mode [ 899.953033][T12332] geneve0: left allmulticast mode [ 899.966056][T12332] bridge0: port 3(vlan0) entered disabled state [ 900.473885][T12355] kÿ: entered promiscuous mode [ 901.277588][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17472'. [ 901.313772][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17472'. [ 901.892994][T12283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 902.420881][T12405] lo speed is unknown, defaulting to 1000 [ 902.680165][T12405] lo speed is unknown, defaulting to 1000 [ 902.845886][ T9] hsr0: entered promiscuous mode [ 902.859308][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17497'. [ 904.150836][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17512'. [ 905.109730][T12523] netlink: 64 bytes leftover after parsing attributes in process `syz.4.17525'. [ 905.126790][T12523] syzkaller1: entered promiscuous mode [ 905.132376][T12523] syzkaller1: entered allmulticast mode [ 905.239399][T12525] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.17526'. [ 905.358982][T12527] lo speed is unknown, defaulting to 1000 [ 905.687598][T12527] lo speed is unknown, defaulting to 1000 [ 906.436328][T12561] syzkaller1: entered promiscuous mode [ 906.449759][T12561] syzkaller1: entered allmulticast mode [ 906.707459][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17541'. [ 907.269696][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17551'. [ 907.368939][T12603] xt_hashlimit: size too large, truncated to 1048576 [ 907.518171][T12607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17554'. [ 908.642682][T12543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 909.047645][ T69] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.156704][ T69] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.184338][ T69] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.250030][ T69] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.799953][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17568'. [ 910.540254][T12676] netlink: 'syz.4.17581': attribute type 1 has an invalid length. [ 910.756270][T12682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17581'. [ 910.793017][T12678] 8021q: adding VLAN 0 to HW filter on device bond11 [ 910.839519][T12678] bond10: (slave bond11): making interface the new active one [ 910.870274][T12678] bond10: (slave bond11): Enslaving as an active interface with an up link [ 910.986793][T12676] bond10: (slave gretap4): Enslaving as a backup interface with an up link [ 911.057338][T12682] 8021q: adding VLAN 0 to HW filter on device bond10 [ 911.362851][T12705] tipc: Enabled bearer , priority 0 [ 911.481075][T12705] syzkaller0: entered promiscuous mode [ 911.493511][T12705] syzkaller0: entered allmulticast mode [ 911.507304][T12705] tipc: Resetting bearer [ 911.566209][T12704] tipc: Resetting bearer [ 912.269818][T12731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17596'. [ 915.756632][T12704] tipc: Disabling bearer [ 915.855133][T12739] lo speed is unknown, defaulting to 1000 [ 916.295747][T12739] lo speed is unknown, defaulting to 1000 [ 916.996056][T12790] bond17: option ad_user_port_key: invalid value (65535) [ 917.003146][T12790] bond17: option ad_user_port_key: allowed values 0 - 1023 [ 917.068584][T12790] bond17 (unregistering): Released all slaves [ 917.069092][T12797] netlink: 'syz.0.17618': attribute type 1 has an invalid length. [ 917.093341][T12797] sctp: [Deprecated]: syz.0.17618 (pid 12797) Use of struct sctp_assoc_value in delayed_ack socket option. [ 917.093341][T12797] Use struct sctp_sack_info instead [ 917.182964][T12800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17619'. [ 917.405815][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.417548][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.427869][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.448771][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.500698][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17623'. [ 917.693639][T12827] xt_policy: output policy not valid in PREROUTING and INPUT [ 918.167432][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17632'. [ 919.442683][T12871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 919.488279][T12871] netlink: 'syz.2.17644': attribute type 21 has an invalid length. [ 919.549022][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17646'. [ 919.766002][T12877] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 919.795103][T12877] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 919.869235][T12875] macvlan4: entered promiscuous mode [ 919.878352][T12875] macvlan4: entered allmulticast mode [ 919.887024][T12875] bond10: (slave macvlan4): Error -98 calling set_mac_address [ 920.053617][T12884] netlink: 'syz.0.17648': attribute type 12 has an invalid length. [ 921.240906][T12910] tun0: tun_chr_ioctl cmd 1074812118 [ 921.254523][T12910] tun0: tun_chr_ioctl cmd 1074033169 [ 921.885132][T12937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17669'. [ 922.412774][T12959] netlink: 'syz.3.17676': attribute type 10 has an invalid length. [ 923.436774][T12986] IPVS: set_ctl: invalid protocol: 29 172.20.20.10:20002 [ 923.451672][T12987] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.17688'. [ 923.537169][ T158] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.546534][ T158] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.581589][T12986] macvtap0: entered promiscuous mode [ 923.594362][T12986] syz_tun: entered promiscuous mode [ 923.681510][T12986] syz_tun: left promiscuous mode [ 923.741707][ T158] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.750602][ T158] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.801428][T13001] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 923.979450][T13011] tipc: Enabled bearer , priority 0 [ 924.041935][T13011] syzkaller0: entered promiscuous mode [ 924.047591][T13011] syzkaller0: entered allmulticast mode [ 924.053615][T13011] tipc: Resetting bearer [ 924.092155][T13015] lo speed is unknown, defaulting to 1000 [ 924.101893][T13010] tipc: Resetting bearer [ 924.368546][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17702'. [ 927.574418][T13010] tipc: Disabling bearer [ 927.589997][T13015] lo speed is unknown, defaulting to 1000 [ 928.890031][T13087] bridge0: port 2(vlan3) entered disabled state [ 928.896615][T13087] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.033178][T13087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.080983][T13087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.177730][T13095] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 929.458315][T13111] netlink: 192 bytes leftover after parsing attributes in process `syz.2.17725'. [ 929.478139][T13107] lo speed is unknown, defaulting to 1000 [ 929.498051][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17725'. [ 929.962713][T13107] lo speed is unknown, defaulting to 1000 [ 930.087626][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17731'. [ 930.345774][T13147] netlink: 52 bytes leftover after parsing attributes in process `syz.3.17734'. [ 930.383011][T13147] netlink: 76 bytes leftover after parsing attributes in process `syz.3.17734'. [ 930.403809][T13147] bridge0: left promiscuous mode [ 930.414442][T13147] netlink: 52 bytes leftover after parsing attributes in process `syz.3.17734'. [ 930.776306][T13151] bond16: entered promiscuous mode [ 930.860207][T13157] syzkaller0: entered promiscuous mode [ 930.870449][T13157] syzkaller0: entered allmulticast mode [ 932.505732][T13113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 932.684927][T13199] tipc: Enabled bearer , priority 0 [ 932.712218][T13198] netlink: 'syz.0.17753': attribute type 4 has an invalid length. [ 932.769305][T13206] netlink: 'syz.0.17753': attribute type 4 has an invalid length. [ 932.822560][T13199] syzkaller0: entered promiscuous mode [ 932.829876][T13199] syzkaller0: entered allmulticast mode [ 932.836676][T13199] tipc: Resetting bearer [ 933.027387][ T148] tipc: Resetting bearer [ 933.044630][T13197] tipc: Resetting bearer [ 933.073769][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17759'. [ 933.192682][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17759'. [ 933.343081][T13233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17763'. [ 933.428377][T13235] netlink: 296 bytes leftover after parsing attributes in process `syz.4.17763'. [ 936.816731][T13197] tipc: Disabling bearer [ 936.826882][T13217] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 937.063333][T13271] netlink: 'syz.0.17771': attribute type 1 has an invalid length. [ 937.096136][T13273] netlink: 'syz.4.17772': attribute type 11 has an invalid length. [ 937.160810][T13271] 8021q: adding VLAN 0 to HW filter on device bond12 [ 937.174986][T13271] bond11: (slave bond12): making interface the new active one [ 937.183349][T13271] bond11: (slave bond12): Enslaving as an active interface with an up link [ 937.195844][T13280] lo: Caught tx_queue_len zero misconfig [ 937.220966][T13284] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.17774'. [ 937.270495][T13282] bond11: (slave gretap3): Enslaving as a backup interface with an up link [ 937.593398][T13292] lo speed is unknown, defaulting to 1000 [ 937.701287][T13306] syz_tun: entered allmulticast mode [ 937.711765][T13305] syz_tun: left allmulticast mode [ 937.917187][T13292] lo speed is unknown, defaulting to 1000 [ 938.102093][T13328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 938.240364][T13338] netlink: 200 bytes leftover after parsing attributes in process `syz.2.17794'. [ 938.292657][T13334] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 938.304904][T13334] team0 (unregistering): Port device team_slave_0 removed [ 938.313701][T13334] team0 (unregistering): Failed to send options change via netlink (err -105) [ 938.336972][T13334] team0 (unregistering): Failed to send port change of device 76žÿ via netlink (err -105) [ 938.352645][T13334] team0 (unregistering): Port device 76žÿ removed [ 938.760866][T13344] 8021q: adding VLAN 0 to HW filter on device bond18 [ 938.785414][T13344] bond17: (slave bond18): Enslaving as an active interface with an up link [ 938.859198][T13340] bond17: (slave gretap5): Enslaving as an active interface with an up link [ 939.519147][T13398] tipc: Failed to remove unknown binding: 66,0,0/0:3540490563/3540490565 [ 939.528239][T13398] tipc: Failed to remove unknown binding: 66,0,0/0:3540490563/3540490564 [ 939.539396][T13398] tipc: Failed to remove unknown binding: 66,0,0/0:3540490563/3540490565 [ 939.548463][T13398] tipc: Failed to remove unknown binding: 66,0,0/0:3540490563/3540490564 [ 939.615469][T13403] IPVS: Unknown mcast interface: ipvlan0 [ 940.366098][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17815'. [ 940.442434][T13441] 8021q: adding VLAN 0 to HW filter on device bond18 [ 940.465312][T13441] bond18 (unregistering): Released all slaves [ 940.604884][T13452] syzkaller0: entered promiscuous mode [ 940.611113][T13452] syzkaller0: entered allmulticast mode [ 940.986475][T13468] lo speed is unknown, defaulting to 1000 [ 941.100326][T13468] lo speed is unknown, defaulting to 1000 [ 941.976836][T13356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 942.094647][T13488] bridge0: port 3(veth1_to_bridge) entered blocking state [ 942.103535][T13488] bridge0: port 3(veth1_to_bridge) entered disabled state [ 942.111906][T13488] veth1_to_bridge: entered allmulticast mode [ 942.120378][T13488] veth1_to_bridge: entered promiscuous mode [ 943.060432][T13511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17834'. [ 943.098592][T13511] bond0: ARP target 170.170.170.170 is already present [ 943.127429][T13511] bond0: option arp_ip_target: invalid value (2863311530) [ 943.489727][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17840'. [ 943.763002][T13535] lo speed is unknown, defaulting to 1000 [ 943.882143][T13541] nbd: couldn't find a device at index 0 [ 943.970153][T13545] syzkaller0: entered promiscuous mode [ 943.984078][T13545] syzkaller0: entered allmulticast mode [ 944.034635][T13535] lo speed is unknown, defaulting to 1000 [ 944.177753][T13552] netlink: 'syz.0.17848': attribute type 1 has an invalid length. [ 944.357900][T13557] bond13: (slave dummy0): making interface the new active one [ 944.385347][T13557] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 944.395064][T13560] bond13: entered promiscuous mode [ 944.402172][T13560] dummy0: entered promiscuous mode [ 944.480947][T13552] bond2: (slave lo): Releasing backup interface [ 944.498485][T13552] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 944.588697][T13552] bond13: (slave dummy0): Releasing active interface [ 944.596553][T13552] dummy0: left promiscuous mode [ 944.607431][T13552] ¾x9ÿ: left allmulticast mode [ 944.612408][T13552] ¾x9ÿ: left promiscuous mode [ 944.617771][T13552] bridge0: port 1(1¾x9ÿ) entered disabled state [ 944.639503][T13552] bridge_slave_1: left allmulticast mode [ 944.648067][T13552] bridge_slave_1: left promiscuous mode [ 944.654164][T13552] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.689618][T13552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.705961][T13552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.719529][T13552] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 944.760571][ T24] lo speed is unknown, defaulting to 1000 [ 944.780408][ T24] syz2: Port: 1 Link DOWN [ 944.847411][T13571] syzkaller0: entered promiscuous mode [ 944.853061][T13571] syzkaller0: entered allmulticast mode [ 944.883397][T13551] bond13: left promiscuous mode [ 944.955314][T13578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17855'. [ 948.073312][T13586] syzkaller0: entered promiscuous mode [ 948.080345][T13586] syzkaller0: entered allmulticast mode [ 948.234434][T13583] lo speed is unknown, defaulting to 1000 [ 948.545067][T13612] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17863'. [ 948.568222][T13607] syzkaller0: entered promiscuous mode [ 948.593869][T13607] syzkaller0: entered allmulticast mode [ 948.595469][T13614] tipc: Failed to remove unknown binding: 66,0,0/20185096:983613839/983613841 [ 948.609149][T13583] lo speed is unknown, defaulting to 1000 [ 948.627298][T13614] tipc: Failed to remove unknown binding: 66,0,0/20185096:983613839/983613840 [ 948.645363][T13614] tipc: Failed to remove unknown binding: 66,0,0/20185096:983613839/983613841 [ 948.654586][T13614] tipc: Failed to remove unknown binding: 66,0,0/20185096:983613839/983613840 [ 949.083066][T13633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17867'. [ 952.112654][T13641] syzkaller0: entered promiscuous mode [ 952.123065][T13641] syzkaller0: entered allmulticast mode [ 953.629073][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17881'. [ 953.638606][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17881'. [ 954.201450][T13706] netlink: 76 bytes leftover after parsing attributes in process `syz.0.17883'. [ 956.113906][T13695] lo speed is unknown, defaulting to 1000 [ 956.291766][T13717] syzkaller0: entered promiscuous mode [ 956.297434][T13717] syzkaller0: entered allmulticast mode [ 956.475660][T13723] syzkaller0: entered promiscuous mode [ 956.482539][T13723] syzkaller0: entered allmulticast mode [ 956.486532][T13726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17890'. [ 956.514261][T13695] lo speed is unknown, defaulting to 1000 [ 956.768378][T13735] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 956.786626][T13735] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 956.855907][T13739] syzkaller0: entered promiscuous mode [ 956.874702][T13739] syzkaller0: entered allmulticast mode [ 957.148334][T13742] syzkaller0: entered promiscuous mode [ 957.154382][T13742] syzkaller0: entered allmulticast mode [ 957.287161][T13749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17898'. [ 957.299465][T13749] netlink: 'syz.3.17898': attribute type 8 has an invalid length. [ 957.311003][T13749] netlink: 96 bytes leftover after parsing attributes in process `syz.3.17898'. [ 957.536394][T13763] syzkaller0: entered promiscuous mode [ 957.548167][T13763] syzkaller0: entered allmulticast mode [ 957.578636][T13763] tipc: Enabled bearer , priority 0 [ 957.715379][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17905'. [ 957.724976][T13760] tipc: Resetting bearer [ 957.768421][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17905'. [ 957.782554][T13760] tipc: Disabling bearer [ 957.859798][T13776] team1: entered promiscuous mode [ 957.866046][T13776] team1: entered allmulticast mode [ 957.871924][T13776] 8021q: adding VLAN 0 to HW filter on device team1 [ 957.882369][T13777] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 957.927056][T13777] team2: entered promiscuous mode [ 957.932116][T13777] team2: entered allmulticast mode [ 957.945185][T13777] 8021q: adding VLAN 0 to HW filter on device team2 [ 957.991085][T13771] lo speed is unknown, defaulting to 1000 [ 958.181616][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17908'. [ 958.307361][T13784] bond1: entered promiscuous mode [ 958.396025][T13784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 958.521990][T13795] bond1: (slave vti0): refused to change device type [ 958.669497][T13771] lo speed is unknown, defaulting to 1000 [ 958.669510][T13787] lo speed is unknown, defaulting to 1000 [ 959.370908][T13787] lo speed is unknown, defaulting to 1000 [ 959.792935][T13854] syzkaller0: entered promiscuous mode [ 959.799361][T13854] syzkaller0: entered allmulticast mode [ 963.473476][T13870] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 963.870902][T13889] syzkaller0: entered promiscuous mode [ 963.882916][T13889] syzkaller0: entered allmulticast mode [ 964.227168][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17931'. [ 964.252217][T13918] xt_TCPMSS: Only works on TCP SYN packets [ 964.366284][T13882] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 964.419212][T13918] veth1_to_bridge: left allmulticast mode [ 964.432941][T13918] veth1_to_bridge: left promiscuous mode [ 964.448448][T13918] bridge0: port 3(veth1_to_bridge) entered disabled state [ 964.473440][T13918] vlan3: left allmulticast mode [ 964.479831][T13918] bridge_slave_1: left allmulticast mode [ 964.492438][T13918] vlan3: left promiscuous mode [ 964.501925][T13918] bridge_slave_1: left promiscuous mode [ 964.510379][T13918] bridge0: port 2(vlan3) entered disabled state [ 964.527513][T13918] bridge_slave_0: left allmulticast mode [ 964.533543][T13918] bridge_slave_0: left promiscuous mode [ 964.541814][T13918] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.282398][T13933] lo speed is unknown, defaulting to 1000 [ 965.863860][T13955] syzkaller0: entered promiscuous mode [ 965.889352][T13955] syzkaller0: entered allmulticast mode [ 965.919342][T13933] lo speed is unknown, defaulting to 1000 [ 966.018582][T13960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17942'. [ 966.215565][T13968] syzkaller0: entered promiscuous mode [ 966.226682][T13968] syzkaller0: entered allmulticast mode [ 966.805932][T13985] netlink: 'syz.1.17950': attribute type 1 has an invalid length. [ 966.858350][T13988] veth0: entered promiscuous mode [ 966.883050][T13985] macvlan0: entered promiscuous mode [ 966.888885][T13985] macvlan0: entered allmulticast mode [ 966.895378][T13985] bond18: entered promiscuous mode [ 966.902907][T13985] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 966.917033][T13985] bond18: left promiscuous mode [ 966.931582][T13987] veth0: left promiscuous mode [ 967.030157][T13993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17953'. [ 967.115617][T13995] syzkaller0: entered promiscuous mode [ 967.121210][T13995] syzkaller0: entered allmulticast mode [ 967.260941][T14001] syzkaller0: entered promiscuous mode [ 967.269389][T14001] syzkaller0: entered allmulticast mode [ 969.058052][T13962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 969.099904][T14002] netlink: 'syz.1.17956': attribute type 1 has an invalid length. [ 969.135900][T14002] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17956'. [ 969.150456][T14002] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR [ 969.222981][T14017] netlink: 76 bytes leftover after parsing attributes in process `syz.3.17961'. [ 969.277937][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17962'. [ 969.289003][T14023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17964'. [ 969.312193][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17962'. [ 969.335313][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17962'. [ 969.347188][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17962'. [ 969.357136][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17962'. [ 969.367090][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17962'. [ 969.378402][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17962'. [ 969.393356][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17962'. [ 969.405876][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17962'. [ 969.428953][T14019] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.439058][T14019] bridge0: port 3(dummy0) entered blocking state [ 969.445605][T14019] bridge0: port 3(dummy0) entered listening state [ 969.457067][T14019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.496046][T14019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.513198][T14019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 969.540660][T14019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 969.552151][T14019] hsr0: left allmulticast mode [ 969.557644][T14019] hsr_slave_0: left allmulticast mode [ 969.563205][T14019] hsr_slave_1: left allmulticast mode [ 969.579204][T14019] veth1_macvtap: left promiscuous mode [ 969.587043][T14019] veth0_macvtap: left promiscuous mode [ 969.593403][T14019] veth0_macvtap: entered promiscuous mode [ 969.600204][T14019] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 969.611784][T14019] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 969.677521][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.684816][ T1066] bridge0: port 1(bridge_slave_0) entered listening state [ 969.758535][T14032] bond19: entered promiscuous mode [ 969.775754][T14032] bond19: entered allmulticast mode [ 969.856196][T12428] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.881331][T12428] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.904672][ T9] syz1: Port: 1 Link ACTIVE [ 969.904962][T14044] syzkaller0: entered promiscuous mode [ 969.916233][T14044] syzkaller0: entered allmulticast mode [ 969.957214][T14057] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 969.976202][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 969.991210][T12428] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.014590][T12428] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.040514][T14060] bridge0: port 3(dummy0) entered disabled state [ 970.076244][T14060] dummy0 (unregistering): left allmulticast mode [ 970.082847][T14060] dummy0 (unregistering): left promiscuous mode [ 970.090225][T14060] bridge0: port 3(dummy0) entered disabled state [ 970.146445][ T1066] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 970.158380][T14064] syz_tun: left promiscuous mode [ 970.166955][T14064] bridge0: port 1(syz_tun) entered disabled state [ 970.208647][T14064] bond0: (slave bond_slave_1): Releasing backup interface [ 970.272379][T14064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.319218][T14064] bond0: (slave veth1_to_hsr): Releasing backup interface [ 970.326939][T22089] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 970.339906][T14064] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 971.130148][T14095] lo speed is unknown, defaulting to 1000 [ 971.165822][T14097] syzkaller0: entered promiscuous mode [ 971.171699][T14097] syzkaller0: entered allmulticast mode [ 971.293600][T12428] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 971.310150][T12428] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 971.740600][T14095] lo speed is unknown, defaulting to 1000 [ 971.814324][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 972.699571][T14124] bond12: (slave vcan1): refused to change device type [ 973.560929][T14139] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 973.825386][T14146] syzkaller0: entered promiscuous mode [ 973.838028][T14146] syzkaller0: entered allmulticast mode [ 973.896621][T14148] syzkaller0: entered promiscuous mode [ 973.902838][T14148] syzkaller0: entered allmulticast mode [ 974.143337][T14156] syzkaller0: entered promiscuous mode [ 974.150016][T14156] syzkaller0: entered allmulticast mode [ 974.371685][T14159] __nla_validate_parse: 45 callbacks suppressed [ 974.371705][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18007'. [ 974.670498][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18009'. [ 975.119992][T14175] syzkaller0: entered promiscuous mode [ 975.126037][T14171] lo speed is unknown, defaulting to 1000 [ 975.132063][T14175] syzkaller0: entered allmulticast mode [ 975.304318][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 975.598501][T14181] syzkaller0: entered promiscuous mode [ 975.614175][T14181] syzkaller0: entered allmulticast mode [ 975.631567][T14171] lo speed is unknown, defaulting to 1000 [ 976.008052][T14197] netlink: 'syz.3.18017': attribute type 1 has an invalid length. [ 976.034387][T14197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 976.287044][T14195] syzkaller0: entered promiscuous mode [ 976.292573][T14195] syzkaller0: entered allmulticast mode [ 981.364630][T14227] syzkaller0: entered promiscuous mode [ 981.370342][T14227] syzkaller0: entered allmulticast mode [ 981.610448][T14235] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18028'. [ 982.138712][T14240] syzkaller0: entered promiscuous mode [ 982.160194][T14240] syzkaller0: entered allmulticast mode [ 982.380941][T14246] netlink: 'syz.1.18032': attribute type 1 has an invalid length. [ 982.444996][T14246] 8021q: adding VLAN 0 to HW filter on device bond20 [ 982.466341][T14252] syzkaller0: entered promiscuous mode [ 982.472074][T14252] syzkaller0: entered allmulticast mode [ 982.522112][T14246] vlan0: entered allmulticast mode [ 982.534115][T14246] bond20: entered allmulticast mode [ 982.543585][T14252] tipc: Enabled bearer , priority 0 [ 982.570474][T14246] bond20: (slave geneve4): making interface the new active one [ 982.582727][T14246] geneve4: entered allmulticast mode [ 982.590143][T14246] bond20: (slave geneve4): Enslaving as an active interface with an up link [ 982.599980][T14250] tipc: Resetting bearer [ 982.677603][T14250] tipc: Disabling bearer [ 982.700398][T12428] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.708812][T12428] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.718553][T12428] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.724224][T14255] netlink: 'syz.1.18036': attribute type 83 has an invalid length. [ 982.727170][T12428] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.952054][T14261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18039'. [ 982.992902][T14261] netlink: 'syz.1.18039': attribute type 10 has an invalid length. [ 983.302029][T14271] tipc: Started in network mode [ 983.307601][T14271] tipc: Node identity be8f5a556d2e, cluster identity 4711 [ 983.316267][T14271] tipc: Enabled bearer , priority 0 [ 983.325586][T14271] syzkaller0: entered promiscuous mode [ 983.331234][T14271] syzkaller0: entered allmulticast mode [ 983.342653][T14271] tipc: Resetting bearer [ 983.382604][T14271] tipc: Disabling bearer [ 983.395044][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 983.572013][T14274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18043'. [ 983.640946][T14274] 8021q: adding VLAN 0 to HW filter on device bond14 [ 983.681908][T14277] syzkaller0: entered promiscuous mode [ 983.694315][T14277] syzkaller0: entered allmulticast mode [ 983.789141][T14274] bond14: entered promiscuous mode [ 983.795152][T14274] bond14: entered allmulticast mode [ 983.821773][T14278] team_slave_1: entered promiscuous mode [ 983.859970][T14278] team_slave_1: entered allmulticast mode [ 983.886401][T14278] bond14: (slave team_slave_1): Enslaving as an active interface with an up link [ 985.016158][T14299] syzkaller0: entered promiscuous mode [ 985.029691][T14299] syzkaller0: entered allmulticast mode [ 985.243769][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18054'. [ 985.304495][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 985.339010][T14312] netlink: 'syz.4.18056': attribute type 1 has an invalid length. [ 985.632471][ T5649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 985.646427][ T5649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 985.656634][ T5649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 985.671125][ T5649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 985.682795][ T5649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 985.988917][ T5635] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 986.009755][ T5635] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 986.023445][ T5635] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 986.039151][ T5635] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 986.049427][ T5635] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 986.709015][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18060'. [ 986.787845][T14360] lo speed is unknown, defaulting to 1000 [ 987.381402][T14376] syzkaller0: entered promiscuous mode [ 987.406752][T14376] syzkaller0: entered allmulticast mode [ 987.520998][T14319] lo speed is unknown, defaulting to 1000 [ 987.521931][T14360] lo speed is unknown, defaulting to 1000 [ 987.715070][T14391] netlink: 'syz.3.18066': attribute type 1 has an invalid length. [ 987.784858][ T5649] Bluetooth: hci5: command tx timeout [ 987.828442][T14391] 8021q: adding VLAN 0 to HW filter on device bond15 [ 988.087171][T14395] bond15: (slave veth15): Enslaving as an active interface with a down link [ 988.128797][ T5649] Bluetooth: hci6: command tx timeout [ 988.163793][T14391] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 988.192720][T14391] bond15: (slave batadv1): making interface the new active one [ 988.203377][T14391] batadv1: entered promiscuous mode [ 988.209304][T14391] bond15: (slave batadv1): Enslaving as an active interface with an up link [ 988.229304][T14397] bond15 (unregistering): (slave veth15): Releasing active interface [ 988.241594][T14397] bond15 (unregistering): (slave batadv1): Releasing active interface [ 988.253064][T14397] bond15 (unregistering): Released all slaves [ 988.307864][T14319] lo speed is unknown, defaulting to 1000 [ 988.307887][T14331] lo speed is unknown, defaulting to 1000 [ 988.608362][T14403] syzkaller0: entered promiscuous mode [ 988.624262][T14403] syzkaller0: entered allmulticast mode [ 988.941253][T14414] syzkaller0: entered promiscuous mode [ 988.963862][T14414] syzkaller0: entered allmulticast mode [ 988.993196][T14331] lo speed is unknown, defaulting to 1000 [ 989.425311][T14319] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.432726][T14319] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.440527][T14319] bridge_slave_0: entered allmulticast mode [ 989.449153][T14319] bridge_slave_0: entered promiscuous mode [ 989.471598][T14319] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.480667][T14319] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.488445][T14319] bridge_slave_1: entered allmulticast mode [ 989.497951][T14319] bridge_slave_1: entered promiscuous mode [ 989.640391][T14319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.674606][ T1066] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 989.693523][T14319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.791682][T14319] team0: Port device team_slave_0 added [ 989.832218][T14319] team0: Port device team_slave_1 added [ 989.869244][ T5649] Bluetooth: hci5: command tx timeout [ 989.910430][T14437] syzkaller0: entered promiscuous mode [ 989.917183][T14437] syzkaller0: entered allmulticast mode [ 989.935262][T14319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.947455][T14319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.975498][T14319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.991022][T14439] syzkaller0: entered promiscuous mode [ 989.997640][T14439] syzkaller0: entered allmulticast mode [ 990.073007][T14319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.080957][T14319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.112588][T14319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.194614][ T5649] Bluetooth: hci6: command tx timeout [ 990.377296][T14430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 990.492184][T14319] hsr_slave_0: entered promiscuous mode [ 990.517296][T14319] hsr_slave_1: entered promiscuous mode [ 990.639371][T14445] lo speed is unknown, defaulting to 1000 [ 990.726672][T14452] syzkaller0: entered promiscuous mode [ 990.741302][T14452] syzkaller0: entered allmulticast mode [ 990.785532][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18077'. [ 990.795449][T14450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18077'. [ 991.157409][T14445] lo speed is unknown, defaulting to 1000 [ 991.188543][T14331] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.214320][T14331] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.234503][T14331] bridge_slave_0: entered allmulticast mode [ 991.244467][T14331] bridge_slave_0: entered promiscuous mode [ 991.286429][T14331] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.303312][T14331] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.311086][T14331] bridge_slave_1: entered allmulticast mode [ 991.319751][T14331] bridge_slave_1: entered promiscuous mode [ 991.433151][T14331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.455976][T14331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.502114][T14465] syzkaller0: entered promiscuous mode [ 991.508000][T14465] syzkaller0: entered allmulticast mode [ 991.528517][T14466] syzkaller0: entered promiscuous mode [ 991.538161][T14466] syzkaller0: entered allmulticast mode [ 991.623534][T14331] team0: Port device team_slave_0 added [ 991.954570][ T5649] Bluetooth: hci5: command tx timeout [ 992.274234][ T5649] Bluetooth: hci6: command tx timeout [ 994.034159][ T5649] Bluetooth: hci5: command tx timeout [ 994.354461][ T5649] Bluetooth: hci6: command tx timeout [ 996.095231][T14331] team0: Port device team_slave_1 added [ 996.320651][T14331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.351582][T14331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.358195][T14485] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 996.413735][T14331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.466500][T14331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.484129][T14331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.519202][T14331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.812673][T14491] syzkaller0: entered promiscuous mode [ 996.827600][T14491] syzkaller0: entered allmulticast mode [ 996.860636][T14331] hsr_slave_0: entered promiscuous mode [ 996.877087][T14331] hsr_slave_1: entered promiscuous mode [ 996.893872][T14331] debugfs: 'hsr0' already exists in 'hsr' [ 996.908790][T14331] Cannot create hsr debugfs directory [ 996.957538][T14319] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 996.998226][T14319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 997.013895][T14319] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 997.036347][T14319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 997.310880][ T30] audit: type=1804 audit(1778878514.494:17): pid=14516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.18087" name="/newroot/3560/cgroup.controllers" dev="tmpfs" ino=17918 res=1 errno=0 [ 997.374219][ T30] audit: type=1800 audit(1778878514.494:18): pid=14516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.18087" name="cgroup.controllers" dev="tmpfs" ino=17918 res=0 errno=0 [ 998.755752][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1000.666482][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.673766][ C0] bridge0: topology change detected, propagating [ 1001.832995][T14319] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1001.846293][T14319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1001.933311][T14319] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1001.971537][T14319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1002.206409][T14547] syzkaller0: entered promiscuous mode [ 1002.234640][T14547] syzkaller0: entered allmulticast mode [ 1002.369489][T14553] netlink: 'syz.4.18093': attribute type 1 has an invalid length. [ 1002.549770][T14553] bond13: entered promiscuous mode [ 1002.579911][T14553] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1002.636285][T14555] ipvlan1: entered allmulticast mode [ 1002.641783][T14555] bond13: entered allmulticast mode [ 1002.684693][T14556] bond13: (slave bridge0): making interface the new active one [ 1002.698853][T14556] bridge0: entered promiscuous mode [ 1002.711405][T14556] bridge0: entered allmulticast mode [ 1002.725970][T14556] bond13: (slave bridge0): Enslaving as an active interface with an up link [ 1003.170493][T14319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.311674][T14319] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.336698][T14331] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1003.410086][T14331] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1003.438769][T14568] syzkaller0: entered promiscuous mode [ 1003.462422][T14568] syzkaller0: entered allmulticast mode [ 1003.500832][T14331] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1003.530853][T14331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1003.549125][T14571] tipc: Enabled bearer , priority 0 [ 1003.580038][T14567] tipc: Resetting bearer [ 1003.686707][T14567] tipc: Disabling bearer [ 1003.711966][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.719196][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.751161][T14331] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1003.799367][T14331] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1003.828123][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.835364][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.869354][T14331] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1003.912873][T14331] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1004.336739][T14331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.412342][T14331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.441412][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.448670][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.490425][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.497682][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.132095][T14319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.480694][T14331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.744587][T14319] veth0_vlan: entered promiscuous mode [ 1005.774320][T14319] veth1_vlan: entered promiscuous mode [ 1005.876812][T14319] veth0_macvtap: entered promiscuous mode [ 1005.904815][T14319] veth1_macvtap: entered promiscuous mode [ 1005.964857][T14319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.985793][T14319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.008419][T14626] syzkaller0: entered promiscuous mode [ 1006.014663][T14626] syzkaller0: entered allmulticast mode [ 1006.035384][ T69] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.076769][ T69] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.085967][ T69] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.101004][ T69] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.189421][T14331] veth0_vlan: entered promiscuous mode [ 1006.269024][T14331] veth1_vlan: entered promiscuous mode [ 1006.416287][T14631] syzkaller0: entered promiscuous mode [ 1006.421785][T14631] syzkaller0: entered allmulticast mode [ 1006.493429][T14331] veth0_macvtap: entered promiscuous mode [ 1006.510320][T14331] veth1_macvtap: entered promiscuous mode [ 1006.538854][T14331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.576539][T14331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.595529][ T1058] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.606380][ T1058] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.626536][ T1058] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.636722][ T1058] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.902220][T14584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1008.543591][T14655] netlink: 'syz.4.18105': attribute type 1 has an invalid length. [ 1012.128384][T14655] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1012.447649][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.475993][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.617250][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.637179][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.661240][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.672776][T14668] tipc: Enabled bearer , priority 0 [ 1012.680201][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.684069][T14669] syzkaller0: entered promiscuous mode [ 1012.715491][T14669] syzkaller0: entered allmulticast mode [ 1012.739718][T14668] syzkaller0: entered promiscuous mode [ 1012.754179][T14668] syzkaller0: entered allmulticast mode [ 1012.972717][T14670] tipc: Resetting bearer [ 1013.010752][T14666] tipc: Resetting bearer [ 1013.160199][T14666] tipc: Disabling bearer [ 1013.162436][T14680] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18112'. [ 1013.187493][T14682] netlink: 'syz.1.18111': attribute type 4 has an invalid length. [ 1013.200620][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.214025][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.273189][T14677] netlink: 'syz.1.18111': attribute type 4 has an invalid length. [ 1013.426051][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18110'. [ 1013.562115][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.607193][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.646503][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.691766][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.726514][T14706] netlink: 'syz.6.18057': attribute type 1 has an invalid length. [ 1013.821638][T14706] 8021q: VLANs not supported on gre0 [ 1014.222822][T14720] netlink: 'syz.3.18118': attribute type 1 has an invalid length. [ 1014.376095][T14728] SET target dimension over the limit! [ 1014.574471][T14727] bond15: (slave bridge13): making interface the new active one [ 1014.598118][T14727] bond15: (slave bridge13): Enslaving as an active interface with an up link [ 1014.679493][T14728] bond15: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1014.743747][T14734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18122'. [ 1014.791189][T14733] syzkaller0: entered promiscuous mode [ 1014.814090][T14733] syzkaller0: entered allmulticast mode [ 1014.889105][T14733] tipc: Started in network mode [ 1014.906310][T14733] tipc: Node identity 9219f88caaf1, cluster identity 4711 [ 1014.927898][T14733] tipc: Enabled bearer , priority 0 [ 1014.950835][T14739] syzkaller0: entered promiscuous mode [ 1014.971683][T14739] syzkaller0: entered allmulticast mode [ 1015.005155][T14731] tipc: Resetting bearer [ 1015.042121][T14731] tipc: Disabling bearer [ 1015.114646][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18126'. [ 1015.163114][T14739] tipc: Started in network mode [ 1015.184395][T14739] tipc: Node identity a2e58d0d1e1d, cluster identity 4711 [ 1015.200881][T14739] tipc: Enabled bearer , priority 0 [ 1015.220898][T14740] lo speed is unknown, defaulting to 1000 [ 1015.244285][T14737] tipc: Resetting bearer [ 1015.341588][T14737] tipc: Disabling bearer [ 1015.499625][T14761] netlink: 'syz.5.18130': attribute type 2 has an invalid length. [ 1015.560252][T14761] netlink: 'syz.5.18130': attribute type 2 has an invalid length. [ 1015.711837][T14761] macsec1: entered promiscuous mode [ 1016.038630][T14740] lo speed is unknown, defaulting to 1000 [ 1017.047813][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18139'. [ 1017.229661][T14790] syzkaller0: entered promiscuous mode [ 1017.241964][T14790] syzkaller0: entered allmulticast mode [ 1017.529387][T14797] syz_tun: entered allmulticast mode [ 1017.749471][T14805] syzkaller0: entered promiscuous mode [ 1017.771384][T14805] syzkaller0: entered allmulticast mode [ 1018.513235][T14824] syzkaller0: entered promiscuous mode [ 1018.531926][T14824] syzkaller0: entered allmulticast mode [ 1018.893893][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18154'. [ 1018.960678][T14838] : entered promiscuous mode [ 1019.052506][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18154'. [ 1019.101690][T14837] openvswitch: : Dropping previously announced user features [ 1019.181565][T14841] netlink: 'syz.5.18155': attribute type 1 has an invalid length. [ 1019.348117][T14841] veth3: entered allmulticast mode [ 1019.448765][T14849] netlink: 164 bytes leftover after parsing attributes in process `syz.3.18159'. [ 1019.495877][T14843] syzkaller0: entered promiscuous mode [ 1019.508196][T14843] syzkaller0: entered allmulticast mode [ 1020.962464][T14884] syzkaller0: entered promiscuous mode [ 1020.988592][T14884] syzkaller0: entered allmulticast mode [ 1021.130979][T14894] tipc: Enabled bearer , priority 0 [ 1021.161716][T14891] syzkaller0: entered promiscuous mode [ 1021.193780][T14891] syzkaller0: entered allmulticast mode [ 1021.339490][T14894] tipc: Resetting bearer [ 1021.414934][T14890] tipc: Resetting bearer [ 1021.493651][T14890] tipc: Disabling bearer [ 1021.523358][T14897] lo speed is unknown, defaulting to 1000 [ 1021.796848][T14912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18170'. [ 1021.856348][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18168'. [ 1022.139208][T14923] netlink: 'syz.3.18171': attribute type 1 has an invalid length. [ 1022.220395][T14925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18172'. [ 1022.263077][T14923] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1022.326329][T14926] veth17: entered allmulticast mode [ 1022.356816][T14926] bond16: (slave veth17): Enslaving as an active interface with an up link [ 1022.452646][T14928] bond16 (unregistering): (slave veth17): Releasing backup interface [ 1022.480985][T14928] bond16 (unregistering): Released all slaves [ 1022.542732][T14904] lo speed is unknown, defaulting to 1000 [ 1022.543168][T14897] lo speed is unknown, defaulting to 1000 [ 1022.630385][T14932] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1022.803880][T14932] bond14 (unregistering): Released all slaves [ 1022.905882][T14935] syzkaller0: entered promiscuous mode [ 1022.919870][T14935] syzkaller0: entered allmulticast mode [ 1022.946018][T14945] bond0: Caught tx_queue_len zero misconfig [ 1023.164300][T14904] lo speed is unknown, defaulting to 1000 [ 1023.662772][T14963] netlink: 'syz.3.18181': attribute type 1 has an invalid length. [ 1023.839253][T14970] netlink: 'syz.6.18182': attribute type 2 has an invalid length. [ 1023.931277][T14963] bond16: entered promiscuous mode [ 1023.945159][T14970] netlink: 'syz.6.18182': attribute type 2 has an invalid length. [ 1023.954526][T14963] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1024.004353][T14966] macvtap1: entered allmulticast mode [ 1024.131940][T14969] bond16: (slave bridge14): making interface the new active one [ 1024.167076][T14969] bridge14: entered promiscuous mode [ 1024.194165][T14969] bond16: (slave bridge14): Enslaving as an active interface with an up link [ 1024.292612][T14968] macsec1: entered promiscuous mode [ 1024.475066][T14976] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18184'. [ 1024.516682][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18183'. [ 1024.851834][T14981] netlink: 'syz.3.18186': attribute type 1 has an invalid length. [ 1024.879382][T14981] netlink: 224 bytes leftover after parsing attributes in process `syz.3.18186'. [ 1025.111240][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18190'. [ 1025.143708][T14991] hsr_slave_1: left promiscuous mode [ 1025.192234][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18188'. [ 1025.249882][T14985] sctp: [Deprecated]: syz.4.18188 (pid 14985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1025.249882][T14985] Use struct sctp_sack_info instead [ 1025.297595][T14994] syzkaller0: entered promiscuous mode [ 1025.314116][T14994] syzkaller0: entered allmulticast mode [ 1025.360970][T14985] netlink: 'syz.4.18188': attribute type 1 has an invalid length. [ 1025.376205][T14985] netlink: 224 bytes leftover after parsing attributes in process `syz.4.18188'. [ 1025.394267][T14997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18192'. [ 1025.636491][ T148] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.645087][T14997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18192'. [ 1025.659487][ T148] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.680077][ T148] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.702654][ T148] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.772937][T15005] syzkaller0: entered promiscuous mode [ 1025.799746][T15005] syzkaller0: entered allmulticast mode [ 1025.934411][T14998] nbd3: detected capacity change from 0 to 63 [ 1025.949286][ T5649] block nbd3: Receive control failed (result -32) [ 1025.949298][ T5635] block nbd3: Receive control failed (result -32) [ 1025.973409][T14835] block nbd3: Dead connection, failed to find a fallback [ 1025.997715][T14835] block nbd3: shutting down sockets [ 1026.006049][T14835] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.022333][T14835] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1026.034174][T14835] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.046909][T14835] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1026.065654][T14835] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.086802][T14835] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1026.111687][T14835] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.138444][T14835] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1026.148194][T14835] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.157732][T14835] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1026.168606][T14835] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.187437][T14835] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1026.207569][T14835] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.220465][T15019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18199'. [ 1026.232127][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18198'. [ 1026.245687][T14835] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1026.263034][T14835] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.288992][T14835] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1026.297409][T14835] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.313162][T14835] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1026.322791][T14835] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.332477][T14835] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1026.346498][T14835] ldm_validate_partition_table(): Disk read failed. [ 1026.365342][T14835] Dev nbd3: unable to read RDB block 0 [ 1026.376200][T15019] veth3: entered allmulticast mode [ 1026.376292][T14835] nbd3: unable to read partition table [ 1026.415538][T14835] ldm_validate_partition_table(): Disk read failed. [ 1026.430944][T14835] Dev nbd3: unable to read RDB block 0 [ 1026.440591][T14835] nbd3: unable to read partition table [ 1026.559484][T15029] syzkaller0: entered promiscuous mode [ 1026.566170][T15029] syzkaller0: entered allmulticast mode [ 1026.819551][T15032] syzkaller0: entered promiscuous mode [ 1026.837377][T15032] syzkaller0: entered allmulticast mode [ 1026.861247][T15037] IPVS: ip_vs_add_dest(): server weight less than zero [ 1026.912607][T14814] IPVS: starting estimator thread 0... [ 1027.018473][T15039] syzkaller0: entered promiscuous mode [ 1027.024462][T15040] IPVS: using max 31 ests per chain, 74400 per kthread [ 1027.039324][T15039] syzkaller0: entered allmulticast mode [ 1027.040435][T15045] netlink: 'syz.5.18207': attribute type 39 has an invalid length. [ 1027.123642][T15050] syzkaller0: entered promiscuous mode [ 1027.136167][T15050] syzkaller0: entered allmulticast mode [ 1027.544562][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1027.701812][T15065] tipc: Enabled bearer , priority 0 [ 1027.726885][T15064] netlink: 'syz.3.18213': attribute type 1 has an invalid length. [ 1027.752074][T15061] syzkaller0: entered promiscuous mode [ 1027.779304][T15061] syzkaller0: entered allmulticast mode [ 1027.998644][T15077] veth19: entered allmulticast mode [ 1028.062567][T15077] bond14: (slave veth19): Enslaving as an active interface with an up link [ 1028.111681][T15075] tipc: Resetting bearer [ 1028.130689][T15081] syzkaller0: entered promiscuous mode [ 1028.150331][T15081] syzkaller0: entered allmulticast mode [ 1028.181623][T15072] bond14 (unregistering): (slave veth19): Releasing backup interface [ 1028.208705][T15072] bond14 (unregistering): Released all slaves [ 1028.307968][T15060] tipc: Resetting bearer [ 1028.407301][T15060] tipc: Disabling bearer [ 1028.492003][T15084] syzkaller0: entered promiscuous mode [ 1028.499765][T15084] syzkaller0: entered allmulticast mode [ 1028.952854][T15099] lo speed is unknown, defaulting to 1000 [ 1028.988340][T15103] syzkaller0: entered promiscuous mode [ 1029.017104][T15103] syzkaller0: entered allmulticast mode [ 1029.413777][T15117] netlink: 'syz.6.18226': attribute type 10 has an invalid length. [ 1029.480791][T15117] dummy0: entered promiscuous mode [ 1029.505576][T15117] dummy0: entered allmulticast mode [ 1029.537713][T15117] bridge0: port 3(dummy0) entered blocking state [ 1029.585989][T15117] bridge0: port 3(dummy0) entered disabled state [ 1029.637083][T15117] bridge0: port 3(dummy0) entered blocking state [ 1029.643640][T15117] bridge0: port 3(dummy0) entered forwarding state [ 1029.699728][T15126] __nla_validate_parse: 7 callbacks suppressed [ 1029.699746][T15126] netlink: 36 bytes leftover after parsing attributes in process `syz.5.18227'. [ 1029.717400][T15121] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1029.752536][T15121] tipc: Enabled bearer , priority 26 [ 1029.835655][T15099] lo speed is unknown, defaulting to 1000 [ 1030.284040][T15138] lo speed is unknown, defaulting to 1000 [ 1032.976673][T14814] tipc: Node number set to 3170405645 [ 1032.992407][T15138] lo speed is unknown, defaulting to 1000 [ 1033.794384][T15166] syzkaller0: entered promiscuous mode [ 1033.811808][T15166] syzkaller0: entered allmulticast mode [ 1033.901308][T15172] syzkaller0: entered promiscuous mode [ 1033.920676][T15172] syzkaller0: entered allmulticast mode [ 1034.888864][T15196] syzkaller0: entered promiscuous mode [ 1034.911020][T15196] syzkaller0: entered allmulticast mode [ 1034.932332][T15194] tipc: Enabled bearer , priority 0 [ 1035.073105][T15197] syzkaller0: entered promiscuous mode [ 1035.087480][T15197] syzkaller0: entered allmulticast mode [ 1035.113798][T15201] tipc: Enabled bearer , priority 0 [ 1035.217795][T15202] bridge_slave_0: left allmulticast mode [ 1035.244918][T15202] bridge_slave_0: left promiscuous mode [ 1035.255417][T15202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.291769][T15202] bridge_slave_1: left allmulticast mode [ 1035.299943][T15202] bridge_slave_1: left promiscuous mode [ 1035.362181][T15202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.430933][T15202] bond0: (slave bond_slave_0): Releasing backup interface [ 1035.453068][T15202] bond0: (slave bond_slave_1): Releasing backup interface [ 1035.490899][T15202] team0: Port device team_slave_0 removed [ 1035.509071][T15202] team0: Port device team_slave_1 removed [ 1035.517976][T15202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.527171][T15202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.541670][T15202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.560582][T15202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.583724][T15202] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1035.637151][T15195] tipc: Resetting bearer [ 1035.735319][T15195] tipc: Disabling bearer [ 1035.776963][T15203] tipc: Resetting bearer [ 1035.896064][T15193] tipc: Resetting bearer [ 1035.950560][T15217] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18246'. [ 1036.093605][T15193] tipc: Disabling bearer [ 1036.115208][T15207] syzkaller0: entered promiscuous mode [ 1036.120864][T15207] syzkaller0: entered allmulticast mode [ 1036.130894][T14814] tipc: Node number set to 3550566997 [ 1036.140482][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18246'. [ 1036.267367][T15217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1036.506735][T15220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1036.549413][T15220] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1036.840115][T15221] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1036.930497][T15221] bond1 (unregistering): Released all slaves [ 1037.045427][T15248] tipc: Enabled bearer , priority 0 [ 1037.162974][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18251'. [ 1037.207252][T15245] syzkaller0: entered promiscuous mode [ 1037.212808][T15245] syzkaller0: entered allmulticast mode [ 1037.221472][T15248] syzkaller0: entered promiscuous mode [ 1037.229630][T15248] syzkaller0: entered allmulticast mode [ 1042.481942][T15248] tipc: Resetting bearer [ 1042.500897][T15259] syzkaller1: entered promiscuous mode [ 1042.509861][T15259] syzkaller1: entered allmulticast mode [ 1042.519877][T15247] tipc: Resetting bearer [ 1042.587626][T15247] tipc: Disabling bearer [ 1042.719061][T15290] netlink: 'syz.6.18260': attribute type 13 has an invalid length. [ 1043.151755][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18260'. [ 1043.330209][T15317] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1043.445886][T15314] syzkaller0: entered promiscuous mode [ 1043.454743][T15314] syzkaller0: entered allmulticast mode [ 1043.839476][T15334] xt_hashlimit: size too large, truncated to 1048576 [ 1043.909692][T15342] netlink: 'syz.5.18268': attribute type 1 has an invalid length. [ 1043.946714][T15342] netlink: 224 bytes leftover after parsing attributes in process `syz.5.18268'. [ 1045.077791][ T5649] Bluetooth: hci6: command tx timeout [ 1049.241217][T15343] bridge0: port 3(dummy0) entered disabled state [ 1049.247803][T15343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.255487][T15343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.296517][T15383] netlink: 'syz.4.18272': attribute type 16 has an invalid length. [ 1049.449398][T15343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1049.470118][T15343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1049.730764][T15350] tipc: Enabling of bearer rejected, failed to enable media [ 1049.765725][T15333] geneve1: entered promiscuous mode [ 1049.781495][T15388] syz_tun: entered allmulticast mode [ 1049.808541][ T158] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.818844][ T158] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.871674][ T158] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.920660][ T158] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.016007][T15385] syz_tun: left allmulticast mode [ 1050.037065][T15400] syzkaller0: entered promiscuous mode [ 1050.064683][T15400] syzkaller0: entered allmulticast mode [ 1050.238313][T15409] netlink: 'syz.4.18277': attribute type 10 has an invalid length. [ 1050.241446][T15410] netlink: 'syz.3.18278': attribute type 13 has an invalid length. [ 1050.379041][T15416] netlink: 'syz.4.18277': attribute type 10 has an invalid length. [ 1050.426019][T15409] team0: Port device dummy0 added [ 1050.949141][T15412] nbd4: detected capacity change from 0 to 63 [ 1051.037702][T15416] team0: Port device dummy0 removed [ 1051.072237][ T158] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1051.088588][ T5635] block nbd4: Receive control failed (result -104) [ 1051.088722][ T5649] block nbd4: Receive control failed (result -32) [ 1051.116000][ T1058] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1051.137049][ T1058] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1051.183744][ T1058] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1051.367251][T15444] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1051.445921][T15444] syzkaller0: entered promiscuous mode [ 1051.465230][T15444] syzkaller0: entered allmulticast mode [ 1051.615954][T15440] lo speed is unknown, defaulting to 1000 [ 1051.858562][T15451] netlink: 'syz.3.18286': attribute type 17 has an invalid length. [ 1051.888192][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18286'. [ 1051.901409][T15453] netlink: 'syz.6.18287': attribute type 1 has an invalid length. [ 1051.924155][T15451] bond0: option all_slaves_active: invalid value (188) [ 1052.006573][T15453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1052.073734][T15453] netlink: 20 bytes leftover after parsing attributes in process `syz.6.18287'. [ 1052.237855][T15456] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1052.468433][T15457] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1052.759700][T15453] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 1052.973246][T15440] lo speed is unknown, defaulting to 1000 [ 1053.732347][T15524] tipc: Enabled bearer , priority 0 [ 1053.742243][T15522] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18293'. [ 1053.770141][T15524] syzkaller0: entered promiscuous mode [ 1053.808512][T15524] syzkaller0: entered allmulticast mode [ 1053.861689][T15520] syzkaller0: entered promiscuous mode [ 1053.896411][T15520] syzkaller0: entered allmulticast mode [ 1053.927593][T15522] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1053.959948][T15534] netlink: 104 bytes leftover after parsing attributes in process `syz.6.18295'. [ 1053.970284][T15522] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1053.980399][T15522] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1054.077104][T15537] tipc: Resetting bearer [ 1054.123392][T15523] tipc: Resetting bearer [ 1054.254772][T15523] tipc: Disabling bearer [ 1054.532395][T15544] syzkaller0: entered promiscuous mode [ 1054.565488][T15544] syzkaller0: entered allmulticast mode [ 1054.760923][T15553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1055.045707][T15561] lo speed is unknown, defaulting to 1000 [ 1055.148239][T15562] block nbd5: server does not support multiple connections per device. [ 1055.163662][T15570] syzkaller0: entered promiscuous mode [ 1055.194520][T15570] syzkaller0: entered allmulticast mode [ 1055.232785][T15562] block nbd5: shutting down sockets [ 1055.481197][T15578] netlink: 'syz.6.18309': attribute type 1 has an invalid length. [ 1055.651774][T15578] bond2: entered promiscuous mode [ 1055.680465][T15578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1055.681167][T15587] xt_bpf: check failed: parse error [ 1055.764431][T15580] ipvlan2: entered allmulticast mode [ 1055.818059][T15580] bond2: entered allmulticast mode [ 1055.896652][T15582] ipvlan3: entered allmulticast mode [ 1056.004538][T15591] bond2: (slave bridge2): making interface the new active one [ 1056.054184][T15591] bridge2: entered promiscuous mode [ 1056.067085][T15591] bridge2: entered allmulticast mode [ 1056.091413][T15591] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1056.164528][T15561] lo speed is unknown, defaulting to 1000 [ 1056.290621][T15597] syzkaller0: entered promiscuous mode [ 1056.307139][T15597] syzkaller0: entered allmulticast mode [ 1056.803617][T15614] lo speed is unknown, defaulting to 1000 [ 1057.025350][T15618] syzkaller0: entered promiscuous mode [ 1057.045590][T15618] syzkaller0: entered allmulticast mode [ 1057.318354][T15614] lo speed is unknown, defaulting to 1000 [ 1057.475010][T15624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18321'. [ 1057.681215][T15624] bridge15: port 1(gretap3) entered blocking state [ 1057.699460][T15624] bridge15: port 1(gretap3) entered disabled state [ 1057.740212][T15624] gretap3: entered allmulticast mode [ 1057.756205][T15624] gretap3: entered promiscuous mode [ 1058.043659][T15637] lo speed is unknown, defaulting to 1000 [ 1058.146537][T15640] syzkaller0: entered promiscuous mode [ 1058.169453][T15640] syzkaller0: entered allmulticast mode [ 1058.514792][T15637] lo speed is unknown, defaulting to 1000 [ 1058.632751][T15583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1058.908147][T15650] syzkaller0: entered promiscuous mode [ 1058.950211][T15650] syzkaller0: entered allmulticast mode [ 1059.262867][T15652] lo speed is unknown, defaulting to 1000 [ 1059.265674][T15666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1059.291409][ T30] audit: type=1804 audit(1778878576.474:19): pid=15667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.18332" name="/newroot/3646/cgroup.controllers" dev="tmpfs" ino=18397 res=1 errno=0 [ 1059.404114][ T30] audit: type=1800 audit(1778878576.504:20): pid=15667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.18332" name="cgroup.controllers" dev="tmpfs" ino=18397 res=0 errno=0 [ 1059.737203][T15672] tc action pedit 'at' offset 9 out of bounds [ 1059.745650][T15672] tc action pedit 'at' offset 9 out of bounds [ 1059.751748][T15672] tc action pedit 'at' offset 9 out of bounds [ 1059.757869][T15672] tc action pedit 'at' offset 9 out of bounds [ 1059.763985][T15672] tc action pedit 'at' offset 9 out of bounds [ 1059.770037][T15672] tc action pedit 'at' offset 9 out of bounds [ 1059.776104][T15672] tc action pedit 'at' offset 9 out of bounds [ 1059.782148][T15672] tc action pedit 'at' offset 9 out of bounds [ 1059.788232][T15672] tc action pedit 'at' offset 9 out of bounds [ 1059.794301][T15672] tc action pedit 'at' offset 9 out of bounds [ 1059.800359][T15672] TC_ACT_REPEAT abuse ? [ 1059.941610][T15678] netlink: 156 bytes leftover after parsing attributes in process `syz.4.18336'. [ 1060.100844][T15652] lo speed is unknown, defaulting to 1000 [ 1060.196662][T15685] xt_bpf: check failed: parse error [ 1060.887411][T15692] syzkaller0: entered promiscuous mode [ 1060.893899][T15692] syzkaller0: entered allmulticast mode [ 1066.200747][T15720] syzkaller0: entered promiscuous mode [ 1066.206325][T15720] syzkaller0: entered allmulticast mode [ 1074.365281][ T5635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1074.395015][ T5635] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1074.403723][ T5635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1074.433072][ T5635] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1074.466610][ T5635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1076.294215][ T5635] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1076.325815][ T5635] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1076.353090][ T5635] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1076.381875][ T5635] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1076.389732][ T5635] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1076.585093][ T5635] Bluetooth: hci7: command tx timeout [ 1076.659341][T15756] netlink: 'syz.6.18355': attribute type 7 has an invalid length. [ 1078.276567][T15790] syzkaller0: entered promiscuous mode [ 1078.282230][T15790] syzkaller0: entered allmulticast mode [ 1078.337064][T15706] syz_tun (unregistering): left allmulticast mode [ 1078.425073][ T5635] Bluetooth: hci8: command tx timeout [ 1078.664316][ T5635] Bluetooth: hci7: command tx timeout [ 1080.504151][ T5635] Bluetooth: hci8: command tx timeout [ 1080.744495][ T5635] Bluetooth: hci7: command tx timeout [ 1081.339502][ T4958] block nbd4: Connection timed out, retrying (0/2 alive) [ 1081.365374][ T4958] block nbd4: Connection timed out, retrying (0/2 alive) [ 1081.373586][ T4958] block nbd4: Connection timed out, retrying (0/2 alive) [ 1081.381047][ T4958] block nbd4: Connection timed out, retrying (0/2 alive) [ 1081.393725][ T4958] block nbd4: Dead connection, failed to find a fallback [ 1081.402872][ T4958] block nbd4: shutting down sockets [ 1081.411059][ T4958] blk_print_req_error: 138 callbacks suppressed [ 1081.411074][ T4958] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.429115][ T4958] buffer_io_error: 138 callbacks suppressed [ 1081.429133][ T4958] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1081.451046][ T4958] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.460258][ T4958] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1081.468362][ T4958] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.478480][ T4958] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1081.486429][ T4958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.495655][ T4958] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1081.507459][T15379] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.516910][T15379] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1081.524932][T15379] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.534144][T15379] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1081.542065][T15379] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.551767][T15379] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1081.559903][T15379] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.569890][T15379] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1081.578781][T15379] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.588171][T15379] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1081.596395][T15379] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.605563][T15379] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1081.616447][T15379] ldm_validate_partition_table(): Disk read failed. [ 1081.625377][T15379] Dev nbd4: unable to read RDB block 0 [ 1081.633327][T15379] nbd4: unable to read partition table [ 1081.679316][T15379] ldm_validate_partition_table(): Disk read failed. [ 1081.687792][T15379] Dev nbd4: unable to read RDB block 0 [ 1081.695903][T15379] nbd4: unable to read partition table [ 1082.584400][ T5635] Bluetooth: hci8: command tx timeout [ 1082.824448][ T5635] Bluetooth: hci7: command tx timeout [ 1083.983090][T14512] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.377517][T15850] syzkaller0: entered promiscuous mode [ 1084.389994][T15850] syzkaller0: entered allmulticast mode [ 1084.422878][T15741] lo speed is unknown, defaulting to 1000 [ 1084.502747][T14512] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.670239][ T5635] Bluetooth: hci8: command tx timeout [ 1085.146143][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1089.724610][T15746] lo speed is unknown, defaulting to 1000 [ 1089.730399][T15741] lo speed is unknown, defaulting to 1000 [ 1089.849148][T15871] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 1089.865729][T14512] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.015847][T15873] bond21: Unable to set down delay as MII monitoring is disabled [ 1090.048247][T15873] bond21 (unregistering): Released all slaves [ 1090.219682][T15746] lo speed is unknown, defaulting to 1000 [ 1090.350600][T15882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18367'. [ 1090.366472][T14512] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.072378][T15888] netlink: 56 bytes leftover after parsing attributes in process `syz.4.18368'. [ 1091.148409][ T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.288887][ T1058] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.341274][T15900] netlink: 164 bytes leftover after parsing attributes in process `syz.4.18371'. [ 1091.472428][T15376] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.645023][T15908] netlink: 'syz.1.18373': attribute type 1 has an invalid length. [ 1091.667528][T15910] netlink: 'syz.4.18372': attribute type 4 has an invalid length. [ 1091.674609][T15376] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.718175][T15906] netlink: 'syz.4.18372': attribute type 4 has an invalid length. [ 1091.820637][T15911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18373'. [ 1091.963827][T15916] netlink: 'syz.4.18372': attribute type 4 has an invalid length. [ 1092.208488][T14512] bond0 (unregistering): Released all slaves [ 1092.223611][T14512] bond2 (unregistering): Released all slaves [ 1092.399346][T15912] veth17: entered promiscuous mode [ 1092.408828][T15912] bond21: (slave veth17): Enslaving as a backup interface with a down link [ 1092.421272][T15911] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1092.627988][T15938] netlink: 'syz.1.18375': attribute type 1 has an invalid length. [ 1092.650925][T14512] tipc: Left network mode [ 1092.766992][T15943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18376'. [ 1092.862458][T15746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.871833][T15746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.882982][T15746] bridge_slave_0: entered allmulticast mode [ 1092.891261][T15746] bridge_slave_0: entered promiscuous mode [ 1092.921348][T15940] bond22: (slave bridge17): making interface the new active one [ 1092.945406][T15940] bond22: (slave bridge17): Enslaving as an active interface with an up link [ 1097.958227][T15942] bond22: (slave gretap4): Enslaving as an active interface with an up link [ 1097.983659][T15741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.991822][T15741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.999698][T15741] bridge_slave_0: entered allmulticast mode [ 1098.008085][T15741] bridge_slave_0: entered promiscuous mode [ 1098.079809][T15938] macvlan0: entered promiscuous mode [ 1098.103062][T15938] macvlan0: entered allmulticast mode [ 1098.113888][T15938] bond22: entered promiscuous mode [ 1098.135696][T15938] bridge17: entered promiscuous mode [ 1098.157462][T15938] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1098.175491][T15938] bond22: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1098.213335][T15938] bond22: left promiscuous mode [ 1098.224509][T15938] bridge17: left promiscuous mode [ 1098.276752][T15746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.297878][T15746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.314859][T15746] bridge_slave_1: entered allmulticast mode [ 1098.331089][T15746] bridge_slave_1: entered promiscuous mode [ 1098.489127][T15741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.524263][T15741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.559197][T15741] bridge_slave_1: entered allmulticast mode [ 1098.587209][T15741] bridge_slave_1: entered promiscuous mode [ 1098.639452][T15746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.798244][T15746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.943066][T15741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.960338][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18381'. [ 1098.991061][T15741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.211259][T15969] syzkaller0: entered promiscuous mode [ 1099.221472][T15969] syzkaller0: entered allmulticast mode [ 1104.539957][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1104.555804][ T30] audit: type=1800 audit(1778878621.734:21): pid=15995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.18383" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1104.591988][T15995] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1104.614909][T15995] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1104.625464][T15995] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1104.672976][T15741] team0: Port device team_slave_0 added [ 1104.707241][T15741] team0: Port device team_slave_1 added [ 1104.772079][T14512] hsr_slave_0: left promiscuous mode [ 1104.781450][T14512] hsr_slave_1: left promiscuous mode [ 1104.791554][T16019] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18386'. [ 1104.822640][T14512] veth1_macvtap: left promiscuous mode [ 1104.839570][T14512] veth0_macvtap: left promiscuous mode [ 1104.845637][T14512] veth1_vlan: left promiscuous mode [ 1104.851061][T14512] veth0_vlan: left promiscuous mode [ 1105.508662][T15746] team0: Port device team_slave_0 added [ 1105.528472][T15746] team0: Port device team_slave_1 added [ 1105.662068][T16024] tipc: Failed to remove unknown binding: 66,0,0/3170405645:583947634/583947636 [ 1105.704777][T16024] tipc: Failed to remove unknown binding: 66,0,0/3170405645:583947634/583947635 [ 1105.737624][T15741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.748621][T16024] tipc: Failed to remove unknown binding: 66,0,0/3170405645:583947634/583947636 [ 1105.760668][T15741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.792168][T16024] tipc: Failed to remove unknown binding: 66,0,0/3170405645:583947634/583947635 [ 1105.835477][T15741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.865378][T15741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.875042][T15741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.930196][T15741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.991034][T15746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.016141][T16032] netlink: 272 bytes leftover after parsing attributes in process `syz.4.18390'. [ 1106.026700][T15746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.030642][T16033] netlink: 'syz.6.18391': attribute type 1 has an invalid length. [ 1106.055025][T15746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.075536][T15746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.082532][T15746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.134116][T15746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.333613][T16033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1106.453293][T16036] bond3: (slave ip6erspan0): making interface the new active one [ 1106.476915][T16036] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1106.612015][T14512] IPVS: stop unused estimator thread 0... [ 1106.662618][T16053] ip6t_srh: unknown srh match flags 4000 [ 1106.760438][T15741] hsr_slave_0: entered promiscuous mode [ 1106.782875][T15741] hsr_slave_1: entered promiscuous mode [ 1106.871038][T16054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18394'. [ 1106.886818][T15746] hsr_slave_0: entered promiscuous mode [ 1106.912687][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18394'. [ 1106.920940][T15746] hsr_slave_1: entered promiscuous mode [ 1106.953762][T15746] debugfs: 'hsr0' already exists in 'hsr' [ 1106.981070][T15746] Cannot create hsr debugfs directory [ 1107.199740][T16069] netlink: 'syz.6.18396': attribute type 11 has an invalid length. [ 1107.223070][T16069] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.18396'. [ 1107.278243][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1108.001669][T16080] bond14 (unregistering): Released all slaves [ 1108.524208][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1108.603851][T16113] netlink: 180568 bytes leftover after parsing attributes in process `syz.1.18402'. [ 1109.373075][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18405'. [ 1109.576992][T16143] netlink: 132 bytes leftover after parsing attributes in process `syz.6.18407'. [ 1109.606594][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18408'. [ 1109.895972][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1111.414988][T16112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1111.440521][T15746] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1111.546716][T15746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1111.568455][T15746] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1111.659187][T15746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1111.675171][T15741] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1111.694032][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1111.730459][T15746] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1111.742037][T15746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1111.750390][T15741] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1111.762095][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1111.775390][T15746] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1111.789057][T15746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1111.800745][T15741] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1111.815085][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1111.831933][T15741] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1111.872771][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1111.976532][T16171] syzkaller0: entered promiscuous mode [ 1111.989647][T16171] syzkaller0: entered allmulticast mode [ 1112.632914][ T30] audit: type=1804 audit(1778878629.824:22): pid=16194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.18415" name="/newroot/70/cgroup.controllers" dev="tmpfs" ino=383 res=1 errno=0 [ 1112.693828][ T30] audit: type=1800 audit(1778878629.824:23): pid=16194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.18415" name="cgroup.controllers" dev="tmpfs" ino=383 res=0 errno=0 [ 1113.244908][T16197] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 1115.883751][ T31] INFO: task syz.0.17978:14079 blocked for more than 143 seconds. [ 1115.892139][ T31] Not tainted syzkaller #0 [ 1115.897204][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1115.906024][ T31] task:syz.0.17978 state:D stack:26408 pid:14079 tgid:14078 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 1115.918262][ T31] Call Trace: [ 1115.921583][ T31] [ 1115.924653][ T31] __schedule+0x1821/0x5740 [ 1115.929292][ T31] ? sock_def_readable+0xae/0x550 [ 1115.934552][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1115.939983][ T31] ? __pfx___schedule+0x10/0x10 [ 1115.945332][ T31] ? schedule+0x90/0x360 [ 1115.949690][ T31] schedule+0x164/0x360 [ 1115.954161][ T31] svc_listen+0x2c3/0x500 [ 1115.958730][ T31] ? __pfx_svc_listen+0x10/0x10 [ 1115.963682][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1115.970000][ T31] ? __fget_files+0x3a0/0x420 [ 1115.974893][ T31] ? __fget_files+0x2a/0x420 [ 1115.979584][ T31] ? apparmor_socket_listen+0xde/0x180 [ 1115.985612][ T31] __x64_sys_listen+0x1c7/0x240 [ 1115.990695][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.997131][ T31] do_syscall_64+0x15f/0xf80 [ 1116.001849][ T31] ? trace_irq_disable+0x3b/0x140 [ 1116.007066][ T31] ? clear_bhb_loop+0x40/0x90 [ 1116.011900][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.018013][ T31] RIP: 0033:0x7f1ddef9ce59 [ 1116.022579][ T31] RSP: 002b:00007f1ddfe9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 1116.031273][ T31] RAX: ffffffffffffffda RBX: 00007f1ddf215fa0 RCX: 00007f1ddef9ce59 [ 1116.041187][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1116.053839][ T31] RBP: 00007f1ddf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1116.063996][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1116.072104][ T31] R13: 00007f1ddf216038 R14: 00007f1ddf215fa0 R15: 00007ffc15d668e8 [ 1116.080390][ T31] [ 1116.083676][ T31] [ 1116.083676][ T31] Showing all locks held in the system: [ 1116.092187][ T31] 1 lock held by khungtaskd/31: [ 1116.097273][ T31] #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1116.107621][ T31] 3 locks held by kworker/u8:6/148: [ 1116.122263][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1116.134565][ T31] #1: ffffc90002e47c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1116.145994][ T31] #2: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1116.155640][ T31] 2 locks held by getty/5377: [ 1116.160474][ T31] #0: ffff88803648f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1116.171011][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1116.181638][ T31] 3 locks held by kworker/u8:0/1058: [ 1116.192449][ T31] #0: ffff888031abf140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1116.204583][ T31] #1: ffffc90005affc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1116.217965][ T31] #2: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1116.228086][ T31] 1 lock held by syz.2.17976/14073: [ 1116.233379][ T31] 1 lock held by syz.0.17978/14079: [ 1116.239141][ T31] #0: ffff888051daf260 (sk_lock-AF_ATMSVC){+.+.}-{0:0}, at: svc_listen+0x13f/0x500 [ 1116.249101][ T31] 1 lock held by syz-executor/15741: [ 1116.254743][ T31] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1116.264564][ T31] 1 lock held by syz-executor/15746: [ 1116.269993][ T31] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30 [ 1116.280012][ T31] 2 locks held by syz.4.18413/16165: [ 1116.285700][ T31] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1116.295295][ T31] #1: ffffffff8e9630a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1116.306707][ T31] 2 locks held by syz.1.18414/16191: [ 1116.312103][ T31] #0: ffff888056f3e6e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe2/0xe10 [ 1116.322353][ T31] #1: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1116.331717][ T31] 1 lock held by syz.6.18417/16201: [ 1116.337347][ T31] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 1116.347098][ T31] 1 lock held by syz.6.18417/16202: [ 1116.352457][ T31] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1116.362000][ T31] 1 lock held by syz.6.18417/16204: [ 1116.367652][ T31] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1116.377428][ T31] 1 lock held by syz.6.18417/16209: [ 1116.382781][ T31] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1116.392281][ T31] [ 1116.408955][ T31] ============================================= [ 1116.408955][ T31] [ 1116.419540][ T31] NMI backtrace for cpu 1 [ 1116.419557][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1116.419575][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1116.419584][ T31] Call Trace: [ 1116.419591][ T31] [ 1116.419598][ T31] dump_stack_lvl+0xe8/0x150 [ 1116.419622][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1116.419724][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1116.419750][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1116.419772][ T31] sys_info+0x135/0x170 [ 1116.419787][ T31] watchdog+0xfd3/0x1030 [ 1116.419823][ T31] ? watchdog+0x1c9/0x1030 [ 1116.419850][ T31] kthread+0x389/0x470 [ 1116.419870][ T31] ? __pfx_watchdog+0x10/0x10 [ 1116.419888][ T31] ? __pfx_kthread+0x10/0x10 [ 1116.419909][ T31] ret_from_fork+0x514/0xb70 [ 1116.419943][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1116.419959][ T31] ? __switch_to+0xc79/0x1410 [ 1116.419984][ T31] ? __pfx_kthread+0x10/0x10 [ 1116.420004][ T31] ret_from_fork_asm+0x1a/0x30 [ 1116.420038][ T31] [ 1116.420044][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1116.530641][ C0] NMI backtrace for cpu 0 [ 1116.530658][ C0] CPU: 0 UID: 0 PID: 14331 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1116.530676][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1116.530685][ C0] RIP: 0010:check_preemption_disabled+0x29/0xe0 [ 1116.530708][ C0] Code: 90 55 41 57 41 56 53 65 8b 05 87 ff 8f 07 65 8b 0d 7c ff 8f 07 f7 c1 ff ff ff 7f 74 0c 5b 41 5e 41 5f 5d e9 d9 d7 02 00 cc 9c <59> f7 c1 00 02 00 00 74 ea 65 4c 8b 3d 2e ff 8f 07 41 f6 47 2f 04 [ 1116.530722][ C0] RSP: 0018:ffffc900024bfc38 EFLAGS: 00000046 [ 1116.530736][ C0] RAX: 0000000000000000 RBX: ffffffff8bacee5a RCX: 0000000080000000 [ 1116.530747][ C0] RDX: 0000000000000000 RSI: ffffffff8e01766e RDI: ffffffff8c28afe0 [ 1116.530757][ C0] RBP: ffffc900024bfe10 R08: ffffffff90311bf7 R09: 1ffffffff206237e [ 1116.530768][ C0] R10: dffffc0000000000 R11: fffffbfff206237f R12: ffffffff9a6544f8 [ 1116.530779][ C0] R13: dffffc0000000000 R14: ffffffff9a654500 R15: dffffc0000000000 [ 1116.530790][ C0] FS: 000055556cd97500(0000) GS:ffff88812527a000(0000) knlGS:0000000000000000 [ 1116.530803][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1116.530814][ C0] CR2: 00007fff279e1000 CR3: 0000000096b4c000 CR4: 00000000003526f0 [ 1116.530828][ C0] Call Trace: [ 1116.530834][ C0] [ 1116.530841][ C0] ? _raw_spin_lock_irqsave+0x1a/0x60 [ 1116.530863][ C0] lockdep_hardirqs_off+0x8d/0xd0 [ 1116.530884][ C0] ? _raw_spin_lock_irqsave+0x1a/0x60 [ 1116.530903][ C0] trace_hardirqs_off+0x12/0x40 [ 1116.530926][ C0] _raw_spin_lock_irqsave+0x1a/0x60 [ 1116.530946][ C0] debug_object_free+0x7d/0x490 [ 1116.531063][ C0] ? __hrtimer_setup+0x1b7/0x260 [ 1116.531093][ C0] hrtimer_nanosleep+0x2cc/0x3a0 [ 1116.531120][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1116.531143][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1116.531169][ C0] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1116.531193][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1116.531218][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.531235][ C0] do_syscall_64+0x15f/0xf80 [ 1116.531256][ C0] ? trace_irq_disable+0x3b/0x140 [ 1116.531278][ C0] ? clear_bhb_loop+0x40/0x90 [ 1116.531295][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.531310][ C0] RIP: 0033:0x7f42ce35d68e [ 1116.531323][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1116.531336][ C0] RSP: 002b:00007ffc112dae88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1116.531351][ C0] RAX: ffffffffffffffda RBX: 000055556cd97500 RCX: 00007f42ce35d68e [ 1116.531363][ C0] RDX: 00007ffc112daee0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1116.531373][ C0] RBP: 00007ffc112daf4c R08: 0000000000000000 R09: 0000000000000000 [ 1116.531383][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1116.531392][ C0] R13: 00000000000927c0 R14: 0000000000110241 R15: 00007ffc112dafa0 [ 1116.531413][ C0] [ 1116.823845][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1116.830726][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1116.839850][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1116.849921][ T31] Call Trace: [ 1116.853205][ T31] [ 1116.856126][ T31] vpanic+0x56c/0xa60 [ 1116.860102][ T31] ? __pfx___schedule+0x10/0x10 [ 1116.864944][ T31] ? __pfx_vpanic+0x10/0x10 [ 1116.869436][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1116.875593][ T31] panic+0xc5/0xd0 [ 1116.879310][ T31] ? __pfx_panic+0x10/0x10 [ 1116.883718][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1116.889094][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1116.895253][ T31] watchdog+0x102c/0x1030 [ 1116.899589][ T31] ? watchdog+0x1c9/0x1030 [ 1116.904000][ T31] kthread+0x389/0x470 [ 1116.908065][ T31] ? __pfx_watchdog+0x10/0x10 [ 1116.912728][ T31] ? __pfx_kthread+0x10/0x10 [ 1116.917309][ T31] ret_from_fork+0x514/0xb70 [ 1116.921896][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1116.926993][ T31] ? __switch_to+0xc79/0x1410 [ 1116.931660][ T31] ? __pfx_kthread+0x10/0x10 [ 1116.936246][ T31] ret_from_fork_asm+0x1a/0x30 [ 1116.941017][ T31] [ 1116.944540][ T31] Kernel Offset: disabled [ 1116.948858][ T31] Rebooting in 86400 seconds..