last executing test programs: 2.742131859s ago: executing program 0 (id=7068): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x400, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x909}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK, @IFLA_IPTUN_REMOTE={0x17, 0x3, @empty}, @IFLA_IPTUN_LINK, @IFLA_IPTUN_FLOWINFO={0x0, 0x7, 0x7c1}, @IFLA_IPTUN_ENCAP_FLAGS={0x0, 0x10, 0x1000}, @IFLA_IPTUN_ENCAP_LIMIT={0x0, 0x6, 0x1}, @IFLA_IPTUN_ENCAP_TYPE={0x0, 0xf, 0x2}, @IFLA_IPTUN_TTL={0x0, 0x4, 0x7}, @IFLA_IPTUN_COLLECT_METADATA, @IFLA_IPTUN_ENCAP_SPORT={0x0, 0x11, 0x4e21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2400c0dd) 2.66205627s ago: executing program 0 (id=7070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) close(r3) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 64) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) (rerun: 64) close(r2) 2.477165557s ago: executing program 1 (id=7073): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x73}}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x81}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x142}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xdc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7d9d2dda}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}]}, 0x64}}, 0x8800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x73}}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x81}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x142}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xdc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7d9d2dda}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}]}, 0x64}}, 0x8800) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) (async) 2.445644963s ago: executing program 2 (id=7074): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}, 0xf46b275}], 0x1, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r2, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f041c067c55a1bc000900b800069906000000150005000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4010000001fb791643a5ee4b11402b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601000000416d6e7c047ff0ff0e97031e9f05e9f16e9cb500000000000000000000000000000000007e0000000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0xc0) r4 = accept$alg(r0, 0x0, 0x0) r5 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0x2b}], 0x1}], 0x1, 0x0) sendmmsg$alg(r4, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040806}], 0xfffffffffffffeaa, 0x8008810) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xa0, 0x1405, 0x10, 0x70bd2b, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x11}, 0x8000) 2.257395352s ago: executing program 1 (id=7075): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r2, &(0x7f0000000280)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x22, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfdfff034}, {0x6, 0x3, 0x8, 0x4}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 2.156455636s ago: executing program 1 (id=7076): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0xfffe) preadv(r5, &(0x7f0000000100), 0xa, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x16, 0xfffffff9, 0x6, 0x2, 0x3, 0xffffffffffffffff, 0x5f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) writev(r9, &(0x7f0000000900)=[{&(0x7f0000000540)='x', 0x1}], 0x1) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2cfe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000640)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r13, 0xc040ff0b, 0x110c2300fe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x25, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x196d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0xc, 0xd, 0xf536941e533e9ec9, 0x0, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000003c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0xc0c, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000006c0)=[r6, r7, r9, r10, r11, r13], &(0x7f0000000700)=[{0x4, 0x5, 0x8, 0x2}, {0x2, 0x1, 0xd, 0x5}, {0x1, 0x3, 0x5}, {0x0, 0x5, 0x10, 0x3}, {0x1, 0x5, 0x6, 0xa}, {0x5, 0x4, 0xf, 0xb}, {0x2, 0x5, 0xa, 0x8}, {0x5, 0x2, 0xa, 0x5}, {0x0, 0x1, 0x1, 0x5}, {0x1, 0x5, 0xe, 0x5}], 0x10, 0x4222}, 0x94) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) r15 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000580)=0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r14, 0x84, 0x71, &(0x7f0000000080)={r16, 0x5}, &(0x7f00000000c0)=0x8) 2.142677481s ago: executing program 2 (id=7077): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001fc0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x22c2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) r4 = epoll_create(0x400) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000500)={0x40000000}) (async) write$cgroup_int(r6, &(0x7f0000000080)=0x2, 0x12) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r7, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x8080) 1.965949839s ago: executing program 2 (id=7079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3400000000000000000000000700000094040020070f6e0a0101010a010102ac14141988040c08440c9eb00000000000000003000000000018000000000000000000000002"], 0x50}}], 0x1, 0x0) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x4}, 0x2c) r10 = socket$kcm(0xa, 0x2, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e22, 0x3, 'ovf\x00', 0x0, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x1, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0xe7, 0x4}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.915670225s ago: executing program 3 (id=7081): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fce5ffff000000000900000018100000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.619785168s ago: executing program 0 (id=7084): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000100)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000001a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000019c0)={&(0x7f0000000780)={0x1240, 0x3c, 0x400, 0x70bd2b, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x108, 0x0, 0x0, @u32=0x6}, @generic="c23d17c50df0fd725c300bbd907731b2ad3b28ec160a63b6ab1c2f556ebbdc4aec63891e341c9be5829b4103f5cc8388a83def81da07235e41b3a172eb831c8ed6973fe8c9f015bd1a9d8b325f7ebc74eba100c2cb3abb736880de92521221d86047af18021941a0948fc86d018cfdc78ceeae6a874eb83e982bd71614a19ba5290551fab69afc127202ace67481a42f3d433d483a9421fc4ce03e65aab4f93c8f1c5df0dbe053a2751d88061c921a7a6de5", @typed={0x4, 0x6c}, @generic="79bce77013be59d21ef85350114ee1b7f7abeb04104a2c9ee91cf5b2fd2c14bf659a2782c1e215d444bb4f7959f58523fe4b696414f9724099e28adf6420dff8051867b03a02fc1f03ec017a194e94939a6773dbf8aa2043d7a3b69cde728ed1bc707856a630eccd53d33d23a319930cd94abb6b56bda1cfcda862adaf19", @generic="4089d4adae8a0f5fa6e26e6361bcb8e8e9e4de0d2f8c64261ccedb266e7ca2fcc59e70134a54a97b7dd4a8af8be8babaab87894c1fad937a53ffead9a24d8606f42c8719d1e804b580dd6bfb06400dff726c00bee9a694148365125fec8ad7094f70b534fa173fb9696076f2aa60838770af2a4b3da9356498717740ddd6af443ef296e8703d01745e493b663d50447fbc18fb53be3e092b1069067114957fc8", @nested={0x102d, 0x1, 0x0, 0x1, [@typed={0x6, 0xdd, 0x0, 0x0, @str='%\x00'}, @generic="3f87844cb341d04aa139b77b81cde668c97be1fe9d53f5bef7", @generic="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", @nested={0x4, 0x150}, @nested={0x4, 0xdd}]}, @typed={0x4, 0x40}, @typed={0x14, 0x14c, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x6d, 0x0, 0x0, @uid=r2}]}, 0x1240}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x408c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xdf505db1a3d84e25}, 0x2404c800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) 1.600854503s ago: executing program 3 (id=7085): getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=@dellink={0x2e4, 0x11, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x926}, [@IFLA_MASTER={0x8}, @IFLA_VFINFO_LIST={0x2bc, 0x16, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x79}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0x10001}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x2, 0x2a7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0xfed8, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x8e6e, 0x0, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x800, 0x1}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x540}}]}, {0xb4, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0xfffffffffffffffa}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffffff8, 0xaaa, 0x2}}, {0x14, 0x1, {0x3, 0xa19}}, {0x14, 0x1, {0x6, 0xcda, 0x4, 0x8100}}, {0x14, 0x1, {0xf, 0xe11, 0x1, 0x88a8}}]}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x6, 0xf}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xa, 0x100}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xda0, 0x10001}}, @IFLA_VF_MAC={0x28, 0x1, {0x100, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xa, 0x7f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x5}}]}, {0xf4, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7663, 0xe0b, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0xfffffffe}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4cdf, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0xfff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffb, 0xfffffffffffffff7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9c, 0xa}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0x7fe, 0x1, 0x88a8}}, {0x14, 0x1, {0x1000, 0x573, 0x0, 0x8100}}, {0x14, 0x1, {0x0, 0xa3e, 0x80000000, 0x88a8}}, {0x14, 0x1, {0x273, 0x614, 0x2, 0x88a8}}, {0x14, 0x1, {0x3, 0x402, 0x7fff, 0x88a8}}, {0x14, 0x1, {0x7, 0xb3b, 0xffff, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffffb, 0x374, 0x1bc}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x19b}}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e20, @multicast1}, 0x10) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000480)=@id, &(0x7f00000004c0)=0x10, 0x800) pwritev(r2, &(0x7f0000000800)=[{&(0x7f0000000500)="a0651536887ed7a5b734934a72ef5600db97147c0574d466665f2bc0931c77f89248bf0cd85606816b60d253782b86fe1cc9d7b0cb48a2ab13c259dfa53c3897d6279114f45381bfa5fb9d81176dddfca07f561f614dd9afad4cfd1429ff3c54f9979691b7308aec5bd399be29075bf30105d1f243725b9fdd0521e590132efb8863913a36e7e2f9edbee246df70c73d4de8a0e31460bcd151ce7c1c", 0x9c}, {&(0x7f00000005c0)="f7152c01a1b0616d901876017908013ea31f65a07dd5329d696e5c349382ffabd3ca124ca6d5b95245969db42cb988ff4f8ff04e6fdc7ac7172373902d0728bcdb8abaa746c0b805fe813eedfb000c2592e21442319add0de3c44f0bb1064ed7627c0cb3cdb089dbaa901a9e638cc622e23ab17fb8a4af40d7668e237ba4871a6e57d32915cb6a", 0x87}, {&(0x7f0000000680)="26a0e03dee338376add532ab8981c4c2be187fe34b1316f622e62a947c33e8a83e365f642b0090d2e9b08d165c20e85b198869fa5ca401b0a298c4c79d54ca0c895de9cfa52df217ef4475375c103b438424", 0x52}, {&(0x7f0000000700)="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", 0xff}], 0x4, 0x8, 0x5) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000840)={'\x00', {0x2, 0x4e20, @loopback}}) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x1bc, r4, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4de5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d50}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff80}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1211}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8}, 0x1) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000b40)={0x0, 0x9c, "7edb3815c32501ec95dd0ec4acd7219b2712995c62a3fdec71e56e990a663a92de70b79f95913097cfe132ae68de9a081592771b97712f557ee271d6d32c4af86584b2486e4bbb31e27398853e7a04e98afeedc241a4ac53bdf4461a3b4affc78c502a1480201fff036b34a9932d8ada7d39228828f09887fd7d72e02a6c0bf88fbe681c7499ade4af52727e67848c5994d7f584128ea19eb805ddd6"}, &(0x7f0000000c00)=0xa4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000c40)={r6, 0x7ff, 0xe, 0x0, 0x80000000, 0x4}, 0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000dc0)={&(0x7f0000000c80), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7e}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0xd333aa54bdb2f884) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000e00)={'veth0_to_hsr\x00', @ifru_ivalue=0x9}) shutdown(r5, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000e80), r3) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x50, r9, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14}]}, 0x50}, 0x1, 0x0, 0x0, 0x2005}, 0x40000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001000)={@private1, 0x0}, &(0x7f0000001040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000001140)={&(0x7f0000000fc0), 0xc, &(0x7f0000001100)={&(0x7f0000001080)=@gettfilter={0x74, 0x2e, 0x2, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xd, 0xa}, {0xa, 0x6}, {0xb, 0xfff2}}, [{0x8, 0xb, 0x7ea1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xb0}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000080) socket$rds(0x15, 0x5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x3}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x200408c0}, 0x200400c0) socket$kcm(0x29, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001280)='cgroup.events\x00', 0x0, 0x0) r12 = getpid() write$cgroup_pid(r11, &(0x7f00000012c0)=r12, 0x12) bind$bt_l2cap(r11, &(0x7f0000001300)={0x1f, 0x1d, @any, 0x7}, 0xe) 1.583312039s ago: executing program 2 (id=7086): unshare(0x6020480) r0 = socket$pptp(0x18, 0x1, 0x2) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000000300)=ANY=[@ANYBLOB="060000000000e325c0bfe1b7ea00000000000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf25010000000000000009410000004c00180000000265746800"/98], 0x68}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000) (async) connect$pptp(r0, 0x0, 0x0) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r4, 0x29, 0x22, &(0x7f0000000100), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x214, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x15c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x12c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x84, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x200}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x100}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x401}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xef}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8b}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xac}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffff7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0xffffffffffffff62, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x0, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x78, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x64, 0x1, [@m_ctinfo={0x60, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x32, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x10, 0xffffffffffffffff, 0x0) (async, rerun: 32) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="98000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000003c0003802c00018014000300fe88000000000000000000000000000114000400fe8000000000000000000000000000240c0002800500010000000000240001"], 0x98}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008f00000000000000d641000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000007500f4fff0ffffffbf91000000000000b70200000300000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) unshare(0x8080000) 1.457966929s ago: executing program 0 (id=7087): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x4, [@typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x31930492}]}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0x7, 0x8}, {0x6, 0x4}, {0xa, 0xfffffffc}]}, @func={0x9, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x51, 0x30]}}, &(0x7f00000013c0)=""/4096, 0x6c, 0x1000, 0x0, 0x6, 0x10000, @value=r0}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x3, 0xfffffff2, 0xe, 0xc8, 0x62040, 0xffffffffffffffff, 0x5, '\x00', r5, r6, 0x0, 0x1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.375480424s ago: executing program 4 (id=7088): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000d00)={&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000140)=""/152, 0x98}, {&(0x7f0000000340)=""/76, 0x4c}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f0000000480)=""/105, 0x69}, {&(0x7f0000000740)=""/216, 0xd8}, {&(0x7f0000000540)=""/52, 0x34}, {&(0x7f0000000840)=""/231, 0xe7}, {&(0x7f0000000bc0)=""/90, 0x5a}], 0x9, &(0x7f0000000dc0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000a00)=""/205, 0xcd}, &(0x7f0000000680)}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xffffffc0}, @mask_fadd={0x58, 0x114, 0x8, {{0x2bc}, &(0x7f00000006c0)=0x1, &(0x7f0000000b00)=0x4aae, 0x7fffffff, 0x2, 0xc, 0x0, 0x4, 0x7fffffff}}, @fadd={0x58, 0x114, 0x6, {{0xfffff25f, 0x2}, &(0x7f0000000d40)=0x5, &(0x7f0000000d80)=0xfffffffffffffffe, 0x0, 0x7, 0x4, 0x8, 0x20, 0x4}}, @fadd={0x58, 0x114, 0x6, {{0x2b0, 0x1}, &(0x7f0000000b40)=0x378, &(0x7f0000000b80)=0x2a, 0x1, 0x4, 0xfffffffffffffffb, 0x0, 0x49, 0x2}}], 0x150, 0x20004841}, 0x40000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f000000aac0)={'ip6_vti0\x00', &(0x7f000000aa40)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x1a, 0x4, 0x1, @local, @mcast2, 0x7, 0x7, 0x100, 0xd}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r3, 0x211, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4885}, 0x40000) (async) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r3, 0x211, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4885}, 0x40000) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$pidfd(0xffffffffffffff9c, &(0x7f00000010c0), 0x2040, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x7a, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0x78}}, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000280)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x14001}], 0x1, 0x4044040) 1.343849305s ago: executing program 3 (id=7089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c006d87380000020303000000000000000000010000000800044000000010fcd2adc0f89e9d673aa1b06b2b40f69e635a783d988884360398d3aebdb88ac41488592f2a35911e2b73c0572042c786e01bb331819f6086ddc0d5cb1ed5c46ee5ef38969b974cc75791e78a2b62afb34dd9df559608515d0dec4ad6"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000030301010000000000000000000000000c0002000000da67"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 1.213613995s ago: executing program 4 (id=7090): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4044001) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=@newqdisc={0x2b4, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xdc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xc4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x77b34e39}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x293}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7f}]}, {0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x800}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9b27}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe1}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3c64}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x210}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc}]}]}]}}, @TCA_STAB={0x1a8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6f, 0x1, 0x8, 0x7ff, 0x2, 0x8, 0x7ee, 0x5}}, {0xe, 0x2, [0xfe31, 0x2, 0x3, 0x3, 0xa]}}, {{0x1c, 0x1, {0x40, 0x9, 0x4, 0xd, 0x0, 0x8, 0xf0, 0x6}}, {0x10, 0x2, [0xd, 0x7fff, 0x7, 0x1, 0x7, 0xa]}}, {{0x1c, 0x1, {0x7, 0x1, 0x80, 0x1, 0x2, 0x1, 0x6000, 0x3}}, {0xa, 0x2, [0x2, 0x1, 0x3]}}, {{0x1c, 0x1, {0x2, 0xad, 0x6, 0x95c, 0x1, 0x3, 0x6, 0x1}}, {0x6, 0x2, [0x100]}}, {{0x1c, 0x1, {0x9, 0x8, 0x6, 0x4, 0x2, 0x730e00cd, 0xbce5, 0x7}}, {0x12, 0x2, [0x9, 0x3c8, 0xf, 0x8, 0x0, 0xe, 0xffff]}}, {{0x1c, 0x1, {0x5, 0x6, 0x7ff, 0x5, 0x0, 0x10000, 0xfff, 0x3}}, {0xa, 0x2, [0x10, 0x101, 0x5cc]}}, {{0x1c, 0x1, {0xf9, 0xb, 0x200, 0x8, 0x0, 0x9, 0x4, 0x5}}, {0xe, 0x2, [0xa35, 0x9, 0x2, 0x5, 0xa]}}, {{0x1c, 0x1, {0x2, 0x6, 0x2d4, 0x3, 0x1, 0x5, 0x2cc, 0x5}}, {0xe, 0x2, [0x2, 0x7, 0xffff, 0x7, 0x555]}}, {{0x1c, 0x1, {0x10, 0x8, 0x4, 0x3, 0x0, 0x1, 0xfb, 0x4}}, {0xc, 0x2, [0xfffb, 0xd33, 0x93c3, 0xfffc]}}, {{0x1c, 0x1, {0x3, 0xa, 0x101, 0xfbb1, 0x1, 0x2, 0x4, 0x3}}, {0xa, 0x2, [0x7, 0x7, 0x1]}}]}]}, 0x2b4}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000000100)="e10f", 0x2, 0x40800, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x464002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x9}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x20]}}, 0x0, 0x2e, 0x0, 0x1, 0x7}, 0x28) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000020}, 0x40) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000000000)) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001500)="b2", 0x1}, {0x0}], 0x2}}], 0x1, 0x4000000) 1.203319085s ago: executing program 1 (id=7091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5}, 0x50) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) getpeername$ax25(r1, 0x0, &(0x7f0000000440)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x6, 0x10, 0x4, 0x2, 0x74, @dev={0xfe, 0x80, '\x00', 0x40}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0xabf1, 0x7}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x168, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x13c, 0x4, 0x0, 0x1, [{0x138, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x128, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xeb, 0x3, "218aaf0490bd62e058e2daea1bd5e722ef2d200974059f0369cb120894a9923df566c1db83d28355c806f71aca7abc5bbedcde9cc865e9b49f6eadb20a0caac22ffa577b79ca7593da96b9783779c99a02abab4a47bcfc93abb68334505ef270db81ec4e22048ad9ca3838bdc7f04cbedb3569ecb1244d2deda3829e9cfe11d2489b9ddcdcd48426cc3a530a4adbe15915701195826068434200aced1d098ab526dc0bb26ce51c252de1882c56591239e6cc40e6ff895a55e42cc8e812ef1c11c069d20886c6c40cced3a4dd996fcc16d9c01a0a8e05a241882c91a35de18a9748038b8da17f5e"}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x190}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) unshare(0x6a040000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', r2, 0x2f, 0x2, 0x79, 0xfffffffb, 0xd, @empty, @mcast2, 0x40, 0x1, 0x2, 0x4}}) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x2, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x10, 0xd}, {0xf, 0xffe0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20040001) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = socket(0x2, 0x3, 0xff) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r5, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="07db2716b09b314030d976dc3808284ff464832583f72bf3bea7408f46", 0x1d}], 0x1}}], 0x1, 0x8c4) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000140)={@local, r2}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 944.446531ms ago: executing program 4 (id=7092): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x5, 0x12, 0x98, 0x8dfecef}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x80000}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x32, 0x0, @void}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\a\x00'/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 805.829395ms ago: executing program 4 (id=7093): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$can_j1939(0x1d, 0x2, 0x7) accept(r0, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x8970, &(0x7f0000000040)="2ee9f3bec5227c747f133a005e") (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) 742.17919ms ago: executing program 1 (id=7094): syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000020101080000000000000000020000082c0002800c000282050001000000000006000340000000001400018008000100ac1414aa080002"], 0x48}, 0x1, 0x0, 0x0, 0x20000014}, 0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900000004000000020000000000000028000000000000002900000105000000002002010000"], 0x40}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100"], 0x74}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 532.70879ms ago: executing program 1 (id=7095): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x6, 0x32, 0x0, 0xe}, 0x9c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)={0xffff, {{0xa, 0x4e23, 0x3, @mcast1, 0x6000}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x80}}, {{0xa, 0x4e23, 0xfffffff5, @loopback, 0x80000000}}, {{0xa, 0x4e20, 0x2, @mcast2, 0x6}}, {{0xa, 0x4e22, 0x9, @private1, 0x1000}}, {{0xa, 0x4e23, 0x5, @empty, 0x400}}]}, 0x310) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r7, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 478.075414ms ago: executing program 0 (id=7096): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xfe5f}, {&(0x7f0000000840)="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", 0x113}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0bea0", 0xbf}], 0x3}, 0x8001) socket$kcm(0x11, 0x3, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xfe5f}, {&(0x7f0000000840)="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", 0x113}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0bea0", 0xbf}], 0x3}, 0x8001) (async) 421.510214ms ago: executing program 3 (id=7097): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x4220338}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2d7ec0f700000000000b0000000800030000", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f462"], 0x58}}, 0x0) 396.7961ms ago: executing program 4 (id=7098): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x8, 0x22}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r8 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r8}, 0x20) bind$unix(r8, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETLINKNAME(r8, 0x89e0, &(0x7f0000000000)={0x3}) r9 = accept4$unix(r7, &(0x7f00000004c0), &(0x7f0000000240)=0x6e, 0x0) sendmmsg$unix(r9, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x21008084}}], 0x1, 0x0) 278.132295ms ago: executing program 3 (id=7099): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000170000000000000000000000791220000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x24}, 0x94) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x161b060f1436d4f2}, 0x10) unshare(0x20000400) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, 0x0, 0xc00) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="171abdb5d25446463f74d3740a70f6e0249ca79eab57d2457df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c9be6a87c9e3f4a9c7b847e74d2de1d95dcc82811ba3e4d049aa70572e323a9b76d3fe56fc785245e3dd4eb6fd1d435e", 0x6c}, {&(0x7f0000000680)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce95d4ba35f2eb622a380e72c66c93196ebf3cfcfad14644e6dcceb00920705382fadef5c17eae94a9578d9b3f67692be36c0a68c2ea8e9741bbefa08e31c991acb6c96a9b97d507ab4d9d9c6f66e11a31e528df5570aa43e0275fae14ceeaed60847c23360b0ee4ac087abc7def3979bd64d3745f8dfa3ca", 0xb0}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0x44854) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000500)=""/184, 0xb8}], 0x2}, 0x0) 262.69182ms ago: executing program 2 (id=7100): unshare(0x22020600) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) 246.849713ms ago: executing program 4 (id=7101): socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"], 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="020000000400000004000000010400000004"], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, 0xfffffffffffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'wg1\x00'}) unshare(0x6020480) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc", 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e08017", 0x4}], 0x2}}], 0x4, 0x4000000) sendmmsg$sock(r6, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000b40)="f44078a3b3", 0x5}, {0x0}], 0x2, &(0x7f0000001180)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x30}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@timestamping={{0x14, 0x1, 0x25, 0xdc63}}], 0x18}}], 0x2, 0x4) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000084) 197.676721ms ago: executing program 0 (id=7102): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) bind$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5, @mcast2, 0x1}, 0x20) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000004c0)="06", 0x1}, {&(0x7f0000000500)="03808338adb302d6327356864f9104217e97d0ae22feeed7be616722317ea784035f0101400b0b874adcb022bf64", 0x2e}], 0x2, &(0x7f00000018c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000390d000000000000480000000000000029000000390000003a0601010000000020010000000000000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000018010"], 0x10e0}}], 0x2, 0x880) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000006}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000003c0)=""/50, 0x32, 0x0, &(0x7f0000000400)=""/46, 0x2e}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x2c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000005c0)={'veth0_virt_wifi\x00', 0xb301}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r4) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @bcast, 0xff, 0x8, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000800), &(0x7f0000000840)=0x4) sendmsg(r3, &(0x7f00000003c0)={&(0x7f0000000200)=@phonet={0x23, 0x1, 0x81, 0x40}, 0x80, 0x0}, 0x40041) ioctl$SIOCNRDECOBS(r3, 0x89e2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'bridge0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 6.422263ms ago: executing program 2 (id=7103): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6}, 0x10) close(0x3) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf251a0000000700210062620000050092000a0000000c00228004"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) clock_gettime(0x0, &(0x7f0000002140)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000020c0)=[{{&(0x7f00000000c0)=@l2, 0x80, &(0x7f00000021c0), 0x0, &(0x7f00000003c0)=""/27, 0x1b}, 0x200}, {{&(0x7f0000001e00)=@pppol2tpv3, 0x80, &(0x7f0000000400)=[{&(0x7f0000001e80)=""/118, 0x76}, {&(0x7f0000001f00)=""/101, 0x65}, {&(0x7f0000002200)=""/197, 0xc5}], 0x3, &(0x7f0000002080)=""/27, 0x1b}, 0x10001}], 0x2, 0xc03e428f5b550537, &(0x7f0000002180)={r5, r6+60000000}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000001f80)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x521f8000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x208, 0x208, 0x118, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x4, 0x80, 0x4, 0x0, 0x10, 0xd06}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xfa, 0x40, {0x6}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [0x0, 0xff000000, 0x0, 0xffffffff], [0xff000000, 0xff000000, 0xff, 0xff000000], 'gretap0\x00', 'wg2\x00', {0xff}, {0xff}, 0x2c, 0xe, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'vcan0\x00', {0x200}}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x2, 0x0, [0x1, 0x80, 0x6, 0x3, 0xff, 0x9, 0xe5f8, 0x9, 0x59, 0x3, 0x0, 0xc, 0x8, 0x7, 0x3ff, 0x1], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x5}, {0x3, 0x6}, 0xb, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000040)="c0", 0x1}], 0x1, 0x8, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x4, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@private=0xa010102, 0x8}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r8, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xffff}, 0x1c) r9 = accept4$inet6(r2, 0x0, &(0x7f0000000000), 0x80000) r10 = socket$inet(0x2, 0xa, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xd}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) 0s ago: executing program 3 (id=7104): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket$unix(0x1, 0x2, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=ANY=[@ANYBLOB="0209fa000400000001000000000000000100180007ff0000010014005700000048337cc0743f6374537076ebb24eda989c010370bcb14e710f2d36d7afdd256ebccee75aa8ff4f311c56f52871e47c2c63c497044444df944e05c5a5119fb88cc4a5118c0523aba32faeb095900c67a1f7658384cea4ad87b008ec0422a182c2962004ad5291f7033fd722f98b1ad502eebc0200000000000000647fffffffffffffff71defde139fb44d66e880b2dce51ee5577dc1c1a0169c305fa189a337ab5f106d1dc6933430df72aa8931602bba3a1dc936f79069a41f7bf4d"], 0x20}}, 0x24000800) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x6, 0x0, 0x1, 0x7}, 0x20) r4 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r4, 0x0, 0x0, 0x12140, 0x0, 0x0) (async) sendto$l2tp6(r4, &(0x7f0000001340)="d34625ddf0e9fb922346db9db458e9a2e3f6286af77ceaa313983357784c074d89dceab5316cdbd7bfdedc5ce00fe78de14f85cc54e7e0a42cb9d90f80762bb33936aebf6a545790b6bd89a8cf659fcc6686e626be814d2b183ab83577e946bbda3f3ce796980342bc05b6b3ca4e08eb38d8691207008344761ab8ee16e7022ca5", 0x81, 0x4000, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2}, 0x20) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0xfffffffc}}, 0x2f) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2, 0x1}, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) (async) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) (async, rerun: 64) recvmmsg(r8, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/4096, 0x1000}, 0x7}], 0x1, 0x2, 0x0) (async, rerun: 64) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) (async) sendto$inet6(r8, 0x0, 0x0, 0x9595eeaea9480361, &(0x7f0000001500)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x16, r7, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x6e) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) kernel console output (not intermixed with test programs): speed is unknown, defaulting to 1000 [ 877.584674][T28461] netlink: 'syz.3.5540': attribute type 15 has an invalid length. [ 877.593138][T28459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5539'. [ 877.749917][T28468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5542'. [ 877.822090][T28469] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5541'. [ 877.879755][T28446] vxcan1 speed is unknown, defaulting to 1000 [ 877.962927][T28473] netlink: 'syz.4.5543': attribute type 1 has an invalid length. [ 879.016602][T28526] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 879.216658][T28526] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 879.262632][T28538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.371687][T28526] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 879.491951][T28526] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 879.870295][T21494] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 879.913541][T10317] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 880.002880][T28573] xt_TPROXY: Can be used only with -p tcp or -p udp [ 880.024138][T21489] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 880.058763][T21489] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 880.604303][T28610] __nla_validate_parse: 8 callbacks suppressed [ 880.604325][T28610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5581'. [ 880.783427][T28614] rdma_op ffff88807f6649f0 conn xmit_rdma 0000000000000000 [ 880.872885][T28612] netlink: 'syz.0.5582': attribute type 303 has an invalid length. [ 880.900161][T28619] netlink: 'syz.2.5584': attribute type 3 has an invalid length. [ 880.913184][T28619] netlink: 'syz.2.5584': attribute type 9 has an invalid length. [ 880.953388][T28612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5582'. [ 881.162319][T28632] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5589'. [ 881.590372][T28658] nbd: couldn't find device at index 536870912 [ 881.840336][T28669] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.970186][T28669] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.103152][T28669] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.227734][T28669] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.388910][T21490] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.409516][T28702] x_tables: duplicate underflow at hook 3 [ 882.415522][T28703] x_tables: duplicate underflow at hook 3 [ 882.509093][T21490] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.519652][T28679] virt_wifi0 speed is unknown, defaulting to 1000 [ 882.642692][T21490] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.671386][T21490] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.712568][T28709] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5608'. [ 882.804252][T28709] netlink: 'syz.4.5608': attribute type 3 has an invalid length. [ 882.826211][T28709] netlink: 'syz.4.5608': attribute type 3 has an invalid length. [ 882.855902][T28712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5609'. [ 882.898372][T28679] vxcan1 speed is unknown, defaulting to 1000 [ 882.923136][T28718] pim6reg: entered allmulticast mode [ 882.948265][T28718] pim6reg: left allmulticast mode [ 883.007327][T28723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5609'. [ 883.891606][T28739] netlink: 'syz.4.5613': attribute type 1 has an invalid length. [ 884.164022][T28750] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 884.219831][T28744] nbd0: detected capacity change from 0 to 63 [ 884.321830][ T5844] block nbd0: Receive control failed (result -32) [ 884.483853][T28768] bridge0: port 1(macvlan0) entered blocking state [ 884.520415][T28768] bridge0: port 1(macvlan0) entered disabled state [ 884.544976][T28768] macvlan0: entered allmulticast mode [ 884.588659][T28768] bridge0: entered allmulticast mode [ 884.634468][T28768] macvlan0: left allmulticast mode [ 884.640572][T28768] bridge0: left allmulticast mode [ 885.025819][T28785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5626'. [ 885.069257][T28788] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5627'. [ 885.475915][T28807] virt_wifi0 speed is unknown, defaulting to 1000 [ 885.761718][T28819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5636'. [ 885.982348][T28828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5638'. [ 886.010079][T28807] vxcan1 speed is unknown, defaulting to 1000 [ 886.166459][T28833] virt_wifi0 speed is unknown, defaulting to 1000 [ 886.680010][T28833] vxcan1 speed is unknown, defaulting to 1000 [ 886.765193][T28847] virt_wifi0 speed is unknown, defaulting to 1000 [ 886.985714][T28855] netlink: 77 bytes leftover after parsing attributes in process `syz.2.5647'. [ 887.117427][T28860] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 887.315316][T28847] vxcan1 speed is unknown, defaulting to 1000 [ 887.860981][T28871] wireguard0: entered allmulticast mode [ 887.870643][T28871] wireguard0: entered promiscuous mode [ 887.876849][T28871] team0: Port device wireguard0 added [ 887.983731][T28874] netlink: zone id is out of range [ 887.989250][T28874] netlink: zone id is out of range [ 887.994398][T28874] netlink: set zone limit has 4 unknown bytes [ 888.518814][T28889] tipc: Enabled bearer , priority 0 [ 888.565791][T28884] syzkaller0: entered promiscuous mode [ 888.571517][T28884] syzkaller0: entered allmulticast mode [ 888.673064][T28883] tipc: Resetting bearer [ 888.745495][T28883] tipc: Disabling bearer [ 888.939025][T28905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5660'. [ 888.951908][T28906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5659'. [ 889.073690][T28912] netlink: 'syz.0.5661': attribute type 1 has an invalid length. [ 889.117416][T28908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5661'. [ 889.554608][T28920] virt_wifi0 speed is unknown, defaulting to 1000 [ 889.814560][T28944] netlink: 'syz.2.5667': attribute type 10 has an invalid length. [ 890.104846][T28955] pim6reg99999999: entered allmulticast mode [ 890.119682][T28954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5672'. [ 890.125177][T28955] batadv1: entered promiscuous mode [ 890.134392][T28955] batadv1: entered allmulticast mode [ 890.219381][T28920] vxcan1 speed is unknown, defaulting to 1000 [ 891.095783][T29004] netlink: 'syz.2.5685': attribute type 58 has an invalid length. [ 891.104377][T29004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5685'. [ 891.125814][T29005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5683'. [ 891.157499][T29008] netlink: 'syz.2.5685': attribute type 58 has an invalid length. [ 891.189867][T29008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5685'. [ 891.244070][T29006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5684'. [ 891.839222][T29033] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5691'. [ 891.901990][T29039] netlink: 'syz.1.5692': attribute type 33 has an invalid length. [ 891.965818][T29039] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5692'. [ 891.998765][T29042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5693'. [ 892.110885][T29042] ip6gre2: entered promiscuous mode [ 892.596660][T29062] virt_wifi0 speed is unknown, defaulting to 1000 [ 892.625225][T29064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5700'. [ 892.843082][T29062] vxcan1 speed is unknown, defaulting to 1000 [ 892.889915][T29070] netlink: 59 bytes leftover after parsing attributes in process `syz.0.5699'. [ 892.930592][T29070] netlink: 59 bytes leftover after parsing attributes in process `syz.0.5699'. [ 893.250973][T29080] virt_wifi0 speed is unknown, defaulting to 1000 [ 894.271618][T29125] syzkaller1: entered promiscuous mode [ 894.277315][T29125] syzkaller1: entered allmulticast mode [ 894.330192][T29125] syzkaller1: left promiscuous mode [ 894.335470][T29125] syzkaller1: left allmulticast mode [ 894.403055][T29080] vxcan1 speed is unknown, defaulting to 1000 [ 894.409397][T29083] xt_hashlimit: max too large, truncated to 1048576 [ 894.750899][T29140] netlink: 'syz.0.5720': attribute type 13 has an invalid length. [ 894.766014][T29140] netlink: 'syz.0.5720': attribute type 17 has an invalid length. [ 894.970062][T29140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 895.117325][T29145] virt_wifi0 speed is unknown, defaulting to 1000 [ 895.405204][T29160] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 895.823932][T29162] virt_wifi0 speed is unknown, defaulting to 1000 [ 895.888429][T29145] vxcan1 speed is unknown, defaulting to 1000 [ 896.272878][T29178] __nla_validate_parse: 72 callbacks suppressed [ 896.272900][T29178] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5729'. [ 896.383574][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 896.394815][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 896.402985][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 896.411517][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 896.420972][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 896.438256][T29162] vxcan1 speed is unknown, defaulting to 1000 [ 896.698046][T29185] virt_wifi0 speed is unknown, defaulting to 1000 [ 897.137977][T29185] vxcan1 speed is unknown, defaulting to 1000 [ 897.418328][T29189] virt_wifi0 speed is unknown, defaulting to 1000 [ 897.653297][T29197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5732'. [ 897.933454][T29189] vxcan1 speed is unknown, defaulting to 1000 [ 898.041408][T29205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5736'. [ 898.054620][T29205] team_slave_0: mtu less than device minimum [ 898.285700][T29208] netlink: 'syz.0.5737': attribute type 1 has an invalid length. [ 898.293836][T29208] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5737'. [ 898.303831][T29208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5737'. [ 898.488634][ T5838] Bluetooth: hci2: command tx timeout [ 898.965212][T29225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5740'. [ 899.069296][T29225] netlink: 79 bytes leftover after parsing attributes in process `syz.0.5740'. [ 899.991772][T29236] virt_wifi0 speed is unknown, defaulting to 1000 [ 899.992311][T29185] chnl_net:caif_netlink_parms(): no params data found [ 900.291856][T29236] vxcan1 speed is unknown, defaulting to 1000 [ 900.475528][T29185] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.504163][T29185] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.524224][T29185] bridge_slave_0: entered allmulticast mode [ 900.543730][T29185] bridge_slave_0: entered promiscuous mode [ 900.563156][T29185] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.568198][ T5838] Bluetooth: hci2: command tx timeout [ 900.594924][T29185] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.617165][T29185] bridge_slave_1: entered allmulticast mode [ 900.652722][T29185] bridge_slave_1: entered promiscuous mode [ 900.776193][T29185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.814174][T29185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.982746][T29185] team0: Port device team_slave_0 added [ 901.010648][T29185] team0: Port device team_slave_1 added [ 901.314536][T29185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.559909][T29185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.630246][T29185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.682583][T29185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.698734][T29185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.758649][T29185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.092475][T29185] hsr_slave_0: entered promiscuous mode [ 902.101351][T29185] hsr_slave_1: entered promiscuous mode [ 902.128899][T29185] debugfs: 'hsr0' already exists in 'hsr' [ 902.134702][T29185] Cannot create hsr debugfs directory [ 902.216457][T29278] sctp: [Deprecated]: syz.1.5757 (pid 29278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 902.216457][T29278] Use struct sctp_sack_info instead [ 902.233720][T29276] bridge_slave_0: left allmulticast mode [ 902.239648][T29276] bridge_slave_0: left promiscuous mode [ 902.245482][T29276] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.323654][T29276] bridge_slave_1: left allmulticast mode [ 902.360536][T29290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5756'. [ 902.373230][T29276] bridge_slave_1: left promiscuous mode [ 902.379876][T29276] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.402651][T29276] bond0: (slave bond_slave_0): Releasing backup interface [ 902.425840][T29276] bond_slave_0: left promiscuous mode [ 902.447067][T29293] rdma_op ffff88807cc929f0 conn xmit_rdma 0000000000000000 [ 902.464141][T29276] team0: Port device team_slave_0 removed [ 902.485895][T29276] team0: Port device team_slave_1 removed [ 902.501511][T29276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.534756][T29276] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 902.592453][T29286] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 902.648120][ T5838] Bluetooth: hci2: command tx timeout [ 902.864662][T29185] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.895987][T29310] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5763'. [ 902.906018][T29310] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5763'. [ 902.942291][T29312] netlink: 'syz.2.5765': attribute type 1 has an invalid length. [ 902.967401][T29185] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.010240][T29321] netlink: 'syz.0.5767': attribute type 1 has an invalid length. [ 903.018347][T29321] netlink: 'syz.0.5767': attribute type 2 has an invalid length. [ 903.045796][T29312] 8021q: adding VLAN 0 to HW filter on device bond9 [ 903.071554][T29318] bond9: (slave ip6gretap1): making interface the new active one [ 903.081429][T29318] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 903.116053][T29185] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.144602][T29323] veth3: entered promiscuous mode [ 903.153069][T29323] bond9: (slave veth3): Enslaving as an active interface with a down link [ 903.165772][T29312] erspan0: entered allmulticast mode [ 903.192646][T29312] bond9: (slave erspan0): Enslaving as an active interface with an up link [ 903.242323][T29325] bond8: option arp_interval: invalid value (18446744073709551615) [ 903.252598][T29325] bond8: option arp_interval: allowed values 0 - 2147483647 [ 903.263095][T29325] bond8 (unregistering): Released all slaves [ 903.303933][T29185] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.345078][T29318] bond9: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 903.585417][T29336] bond10: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 903.601600][T29336] bond10 (unregistering): Released all slaves [ 903.871513][T29185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 903.912478][T29185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 904.110262][T29382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5776'. [ 904.161860][T29185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 904.242322][T29185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 904.317129][T29385] xt_ecn: cannot match TCP bits for non-tcp packets [ 904.364638][T29391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5778'. [ 904.419711][T29400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5777'. [ 904.614947][T29185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.693614][T29185] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.724728][T21489] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.728101][ T5838] Bluetooth: hci2: command tx timeout [ 904.731958][T21489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.795401][T29409] virt_wifi0 speed is unknown, defaulting to 1000 [ 904.820884][T29414] atm:sigd_send: bad message type 36 [ 904.841002][T21491] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.848213][T21491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.977568][T29185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 905.017575][T29185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 905.131579][T29409] vxcan1 speed is unknown, defaulting to 1000 [ 905.441498][T29424] syzkaller0: entered promiscuous mode [ 905.450500][T29424] syzkaller0: entered allmulticast mode [ 905.626755][T29438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5786'. [ 905.726777][T29433] virt_wifi0 speed is unknown, defaulting to 1000 [ 907.367995][T29433] vxcan1 speed is unknown, defaulting to 1000 [ 907.386072][T29445] syzkaller0: entered promiscuous mode [ 907.391759][T29445] syzkaller0: entered allmulticast mode [ 907.531018][T29441] virt_wifi0 speed is unknown, defaulting to 1000 [ 907.544127][T29457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5788'. [ 907.612174][T29185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.920144][T29441] vxcan1 speed is unknown, defaulting to 1000 [ 908.214065][T29185] veth0_vlan: entered promiscuous mode [ 908.228673][T29185] veth1_vlan: entered promiscuous mode [ 908.274124][T29185] veth0_macvtap: entered promiscuous mode [ 908.286021][T29185] veth1_macvtap: entered promiscuous mode [ 908.316880][T29185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.455782][T29185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.516715][T21489] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.591500][T21489] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.742080][T21489] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.757538][T21489] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.116458][T29474] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5791'. [ 909.495731][T29480] syzkaller0: entered promiscuous mode [ 909.501394][T29480] syzkaller0: entered allmulticast mode [ 909.558750][T10317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.566749][T10317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.377342][T29502] syz_tun: entered allmulticast mode [ 911.384653][T29502] syz_tun: left allmulticast mode [ 911.446961][T21491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.481008][T21491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.499917][T29508] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 911.572818][T29512] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5798'. [ 911.810409][T29524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5800'. [ 911.880164][T29524] 8021q: adding VLAN 0 to HW filter on device bond6 [ 911.930650][T29534] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 911.960443][T29534] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 911.983557][T29542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5803'. [ 912.036515][T29542] vlan2: entered promiscuous mode [ 912.042377][T29542] bond0: entered promiscuous mode [ 912.048067][T29542] bond_slave_0: entered promiscuous mode [ 912.054093][T29542] bond_slave_1: entered promiscuous mode [ 912.076106][T29537] netlink: 'syz.4.5803': attribute type 14 has an invalid length. [ 912.256067][T29547] batadv_slave_1: entered promiscuous mode [ 912.743437][T29546] batadv_slave_1: left promiscuous mode [ 912.746512][T29580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5813'. [ 912.763019][T29580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5813'. [ 912.861923][T29573] virt_wifi0 speed is unknown, defaulting to 1000 [ 912.919443][T29566] virt_wifi0 speed is unknown, defaulting to 1000 [ 912.989487][T29589] netlink: 'syz.4.5815': attribute type 10 has an invalid length. [ 912.997462][T29589] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5815'. [ 913.046505][T29589] dummy0: entered promiscuous mode [ 913.054215][T29589] bridge0: port 3(dummy0) entered blocking state [ 913.078157][T29589] bridge0: port 3(dummy0) entered disabled state [ 913.084811][T29589] dummy0: entered allmulticast mode [ 913.101384][T29589] bridge0: port 3(dummy0) entered blocking state [ 913.107976][T29589] bridge0: port 3(dummy0) entered forwarding state [ 913.180087][T29593] sctp: [Deprecated]: syz.0.5816 (pid 29593) Use of int in max_burst socket option. [ 913.180087][T29593] Use struct sctp_assoc_value instead [ 913.307458][T29594] virt_wifi0 speed is unknown, defaulting to 1000 [ 913.384622][ T30] audit: type=1107 audit(1760372438.237:9): pid=29600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='þÈüTš¦¯×¨=f÷ø(' [ 913.779866][T29573] vxcan1 speed is unknown, defaulting to 1000 [ 914.233460][T29643] syzkaller0: entered promiscuous mode [ 914.239125][T29643] syzkaller0: entered allmulticast mode [ 914.315053][T29648] netlink: 676 bytes leftover after parsing attributes in process `syz.4.5830'. [ 914.337518][T29648] netlink: 676 bytes leftover after parsing attributes in process `syz.4.5830'. [ 914.559892][T29566] vxcan1 speed is unknown, defaulting to 1000 [ 915.086051][T29670] €Â: renamed from hsr0 (while UP) [ 915.196151][T29594] vxcan1 speed is unknown, defaulting to 1000 [ 915.222378][T29660] virt_wifi0 speed is unknown, defaulting to 1000 [ 915.278913][T29674] netlink: zone id is out of range [ 915.442489][T29678] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 915.464613][T29676] sctp: [Deprecated]: syz.1.5838 (pid 29676) Use of int in max_burst socket option. [ 915.464613][T29676] Use struct sctp_assoc_value instead [ 916.002915][T29696] netlink: 20824 bytes leftover after parsing attributes in process `syz.4.5843'. [ 916.025117][T29695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5844'. [ 916.089858][T29660] vxcan1 speed is unknown, defaulting to 1000 [ 916.203301][T29700] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5845'. [ 916.215921][T29700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5845'. [ 916.229645][T29700] netlink: 'syz.1.5845': attribute type 1 has an invalid length. [ 916.252654][T29700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5845'. [ 916.493998][T29705] ip6gre2: entered allmulticast mode [ 916.753463][T29711] virt_wifi0 speed is unknown, defaulting to 1000 [ 917.483105][T29711] vxcan1 speed is unknown, defaulting to 1000 [ 917.684269][T29735] syzkaller0: entered promiscuous mode [ 917.691316][T29735] syzkaller0: entered allmulticast mode [ 918.012794][T29734] virt_wifi0 speed is unknown, defaulting to 1000 [ 919.319889][T29734] vxcan1 speed is unknown, defaulting to 1000 [ 919.530751][T29758] virt_wifi0 speed is unknown, defaulting to 1000 [ 919.584878][T29761] __nla_validate_parse: 6 callbacks suppressed [ 919.584925][T29761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5864'. [ 919.827039][T29775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5866'. [ 919.972151][T29776] tipc: Enabling of bearer rejected, failed to enable media [ 920.069188][T29758] vxcan1 speed is unknown, defaulting to 1000 [ 920.507493][T29787] virt_wifi0 speed is unknown, defaulting to 1000 [ 920.871088][T29791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5869'. [ 920.880572][T29791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5869'. [ 920.908017][T29791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 920.927826][T29794] netlink: 332 bytes leftover after parsing attributes in process `syz.3.5870'. [ 920.949316][T29794] netlink: 'syz.3.5870': attribute type 9 has an invalid length. [ 920.968106][T29794] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5870'. [ 920.986646][T29794] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5870'. [ 921.255602][T29787] vxcan1 speed is unknown, defaulting to 1000 [ 921.335606][T29811] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5873'. [ 921.513650][T29815] netlink: 'syz.3.5874': attribute type 1 has an invalid length. [ 921.540535][T29815] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5874'. [ 921.683948][T29823] netlink: 388 bytes leftover after parsing attributes in process `syz.3.5876'. [ 921.758348][T29828] syzkaller0: entered promiscuous mode [ 921.763963][T29828] syzkaller0: entered allmulticast mode [ 921.787450][T29830] netlink: 'syz.4.5879': attribute type 2 has an invalid length. [ 922.255744][T29846] netlink: 'syz.1.5884': attribute type 1 has an invalid length. [ 922.426844][T29846] 8021q: adding VLAN 0 to HW filter on device bond6 [ 922.453972][T29846] veth1_vlan: left promiscuous mode [ 922.460275][T29846] macvlan1: entered allmulticast mode [ 922.493184][T29846] veth1_vlan: entered promiscuous mode [ 922.504226][T29846] veth1_vlan: entered allmulticast mode [ 922.530556][T29846] bond6: (slave macvlan1): making interface the new active one [ 922.549757][T29846] bond6: (slave macvlan1): Enslaving as an active interface with an up link [ 923.726132][T29890] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 923.761596][T29893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 923.773365][T29893] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 923.917593][T29897] tc_dump_action: action bad kind [ 923.997542][T29890] virt_wifi0 speed is unknown, defaulting to 1000 [ 924.064643][T29891] virt_wifi0 speed is unknown, defaulting to 1000 [ 924.232321][T29908] netlink: 'syz.2.5900': attribute type 1 has an invalid length. [ 924.261911][T29908] netlink: 'syz.2.5900': attribute type 1 has an invalid length. [ 924.644050][T29890] vxcan1 speed is unknown, defaulting to 1000 [ 924.752589][T29926] virt_wifi0 speed is unknown, defaulting to 1000 [ 925.649709][T29977] __nla_validate_parse: 7 callbacks suppressed [ 925.649738][T29977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5916'. [ 925.653188][T29891] vxcan1 speed is unknown, defaulting to 1000 [ 925.655963][T29977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5916'. [ 925.951765][T29992] netlink: 'syz.0.5920': attribute type 21 has an invalid length. [ 925.963076][T29992] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5920'. [ 926.339710][T30004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5921'. [ 926.495094][T30009] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 926.677331][T29926] vxcan1 speed is unknown, defaulting to 1000 [ 926.782062][T30012] netlink: 766 bytes leftover after parsing attributes in process `syz.4.5923'. [ 926.986395][T30035] netlink: 'syz.1.5929': attribute type 1 has an invalid length. [ 927.083109][T30035] bond7: entered promiscuous mode [ 927.093706][T30035] 8021q: adding VLAN 0 to HW filter on device bond7 [ 927.320351][T30043] virt_wifi0 speed is unknown, defaulting to 1000 [ 927.330050][T30047] netlink: 'syz.1.5931': attribute type 21 has an invalid length. [ 927.404879][T30047] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5931'. [ 927.595752][T30048] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 927.751375][T30043] vxcan1 speed is unknown, defaulting to 1000 [ 927.931669][T30056] tipc: Enabled bearer , priority 0 [ 927.939877][T30056] syzkaller0: entered promiscuous mode [ 927.945482][T30056] syzkaller0: entered allmulticast mode [ 927.961906][T30056] tipc: Resetting bearer [ 927.985867][T30056] bond1: left promiscuous mode [ 927.991543][T30056] geneve2: left promiscuous mode [ 928.004959][T30056] bond7: left promiscuous mode [ 928.021080][T30056] syzkaller0: left promiscuous mode [ 928.205734][T30057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5934'. [ 928.346885][T30066] netlink: zone id is out of range [ 928.356558][T30066] netlink: zone id is out of range [ 928.372092][T30066] netlink: del zone limit has 4 unknown bytes [ 928.776953][T30055] tipc: Resetting bearer [ 928.856009][T30055] tipc: Disabling bearer [ 929.079237][T30076] netlink: 'syz.1.5937': attribute type 17 has an invalid length. [ 929.246734][T30076] virt_wifi0 speed is unknown, defaulting to 1000 [ 929.629349][T30089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5941'. [ 929.778964][T30094] netlink: 'syz.4.5944': attribute type 15 has an invalid length. [ 929.837669][T30094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5944'. [ 929.878456][T30100] Bluetooth: MGMT ver 1.23 [ 929.916800][T30100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5946'. [ 929.998965][T30076] vxcan1 speed is unknown, defaulting to 1000 [ 930.289202][T30116] virt_wifi0 speed is unknown, defaulting to 1000 [ 931.386613][T30134] xt_TCPMSS: Only works on TCP SYN packets [ 931.402990][T30116] vxcan1 speed is unknown, defaulting to 1000 [ 931.723424][T30136] __nla_validate_parse: 1 callbacks suppressed [ 931.723446][T30136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5958'. [ 932.126975][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 932.136887][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 932.145695][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 932.168537][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 932.177172][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 932.405191][T30144] syzkaller1: entered promiscuous mode [ 932.423850][T30144] syzkaller1: entered allmulticast mode [ 932.544378][T30141] virt_wifi0 speed is unknown, defaulting to 1000 [ 933.000024][T30141] vxcan1 speed is unknown, defaulting to 1000 [ 933.366771][T30166] virt_wifi0 speed is unknown, defaulting to 1000 [ 933.375416][T30174] netlink: 360 bytes leftover after parsing attributes in process `syz.3.5970'. [ 934.147226][T30187] tipc: Enabled bearer , priority 0 [ 934.204040][T30186] syzkaller0: entered promiscuous mode [ 934.215046][T30186] syzkaller0: entered allmulticast mode [ 934.248206][ T5838] Bluetooth: hci1: command tx timeout [ 934.307701][T30166] vxcan1 speed is unknown, defaulting to 1000 [ 934.342845][T30141] chnl_net:caif_netlink_parms(): no params data found [ 934.386944][T30186] tipc: Resetting bearer [ 934.452098][T30185] tipc: Resetting bearer [ 934.474320][T30185] tipc: Disabling bearer [ 934.606068][T30141] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.614167][T30141] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.645465][T30141] bridge_slave_0: entered allmulticast mode [ 934.654479][T30141] bridge_slave_0: entered promiscuous mode [ 934.664335][T30141] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.677280][T30203] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5976'. [ 934.688138][T30141] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.688393][T30141] bridge_slave_1: entered allmulticast mode [ 934.690582][T30141] bridge_slave_1: entered promiscuous mode [ 934.698372][T30200] atomic_op ffff888020f9f998 conn xmit_atomic 0000000000000000 [ 934.719903][T30200] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5975'. [ 934.730403][T30200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5975'. [ 934.846458][T30141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.872664][T10296] smc: removing ib device syz! [ 934.881079][T30208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5976'. [ 934.902298][T30141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.036081][T30218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5980'. [ 935.223524][T30141] team0: Port device team_slave_0 added [ 935.253239][T30141] team0: Port device team_slave_1 added [ 935.661295][T30141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.678322][T30141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.688904][T30229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5983'. [ 935.725397][T30141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.808495][T30141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.815501][T30141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.843335][T30141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.929414][T30230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5983'. [ 936.064370][T30141] hsr_slave_0: entered promiscuous mode [ 936.099362][T30141] hsr_slave_1: entered promiscuous mode [ 936.109170][T30141] debugfs: 'hsr0' already exists in 'hsr' [ 936.114955][T30141] Cannot create hsr debugfs directory [ 936.207479][T30238] rdma_rxe: rxe_newlink: failed to add bond0 [ 936.292356][T30236] macvlan0: entered promiscuous mode [ 936.299383][T30240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5987'. [ 936.328047][ T5838] Bluetooth: hci1: command tx timeout [ 936.705967][T30248] netlink: 'syz.0.5989': attribute type 21 has an invalid length. [ 936.721216][T30141] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 936.782264][T30248] __nla_validate_parse: 1 callbacks suppressed [ 936.782285][T30248] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5989'. [ 936.916348][T30141] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 937.063434][T30141] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 937.149160][T30141] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 937.192038][T30264] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 937.695258][T30141] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 937.790415][T30141] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 937.864266][T30141] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 937.877337][T30141] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 938.162354][T30141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.222884][T30141] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.279796][T30315] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 938.311475][T10306] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.318736][T10306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.408672][ T5838] Bluetooth: hci1: command tx timeout [ 938.420358][T10306] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.427622][T10306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.450963][T30326] netlink: 23 bytes leftover after parsing attributes in process `syz.1.6006'. [ 938.514973][T30328] netlink: 'syz.4.6007': attribute type 6 has an invalid length. [ 938.690726][T30321] virt_wifi0 speed is unknown, defaulting to 1000 [ 938.700271][T30321] vxcan1 speed is unknown, defaulting to 1000 [ 938.712846][T30326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6006'. [ 939.334860][T30340] virt_wifi0 speed is unknown, defaulting to 1000 [ 939.336513][T30354] tipc: Enabling of bearer rejected, failed to enable media [ 939.430533][T30348] virt_wifi0 speed is unknown, defaulting to 1000 [ 939.437183][T30340] vxcan1 speed is unknown, defaulting to 1000 [ 939.516347][T30345] virt_wifi0 speed is unknown, defaulting to 1000 [ 939.581616][T30141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.675866][T30367] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6012'. [ 939.814796][T30365] virt_wifi0 speed is unknown, defaulting to 1000 [ 939.921307][T30141] veth0_vlan: entered promiscuous mode [ 939.944963][T30141] veth1_vlan: entered promiscuous mode [ 940.011543][T30141] veth0_macvtap: entered promiscuous mode [ 940.032797][T30141] veth1_macvtap: entered promiscuous mode [ 940.055494][T30376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6014'. [ 940.088810][T30376] 8021q: adding VLAN 0 to HW filter on device bond9 [ 940.100918][T30141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.112036][T30348] vxcan1 speed is unknown, defaulting to 1000 [ 940.134278][T30141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.172189][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.193263][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.213587][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.245085][T30379] netlink: 'syz.1.6015': attribute type 12 has an invalid length. [ 940.258855][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.369215][T10318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.377193][T10318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.440586][T30345] vxcan1 speed is unknown, defaulting to 1000 [ 940.450229][T10296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.459388][T10296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.489777][ T5838] Bluetooth: hci1: command tx timeout [ 940.597766][T30383] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5956'. [ 940.717071][T30365] vxcan1 speed is unknown, defaulting to 1000 [ 941.755003][T30404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6020'. [ 941.804767][T30404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6020'. [ 942.213085][T30412] virt_wifi0 speed is unknown, defaulting to 1000 [ 942.272555][T30412] vxcan1 speed is unknown, defaulting to 1000 [ 942.445754][T30421] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6024'. [ 942.488638][T30420] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6024'. [ 942.552010][T30423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6025'. [ 942.611509][T30420] dvmrp1: entered allmulticast mode [ 942.680509][T30421] virt_wifi0 speed is unknown, defaulting to 1000 [ 942.811764][T30432] netlink: 'syz.2.6027': attribute type 2 has an invalid length. [ 942.838495][T30432] netlink: 'syz.2.6027': attribute type 4 has an invalid length. [ 942.846373][T30432] netlink: 'syz.2.6027': attribute type 8 has an invalid length. [ 942.896037][T30432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6027'. [ 942.929343][T30429] netlink: 'syz.2.6027': attribute type 1 has an invalid length. [ 943.005715][T30421] vxcan1 speed is unknown, defaulting to 1000 [ 943.510273][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 943.520994][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 943.529873][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 943.538245][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 943.546064][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 943.773345][T30442] virt_wifi0 speed is unknown, defaulting to 1000 [ 943.819491][T30442] vxcan1 speed is unknown, defaulting to 1000 [ 943.861103][T30447] virt_wifi0 speed is unknown, defaulting to 1000 [ 943.906915][T30452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6033'. [ 944.022724][T30455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6034'. [ 944.077351][T30459] tipc: New replicast peer: 255.255.255.255 [ 944.090089][T30459] tipc: Enabled bearer , priority 26 [ 944.216054][T30447] vxcan1 speed is unknown, defaulting to 1000 [ 944.331303][T30475] netlink: 'syz.4.6038': attribute type 1 has an invalid length. [ 944.520543][T30475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 944.719166][T30480] virt_wifi0 speed is unknown, defaulting to 1000 [ 944.855628][T30489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6039'. [ 944.895229][T30480] vxcan1 speed is unknown, defaulting to 1000 [ 944.961908][T30442] chnl_net:caif_netlink_parms(): no params data found [ 945.208940][T10226] tipc: Node number set to 1775506622 [ 945.282294][T30509] netlink: 'syz.1.6042': attribute type 16 has an invalid length. [ 945.302862][T30509] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.6042'. [ 945.316059][T30442] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.325953][T30442] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.336626][T30442] bridge_slave_0: entered allmulticast mode [ 945.345365][T30442] bridge_slave_0: entered promiscuous mode [ 945.354949][T30442] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.368981][T30442] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.386605][T30442] bridge_slave_1: entered allmulticast mode [ 945.394890][T30442] bridge_slave_1: entered promiscuous mode [ 945.556558][T30518] vlan2: entered promiscuous mode [ 945.561838][T30518] geneve1: entered promiscuous mode [ 945.567292][T30518] vlan2: entered allmulticast mode [ 945.573700][T30518] geneve1: entered allmulticast mode [ 945.582867][T30519] netlink: 'syz.4.6044': attribute type 1 has an invalid length. [ 945.591327][T30516] tipc: Enabling of bearer rejected, failed to enable media [ 945.620743][ T5838] Bluetooth: hci4: command tx timeout [ 945.662497][T30442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.672545][T30514] syzkaller1: entered promiscuous mode [ 945.679684][T30514] syzkaller1: entered allmulticast mode [ 945.741881][T30442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.763689][T30512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6044'. [ 945.774244][T30514] syzkaller1: left promiscuous mode [ 945.780122][T30514] syzkaller1: left allmulticast mode [ 945.880146][T30442] team0: Port device team_slave_0 added [ 945.890571][T30442] team0: Port device team_slave_1 added [ 946.071039][T30442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.087609][T30442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.115476][T30442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.149974][T30442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.166087][T30442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.211496][T30442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.376470][T30442] hsr_slave_0: entered promiscuous mode [ 946.385946][T30442] hsr_slave_1: entered promiscuous mode [ 946.400169][T30442] debugfs: 'hsr0' already exists in 'hsr' [ 946.406077][T30442] Cannot create hsr debugfs directory [ 946.722386][T30542] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 946.866854][T30442] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.995139][T30557] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 947.010359][T30442] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.146571][T30442] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.246850][T30552] virt_wifi0 speed is unknown, defaulting to 1000 [ 947.324775][T30442] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.376947][T30552] vxcan1 speed is unknown, defaulting to 1000 [ 947.688386][ T5838] Bluetooth: hci4: command tx timeout [ 947.945703][T30442] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 947.993754][T30442] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 948.037207][T30442] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 948.077412][T30442] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 949.242857][T30442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.275780][T30442] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.290554][T30597] __nla_validate_parse: 2 callbacks suppressed [ 949.290573][T30597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6063'. [ 949.352323][T21489] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.359539][T21489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.375416][T10306] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.382634][T10306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.436428][T30602] netlink: 'syz.1.6064': attribute type 1 has an invalid length. [ 949.469844][T30602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6064'. [ 949.494230][T30607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6065'. [ 949.504692][T30607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6065'. [ 949.516461][T30607] netlink: 58 bytes leftover after parsing attributes in process `syz.3.6065'. [ 949.779259][ T5838] Bluetooth: hci4: command tx timeout [ 949.937070][T30442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.974793][T30629] netlink: 'syz.3.6071': attribute type 1 has an invalid length. [ 949.998051][T30629] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6071'. [ 950.072233][T30442] veth0_vlan: entered promiscuous mode [ 950.100984][T30442] veth1_vlan: entered promiscuous mode [ 950.159468][T30642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6075'. [ 950.239765][T30442] veth0_macvtap: entered promiscuous mode [ 950.287719][T30442] veth1_macvtap: entered promiscuous mode [ 950.319206][T30652] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 950.330178][T30652] syzkaller1: linktype set to 778 [ 950.420576][T30442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.465220][T30442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.491702][T21489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.517554][T21489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.565874][T21489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.582114][T21489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.694433][T30667] syzkaller0: entered promiscuous mode [ 950.712714][T30667] syzkaller0: entered allmulticast mode [ 951.858295][ T5838] Bluetooth: hci4: command tx timeout [ 952.952903][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.999695][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.100584][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.115423][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.372056][T30730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6093'. [ 953.681135][T30746] netlink: 'syz.1.6097': attribute type 4 has an invalid length. [ 953.707779][T30747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6096'. [ 953.731173][T30741] syzkaller0: entered promiscuous mode [ 953.749517][T30741] syzkaller0: entered allmulticast mode [ 953.776864][T30741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6094'. [ 953.882480][T30741] bridge0: entered promiscuous mode [ 953.892748][T30741] macvtap1: entered promiscuous mode [ 953.913760][T30741] macvtap1: entered allmulticast mode [ 953.931421][T30741] bridge0: entered allmulticast mode [ 954.150668][T30750] bridge0: left allmulticast mode [ 954.160827][T30750] bridge0: left promiscuous mode [ 954.816347][T30768] bridge_slave_0: left allmulticast mode [ 954.848062][T30768] bridge_slave_0: left promiscuous mode [ 954.854015][T30768] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.882524][T30768] bridge_slave_1: left allmulticast mode [ 954.889227][T30768] bridge_slave_1: left promiscuous mode [ 954.895299][T30768] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.934761][T30773] netlink: 'syz.2.6100': attribute type 10 has an invalid length. [ 954.996346][T30768] bond0: (slave bond_slave_0): Releasing backup interface [ 955.056202][T30768] bond0: (slave bond_slave_1): Releasing backup interface [ 955.110629][T30768] team0: Port device team_slave_0 removed [ 955.245008][T30768] team0: Port device team_slave_1 removed [ 955.256561][T30768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.278309][T30768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.390461][T30768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.398989][T30768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.410125][T30768] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 955.463114][T30765] mac80211_hwsim hwsim72 wlan1: entered allmulticast mode [ 955.485840][T30773] mac80211_hwsim hwsim72 wlan1: left allmulticast mode [ 955.506138][T30773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.517508][T30773] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 955.800282][T30785] syzkaller0: entered promiscuous mode [ 955.805818][T30785] syzkaller0: entered allmulticast mode [ 955.933805][T30796] syzkaller0: entered promiscuous mode [ 955.940122][T30796] syzkaller0: entered allmulticast mode [ 955.947558][T30793] tipc: Started in network mode [ 955.953023][T30793] tipc: Node identity 964323b3a46f, cluster identity 4711 [ 955.961055][T30793] tipc: Enabled bearer , priority 0 [ 956.006982][T30793] tipc: Resetting bearer [ 956.066356][T30793] tipc: Disabling bearer [ 956.079420][T30808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6103'. [ 956.323471][T30811] virt_wifi0 speed is unknown, defaulting to 1000 [ 956.364924][T30811] vxcan1 speed is unknown, defaulting to 1000 [ 956.484795][T30825] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6118'. [ 956.553689][T30822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6115'. [ 956.566337][T30822] tipc: Enabled bearer , priority 0 [ 956.680125][T30822] syzkaller0: entered promiscuous mode [ 956.685821][T30822] syzkaller0: entered allmulticast mode [ 956.692367][T30822] tipc: Resetting bearer [ 956.764087][T30834] netlink: 'syz.0.6119': attribute type 1 has an invalid length. [ 956.772345][T30834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6119'. [ 956.939331][T10306] tipc: Resetting bearer [ 956.962840][T30821] tipc: Resetting bearer [ 958.848342][T30821] tipc: Disabling bearer [ 958.932257][T30840] virt_wifi0 speed is unknown, defaulting to 1000 [ 958.990566][T30840] vxcan1 speed is unknown, defaulting to 1000 [ 959.082814][T30855] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6126'. [ 959.102249][T30855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6126'. [ 959.170507][T30860] netlink: 'syz.0.6127': attribute type 3 has an invalid length. [ 959.938310][T30885] netlink: 1315 bytes leftover after parsing attributes in process `syz.1.6133'. [ 960.121881][T30892] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6134'. [ 960.314620][T30897] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6135'. [ 960.473446][T30903] geneve0: entered promiscuous mode [ 960.496883][T30903] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6137'. [ 960.904591][T30922] vlan3: entered allmulticast mode [ 960.920876][T30922] bridge_slave_0: entered allmulticast mode [ 961.189806][T30941] virt_wifi0 speed is unknown, defaulting to 1000 [ 961.221865][T30941] vxcan1 speed is unknown, defaulting to 1000 [ 961.396489][T30953] netlink: 'syz.3.6150': attribute type 13 has an invalid length. [ 961.423814][T30945] virt_wifi0 speed is unknown, defaulting to 1000 [ 961.435194][T30953] netlink: 'syz.3.6150': attribute type 17 has an invalid length. [ 961.456913][T30947] virt_wifi0 speed is unknown, defaulting to 1000 [ 961.505759][T30953] 0ªX¹¦D: left allmulticast mode [ 961.551300][T30953] erspan0: left promiscuous mode [ 961.752801][T30953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.796122][T30953] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.870161][T30953] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 962.010154][T30945] vxcan1 speed is unknown, defaulting to 1000 [ 962.122095][T30966] __nla_validate_parse: 2 callbacks suppressed [ 962.122114][T30966] netlink: 576 bytes leftover after parsing attributes in process `syz.3.6154'. [ 962.154107][T30966] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6154'. [ 962.164061][T30966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6154'. [ 962.461142][T30947] vxcan1 speed is unknown, defaulting to 1000 [ 962.499858][T30970] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6156'. [ 962.582698][T30971] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6156'. [ 963.625283][T30994] netlink: 'syz.1.6164': attribute type 1 has an invalid length. [ 963.650456][T30990] virt_wifi0 speed is unknown, defaulting to 1000 [ 963.670367][T30993] netlink: 'syz.0.6163': attribute type 2 has an invalid length. [ 963.671617][T30990] vxcan1 speed is unknown, defaulting to 1000 [ 963.685628][T30993] netlink: 'syz.0.6163': attribute type 4 has an invalid length. [ 963.693908][T30993] netlink: 'syz.0.6163': attribute type 8 has an invalid length. [ 963.703710][T30993] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6163'. [ 963.717673][T30993] netlink: 'syz.0.6163': attribute type 1 has an invalid length. [ 963.819134][T30993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 964.168199][T31003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6167'. [ 964.682964][T31015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6169'. [ 964.701381][T31015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6169'. [ 964.786564][T31010] bond2: option tlb_dynamic_lb: invalid value (71) [ 964.796545][T31010] bond2 (unregistering): Released all slaves [ 965.209713][T31023] syzkaller1: entered promiscuous mode [ 965.215252][T31023] syzkaller1: entered allmulticast mode [ 965.264934][T31024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6172'. [ 965.331147][T31024] ip6tnl1: entered promiscuous mode [ 965.336411][T31024] ip6tnl1: entered allmulticast mode [ 965.902193][T31051] IPVS: Unknown mcast interface: bridge [ 965.940211][T31051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.028056][T31058] syzkaller0: entered promiscuous mode [ 966.033773][T31058] syzkaller0: entered allmulticast mode [ 966.618622][T31101] netlink: 'syz.4.6195': attribute type 14 has an invalid length. [ 966.851493][T31107] IPv6: sit1: Disabled Multicast RS [ 966.878145][T31107] sctp: [Deprecated]: syz.0.6198 (pid 31107) Use of int in maxseg socket option. [ 966.878145][T31107] Use struct sctp_assoc_value instead [ 967.050803][T31118] netlink: 'syz.2.6201': attribute type 9 has an invalid length. [ 967.176324][T31127] __nla_validate_parse: 10 callbacks suppressed [ 967.176348][T31127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6204'. [ 967.238679][T31124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6204'. [ 967.307017][T31115] can: request_module (can-proto-0) failed. [ 967.648167][T31146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6207'. [ 967.775884][T31150] virt_wifi0 speed is unknown, defaulting to 1000 [ 967.786209][T31150] vxcan1 speed is unknown, defaulting to 1000 [ 967.935330][T31155] netlink: 'syz.0.6212': attribute type 4 has an invalid length. [ 967.959526][T31155] netlink: 'syz.0.6212': attribute type 3 has an invalid length. [ 967.967320][T31155] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6212'. [ 967.979858][T31157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6211'. [ 968.168749][T31165] netlink: 'syz.2.6215': attribute type 23 has an invalid length. [ 968.262690][T31163] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6214'. [ 968.426407][T31178] geneve2: entered promiscuous mode [ 968.433790][T10296] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 968.472963][T10296] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 968.483517][T31174] tipc: Started in network mode [ 968.496734][T31174] tipc: Node identity 8eec37c2f84a, cluster identity 4711 [ 968.513844][T31174] tipc: Enabled bearer , priority 0 [ 968.528617][T31177] syzkaller0: entered promiscuous mode [ 968.534385][T31177] syzkaller0: entered allmulticast mode [ 968.549124][T10296] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 968.595717][T10296] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 968.622789][T31174] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.6215'. [ 968.653144][T31174] tipc: Resetting bearer [ 968.975974][T31164] tipc: Resetting bearer [ 969.021335][T31164] tipc: Disabling bearer [ 969.439714][T31201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6224'. [ 969.468146][T31201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6224'. [ 969.481757][T31201] netlink: 'syz.3.6224': attribute type 12 has an invalid length. [ 969.489804][T31201] netlink: 'syz.3.6224': attribute type 11 has an invalid length. [ 969.551160][T31201] netlink: 'syz.3.6224': attribute type 16 has an invalid length. [ 969.586075][T31201] netlink: 'syz.3.6224': attribute type 17 has an invalid length. [ 970.051701][T31227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6231'. [ 970.096879][T31229] x_tables: duplicate underflow at hook 1 [ 970.330007][ T5838] Bluetooth: hci4: command tx timeout [ 970.391734][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 970.404979][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 970.414089][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 970.423485][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 970.439208][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 970.560947][T21489] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.574691][T21489] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.666353][T21489] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.703068][T21489] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.725412][T31259] block nbd2: Unsupported socket: should be TCP or UNIX. [ 970.754078][T31243] virt_wifi0 speed is unknown, defaulting to 1000 [ 970.771809][T31243] vxcan1 speed is unknown, defaulting to 1000 [ 970.823865][T21489] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.848386][T21489] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.959264][T21489] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.990980][T21489] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.043338][T31273] veth0_to_bond: mtu less than device minimum [ 971.251744][T31277] dvmrp8: entered allmulticast mode [ 971.327517][T31250] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 971.659748][T31295] xt_cgroup: xt_cgroup: no path or classid specified [ 971.683308][T21489] bond4 (unregistering): (slave gretap1): Releasing active interface [ 971.788029][T21489] dvmrp0 (unregistering): left allmulticast mode [ 971.811554][T21489] dvmrp1 (unregistering): left allmulticast mode [ 972.510824][T21489] bond1 (unregistering): Released all slaves [ 972.525864][T21489] bond2 (unregistering): Released all slaves [ 972.634118][T21489] bond3 (unregistering): Released all slaves [ 972.652638][T21489] bond0 (unregistering): Released all slaves [ 972.766822][T21489] bond4 (unregistering): Released all slaves [ 972.782195][T21489] bond5 (unregistering): Released all slaves [ 972.898095][T21489] bond6 (unregistering): (slave macvlan1): Releasing active interface [ 972.907210][T21489] veth1_vlan: left allmulticast mode [ 972.912662][T21489] veth1_vlan: left promiscuous mode [ 972.919799][T21489] bond6 (unregistering): Released all slaves [ 973.029159][T21489] bond7 (unregistering): Released all slaves [ 973.043307][T21489] bond8 (unregistering): Released all slaves [ 973.155347][T21489] bond9 (unregistering): Released all slaves [ 973.187060][T31277] virt_wifi0 speed is unknown, defaulting to 1000 [ 973.194800][T31291] hsr_slave_0: left promiscuous mode [ 973.201066][T31291] hsr_slave_1: left promiscuous mode [ 973.225189][T31276] dvmrp8: left allmulticast mode [ 973.352436][T31277] vxcan1 speed is unknown, defaulting to 1000 [ 973.365466][T21489] tipc: Left network mode [ 973.384474][T31295] virt_wifi0 speed is unknown, defaulting to 1000 [ 973.763912][T31243] chnl_net:caif_netlink_parms(): no params data found [ 973.929592][T31295] vxcan1 speed is unknown, defaulting to 1000 [ 974.136294][T31335] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 974.148555][T31335] bond7 (unregistering): Released all slaves [ 974.251580][T31243] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.260027][T31243] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.267399][T31243] bridge_slave_0: entered allmulticast mode [ 974.275989][T31243] bridge_slave_0: entered promiscuous mode [ 974.341320][T31243] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.350569][T31243] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.360992][T31243] bridge_slave_1: entered allmulticast mode [ 974.373141][T31243] bridge_slave_1: entered promiscuous mode [ 974.445408][T31344] syzkaller1: entered promiscuous mode [ 974.451207][T31344] syzkaller1: entered allmulticast mode [ 974.484629][T31349] vlan2: entered allmulticast mode [ 974.491547][T31349] dummy0: entered allmulticast mode [ 974.502993][T31243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.560072][T31243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.961590][T31364] __nla_validate_parse: 5 callbacks suppressed [ 974.961610][T31364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6262'. [ 975.014840][T31243] team0: Port device team_slave_0 added [ 975.039996][T31243] team0: Port device team_slave_1 added [ 975.076140][T21489] hsr_slave_0: left promiscuous mode [ 975.097439][T21489] hsr_slave_1: left promiscuous mode [ 975.157546][T21489] veth1_macvtap: left promiscuous mode [ 975.166601][T21489] veth0_vlan: left promiscuous mode [ 976.033518][T31364] team0: Mode changed to "activebackup" [ 976.247448][ T50] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 976.279005][T31243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.286003][T31243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.357155][T31243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.370834][T31243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.379041][T31243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.406466][T31243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.574251][T31243] hsr_slave_0: entered promiscuous mode [ 976.590935][T31243] hsr_slave_1: entered promiscuous mode [ 976.624778][T31243] debugfs: 'hsr0' already exists in 'hsr' [ 976.641714][T31243] Cannot create hsr debugfs directory [ 976.847577][T21489] IPVS: stop unused estimator thread 0... [ 977.042563][T31387] vxcan1 speed is unknown, defaulting to 1000 [ 977.726160][T31409] vxcan1 speed is unknown, defaulting to 1000 [ 977.814606][T31243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 977.873215][T31243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 977.894393][T31243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 977.935137][T31243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 978.044374][ T5915] IPVS: starting estimator thread 0... [ 978.072354][T31243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.099335][T31243] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.140586][T31427] IPVS: using max 24 ests per chain, 57600 per kthread [ 978.181426][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.188681][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.204225][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.211551][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.464459][T31433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6279'. [ 978.532033][T31433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6279'. [ 978.742179][T31445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6282'. [ 979.107222][T31461] nbd: must specify at least one socket [ 979.143410][T31243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.251300][T31243] veth0_vlan: entered promiscuous mode [ 979.274211][T31243] veth1_vlan: entered promiscuous mode [ 979.325079][T31243] veth0_macvtap: entered promiscuous mode [ 979.343651][T31472] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20003 [ 979.353769][T31243] veth1_macvtap: entered promiscuous mode [ 979.402078][T31243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.430999][T31473] netlink: 'syz.2.6289': attribute type 1 has an invalid length. [ 979.433547][T31243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.440398][T31473] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6289'. [ 979.466528][T10317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.490671][T10317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.518313][T10317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.640660][T10317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.741589][T31480] vxcan1 speed is unknown, defaulting to 1000 [ 979.907093][T21489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.940090][T21489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.042541][T21491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.098533][T21491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.213611][T31497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6296'. [ 980.248540][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 981.044515][ T5844] block nbd2: Receive control failed (result -32) [ 981.534610][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 981.547024][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 981.555286][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 981.567027][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 981.577461][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 981.645638][T31546] vxcan1 speed is unknown, defaulting to 1000 [ 981.802848][T31560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6307'. [ 982.886834][T10317] bond4 (unregistering): (slave gretap1): Releasing active interface [ 983.001801][T10317] dvmrp3 (unregistering): left allmulticast mode [ 983.033231][T10317] dvmrp1 (unregistering): left allmulticast mode [ 983.600913][T10317] bond0 (unregistering): Released all slaves [ 983.608089][ T5838] Bluetooth: hci3: command tx timeout [ 983.621402][T10317] bond1 (unregistering): Released all slaves [ 983.747233][T10317] bond2 (unregistering): Released all slaves [ 983.761783][T10317] bond3 (unregistering): Released all slaves [ 983.776350][T10317] bond4 (unregistering): Released all slaves [ 983.887640][T10317] bond5 (unregistering): Released all slaves [ 983.995767][T10317] bond6 (unregistering): Released all slaves [ 984.233242][T10317] tipc: Disabling bearer [ 984.242883][T10317] tipc: Left network mode [ 984.339432][T31610] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 984.392362][T31610] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.401048][T31610] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.469672][T31605] vxcan1 speed is unknown, defaulting to 1000 [ 984.540338][T31610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6319'. [ 984.585252][T31627] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6322'. [ 984.643964][T31626] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6322'. [ 984.914126][T31546] chnl_net:caif_netlink_parms(): no params data found [ 985.110563][T31603] vxcan1 speed is unknown, defaulting to 1000 [ 985.152454][T31633] hsr0: entered promiscuous mode [ 985.158328][T31633] macsec1: entered allmulticast mode [ 985.163902][T31633] hsr0: entered allmulticast mode [ 985.171252][T31633] hsr_slave_0: entered allmulticast mode [ 985.177043][T31633] hsr_slave_1: entered allmulticast mode [ 985.412757][T31546] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.429993][T31546] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.437496][T31546] bridge_slave_0: entered allmulticast mode [ 985.450869][T31546] bridge_slave_0: entered promiscuous mode [ 985.466867][T31546] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.488149][T31546] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.505746][T31546] bridge_slave_1: entered allmulticast mode [ 985.541883][T31546] bridge_slave_1: entered promiscuous mode [ 985.689194][ T5838] Bluetooth: hci3: command tx timeout [ 985.864972][T10317] pim6reg (unregistering): left allmulticast mode [ 986.566185][ T12] smc: removing ib device syz2 [ 986.867109][T31546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.035405][T31546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.466456][T31546] team0: Port device team_slave_0 added [ 987.533053][T31546] team0: Port device team_slave_1 added [ 987.774404][ T5838] Bluetooth: hci3: command tx timeout [ 987.858226][T31681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6335'. [ 987.875691][T31546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.893376][T31546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.920443][T31546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.985635][T31546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.993048][T31546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.038561][T31546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.050459][T31685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6336'. [ 988.283370][T31546] hsr_slave_0: entered promiscuous mode [ 988.291121][T31546] hsr_slave_1: entered promiscuous mode [ 988.298079][T31546] debugfs: 'hsr0' already exists in 'hsr' [ 988.304007][T31546] Cannot create hsr debugfs directory [ 989.700818][T10317] IPVS: stop unused estimator thread 0... [ 989.848882][ T5838] Bluetooth: hci3: command tx timeout [ 990.360375][T31546] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 990.401546][T31546] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 990.444881][T31546] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 990.473951][T31546] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 990.663707][T31546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.722210][T31546] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.747088][T10317] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.754454][T10317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.786465][T21491] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.793764][T21491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.806286][T31743] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 990.987550][T31753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6352'. [ 991.205309][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025d2fc00: rx timeout, send abort [ 991.213892][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880329ee400: rx timeout, send abort [ 991.222608][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025d2fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 991.238531][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880329ee400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 991.413806][T31546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.742966][T31546] veth0_vlan: entered promiscuous mode [ 991.767687][T31546] veth1_vlan: entered promiscuous mode [ 991.826865][T31546] veth0_macvtap: entered promiscuous mode [ 991.838410][T31546] veth1_macvtap: entered promiscuous mode [ 991.864740][T31546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.884431][T31546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.906493][T21489] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.926924][T21489] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.955023][T21491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.022954][T21491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.209248][T31807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6362'. [ 992.393019][T31819] netlink: 'syz.0.6363': attribute type 10 has an invalid length. [ 992.402410][T31819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6363'. [ 992.438921][T31814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6363'. [ 992.510609][T31820] netlink: 'syz.0.6363': attribute type 10 has an invalid length. [ 992.521700][T31819] dummy0: entered promiscuous mode [ 992.527786][T31819] bridge0: port 3(dummy0) entered blocking state [ 992.559782][T31819] bridge0: port 3(dummy0) entered disabled state [ 992.583320][T31819] dummy0: entered allmulticast mode [ 992.599492][T31819] bridge0: port 3(dummy0) entered blocking state [ 992.606134][T31819] bridge0: port 3(dummy0) entered forwarding state [ 992.645036][T31820] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 992.661658][T31831] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 992.728806][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.753209][T31838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6366'. [ 992.768973][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.911746][T21489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.938436][T21489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.589525][T31871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6378'. [ 993.804281][T31881] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6381'. [ 993.878435][T31883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6382'. [ 993.981423][T28206] IPVS: starting estimator thread 0... [ 993.995844][T28206] hid-generic 0005:15C2:5505.0002: unknown main item tag 0x0 [ 994.022624][T28206] hid-generic 0005:15C2:5505.0002: hidraw0: BLUETOOTH HID v0.87 Device [syz0] on aa:aa:aa:aa:aa:aa [ 994.078777][T31886] IPVS: using max 25 ests per chain, 60000 per kthread [ 994.504735][T31913] Bluetooth: MGMT ver 1.23 [ 994.593499][ T30] audit: type=1800 audit(1760372519.447:10): pid=31901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6386" name="memory.events" dev="tmpfs" ino=421 res=0 errno=0 [ 994.657461][T31921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6393'. [ 994.881434][T31929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6394'. [ 994.891494][T31929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6394'. [ 994.918694][T10318] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.928034][T31929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6394'. [ 994.934052][T31931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6396'. [ 994.937062][T10318] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.958180][T10318] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.967141][T31929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6394'. [ 994.985933][T10318] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.025090][T31961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6403'. [ 997.239187][T31976] syz_tun: entered allmulticast mode [ 997.329712][T31982] netlink: 'syz.4.6409': attribute type 1 has an invalid length. [ 997.402591][T31982] 8021q: adding VLAN 0 to HW filter on device bond2 [ 997.557272][T31985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 997.583094][T31985] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 997.602201][T31995] netlink: 'syz.1.6412': attribute type 6 has an invalid length. [ 997.628622][T31985] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 997.725246][T31982] veth3: entered promiscuous mode [ 997.742058][T31982] bond2: (slave veth3): Enslaving as an active interface with a down link [ 998.496197][T32044] vlan2: entered allmulticast mode [ 998.504775][T32044] bond0: entered allmulticast mode [ 998.510585][T32044] bond_slave_0: entered allmulticast mode [ 998.516374][T32044] bond_slave_1: entered allmulticast mode [ 998.943027][T32063] netlink: 'syz.2.6433': attribute type 1 has an invalid length. [ 998.955944][T32063] netlink: 'syz.2.6433': attribute type 2 has an invalid length. [ 998.980269][T32063] __nla_validate_parse: 7 callbacks suppressed [ 998.980291][T32063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6433'. [ 999.178317][T32083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6437'. [ 999.213155][T32083] bridge0: entered promiscuous mode [ 999.227402][T32083] macsec1: entered allmulticast mode [ 999.233024][T32083] bridge0: entered allmulticast mode [ 999.241347][T32083] bridge0: port 3(macsec1) entered blocking state [ 999.248239][T32083] bridge0: port 3(macsec1) entered disabled state [ 999.256721][T32087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6439'. [ 999.273937][T32083] bridge0: left allmulticast mode [ 999.279963][T32083] bridge0: left promiscuous mode [ 999.571141][T32102] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 999.620566][T32108] xt_CT: You must specify a L4 protocol and not use inversions on it [ 999.635597][T32108] x_tables: duplicate underflow at hook 2 [ 999.960619][T32126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6449'. [ 1000.240417][T32142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6454'. [ 1000.242681][T32138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6455'. [ 1000.264442][T32142] tipc: Enabled bearer , priority 0 [ 1000.348352][T32142] syzkaller0: entered promiscuous mode [ 1000.354049][T32142] syzkaller0: entered allmulticast mode [ 1000.360574][T32142] tipc: Resetting bearer [ 1000.430213][T32139] tipc: Resetting bearer [ 1001.282722][T10799] tipc: Node number set to 1990604738 [ 1002.196310][T32139] tipc: Disabling bearer [ 1002.642639][T32182] syzkaller1: entered promiscuous mode [ 1002.648707][T32182] syzkaller1: entered allmulticast mode [ 1002.785859][T32195] netlink: 'syz.1.6468': attribute type 1 has an invalid length. [ 1002.795664][T32195] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6468'. [ 1002.803971][T32192] netlink: 'syz.4.6467': attribute type 1 has an invalid length. [ 1002.854785][T32192] bond3: entered promiscuous mode [ 1002.865287][T32192] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1002.901392][T32192] bond3: (slave bridge3): making interface the new active one [ 1002.909261][T32192] bridge3: entered promiscuous mode [ 1002.915999][T32192] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1003.255678][T32215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6475'. [ 1003.374996][T32215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6475'. [ 1004.338436][T32250] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6485'. [ 1005.037482][T32279] bond1: option arp_validate: invalid value (18446744073491447809) [ 1005.055156][T32279] bond1 (unregistering): Released all slaves [ 1005.072314][T32290] netlink: 'syz.1.6492': attribute type 13 has an invalid length. [ 1005.546442][T32290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.605150][T32290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.935026][T21491] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1005.950610][T21491] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.970861][T21491] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.009921][T21491] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.087362][T21491] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.107956][T21491] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.117263][T21491] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.134043][T21491] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.179152][T32319] dvmrp0: entered allmulticast mode [ 1006.612091][T32336] tipc: Enabled bearer , priority 0 [ 1006.744617][T32336] syzkaller0: entered promiscuous mode [ 1006.767930][T32336] syzkaller0: entered allmulticast mode [ 1006.868787][T32338] tipc: Resetting bearer [ 1007.171872][T32352] netlink: 'syz.4.6511': attribute type 1 has an invalid length. [ 1007.194481][T32352] netlink: 15 bytes leftover after parsing attributes in process `syz.4.6511'. [ 1007.313129][T32356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6512'. [ 1007.366395][T32360] netem: change failed [ 1007.375695][T32356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6512'. [ 1007.428348][T32335] tipc: Resetting bearer [ 1007.493063][T32335] tipc: Disabling bearer [ 1007.871081][T32385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6520'. [ 1008.203943][T32405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6527'. [ 1008.213602][T32405] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6527'. [ 1008.281992][T32399] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.519277][T32399] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.675575][T32399] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.718538][T32421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6529'. [ 1008.865440][T32399] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.153246][T10318] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.188817][T32446] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6533'. [ 1009.198196][T32446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6533'. [ 1009.336524][T32454] netlink: 'syz.0.6537': attribute type 10 has an invalid length. [ 1009.356061][T32454] __nla_validate_parse: 2 callbacks suppressed [ 1009.356082][T32454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1009.395097][T21489] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.410401][T21489] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.452734][T21489] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.489559][T32454] team0: Port device geneve0 added [ 1010.021912][T32496] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1010.048067][T32496] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1010.372095][ T5915] IPVS: starting estimator thread 0... [ 1010.470509][T32521] IPVS: using max 25 ests per chain, 60000 per kthread [ 1010.832952][T32536] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6556'. [ 1010.842372][T32531] vxcan1: entered allmulticast mode [ 1010.847766][T32532] vxcan1: left allmulticast mode [ 1010.966039][T32538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6557'. [ 1011.146059][T32543] netlink: 'syz.0.6559': attribute type 1 has an invalid length. [ 1011.427507][T32551] netlink: 336 bytes leftover after parsing attributes in process `syz.3.6563'. [ 1011.609074][T32566] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 1011.894268][T32578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6569'. [ 1012.040852][T32578] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1012.153806][T32588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6570'. [ 1012.221385][T32588] bridge0: port 3(dummy0) entered disabled state [ 1012.228076][T32588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.235805][T32588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.261799][T32594] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1012.274853][T32595] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 1012.299303][T32597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6572'. [ 1013.353719][T32655] netlink: 'syz.4.6585': attribute type 10 has an invalid length. [ 1013.362565][T32609] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1013.444278][T32659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6586'. [ 1013.464889][T32655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.492121][T32661] netlink: 'syz.4.6585': attribute type 10 has an invalid length. [ 1013.509632][T32662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6586'. [ 1013.521504][T32661] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6585'. [ 1013.528763][T32655] batadv0: entered promiscuous mode [ 1013.552337][T32655] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1013.690679][T32662] dummy0: left allmulticast mode [ 1013.695894][T32662] bridge0: port 3(dummy0) entered disabled state [ 1013.711408][T32662] bridge_slave_1: left allmulticast mode [ 1013.717227][T32662] bridge_slave_1: left promiscuous mode [ 1013.723245][T32662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.734199][T32662] bridge_slave_0: left allmulticast mode [ 1013.740319][T32662] bridge_slave_0: left promiscuous mode [ 1013.746235][T32662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.843176][T32661] batadv0: entered allmulticast mode [ 1013.850757][T32661] bond0: (slave batadv0): Releasing backup interface [ 1013.861424][T32661] bridge0: port 4(batadv0) entered blocking state [ 1013.868760][T32661] bridge0: port 4(batadv0) entered disabled state [ 1013.889751][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1013.899410][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1014.253879][T32687] netlink: 'syz.4.6590': attribute type 2 has an invalid length. [ 1014.280531][T32687] netlink: 'syz.4.6590': attribute type 1 has an invalid length. [ 1014.290583][T32687] netlink: 'syz.4.6590': attribute type 2 has an invalid length. [ 1014.339978][T32687] netlink: 'syz.4.6590': attribute type 2 has an invalid length. [ 1014.360848][T32687] netlink: 'syz.4.6590': attribute type 1 has an invalid length. [ 1014.369313][T32687] netlink: 'syz.4.6590': attribute type 1 has an invalid length. [ 1014.461201][T32696] netlink: 'syz.2.6593': attribute type 1 has an invalid length. [ 1014.469414][T32696] __nla_validate_parse: 1 callbacks suppressed [ 1014.469432][T32696] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6593'. [ 1014.648080][ T5838] Bluetooth: hci4: command 0x0401 tx timeout [ 1014.893199][T32709] xt_l2tp: wrong L2TP version: 1 [ 1015.070846][T32722] netlink: 'syz.1.6598': attribute type 4 has an invalid length. [ 1015.080566][T32722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6598'. [ 1015.524346][T32735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6601'. [ 1015.629574][T32745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6606'. [ 1015.719964][T32745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6606'. [ 1015.734737][T32753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6609'. [ 1015.780993][T32756] netlink: del zone limit has 8 unknown bytes [ 1015.787500][T32756] netlink: del zone limit has 8 unknown bytes [ 1015.800785][T32756] netlink: del zone limit has 8 unknown bytes [ 1015.807295][T32756] netlink: del zone limit has 8 unknown bytes [ 1015.813941][T32756] netlink: del zone limit has 8 unknown bytes [ 1015.824572][T32756] netlink: del zone limit has 8 unknown bytes [ 1015.843414][T32756] netlink: del zone limit has 8 unknown bytes [ 1015.897279][T32758] netlink: 'syz.0.6609': attribute type 14 has an invalid length. [ 1016.555813][ T312] bridge_slave_0: left allmulticast mode [ 1016.596191][ T312] bridge_slave_0: left promiscuous mode [ 1016.663206][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.769735][ T312] bridge_slave_1: left allmulticast mode [ 1016.775459][ T312] bridge_slave_1: left promiscuous mode [ 1016.808950][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.836656][ T312] bond0: (slave bond_slave_0): Releasing backup interface [ 1016.862332][ T312] bond0: (slave bond_slave_1): Releasing backup interface [ 1016.887656][ T312] team0: Port device team_slave_0 removed [ 1016.912706][ T312] team0: Port device team_slave_1 removed [ 1016.928832][ T312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.948748][ T312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.957777][ T312] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1016.999943][ T325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6616'. [ 1017.427114][ T334] bond2: entered promiscuous mode [ 1017.432319][ T334] bond2: entered allmulticast mode [ 1017.441910][ T334] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1017.523125][ T339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6620'. [ 1017.608051][ T334] bond2 (unregistering): Released all slaves [ 1017.810544][ T346] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6623'. [ 1017.834652][ T346] netlink: 'syz.3.6623': attribute type 21 has an invalid length. [ 1017.843004][ T346] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6623'. [ 1017.908989][ T349] syzkaller0: entered promiscuous mode [ 1017.936457][ T349] syzkaller0: entered allmulticast mode [ 1017.961425][ T346] netlink: 'syz.3.6623': attribute type 5 has an invalid length. [ 1017.972521][ T346] netlink: 'syz.3.6623': attribute type 6 has an invalid length. [ 1019.053788][ T387] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1019.814350][ T368] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1019.967234][ T390] __nla_validate_parse: 2 callbacks suppressed [ 1019.967254][ T390] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6631'. [ 1020.012349][ T391] xt_l2tp: unknown flags: 51 [ 1020.028651][ T390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6631'. [ 1020.608562][ T419] xt_TCPMSS: Only works on TCP SYN packets [ 1020.608570][ T420] xt_TCPMSS: Only works on TCP SYN packets [ 1020.648055][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 1020.816563][ T433] netlink: 'syz.3.6640': attribute type 13 has an invalid length. [ 1020.826546][ T433] netlink: 'syz.3.6640': attribute type 17 has an invalid length. [ 1021.121393][ T448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.197404][ T433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1021.247206][ T448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.273940][ T456] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1021.283875][ T456] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1021.450424][ T469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6650'. [ 1021.484747][ T470] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6651'. [ 1021.562785][ T476] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.6652'. [ 1021.626524][ T476] debugfs: 'netdev:nicvf0' already exists in 'phy74' [ 1021.870072][ T493] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6656'. [ 1021.917968][ T493] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1022.015661][ T497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6659'. [ 1022.045245][ T497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6659'. [ 1022.115264][T10300] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.132220][T10300] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.153437][ T491] xt_hashlimit: invalid interval [ 1022.158599][T10300] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.169252][T10300] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.181911][ T491] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6657'. [ 1022.199744][ T491] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6657'. [ 1022.780272][ T532] "syz.4.6665" (532) uses obsolete ecb(arc4) skcipher [ 1022.883764][ T532] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1022.902865][ T532] bond5 (unregistering): Released all slaves [ 1023.324391][ T567] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1023.584721][ T581] ip6t_srh: unknown srh match flags 4000 [ 1023.606815][ T583] netlink: 'syz.2.6675': attribute type 4 has an invalid length. [ 1024.124920][ T1211] IPVS: starting estimator thread 0... [ 1024.228354][ T618] IPVS: using max 28 ests per chain, 67200 per kthread [ 1024.483240][ T633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1024.554943][ T640] pim6reg1: entered promiscuous mode [ 1024.564183][ T640] pim6reg1: entered allmulticast mode [ 1024.640890][ T642] netlink: 'syz.1.6689': attribute type 29 has an invalid length. [ 1024.670539][ T645] netlink: 'syz.1.6689': attribute type 29 has an invalid length. [ 1024.992049][ T658] __nla_validate_parse: 8 callbacks suppressed [ 1024.992070][ T658] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6696'. [ 1025.419898][ T689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6705'. [ 1025.439715][ T690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6705'. [ 1025.866505][ T708] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6711'. [ 1025.875824][ T708] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6711'. [ 1025.884921][ T708] netlink: 'syz.0.6711': attribute type 6 has an invalid length. [ 1025.936119][ T708] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6711'. [ 1026.202775][ T716] netlink: 'syz.4.6712': attribute type 1 has an invalid length. [ 1026.217335][ T718] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6713'. [ 1026.391311][ T716] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1026.435601][ T722] bond5: (slave batadv1): Opening slave failed [ 1026.479064][ T717] bond5: (slave batadv1): Opening slave failed [ 1027.326648][ T758] netlink: 'syz.0.6722': attribute type 1 has an invalid length. [ 1027.641952][ T772] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 1027.659816][ T772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6724'. [ 1028.131264][ T779] bond0 (unregistering): Released all slaves [ 1028.165726][ T782] netlink: 'syz.3.6727': attribute type 4 has an invalid length. [ 1028.216704][ T784] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6728'. [ 1028.389254][ T791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6729'. [ 1028.647180][ T813] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1028.846219][ T810] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1028.858264][ T5915] syzkaller1: tun_net_xmit 90 [ 1028.867976][ T810] syzkaller1: Linktype set failed because interface is up [ 1028.938441][ T818] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1029.008878][ T5915] syzkaller1: tun_net_xmit 90 [ 1029.027634][ T820] ipvlan0: entered promiscuous mode [ 1029.284876][ T833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1029.505345][ T838] team1: entered promiscuous mode [ 1029.511859][ T838] team1: entered allmulticast mode [ 1029.517565][ T838] 8021q: adding VLAN 0 to HW filter on device team1 [ 1030.413255][ T848] __nla_validate_parse: 11 callbacks suppressed [ 1030.413278][ T848] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6746'. [ 1030.482200][ T848] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6746'. [ 1030.611105][ T862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6750'. [ 1031.258875][ T892] netlink: 'syz.0.6758': attribute type 83 has an invalid length. [ 1031.320625][ T899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6760'. [ 1031.988093][ T926] tipc: Started in network mode [ 1031.993203][ T926] tipc: Node identity f64fe8434829, cluster identity 4711 [ 1032.012652][ T926] tipc: Enabled bearer , priority 0 [ 1032.046499][ T928] syzkaller0: entered promiscuous mode [ 1032.053160][ T928] syzkaller0: entered allmulticast mode [ 1032.105953][ T926] tipc: Resetting bearer [ 1032.199349][ T923] tipc: Resetting bearer [ 1032.294338][ T923] tipc: Disabling bearer [ 1032.318733][ T943] netlink: 'syz.3.6766': attribute type 1 has an invalid length. [ 1032.579276][ T954] bond1: entered promiscuous mode [ 1032.614331][ T954] bond1: entered allmulticast mode [ 1032.632532][ T954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1032.885233][ T969] tipc: Started in network mode [ 1032.898036][ T969] tipc: Node identity 3e1313ff0c4c, cluster identity 4711 [ 1032.908243][ T969] tipc: Enabled bearer , priority 0 [ 1032.986621][ T972] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.999367][ T972] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1033.023838][ T973] syzkaller0: entered promiscuous mode [ 1033.031268][ T973] syzkaller0: entered allmulticast mode [ 1033.040843][ T977] 8021q: VLANs not supported on ip6gre0 [ 1033.293330][ T972] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.318230][ T972] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1033.377569][ T973] tipc: Resetting bearer [ 1033.445184][ T967] tipc: Resetting bearer [ 1033.475716][ T967] tipc: Disabling bearer [ 1033.507754][ T972] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.519674][ T972] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1033.532536][ T996] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6779'. [ 1033.556696][ T1000] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6780'. [ 1033.600283][ T1000] batadv1: entered promiscuous mode [ 1033.614050][ T1000] batadv1: entered allmulticast mode [ 1033.744544][ T972] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.755993][ T972] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1034.103877][T19495] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.112368][T19495] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1034.150316][T19495] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.159933][T19495] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1034.219825][T10294] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.228352][T10294] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1034.302633][T10295] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.327976][T10295] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1034.425182][ T1034] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6790'. [ 1034.434720][ T1034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6790'. [ 1034.443800][ T1034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6790'. [ 1034.556113][ T1041] netlink: 'syz.4.6791': attribute type 33 has an invalid length. [ 1034.585412][ T1041] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6791'. [ 1034.626693][ T1052] tc_dump_action: action bad kind [ 1034.640447][ T1053] netlink: 'syz.4.6791': attribute type 1 has an invalid length. [ 1034.785480][ T1053] bond6: entered promiscuous mode [ 1034.794069][ T1053] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1034.858160][ T1041] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1034.866551][ T1041] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 1034.878397][ T1041] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1034.902165][ T1041] bond6: (slave gre1): making interface the new active one [ 1034.909917][ T1041] gre1: entered promiscuous mode [ 1034.916882][ T1041] bond6: (slave gre1): Enslaving as an active interface with an up link [ 1034.932842][ T1061] netlink: 'syz.1.6796': attribute type 3 has an invalid length. [ 1035.241945][ T1091] netlink: 'syz.4.6802': attribute type 16 has an invalid length. [ 1035.440960][ T1102] __nla_validate_parse: 1 callbacks suppressed [ 1035.440980][ T1102] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6803'. [ 1035.504930][ T1101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6803'. [ 1035.554716][ T1102] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6803'. [ 1035.694751][ T1119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6809'. [ 1036.023465][ T1108] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.052158][ T1108] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1036.110162][ T1132] macsec0: entered promiscuous mode [ 1036.239768][ T1108] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.285861][ T1108] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1036.393469][ T1139] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.407025][ T1139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1036.427178][ T1140] pim6reg1: entered promiscuous mode [ 1036.446664][ T1140] pim6reg1: entered allmulticast mode [ 1036.473360][ T1108] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.488311][ T1108] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1036.660933][ T1108] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.694895][ T1108] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1037.050855][ T1156] syzkaller0: entered promiscuous mode [ 1037.066697][ T1156] syzkaller0: entered allmulticast mode [ 1037.248680][ T1167] tipc: Enabled bearer , priority 0 [ 1037.257364][ T1168] syzkaller0: entered promiscuous mode [ 1037.263467][ T1168] syzkaller0: entered allmulticast mode [ 1037.291611][ T1167] tipc: Resetting bearer [ 1037.333467][ T1166] tipc: Resetting bearer [ 1037.392013][ T1166] tipc: Disabling bearer [ 1038.330127][T10288] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.338852][T10288] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1038.347276][T10288] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.356110][T10288] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1038.366484][ T1234] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1038.419750][T10294] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.452291][T10294] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1038.515310][T19495] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.535728][T19495] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1038.603083][ T1255] syzkaller0: entered promiscuous mode [ 1038.609097][ T1255] syzkaller0: entered allmulticast mode [ 1038.708200][ T1260] xt_hashlimit: max too large, truncated to 1048576 [ 1038.737182][ T1255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6842'. [ 1038.754466][ T1255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6842'. [ 1038.775955][ T1267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6846'. [ 1038.840305][ T1260] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6844'. [ 1039.348885][ T1285] netlink: 'syz.2.6852': attribute type 3 has an invalid length. [ 1039.374436][ T1285] bridge2: entered promiscuous mode [ 1039.374937][ T1287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6853'. [ 1039.387845][ T1285] bridge2: entered allmulticast mode [ 1039.397083][ T1285] team0: Port device bridge2 added [ 1039.432916][ T1287] netlink: 'syz.4.6853': attribute type 9 has an invalid length. [ 1039.443611][ T1285] geneve0: entered allmulticast mode [ 1039.762115][ T1308] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6859'. [ 1039.841829][ T1311] veth0: entered promiscuous mode [ 1039.948520][ T1315] netlink: 'syz.3.6860': attribute type 6 has an invalid length. [ 1039.958865][ T1315] IPv6: NLM_F_CREATE should be specified when creating new route [ 1040.102467][ T1311] veth0: left promiscuous mode [ 1040.136226][ T1315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1040.260091][ T1333] netlink: 'syz.2.6863': attribute type 1 has an invalid length. [ 1040.280533][ T1335] syzkaller0: entered promiscuous mode [ 1040.287573][ T1335] syzkaller0: entered allmulticast mode [ 1040.318098][ T1332] tipc: Enabled bearer , priority 0 [ 1040.355966][ T1339] netlink: 'syz.3.6865': attribute type 2 has an invalid length. [ 1040.399768][ T1332] tipc: Resetting bearer [ 1040.441908][ T1332] tipc: Disabling bearer [ 1040.510680][ T1343] pim6reg1: entered promiscuous mode [ 1040.516141][ T1343] pim6reg1: entered allmulticast mode [ 1040.828686][ T1361] netlink: 'syz.3.6870': attribute type 1 has an invalid length. [ 1040.846768][ T1361] __nla_validate_parse: 2 callbacks suppressed [ 1040.846789][ T1361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6870'. [ 1041.015023][ T1369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6872'. [ 1041.030726][ T1374] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6871'. [ 1041.413677][ T1388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6877'. [ 1041.553415][ T1388] syzkaller0: entered allmulticast mode [ 1041.562477][ T1393] netlink: 'syz.4.6878': attribute type 9 has an invalid length. [ 1041.667171][ T1397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6879'. [ 1042.301161][ T1422] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6886'. [ 1042.478044][ T1433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6889'. [ 1042.514973][ T1433] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6889'. [ 1042.980559][ T1456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1043.037397][ T1458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1043.098562][ T1458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1043.105850][ T1458] IPv6: NLM_F_CREATE should be set when creating new route [ 1043.113198][ T1458] IPv6: NLM_F_CREATE should be set when creating new route [ 1043.326584][ T1469] bond2: option mode: invalid value (254) [ 1043.354483][ T1469] bond2 (unregistering): Released all slaves [ 1043.676358][ T1482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6899'. [ 1044.279008][ T1502] netlink: 'syz.0.6905': attribute type 19 has an invalid length. [ 1044.287126][ T1502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6905'. [ 1044.319147][T10288] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.330341][ T1502] netlink: 'syz.0.6905': attribute type 19 has an invalid length. [ 1044.350959][ T1508] sctp: [Deprecated]: syz.2.6906 (pid 1508) Use of int in max_burst socket option. [ 1044.350959][ T1508] Use struct sctp_assoc_value instead [ 1044.385437][T10288] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.404004][ T1499] netlink: 'syz.4.6903': attribute type 1 has an invalid length. [ 1044.414062][T10288] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.418205][ T1508] Bluetooth: MGMT ver 1.23 [ 1044.459474][ T1508] dvmrp8: entered allmulticast mode [ 1044.465057][T10288] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.476157][ T1507] dvmrp8: left allmulticast mode [ 1045.301250][ T1552] tipc: Enabled bearer , priority 26 [ 1045.372771][ T1557] netlink: 'syz.2.6919': attribute type 13 has an invalid length. [ 1046.127676][ T1574] netlink: 'syz.1.6920': attribute type 10 has an invalid length. [ 1046.418825][T10801] tipc: Node number set to 841753523 [ 1046.654253][ T1587] __nla_validate_parse: 4 callbacks suppressed [ 1046.654278][ T1587] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1047.165812][ T1564] vlan0: entered promiscuous mode [ 1047.228398][ T1568] tipc: Enabled bearer , priority 3 [ 1047.240940][ T1571] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1047.269643][T19495] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.303745][T19495] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.310536][ T1605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6925'. [ 1047.334211][T19495] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.358154][T19495] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.487647][ T1613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6928'. [ 1047.488809][ T1614] IPv6: NLM_F_CREATE should be specified when creating new route [ 1047.544643][T19495] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.558049][T19495] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.578076][T19495] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.586507][T19495] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.348016][ T1599] tipc: Node number set to 3194415171 [ 1048.667729][ T1615] bridge5: port 1(veth5) entered blocking state [ 1048.678039][ T1615] bridge5: port 1(veth5) entered disabled state [ 1048.684706][ T1615] veth5: entered allmulticast mode [ 1048.692200][ T1615] veth5: entered promiscuous mode [ 1048.710196][ T1616] bridge5: port 2(veth0_to_bond) entered blocking state [ 1048.717437][ T1616] bridge5: port 2(veth0_to_bond) entered disabled state [ 1048.725145][ T1616] veth0_to_bond: entered allmulticast mode [ 1048.733860][ T1616] veth0_to_bond: entered promiscuous mode [ 1048.771034][ T1621] vlan0: entered allmulticast mode [ 1048.776318][ T1621] veth1: entered allmulticast mode [ 1048.782555][ T1621] bridge5: port 3(vlan0) entered blocking state [ 1048.789468][ T1621] bridge5: port 3(vlan0) entered disabled state [ 1048.799049][ T1621] vlan0: entered promiscuous mode [ 1048.804267][ T1621] veth1: entered promiscuous mode [ 1049.030527][ T1631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1049.065312][ T8875] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.080539][ T1631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1049.090678][ T8875] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.114166][ T8875] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.133468][ T8875] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.253088][ T1654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6937'. [ 1049.335282][ T1661] netlink: 'syz.2.6939': attribute type 10 has an invalid length. [ 1049.923632][ T1685] bridge3: entered allmulticast mode [ 1049.943955][ T1688] netlink: 'syz.2.6947': attribute type 8 has an invalid length. [ 1049.964063][ T1688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6947'. [ 1050.000806][ T1685] netlink: 'syz.2.6947': attribute type 8 has an invalid length. [ 1050.020245][ T1685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6947'. [ 1050.523886][ T1713] netlink: 'syz.0.6954': attribute type 39 has an invalid length. [ 1052.217006][ T1713] veth0_macvtap: left promiscuous mode [ 1052.339454][ T1728] netlink: 'syz.4.6958': attribute type 1 has an invalid length. [ 1052.435593][ T1732] nbd: must specify at least one socket [ 1052.446578][ T1728] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1052.450133][ T1732] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6961'. [ 1052.595953][ T1730] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1052.617447][ T1730] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1052.681920][ T1730] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 1052.796222][ T1752] sctp: [Deprecated]: syz.2.6963 (pid 1752) Use of int in maxseg socket option. [ 1052.796222][ T1752] Use struct sctp_assoc_value instead [ 1052.901729][ T1728] veth7: entered promiscuous mode [ 1052.933088][ T1728] bond7: (slave veth7): Enslaving as an active interface with a down link [ 1053.183268][ T1771] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1053.188453][ T1770] delete_channel: no stack [ 1053.203930][ T1770] syz_tun: entered allmulticast mode [ 1053.226891][ T1767] syz_tun: left allmulticast mode [ 1053.394546][ T1784] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6972'. [ 1053.418814][ T1786] netlink: 'syz.0.6973': attribute type 8 has an invalid length. [ 1053.588954][ T1793] tipc: Enabling of bearer rejected, failed to enable media [ 1053.607660][ T1794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6976'. [ 1053.824651][ T1807] xfrm1: entered allmulticast mode [ 1054.062095][ T1818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6983'. [ 1054.864454][ T1830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6987'. [ 1055.189609][ T1848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6990'. [ 1055.218129][ T1848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6990'. [ 1055.227242][ T1848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6990'. [ 1055.298437][ T1848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6990'. [ 1055.449775][ T1860] tipc: Enabling of bearer rejected, failed to enable media [ 1055.491916][ T1864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6999'. [ 1055.546117][ T1866] bond1: option resend_igmp: invalid value (2878) [ 1055.552944][ T1866] bond1: option resend_igmp: allowed values 0 - 255 [ 1055.567179][ T1866] bond1 (unregistering): Released all slaves [ 1055.630082][ T1869] syzkaller0: entered promiscuous mode [ 1055.636788][ T1869] syzkaller0: entered allmulticast mode [ 1055.650998][ T1875] netlink: 'syz.1.7000': attribute type 14 has an invalid length. [ 1055.668571][T10310] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.678673][ T1875] netlink: 'syz.1.7000': attribute type 14 has an invalid length. [ 1055.697549][T10310] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.735413][T10310] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.755111][T10310] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.308326][ T1919] x_tables: duplicate underflow at hook 2 [ 1056.488232][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 1057.615281][ T1963] __nla_validate_parse: 14 callbacks suppressed [ 1057.615305][ T1963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7025'. [ 1057.725206][ T1985] tipc: Started in network mode [ 1057.743671][ T1985] tipc: Node identity 42e35335625e, cluster identity 4711 [ 1057.768846][ T1985] tipc: Enabled bearer , priority 0 [ 1057.840300][ T1995] tipc: Disabling bearer [ 1058.025644][ T2004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7035'. [ 1058.142553][ T2004] vlan3: entered promiscuous mode [ 1058.148011][ T2004] bond0: entered promiscuous mode [ 1058.153448][ T2004] bond_slave_0: entered promiscuous mode [ 1058.159704][ T2004] bond_slave_1: entered promiscuous mode [ 1058.355351][ T2012] pim6reg: entered allmulticast mode [ 1058.481376][ T2019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7037'. [ 1058.732671][ T2032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7039'. [ 1058.806928][ T2036] lo speed is unknown, defaulting to 1000 [ 1058.813565][ T2036] lo speed is unknown, defaulting to 1000 [ 1058.822725][ T2036] lo speed is unknown, defaulting to 1000 [ 1058.846788][ T2036] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1058.967904][ T2043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7043'. [ 1058.968370][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 1058.989877][ T2036] lo speed is unknown, defaulting to 1000 [ 1059.003653][ T2036] lo speed is unknown, defaulting to 1000 [ 1059.026123][ T2036] lo speed is unknown, defaulting to 1000 [ 1059.034152][ T2036] lo speed is unknown, defaulting to 1000 [ 1059.042587][ T2036] lo speed is unknown, defaulting to 1000 [ 1059.050801][ T2036] lo speed is unknown, defaulting to 1000 [ 1059.065520][ T2036] lo speed is unknown, defaulting to 1000 [ 1059.073575][ T2036] lo speed is unknown, defaulting to 1000 [ 1059.126082][ T2046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7044'. [ 1059.202270][ T2048] netlink: 'syz.4.7045': attribute type 8 has an invalid length. [ 1059.259385][ T2047] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1059.381785][ T2057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7047'. [ 1059.690196][ T2081] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.7056'. [ 1059.699728][ T2081] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1059.881410][ T2094] netlink: 'syz.3.7059': attribute type 1 has an invalid length. [ 1059.899280][ T2094] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7059'. [ 1059.978519][ T2094] tipc: Enabled bearer , priority 26 [ 1060.172656][ T2100] lo speed is unknown, defaulting to 1000 [ 1060.261437][ T2111] netlink: 'syz.0.7064': attribute type 11 has an invalid length. [ 1060.273027][ T2111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7064'. [ 1060.293057][ T2108] lo speed is unknown, defaulting to 1000 [ 1061.118136][ T1211] tipc: Node number set to 549278517 [ 1061.171038][ T2157] sctp: [Deprecated]: syz.1.7076 (pid 2157) Use of int in max_burst socket option. [ 1061.171038][ T2157] Use struct sctp_assoc_value instead [ 1061.207901][ T2158] tipc: Enabled bearer , priority 0 [ 1061.219006][ T2158] syzkaller0: entered promiscuous mode [ 1061.224663][ T2158] syzkaller0: entered allmulticast mode [ 1061.282524][ T2158] tipc: Resetting bearer [ 1061.297317][ T2158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.305950][ T2158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.339369][ T2156] tipc: Resetting bearer [ 1061.367704][ T2156] tipc: Disabling bearer [ 1062.157224][ T2207] lo speed is unknown, defaulting to 1000 [ 1063.154756][ T2240] [ 1063.157152][ T2240] ====================================================== [ 1063.164196][ T2240] WARNING: possible circular locking dependency detected [ 1063.171262][ T2240] syzkaller #0 Not tainted [ 1063.175799][ T2240] ------------------------------------------------------ [ 1063.182840][ T2240] syz.0.7102/2240 is trying to acquire lock: [ 1063.188844][ T2240] ffffffff8f639558 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 1063.198037][ T2240] [ 1063.198037][ T2240] but task is already holding lock: [ 1063.205423][ T2240] ffff88803325ca70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 1063.214685][ T2240] [ 1063.214685][ T2240] which lock already depends on the new lock. [ 1063.214685][ T2240] [ 1063.225092][ T2240] [ 1063.225092][ T2240] the existing dependency chain (in reverse order) is: [ 1063.234107][ T2240] [ 1063.234107][ T2240] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1063.242110][ T2240] lock_acquire+0x120/0x360 [ 1063.247144][ T2240] _raw_spin_lock_bh+0x36/0x50 [ 1063.252440][ T2240] nr_rt_device_down+0x12a/0x720 [ 1063.257930][ T2240] nr_device_event+0x137/0x150 [ 1063.263224][ T2240] notifier_call_chain+0x1b6/0x3e0 [ 1063.268874][ T2240] __dev_notify_flags+0x18d/0x2e0 [ 1063.274434][ T2240] netif_change_flags+0xe8/0x1a0 [ 1063.279900][ T2240] dev_change_flags+0x130/0x260 [ 1063.285282][ T2240] dev_ioctl+0x7b4/0x1150 [ 1063.290138][ T2240] sock_do_ioctl+0x22c/0x300 [ 1063.295267][ T2240] sock_ioctl+0x576/0x790 [ 1063.300130][ T2240] __se_sys_ioctl+0xfc/0x170 [ 1063.305254][ T2240] do_syscall_64+0xfa/0xfa0 [ 1063.310300][ T2240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.316741][ T2240] [ 1063.316741][ T2240] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1063.324580][ T2240] lock_acquire+0x120/0x360 [ 1063.329624][ T2240] _raw_spin_lock_bh+0x36/0x50 [ 1063.334926][ T2240] nr_rt_device_down+0xa9/0x720 [ 1063.340322][ T2240] nr_device_event+0x137/0x150 [ 1063.345637][ T2240] notifier_call_chain+0x1b6/0x3e0 [ 1063.351279][ T2240] __dev_notify_flags+0x18d/0x2e0 [ 1063.356831][ T2240] netif_change_flags+0xe8/0x1a0 [ 1063.362297][ T2240] dev_change_flags+0x130/0x260 [ 1063.367678][ T2240] dev_ioctl+0x7b4/0x1150 [ 1063.372574][ T2240] sock_do_ioctl+0x22c/0x300 [ 1063.377704][ T2240] sock_ioctl+0x576/0x790 [ 1063.382582][ T2240] __se_sys_ioctl+0xfc/0x170 [ 1063.387706][ T2240] do_syscall_64+0xfa/0xfa0 [ 1063.392800][ T2240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.399243][ T2240] [ 1063.399243][ T2240] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1063.407174][ T2240] validate_chain+0xb9b/0x2140 [ 1063.412474][ T2240] __lock_acquire+0xab9/0xd20 [ 1063.417708][ T2240] lock_acquire+0x120/0x360 [ 1063.422747][ T2240] _raw_spin_lock_bh+0x36/0x50 [ 1063.428061][ T2240] nr_rt_ioctl+0x390/0xd50 [ 1063.433097][ T2240] sock_do_ioctl+0xd9/0x300 [ 1063.438132][ T2240] sock_ioctl+0x576/0x790 [ 1063.443026][ T2240] __se_sys_ioctl+0xfc/0x170 [ 1063.448149][ T2240] do_syscall_64+0xfa/0xfa0 [ 1063.453188][ T2240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.459607][ T2240] [ 1063.459607][ T2240] other info that might help us debug this: [ 1063.459607][ T2240] [ 1063.469838][ T2240] Chain exists of: [ 1063.469838][ T2240] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1063.469838][ T2240] [ 1063.483673][ T2240] Possible unsafe locking scenario: [ 1063.483673][ T2240] [ 1063.491130][ T2240] CPU0 CPU1 [ 1063.496496][ T2240] ---- ---- [ 1063.501886][ T2240] lock(&nr_node->node_lock); [ 1063.506670][ T2240] lock(nr_node_list_lock); [ 1063.513797][ T2240] lock(&nr_node->node_lock); [ 1063.521096][ T2240] lock(nr_neigh_list_lock); [ 1063.525788][ T2240] [ 1063.525788][ T2240] *** DEADLOCK *** [ 1063.525788][ T2240] [ 1063.533935][ T2240] 2 locks held by syz.0.7102/2240: [ 1063.539050][ T2240] #0: ffffffff8f6395b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 1063.548560][ T2240] #1: ffff88803325ca70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 1063.558237][ T2240] [ 1063.558237][ T2240] stack backtrace: [ 1063.564135][ T2240] CPU: 0 UID: 0 PID: 2240 Comm: syz.0.7102 Not tainted syzkaller #0 PREEMPT(full) [ 1063.564158][ T2240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1063.564170][ T2240] Call Trace: [ 1063.564180][ T2240] [ 1063.564190][ T2240] dump_stack_lvl+0x189/0x250 [ 1063.564214][ T2240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1063.564233][ T2240] ? __pfx__printk+0x10/0x10 [ 1063.564249][ T2240] ? stack_trace_save+0x9c/0xe0 [ 1063.564280][ T2240] print_circular_bug+0x2ee/0x310 [ 1063.564304][ T2240] check_noncircular+0x134/0x160 [ 1063.564330][ T2240] validate_chain+0xb9b/0x2140 [ 1063.564356][ T2240] ? look_up_lock_class+0x74/0x170 [ 1063.564379][ T2240] ? register_lock_class+0x51/0x320 [ 1063.564399][ T2240] __lock_acquire+0xab9/0xd20 [ 1063.564418][ T2240] ? nr_rt_ioctl+0x390/0xd50 [ 1063.564436][ T2240] lock_acquire+0x120/0x360 [ 1063.564452][ T2240] ? nr_rt_ioctl+0x390/0xd50 [ 1063.564471][ T2240] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1063.564498][ T2240] ? nr_rt_ioctl+0x390/0xd50 [ 1063.564516][ T2240] _raw_spin_lock_bh+0x36/0x50 [ 1063.564535][ T2240] ? nr_rt_ioctl+0x390/0xd50 [ 1063.564552][ T2240] nr_rt_ioctl+0x390/0xd50 [ 1063.564576][ T2240] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1063.564594][ T2240] ? lockdep_hardirqs_on+0x9c/0x150 [ 1063.564620][ T2240] ? apparmor_capable+0x137/0x1b0 [ 1063.564641][ T2240] ? capable+0x89/0xe0 [ 1063.564660][ T2240] ? nr_ioctl+0x1b1/0x3b0 [ 1063.564688][ T2240] sock_do_ioctl+0xd9/0x300 [ 1063.564759][ T2240] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1063.564792][ T2240] sock_ioctl+0x576/0x790 [ 1063.564817][ T2240] ? __pfx_sock_ioctl+0x10/0x10 [ 1063.564843][ T2240] ? __fget_files+0x3a0/0x420 [ 1063.564858][ T2240] ? __fget_files+0x2a/0x420 [ 1063.564874][ T2240] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1063.564894][ T2240] ? __pfx_sock_ioctl+0x10/0x10 [ 1063.564917][ T2240] __se_sys_ioctl+0xfc/0x170 [ 1063.564940][ T2240] do_syscall_64+0xfa/0xfa0 [ 1063.564963][ T2240] ? lockdep_hardirqs_on+0x9c/0x150 [ 1063.564984][ T2240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.565001][ T2240] ? clear_bhb_loop+0x60/0xb0 [ 1063.565021][ T2240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.565039][ T2240] RIP: 0033:0x7f28ed98eec9 [ 1063.565057][ T2240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.565073][ T2240] RSP: 002b:00007f28ee81c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1063.565091][ T2240] RAX: ffffffffffffffda RBX: 00007f28edbe5fa0 RCX: 00007f28ed98eec9 [ 1063.565105][ T2240] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 000000000000000c [ 1063.565117][ T2240] RBP: 00007f28eda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1063.565128][ T2240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1063.565140][ T2240] R13: 00007f28edbe6038 R14: 00007f28edbe5fa0 R15: 00007ffc46a32588 [ 1063.565163][ T2240] [ 1063.849131][ T2247] batadv_slave_0: entered promiscuous mode [ 1063.855858][ T2247] batadv_slave_0: left promiscuous mode [ 1063.936841][ T2256] x_tables: duplicate underflow at hook 2