last executing test programs: 11.355254279s ago: executing program 4 (id=3197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/21, 0x15}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/118, 0x76}, {&(0x7f00000000c0)=""/19, 0x13}], 0x9}, 0xfffffffd}], 0x1, 0x2000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008084) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRES16=r3, @ANYBLOB="050029bd7000000076a2a686000008000300", @ANYRES32=r4, @ANYBLOB="ad71c2520566515dea0800b62287973a6cfa575d9f65d09a4664d7991b99344fd3417687abcb6ff5f9a83d0c84c64cd1d62da1101486e4d121967fa189515155ffdbe9846e32cb84cfaf7d5559f9511a"], 0x24}, 0x1, 0x0, 0x0, 0x40895}, 0x200480c0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000060601030008000000000000000500000405000100070000000900020073797a31000000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x48805) 10.329844608s ago: executing program 0 (id=3202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000297b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) 10.080040785s ago: executing program 0 (id=3203): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0xe2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x47f}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x2bd, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000090000000800000000008510000002000000850000001a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff, 0x80}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) 9.540462523s ago: executing program 4 (id=3206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0xcc}}, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000380)={@private1, 0x9c940000, 0x0, 0x3, 0x0, 0x1, 0x1}, 0x20) (async) close(r1) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) 9.077630006s ago: executing program 4 (id=3208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x1d, 0x2, 0x6) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x9000000000000001, {0x0, 0x0, 0x3}}, 0x18) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000480)=""/240, 0xf0}, {0x0}], 0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001000030500"/20, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYBLOB="bbcc21419ae417", @ANYRES8=r3, @ANYRESOCT=r3], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0355fa156000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl(r5, 0x400, &(0x7f0000000280)="db047ef39f971ade5889695ab33664f08a9ee46905b9ad57070ee5ca83259be02a300bc206b506b69bb0884c425b729463db71fcff5be5ea3b01db4cd084356efc9a5c5af5666217f8c0b57e460a75aa5c6fdc6c2ee904fa200fcb35f948328a9cef7f47381f7804b1cc09ad96e4e502f7788b58cd7116300563c2ed83ee89f57a527a2e51b4e75e72fcf84a09") sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000440)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8080) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket(0x29, 0x5, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x1, 0x1, 0x4000009, 0xfffffffb, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x6b, 0x0, 0xf7, 0x4, 0x0, @broadcast, @local}}}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x24000800) 5.569013524s ago: executing program 3 (id=3213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0xfffe, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)={0x510, r4, 0x209, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x41}, @device_b, @broadcast, @random="0f34453121bd", {0xf, 0xafb}}, @delba={0x3, 0x2, {{0x0, 0x1, 0x7}, 0x40, {0xbd, 0x6}}}}}, @NL80211_ATTR_FRAME={0x219, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6}, @device_b, @device_a, @random="e7eedbc51a14", {0x5, 0x6}}, 0x542, 0x10, @device_a, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x6a}, {0x6, 0x1}]}, @val={0x2d, 0x1a, {0x4000, 0x2, 0x1, 0x0, {0x0, 0x89, 0x0, 0x1}, 0x8, 0xd55, 0xcb}}, [{0xdd, 0xfd, "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"}, {0xdd, 0xca, "68a9d673183f6d9d5071981668f67d3e64d37b370e44605e21b3028d2ba0eed4253a7ffe0112b5828f03ae18ea3291ad5ef7823e2a1284bbabdcfea07f51ff58d6e8da1244f4d530f6450dbfbdbcac80a91e542ab66285656dff21cc927524579ab1ea7c841ad07fe272d7901cbc42da60549852ca442b7a408ab784b4db1b2811c51e39fe9c9b69cfff33c38544ccaf9e39c4badfb26311fda9310d1dd2d58c6952ac1dde5116fbbcd45f392576830a4dc6182066822431039a59562598a981e996a0ffdfb39b40e095"}]}}, @NL80211_ATTR_FRAME={0x2a0, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_b, @initial, {0x4, 0x8b7}}, 0x104a, 0x2b, @default, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x0, 0x0, {0x4, 0x3, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x7, 0x78a, 0x1}}, [{0xdd, 0xbd, "2390a1065b87dee0afc40d3751c616e708a87f7e0f05907a29a5a135239fc6bc393cd091559d7b4f83079e48a42ba2b89b60a5c364083a9a1b6953c44df2de5d9ae840a33a8f70ebb4678265ddb9da8829e9b5e3baf136e615a7111f2587bff83d2751705fd98509541862dccbe3b73be820876c019dde11ce17730b140c8ba5b1cbb61fe6e5b378e4b55170bf02e8949c4e7520f31de92ad501ada6e03927a254aaeb118ddbc2425ae872103714857289edd272a4ef9709ef580effc4"}, {0xdd, 0x40, "d0b1b1f4420d4b51d28a6fbac558c776367b212fc2c00dcd5b350c9526176dbd48ca7db706da6b64b5df4725c688ee03d320d3cb2004925cd67c8902f5eaa556"}, {0xdd, 0x95, "9fde19917dd0f5fb0c5fa53dc0cd1265c640db85e0f264469c3a00de00199956de759244ba8dae604d112140450e3994a67a2fb0bf435838958eb2eb607548e14fe1b933f0fca0cfc0c46fbf71d3bf3fda55250bf50685e764d8b449f7446cc415375344002b412252a9dc0c73d3584f63367e1383a6ef8231dcffa63c7fb4d025a6c657bec3322870b4451aa87887571f71920292"}, {0xdd, 0x86, "0e441e3b0e0a2058c2e70b3e50adf933b141398f4c3bfd2bd4a82ddaa2f6f52952a6da1b16dbe0cc61685e1898976e0c55b8f44db48bece7b749c6bd929b0669464f2cae832e9952b565f139e2ec986840e5dee107f94195eab98177f482c9af562b6dbd2b1f7daa0b498b50fd3e3234acce355c937b9e7fc45b38635aa086ae46197910539a"}, {0xdd, 0x40, "7c136f9484a88d4ebf20f487bf1c2895d3d5f31feb47cdcfd7012a32c470b1c2c6bec7bfabf6dc8a257cf12a50af5380a95144c78ee84c7271599ce30174c59b"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x9908]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x894}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x510}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000100000000000000000081008000008000010900000014000200"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) r7 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0xffffffff, 0x0, 0x0, 0x255}, 0x48) write$tun(r0, &(0x7f0000000100)={@val={0x2000, 0x20e0a36a2454a5d}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) 5.335992679s ago: executing program 0 (id=3214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x80) 5.03394061s ago: executing program 0 (id=3215): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x2000c844) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800}], 0x1, 0x20044000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "1d88d56a159a45"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) listen(r7, 0x4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r6, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="6ff567452d54cc0c26783778eec9dc8ded24919bcd401b7cb7d66df749685a31eccd51a5676180af5bb6ac61d689d1b0fb4da01beca89044cb52ac9cd4f5bba708238b199d08f9a306bd223383b8c13e6ee7a9bc027fc18dfb3d0dd481e590c3abe71645691a84ff0100"/117, 0x75}, {&(0x7f0000000500)="775a816ccf3c1f75e6b195a101e9937d930f37f2ad572cfca859ee210732f575db9e94afd44a2ef9552905733b858270f83d8ad050ef48bfc63e5d22beb8af06870a4a430aced9b75a1e17ecfb30e955eb348ff1c5c354ca0caa75c7ddb755f6db61f99f90ec", 0x66}], 0x2}}], 0x1, 0x0) r9 = accept4$unix(r7, 0x0, 0x0, 0x800) recvfrom$unix(r9, &(0x7f0000000140)=""/213, 0xd5, 0x22, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) sendmmsg$inet(r5, &(0x7f0000001400)=[{{&(0x7f0000000040)={0x2, 0x4e27, @broadcast}, 0x10, 0x0}}], 0x1, 0x4004084) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c010000", @ANYRES16=r11, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r12, @ANYBLOB="70015a8004000380540002"], 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r9, 0xc0186e86, &(0x7f0000000440)={&(0x7f0000000380)=[{0x80000000, 0x3, 0x8000000000000000, 0x2}, {0x8, 0x9, 0x1a5, 0x7fffffff}, {0x3ff, 0x5, 0x9}, {0x1d, 0x5, 0xffffffff, 0x7}, {0x8, 0x47576736, 0x3ff, 0x1}], 0x5, 0x20, 0x0, 0x7}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x20, 0x2, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) 3.887825055s ago: executing program 3 (id=3219): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05072bbd700002dc0eff1c4b000418000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="380000f7ff0001007fa225c57000fddbdf250000", @ANYRES16=r2, @ANYBLOB="100804000100000008001b00000000000800290065c976013205eca302000800"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1d\x00'}]}, 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x4e1e, @multicast2}, {0x1, @random="00480000e744"}, 0x0, {0x2, 0x4e27, @dev={0xac, 0x14, 0x14, 0x2a}}, 'rose0\x00'}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010852}, 0x80) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) 3.664760066s ago: executing program 3 (id=3221): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x130, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'\x00', {0x10, 0x9, 0xac, 0xfffffffa, 0x3, 0x7, 0x1, 0x80, 0x40}, {0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xb2, 0x7000000, 0x8000}}}, {{@ipv6={@remote, @private2, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'io'}, {0x2b, 'perf_event'}, {0x2d, 'pids'}]}, 0x16) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xffff}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xaa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r6, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) (async) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, r4, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000102000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 3.473906659s ago: executing program 1 (id=3222): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d61746368000000200002800c000300b07346e358c219250800010023707500080002"], 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000040a0101"], 0x14}, 0x1, 0x0, 0x0, 0x444}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 3.335134065s ago: executing program 4 (id=3223): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000009500"/35], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7a0a00ff0000000071104d0000000054b15575d8fb437fec52e271192f009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$key(0xf, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000000340)={0x3, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x12f) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffdee}, 0xb}], 0x1, 0x40000021, 0x0) 3.324185632s ago: executing program 2 (id=3224): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "b512b3880e60fe3f6b54c6b909007c9f70d0cfe93e43e9da39542d"}}]}, 0x158}}, 0x844) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.234848381s ago: executing program 3 (id=3225): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC=r0], 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x0, {0x1, 0x0, 0x6}}, 0x18) (async) recvmsg$can_j1939(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg(r2, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) socketpair(0x1f, 0x1e, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000140)="a97badbc3c637216e95c53053fe1f9697a14f09c3c15fe260607707255c72bc818cefd4c071b38350dd22ce585a9e3040bf34da3a9bde87cdb06d1eedd0cf3c7be15c6b415ef0ea131dbf5115b647bee1e8419b1c76ffff7ed7ef7717a4bdd1942593f9f090b96e12dfaee08989f9517e6a0c8195fafc2a5bb7a43438066431d83ddd9aa297d559767c0e47262e9df8afdb7bd7c3d1eefc8852c73c1d04aa2bd24021ba81e44ed53737507a8bfe89f1920d3c64eac27b079", 0xb8) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000009000000000000005f0f00008500000013000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x8]}}, 0x5c) (async) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x0, 0xe, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e00008100", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x500, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=@flushsa={0x24, 0x1c, 0x300, 0x70bd26, 0x25dfdbfc, {0x32}, [@etimer_thresh={0x8, 0xc, 0x5}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20081) (async) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r8, 0x40106e8c, &(0x7f0000000340)=[0xfffffffffffffff8, 0x8000000000000000]) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r10) r12 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x3c, r11, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20088001}, 0x40) (async) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r10) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r13, 0x8, 0xef5b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000004) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r13, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) setsockopt(r9, 0x3, 0x1, &(0x7f0000000040)="e9eb478b18839e0745876a92258e32a58810d920", 0x14) 2.999969566s ago: executing program 2 (id=3226): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r5}, &(0x7f0000000280), &(0x7f0000000400)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000) 2.883314816s ago: executing program 3 (id=3227): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0xfffc, 0x0, @private2}]}, &(0x7f0000000180)=0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000280)={0x3, 'wg0\x00', {0x5}, 0x401}) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000009480)={0x0, 0x0, &(0x7f0000009440)={&(0x7f0000009400)=ANY=[@ANYBLOB="1c0000fc030601030000000000000000010000080500010007000400"], 0x1c}, 0x1, 0x0, 0x0, 0x24000891}, 0x10) write$cgroup_int(r4, &(0x7f0000000440)=0x51e, 0x12) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2, 0xfffffffc}, 0x8) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$inet(r8, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a3200000000140004800800024000000000080001"], 0x110}}, 0x40040) socket$alg(0x26, 0x5, 0x0) 2.700807463s ago: executing program 1 (id=3228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002380)=@base={0x11, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) recvmmsg$unix(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/4105, 0x1009}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r1, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000080)="d5186982684b050cfdcfda9b03058378537211227f2b7d2cf7e38b9794f02828d213737cdd1abf037848f1099e5fada692a8f56a67a9adb1f605d46715a89a6f25b3ef68a73baaa373df61958b263583e6f05d9d7e9170b1f0453ae388be48d46dcb62dfab2dd7ab60d87ca97171beee5ed20e537d4ec564c3c1df40815ff90a2f02bca25544cbfc76d5ac0df10715e8523420028b7c7fb6603f7b8712", 0x9d}, {&(0x7f0000000240)="305a27ca177608e57b47cc58f5776936b43abf64fb81f7956f23890b8fa0f01902195ac68cef2339a81e1fa6563b1f47defd145b900b36736cb1028aa9460d0f18e695e4f01a9d0e1e3c2e4c7f0157a95fdecc5f7a41ad6bf415bbef211dfcabfbf574bc0fc94ed33d6819d13b08bff4204b2eb39a73244d0217ed21bf0118f391eaf1033c139c15f111fc448a2ee3a3a61cd1ceb9680629355da522be95ebf133718a4a64341e8afdb34be79eacbba5d1530ba724f99efcbebdd68dfebdc9fd335dcc118d55ab7a552ab195584b43d731485c860c51c775b7e5218720f6f452db56ad3ad9fc70d0", 0xe8}, {&(0x7f00000003c0)="6a567bbd2cb5e6589383e2c7f82f1a854e5488ab6ddce3a8edeaa1c02d7d95a428a2ee4c489122528f41e0addaba67dd82c2e2afff8e0a0a2e31da8042c564a0534c968736134bd1b2022ac314a703a6d17089313b132c4e138b321631d3d2690c6b8041c623115e3c14564a38c1a254a63026523a6b6b96c39c3883acc868", 0x7f}], 0x3, &(0x7f00000014c0)=[{0xf0, 0x103, 0x5, "569f9ccd9095cd6e71a85769d660ff21b2f31c43da3c3f828cd7ef465a1b81e4ddef4519eb3e2524afd50d1f2c3dc8ea9ca5ebb4acc54e08b5d89fa93e955a010676d6ab2d4990bd3bd674f329069bcc9959da9282351d70457f4c3c0a81a35ee1c24585807415eba4c53aa0cb553fbda8eec0e7cd9d87fbd0c015e487ae66d59b7e9513f1ebe2e0a44e00cf2e853bd790b011758a0c925e3980277e5b53b073b7782ce7eac2b914f401febc188b0db337114ef380d10ed29c5e887cf73f4403a5a422b246a0b639d0ed26f7ce2639e9531097d985728370342eda8f0a"}, {0x60, 0x118, 0x8000, "db75b21d3bc67f8dfb4a1e9a5d06742ad0914493cef2cf5173a87a4090be41c86d0425c407d3bcfcfcf6d7ecd873ca83cc39639f4acdb0243c9c6251e955251771c70ae4683abe13296f"}, {0x48, 0x115, 0xb, "dea68cc708b058c1437d72e868f812d2c31bd7b1df6b2269dcecef70e8177609b3b9bb18dcaa75c7086149bc60d92072b4"}, {0xb8, 0x10e, 0x8001, "a6f58a9c62cbac55d2bed1f8861b24490211ab1921831d42cf97bc36ec4c72fa6e2a44f9ae1eafce3f8740f02a4a0d7c2ad6a9da244dd0782bc2f302707b0d4f838d42f2d5bf3145e8d3ac647fd63784ecc7065a8310fb9e7073569c91647009bfc655546fa2651f84f34e661921197b4f38670c1478fc699cd0fa9473d91c565ff8f62e5d0fbd2ccd9aeb117f59016cc5d694576fa4c03e0177a409137a702ee8d8"}, {0xb0, 0x0, 0x4, "1996576c7ad01d9f1930a71da4170c668354861e551c29dd12b95a9699aa000899b4ab88d2786099f780dc3dc4d9c668bbb213b79396ef2962b7a542753891da85445847491698bba6d6fef318eaf753df518f177b5a044fa4a04039b28e47c907ca91abdf6fe026424e7f591b21c786d125c563df5c13b290f82e4b8b5f54f80d61409c0109f7dd5288b131035cf7856f778718fece348a9c6ad251ec40ae98"}], 0x300}}, {{&(0x7f00000017c0)=@l2tp={0x2, 0x0, @local, 0x3}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001840)="bf32539da1d91923ed895353faeb92349f8ffa9ee6048017f02c175188e640a075ceffab1e84415fe62c55e5ef96719634e26cab2e3fac033efddb6c876f08d5f9ac09d93afb925706dfb8b074f63a723e5422c202e7faa7f2f18b9820cff3256155f1416df99581308616385742f906a35a1b9cb7d85dd7f5f3a01f2bd82bf83f57c448b20d9ffa1dce821a8ed6bfd7d7be6653ec25588f921ae80314a7bea7f89116c6bcf843384fdc6e0f0fc4a75b747fb618177914e8b0cd50", 0xbb}, {&(0x7f0000001900)="56195e44114d86b2095630b1dc6444f9ba8dbd75b1202f8942d8996df53c41e77e4957130abdb0996b645ca6cb6458ce2cd7613870838fb1eade3c7406726a0b454cc2ce2e5fadb68eeb79beb468559849dfbdd1de6dbf25f75bf28446893f475d8da2c9d3f34c04b34f56776c077cd3f4bccb4b77dacf6c55b98aa92058556aa4c019c1255f80ed70f2eb11aa3fec5ea68cc2c1b2645d4af730c779355542d967433105a97731a54c1a2ce640f2b141e86f7499bcfd56e5f5ff1e0181abab315e4f659b504afac7968aa58fdfb19e84da97be15ec1cb8", 0xd7}, {&(0x7f0000005880)="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", 0x259}, {&(0x7f0000001b00)="4337c8d8f2e25e3d7445db829744dc2b74e671411cc89331d2477f89a6cad48880fb6720a65ad343c7ef26174aafd4beb445e782677a8542e2727124b06285ca2353265810cf", 0x46}], 0x4, &(0x7f0000005d40)=ANY=[@ANYBLOB="a000000000008379022aa5e6a843e2cc7deb973d00000b010000010001006aee1fcc2d616c89a8c99d227b82bddac4f93256e5c337b01e57b9e401ac159c24061adfcef52f88a85100db75c09e36d51377802e3956a83568bea7bfe73aeb56aee3ec05d2c30ad4533a3c18a2f1e15cf573d14efb353e7e3507aa52679ae3ffca35f4091b236f3a141a4090edb0dc8e1b261500c50d988469714ab139128b1e18c8bfa3ccbc452b1d0fb461197b1bad0000000018000000000000000a010000030000000c00000000000000054218c2a792545f09e2c3617fd738e73e9ba2a9125682d3b1b5afadfdd7692f59779218"], 0xb8}}, {{&(0x7f0000001c80)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cbc(cast6),blake2s-160-x86)\x00'}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d00)}, {&(0x7f0000001d40)="6800a40d789e62afd0a620f0942f0114b4b34bb49bcdafada9b54e1447d751cf854ccc3cdce5dde1545632c76cfa99b6e632c0e7c5c7331c94f62b4d710e7a764ef30a88c0eaabac8beb5aa41671ca8e6c0a150567417f44fa3d106001a4748d", 0x60}, {&(0x7f0000001dc0)="4b7275dccf8a7017272803134e597dd4197e0ceea3d823ccd6af87c3fd418828510e61cd8e959dc65f0c93b30d7ba4bff1bd76ab5002055e15555e089c4f24c1e9112eb1b6636d9e00240ee69afebf3a87e22bb039d1dae9c33c97f26c7012271fc142652a6f884abdfa49c4debfafad50a167da7c4db85ecdf8e210b6592a3c5c721de7207882ec4540a584aa45d87db8f761567979fbe9ddb5feb708a7b3", 0x9f}], 0x3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0x31a8}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000005080)="774196c165024ced52fd660e48b88a611526aefb9fe5ad2b2522fc9c3318b85ee4627d35fb2f64e0697a5cbc975b45e188c805b3ad3addcc43d6f0de", 0x3c}, {&(0x7f00000050c0)="a206572a5c21c87f416fa7932121cc3da6b7c76292e82211cd671346fb33098f82a07e204420ec0b15635cc84503a11bda0c053c46b370841f773d2b83e37beeca43fe3ccc90e232536ff26738974c94929396dec8cd654114c36fc0dac3671ca7e2a5c18780dc717c61a123a3c6d5c315d4b96083d8778e614a00974d533ff35faaa10409d27ff9eb420057d67920b74735a82af86fc77cfdbd4489a1f69c52ca5722caf151e5fb45f458cdd6a5ba79c31ccd165bd449a63d2a451ec3b04ce8db26b470e953354d9b1e721624518a4fc8b060dea60392499c0d67fd9442200290db75ac851bae26", 0xe8}, {&(0x7f00000051c0)="9d0432917144bbdc9ed7c0e8e5bd29cff5f2dfa7c8a4b39dac3662078c8c3ea9a01b8101d94358e4ddba77f64e4b29c0446069f1dccd6c0f00d5320e668bc3bd174f3b64c49b2ad73d046d925b614f9baa0341a3cc2c7f448a96faffe4a5a7690c5fc8c83d13ba71065b193e56fe298b448f3f9f554a2b232e7ce1f8da60b01d3b54b6a56c210c99344b7c174573a76435f570e35250536f0930993a87418d8e7aa307b86fdd015760de7ec1412fc490e276a0c5cc064e93d1d76c3e95d418097ba352caa1be960a6f9fca66517658e5f205edba6a8e4a26d88c30103e9ceac0930e0343ca4ae519f422fca2b9b587b4d2cc15af9988567afc4a", 0xfa}], 0x3, &(0x7f0000005300)=[{0x78, 0x10d, 0x3, "3d4fe6287ed4c68c5a31526004dc881b4705d8b457a64b21af3c4d1257df4834629e82ea0c2dea8ac69a7bba903e5084efa543bdc4e3a0498fce8c19f453f2f41a0b9fbadf398baebf5a4a67f3c3a8fea70c3934d173c5dbab58425f868454f485f738d0d7"}, {0x80, 0x0, 0x96a, "e5ce2723997fc6a6bdac665b7d450d128db6179ef3c54174f7196e5d46270c9f2ddd5538882da8d070aa39978bbe5f5690b5bca11d59ff7eb9115d1ef682b3db3e24f1c0b015b0222cc979c334575f9d2c5b9f3dae525843d8e43e0a6e7283645791ef7c3be3b2177c88"}, {0x18, 0x84, 0x4, "be71899c"}, {0xb8, 0x103, 0x2, "f58efbb6de8b4beccdf6ce3080726b12d3d3e9f71a4e1106f432bc1d302fa1cc23c3c81e5a31d60ddac8f95531a2da225a95d0914073ed99fa3205fca54cf2b838a74c5ca1eaeb050959eeb06396a8d50660f107472411ad1c852f67a09f274ee158f6864cc48cdcd9387f849c7ecd211a8f9c95d19e38ea272b38f2a1bb59405d640bd11cb4c96e30f3c42848a0461e72e5a886eb1e1657384ab11c1362e92605"}, {0xf8, 0x117, 0xfffffff7, "dd324be794ea7c447a73ebdc63b73da3e026afbc86c301688b18d9255c093d25e1993e2f17af3e3c66bb0918187f8383cca83d97170e03767e2d9ae4778f7e1d99a30e06c1af8a174d72f99c2c0123ae51db43eb8bffff171624169fbdd4a5cc4dc9a188e325538c98552b10b8d445610257dfaaa7a7ecf273bda1dca8b3c8c68cd0f9081d9a1cae115f1e907868121f2ebed3eb60f77f91254e76316445181ef0c7489571ee2e002e6d009a9e92af68acadec7f00b9f19f23b1c6781217eb6db687c7a622a7e451b79f2491b96253c68a753225c866b14cd11eb08fc96f609b9024a6"}, {0xe0, 0x0, 0x4d40, "8b5d0a02122e385578380aab2a3fcc28b21dc85f912d4859d6ad4896cae0f9f017661d5b59c5289dbdd37261b8acc39b19f78788ae3e99b0f76f8a91a07422f409bdd8afdd56fbe8cc17865e2591103ae447305d5983fa8fed8be10c832facfaeedc96336a7ffbc1860a845a8c58b3630d7d61458b7eb92974430c2271b0e3f13f8a529d94477f5611185f68187171bda2948efc00eac5d6b2c70f4e2b1720587b4c34ecd0b29936ca39d061b7b0bdc9e0c2915ce993019f0d9c6ed4d9320241b7693e236da40d8b7959cd916c"}, {0x20, 0x88, 0x5, "ee35b7baaacf341b9c5853"}, {0x98, 0x0, 0xffffff00, "6965978dbb98f7f1bfbfb7aac1ce6c05e783dcdf0ebaa490bc579d78b39a31db497660646bf41a755c66255490da91df6c5001fe2056187a0ce6b28780164f7d77be3881acf7ee97c6d5a7fa9d99aa4e7ff45954ec93805b4e79659f7e55c8bcc33a272fbd5864411aff244fd11042a473230a4dafe6580e40e5c0adc35d670dde46d57080"}], 0x458}}], 0x4, 0x9200000000000000) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000200)=0x4, 0x4) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0xd, 0xc9, 0xffffffff}]}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x3c, r7, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x3f, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x20, r7, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x4b16, 0x4) bind$llc(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xe, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e035d50000af9cdff029c1fd3dc9", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005c80)={0x6, 0xc, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000001ac0)='GPL\x00', 0x9, 0x8f, &(0x7f0000005b00)=""/143, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000005bc0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000005c00)={0x5, 0x9, 0x437}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000005c40)=[r3, r3, r3, r3, r3, r3], 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001a00)=r10, 0x4) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x28, r11, 0x9, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4049}, 0x10) 2.456444481s ago: executing program 0 (id=3229): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000240)="94", 0x1) readv(r3, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/135, 0x87}], 0x1) tee(r1, r4, 0x8f5, 0x100000000000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e61670000000000000000000000000000000004000000000000006c1900000004"], &(0x7f0000000080)=0x2c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20008080) 2.42812628s ago: executing program 2 (id=3230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0xa}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) unshare(0x400) r3 = socket$kcm(0xa, 0x2, 0x0) listen(r3, 0x0) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[], 0x32600) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000400)={r6, r2}) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000440)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000c, 0x12, r2, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x0, @mcast1, 0x40000000}]}, &(0x7f0000001280)=0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000080)='erspan0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2.202709596s ago: executing program 2 (id=3231): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r3, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r3, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100fff60000000000000500000a48000000060a010400000000000000000a0000040900010073797a31000000001c0004801800018008000100647570000c00028008000140000000150900020073797a3200000000140000001100010000000000000000000200000a"], 0x70}, 0x1, 0x0, 0x0, 0x28000095}, 0x24000800) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x5411, &(0x7f00000007c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x5411, &(0x7f00000007c0)) socket$kcm(0x21, 0x2, 0x2) (async) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=@deltaction={0x170, 0x31, 0x1, 0x70bd2a, 0x25dfdafc, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @TCA_ACT_TAB={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x200040e5}, 0x4890) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0xe1c0}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f00000008c0)=""/211, 0xd3}, {&(0x7f0000000c80)=""/74, 0x4a}, {&(0x7f0000000d80)=""/213, 0xd5}, {&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000080)=""/171, 0xab}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000001840)=""/4109, 0x100d}], 0x7}, 0x1}, {{0x0, 0x0, 0x0}, 0x1c7}], 0x3, 0x0, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x2, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESOCT=r9, @ANYRESHEX=r9, @ANYRES16=r9, @ANYBLOB="b8bef960e08c6a02aab51b6c822b590f6d87b70ecb1dbe18a410d17afc09dc270e64e98fab856e5fdb7352594e9b63998b59cc2cba63d4757c0c6da4f5115ae75294771a5f77d1cf0267303c36b2a4e7b916f3a92060ad55668d31d8e7d266371504a07fa94ac75701d7f1d5ec41323322731058dbb1137edb27f1b539406880804ffe1d82604db92301190d8cc5cf227d6ccc43bb8fe34817e2bc342699300b5eb7c148e0d4e6610139178d9eadaeea41ec8a4b427c3a2f49b92796b9756c097936890a28282214d6768607d017d44a43e7"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="5000000000000000000000000700000094040100890f070a"], 0x50}, 0x840) socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 1.567284709s ago: executing program 1 (id=3232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040824}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040824}, 0x80) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) (async) 1.413210015s ago: executing program 1 (id=3233): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a0502070000002cbd7000fddbdf2505001a007f000001000000000000000000000000000000000000000000000000000000004be7ff"], 0x38}}, 0x40004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000001800)={{r4, &(0x7f0000000100)='wg0\x00', 0x301002, &(0x7f0000000140)={@_ha_fsid={[0x8, 0xe]}, {0xfffe, 0x5189, 0x82d}}, 0x0, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x1}, 0x5, &(0x7f0000001740)=[{0x1, 0x1ff, 0x0, 0x0, 0x0, 0x22}, {0x3, 0x3, &(0x7f0000000300)='\x00', &(0x7f0000000380)="08952abe742168f2430f8c973246999e20311b590d84d9c76490759c3db1f258a4bbc1785866a190d6275d10441176cd084ab0b32f2e484f2640c8c2bd861fae031c2f918185370fa66b3de53c2ed0c76f04eac0ba36c4e05f462a1231ef4118d0b692e67fd8081254e54f967a8c4b66abd514f61603d16130ab24031e5b65c02a5c26537731d2b84cd157e34ba46dd49b6879c22f62f7bd58576d22d6c70444a19a521224646b91fd2ce7b6c4ad4b1a241b8b7a35272e58105c0bf5bfb37957ce637da934574e042c198e68ad5c2965f9d662e2d834e5c36a694130d30fa9a94e", 0xe1, 0x3a}, {0x1, 0x89, &(0x7f0000000480)='wg0\x00', &(0x7f0000000540)}, {0x7, 0x8, &(0x7f0000000600)='wg0\x00', &(0x7f0000000640), 0x0, 0x18}, {0x3, 0x8, &(0x7f0000001640)='\x00', &(0x7f0000001680)="a597178aebea121fbd1fb4da28624740bbedc8df55d84bafc5ad0974cc4598eea98138439457888cc37d41736b0a3e302626", 0x32, 0x2}]}) syz_genetlink_get_family_id$tipc(&(0x7f00000018c0), 0xffffffffffffffff) r5 = socket(0x27, 0x2, 0x7) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000040)=0x7) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000006c0)=ANY=[@ANYBLOB="041100000000000000010004010304010904013f073687ba638274c353c4880e80066b2e76c465e718c78bf226ac33152878f3d3614425b6f874e8c5285298ba873dddef149cdae527d445a104010d0001000740000000010e05000003000000000000000d0000000000000001000080000000000f000000000000000200000000000000470f000000000000070000000000000000010000ccccfd97679b33158e0570b807eb5958e3dcb61421d8a1c5ffdd159fbb7e61ed57a604f04d80cea76de65259d1d558e93c7a745a7dd4"], 0x98) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_stats={0x37}}) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x891b, &(0x7f0000000080)={'gre0\x00', {0x2, 0x0, @multicast2}}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000201eabff4d7fa0d923c0000d6000100250000009500000000000000184000c2cae3fa94000200000000000000000000009500000000000000950000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000240)={0x63c, 0x200, 0x2}) 1.290430958s ago: executing program 4 (id=3234): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x1, 0x70fd3a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x24000010) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x14, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\x00'/28], 0x50) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00ff000000000008000400"/22, @ANYRES32=r1, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r7, 0x25, 0x8, @val=@iter={&(0x7f0000000100)=@map_fd=r5, 0x10}}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b', 0x1}], 0x1, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001000000000000000000050000f7130000000e0a0000000000000000000002000002140000001100010000000000000000000300000a9c950f35077c1c326d"], 0x3c}}, 0x800) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.146322073s ago: executing program 4 (id=3235): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000380)={&(0x7f0000000280)=""/203, 0xcb, 0x81, 0x446}) (async) unshare(0x42000200) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x1f, &(0x7f00000006c0)=""/31, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0x1}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, 0x0, &(0x7f0000000040)) (async) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x3], 0x5, 0x14, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'bridge_slave_1\x00', @ifru_data=0x0}) ioctl$sock_proto_private(r4, 0x8b22, &(0x7f0000000080)) writev(r5, &(0x7f0000001bc0)=[{&(0x7f0000000640)="59164c58fded19b5e773d0b231e0b152c09fda31f9d17cb2cf98132bb489751f393959b28c4450f1a93d3f428a01cd730f80dc1d2cd17b7749ab2a010bb780a0e0e07f19da451c36782ee5d3916099a6a51bd5c6ab0390a9d627fa2f61b5cda61a8d96d6334802ce8d27143f5e4e", 0x6e}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000780)="d3fd8f267b50e69f5cdc9034addc859fbf85cedd0918000000000000c7de4654d29c09b7732fb0b0690c8b9f27e3cdbfd1ad89a168e3e113b5ca204d4fda136b5115b871b158a63d9d6130eaafe5942b1d17b02d2da893fa7bf35d180da4a4266159bb0f84b05179c00b211b40e33cbbd5a04c1bfda94f0a0d7f14c49c222701875866aa3601c70734e78273ebc5423a9bbe54af37987d332001361f43bda5598d731d5e5e058473f4b3955f9f3bd05c5090330c49000000000000a9323bbdc3e0f9f75ca459164a3b708b5de76b027267ac2f438f9f700445c3d5afd952b946", 0xe0}, {&(0x7f0000001a40)}, {&(0x7f0000001c40)="45002ec8ed5853516daa14340ceb027be0acd10e565839411bbcc79c84031c74f5845867dc06f207a6546407f2e0b6d3853c03e2959f2fd1e2493b285bf37ebeae82e86f9eee762ec20ee6c2c31d897480fe6fd3a2458d3c690fad6866eb374a5a6e075fccddbeeed3a6ff47054631353f25f0fa6a86c81bd555677160703e2bae74b7ea491e001077c0c32743f8f0a267126fdb83fb42c0ecbeddadfc22c1ff5c6307bd0f72905d1fb952603c8f4b3b9dc17d156a81272dd0a38f3bba2468df92237e965d524bc99aa1309a8860cbd8090f10a96e1019e2d6", 0xd9}, {&(0x7f0000001b80)="6d640ec7376417397e03d5d889d5c3bf896c3324d90e6fc0055156ee46156f40a9ed49e83a385046ccd52fa9590939bb005e3bd1f41cd66fee1ea2950f81", 0x3e}], 0x6) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0xc, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x8, @mcast1, 0x3}, 0x1c) sendfile(r2, r3, 0x0, 0xffffffff000) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x5e, 0x9, 0xc18c, 0x4200, r0, 0x5, '\x00', 0x0, r1, 0x4, 0x0, 0x5, 0xd}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000380)="c0b954ec00000021000000100000", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="1b4f72c54d4825e6f475c20fb6e3520e647d5bb6544ed4923cf5c41ed9e962f97bfb2f10f004b595da92bde48a74e7e28dccaffae6e59585e0f3f3c4aa86610e1fd36e41aee28fb2a9a4dcb1c31f7b9c5bf1fa5ddc585afa3143ef", 0x5b}, {&(0x7f0000000100)="96feb24e64470110cc5c146add0ddd78cc5a90671722e067cf51067297498f157ea3b37814a07b0ab1582b9bfab7a21424959b", 0x33}, {&(0x7f0000000440)="afe66e62e3d1fec96c321c4c36118e3cbc168f9ca7ded6666bd063e6da7b9d218efd7aef1b9fd7527312ecb209e2ee8760bc0f605797ae6be0fb2d3fd495bbec90a02a65535e7464a96565bcf9e81c4f950c57196c5070d7a73643fe4b4ff51dc24af2df7e6b4fd28082feaeffb0b77ed44be8d0b92bd75d9b7ec9e59f94970ae8c344e892c15c800a7917832aeea8f9de9340d2df9122e3dfeffdfd756f706928c1ca975fa5e46318007f7e691d51db82414e6756b9f647b2ab0ec674fffcbf77d5b0803d0f7c0cfdd66390874891f77287a934907c0e2105eb3bcad355a202ec66c7635673", 0xe6}, {&(0x7f0000000540)="8c4c268649493c905fd2c9e10568cda81e", 0x11}], 0x4}, 0x4001) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000180000000700000000000000054000007a0ac0ff1000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, r3}, 0x94) 1.14106047s ago: executing program 0 (id=3236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xbf}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000)=0xb2000000, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c0007800800"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 902.653225ms ago: executing program 1 (id=3237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x200000000000022e, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000240), &(0x7f00000003c0)=@udp6=r5, 0x1}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25}, [@alu={0x7, 0x0, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x10}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 611.807031ms ago: executing program 2 (id=3238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000fddbdf250000e7000000000000008000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x2, 0x10) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40008840}, 0x2040000) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) r6 = socket(0x2, 0x80805, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0xfffc, 0x2, 0x5, 0x5}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) (async) r10 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r10, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000001840), 0x3b, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x100000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10) 470.269011ms ago: executing program 3 (id=3239): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200"], 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882c"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) socket$tipc(0x1e, 0x2, 0x0) sendfile(r0, r5, 0x0, 0x20000000002) 334.674078ms ago: executing program 2 (id=3240): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0x1, 0xf, "5dd9df453931d37eeee485225f"}]}}}}}}}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$kcm(0x23, 0x5, 0x0) getsockopt$sock_int(r6, 0x1, 0x28, 0x0, &(0x7f0000000140)) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 0s ago: executing program 1 (id=3241): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0xcb20, &(0x7f0000000140)="841b6454205a3c16af1dcabd62a3ce2ec93a101284e5a961a1d59284dedb449e5fb7191b65216f49afb9a8cc016376d11917c81d1bd28212a241b799f2fd166262772b81c1171c4354f277a819acbe37da36a174e01041da06f52cf1d48a3aa3769348828f578dab1378f3aed4bf93f02aef0594e86a579d333c01af529a01333a6803099f72bff5ff0891f479cc80ab3e0a7bf53dbe30cfff4175b507a13bba41119de20884ef8f8383410a1e1ee3d5b29ecd5a6440492142085b00b66007246061347a6ac57ebfe06c3dd6d89a45e39a8b2cf45446bba6c071ada4951dd4f1269925f757aa7a9ad6a494de01583e007b05bf6366fb39f5d2af0bf0d2cc9c716b771d1eff2a9007ae6d33429163f8e99d5e7e822d8bf66a8031b70976e3008f507eb90dad5cf49f9669cfc4ccab0d0c7d0c6d22c00eba53ca2d90085b7c39f6b7ad07ba5b255c815432bddeec") setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0x64, 0x4, 0x278, 0x100000c, 0x0, 0xb0, 0x148, 0xffffffff, 0xffffffff, 0x1e0, 0x1e0, 0x1e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "3a2a8fa7d4b22c81086c268084a9c7223d88d322ef00"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xff0000ff, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {}, 0x21, 0x0, 0x3355865cd5e8910d}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xa1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl(r1, 0xcb20, &(0x7f0000000140)="841b6454205a3c16af1dcabd62a3ce2ec93a101284e5a961a1d59284dedb449e5fb7191b65216f49afb9a8cc016376d11917c81d1bd28212a241b799f2fd166262772b81c1171c4354f277a819acbe37da36a174e01041da06f52cf1d48a3aa3769348828f578dab1378f3aed4bf93f02aef0594e86a579d333c01af529a01333a6803099f72bff5ff0891f479cc80ab3e0a7bf53dbe30cfff4175b507a13bba41119de20884ef8f8383410a1e1ee3d5b29ecd5a6440492142085b00b66007246061347a6ac57ebfe06c3dd6d89a45e39a8b2cf45446bba6c071ada4951dd4f1269925f757aa7a9ad6a494de01583e007b05bf6366fb39f5d2af0bf0d2cc9c716b771d1eff2a9007ae6d33429163f8e99d5e7e822d8bf66a8031b70976e3008f507eb90dad5cf49f9669cfc4ccab0d0c7d0c6d22c00eba53ca2d90085b7c39f6b7ad07ba5b255c815432bddeec") (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0x64, 0x4, 0x278, 0x100000c, 0x0, 0xb0, 0x148, 0xffffffff, 0xffffffff, 0x1e0, 0x1e0, 0x1e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "3a2a8fa7d4b22c81086c268084a9c7223d88d322ef00"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xff0000ff, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {}, 0x21, 0x0, 0x3355865cd5e8910d}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xa1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) (async) kernel console output (not intermixed with test programs): 28] netlink: 'syz.2.2002': attribute type 1 has an invalid length. [ 307.094931][T14328] bond10: (slave gretap1): making interface the new active one [ 307.139585][T14328] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 307.232444][T14333] Cannot find add_set index 1 as target [ 307.257447][T14333] __nla_validate_parse: 1 callbacks suppressed [ 307.257462][T14333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2004'. [ 307.288151][T14335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2003'. [ 307.305444][T14335] ip6gre3: entered promiscuous mode [ 307.311315][T14335] ip6gre3: entered allmulticast mode [ 307.366697][T14302] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.626138][T14347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2007'. [ 307.736635][T14347] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 308.129288][T14358] netlink: 'syz.3.2011': attribute type 4 has an invalid length. [ 308.148713][T14358] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2011'. [ 308.208613][T14372] netlink: 'syz.1.2013': attribute type 21 has an invalid length. [ 308.228828][T14372] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2013'. [ 308.322427][T14381] netlink: zone id is out of range [ 308.329831][T14381] netlink: del zone limit has 4 unknown bytes [ 308.345027][T14381] netlink: 'syz.1.2016': attribute type 1 has an invalid length. [ 308.776959][T14408] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 309.458053][T14437] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2025'. [ 309.573637][T14441] netlink: 'syz.2.2031': attribute type 1 has an invalid length. [ 309.633496][T14441] bond11: entered allmulticast mode [ 309.676305][T14441] bond11: (slave ip6gretap1): making interface the new active one [ 309.684511][T14441] ip6gretap1: entered allmulticast mode [ 309.691759][T14441] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 309.715306][T14445] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2033'. [ 309.744705][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2033'. [ 309.745058][T14445] xt_l2tp: v2 sid > 0xffff: 8388608 [ 309.790192][T14441] netlink: 558 bytes leftover after parsing attributes in process `syz.2.2031'. [ 310.172639][T14464] syzkaller0: entered promiscuous mode [ 310.181004][T14464] syzkaller0: entered allmulticast mode [ 310.206456][T14464] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2037'. [ 310.749816][T14502] netlink: 'syz.1.2043': attribute type 4 has an invalid length. [ 312.963802][T14458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.399535][T14529] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 313.416676][T14529] syzkaller1: linktype set to 823 [ 313.616829][T14539] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 313.634753][T14539] bond10 (unregistering): Released all slaves [ 313.685903][T14546] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2056'. [ 313.696286][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2056'. [ 313.705947][T14546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2056'. [ 313.722003][T14545] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 313.733002][T14545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2057'. [ 313.772462][T14545] netlink: 'syz.1.2057': attribute type 10 has an invalid length. [ 313.788536][T14545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2057'. [ 313.805290][T14545] dummy0: entered promiscuous mode [ 314.011412][T14568] netlink: 'syz.1.2065': attribute type 1 has an invalid length. [ 314.076614][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'. [ 314.157115][T14574] dummy0: left promiscuous mode [ 314.189511][T14577] geneve1: Caught tx_queue_len zero misconfig [ 314.195886][T14578] bond11: entered promiscuous mode [ 314.209371][T14568] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 314.299181][T14576] netlink: 'syz.0.2066': attribute type 13 has an invalid length. [ 314.316616][T14576] netlink: 'syz.0.2066': attribute type 17 has an invalid length. [ 314.328147][T14587] sctp: [Deprecated]: syz.4.2069 (pid 14587) Use of int in maxseg socket option. [ 314.328147][T14587] Use struct sctp_assoc_value instead [ 314.346326][T14567] bond11: left promiscuous mode [ 314.371297][T14589] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2070'. [ 314.437775][T14593] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 314.520400][T14604] netlink: 'syz.4.2074': attribute type 3 has an invalid length. [ 314.526441][T14576] 0ªî{X¹¦: left allmulticast mode [ 314.581311][T14576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.583547][T14607] netlink: 'syz.4.2075': attribute type 1 has an invalid length. [ 314.602363][T14607] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2075'. [ 314.625613][T14609] netlink: 'syz.3.2073': attribute type 4 has an invalid length. [ 314.644821][T14576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.654795][T14576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.666636][T14576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.678791][T14576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.682476][T14611] netlink: 'syz.3.2073': attribute type 4 has an invalid length. [ 314.693964][T14576] veth1_vlan: left promiscuous mode [ 314.703950][T14576] veth0_vlan: left promiscuous mode [ 314.710779][T14576] veth0_vlan: entered promiscuous mode [ 314.718141][T14576] veth1_vlan: entered promiscuous mode [ 314.725472][T14576] tipc: Resetting bearer [ 314.731694][T14576] tipc: Resetting bearer [ 314.740700][T14576] veth1_macvtap: left promiscuous mode [ 314.747360][T14576] veth0_macvtap: left promiscuous mode [ 314.755273][T14576] veth0_macvtap: entered promiscuous mode [ 314.762337][T14576] veth1_macvtap: entered promiscuous mode [ 314.771603][T14576] geneve1: left promiscuous mode [ 314.780204][T14576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.788338][T14576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.799328][T14576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.808314][T14576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.817196][T14576] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 314.869380][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.876594][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.896000][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.903237][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.021959][ T144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.035106][ T144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.050665][ T144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.060289][ T144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.112917][T14622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 315.194601][T14629] veth1_to_hsr: left promiscuous mode [ 315.213542][T14629] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 315.525308][T14641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2083'. [ 315.574177][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2083'. [ 315.590661][T14642] 8021q: adding VLAN 0 to HW filter on device bond13 [ 315.661233][T14646] 8021q: adding VLAN 0 to HW filter on device bond13 [ 315.669451][T14646] bond13: (slave gre2): The slave device specified does not support setting the MAC address [ 315.680957][T14646] bond13: (slave gre2): Error -95 calling set_mac_address [ 315.722487][T14642] gretap2: entered promiscuous mode [ 315.759460][T14642] bond13: (slave gretap2): making interface the new active one [ 315.783507][T14642] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 315.803399][T14653] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 315.831695][T14646] macvlan0: entered promiscuous mode [ 315.850711][T14646] macvlan0: entered allmulticast mode [ 315.857687][T14646] bond13: entered promiscuous mode [ 315.864984][T14646] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 315.881250][T14646] bond13: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 315.921870][T14646] bond13: left promiscuous mode [ 316.298779][T14677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.260796][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.022155][T14702] bond7: (slave veth0_to_bond): Releasing backup interface [ 320.045151][T14702] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 320.423389][T14740] validate_nla: 1 callbacks suppressed [ 320.423409][T14740] netlink: 'syz.3.2103': attribute type 13 has an invalid length. [ 320.443234][T14740] netlink: 'syz.3.2103': attribute type 17 has an invalid length. [ 320.481403][T14736] tipc: Resetting bearer [ 320.489376][T14736] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 320.517707][T14738] __nla_validate_parse: 6 callbacks suppressed [ 320.517726][T14738] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2105'. [ 320.534106][T14738] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2105'. [ 320.714260][T14740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.774308][T14740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.785886][T14740] syzkaller0: left promiscuous mode [ 320.791933][T14740] syzkaller0: left allmulticast mode [ 320.798333][T14740] batman_adv: batadv0: Interface activated: syzkaller0 [ 320.805808][T14740] tipc: Resetting bearer [ 320.812398][T14740] tipc: Resetting bearer [ 320.822974][T14740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.833654][T14740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.846237][T14740] veth1_vlan: left promiscuous mode [ 320.853170][T14740] veth0_vlan: left promiscuous mode [ 320.860709][T14740] veth0_vlan: entered promiscuous mode [ 320.876044][T14740] veth1_vlan: entered promiscuous mode [ 320.896759][T14740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 320.907946][T14740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 320.919828][T14740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 320.932007][T14740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 320.944692][T14740] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 320.975760][T12059] syz2: Port: 1 Link ACTIVE [ 321.024399][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.031628][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.060335][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.067542][ T3352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.137846][ T144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.336926][ T144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.362383][ T144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.394125][ T144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.857328][T14796] Bluetooth: MGMT ver 1.23 [ 322.357269][T14823] erspan0: left allmulticast mode [ 322.513356][T14823] bridge_slave_1: left allmulticast mode [ 322.567480][T14823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.595213][T14823] veth0_vlan: left promiscuous mode [ 322.602104][T14823] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 322.612054][T14823] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 322.620005][T14823] bond1: left promiscuous mode [ 322.625221][T14823] vti0: left promiscuous mode [ 322.630303][T14823] vti0: left allmulticast mode [ 322.635864][T14823] ip6tnl2: left allmulticast mode [ 322.644393][T14823] bond5: left promiscuous mode [ 322.649312][T14823] bridge4: left promiscuous mode [ 322.664878][T14823] bond11: left allmulticast mode [ 322.669961][T14823] ip6gretap1: left allmulticast mode [ 322.677581][T14823] gretap2: left promiscuous mode [ 322.732958][T14831] syzkaller1: entered promiscuous mode [ 322.745059][T14845] netlink: 'syz.1.2127': attribute type 32 has an invalid length. [ 322.767892][T14831] syzkaller1: entered allmulticast mode [ 322.778268][T14842] syzkaller0: entered promiscuous mode [ 322.788169][T14842] syzkaller0: entered allmulticast mode [ 322.889275][T14839] tipc: Enabling of bearer rejected, already enabled [ 323.100375][T14864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2133'. [ 323.113933][T14865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2130'. [ 323.129418][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 323.241237][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2135'. [ 323.372310][T14861] dvmrp0: entered allmulticast mode [ 323.431549][T14881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2138'. [ 323.431549][T14880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2138'. [ 323.473310][ T6229] dvmrp0: left allmulticast mode [ 323.774942][T14873] syzkaller0: entered promiscuous mode [ 323.788895][T14873] syzkaller0: entered allmulticast mode [ 324.297142][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 324.307378][T14916] netlink: 'syz.2.2143': attribute type 30 has an invalid length. [ 324.353056][T14917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 324.362326][T14917] netlink: 'syz.2.2143': attribute type 30 has an invalid length. [ 324.418380][T14919] netlink: 'syz.1.2144': attribute type 1 has an invalid length. [ 326.238572][ T6229] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.257617][ T6229] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.276658][ T6229] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.295912][ T6229] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.379547][T14929] netlink: 'syz.2.2148': attribute type 11 has an invalid length. [ 326.399881][T14924] gretap3: entered promiscuous mode [ 326.500402][T14942] __nla_validate_parse: 1 callbacks suppressed [ 326.500420][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2151'. [ 326.500817][T14941] xt_TCPMSS: Only works on TCP SYN packets [ 326.582525][T14933] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 326.712480][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2153'. [ 326.765374][T14960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2154'. [ 326.878934][T14960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2154'. [ 326.945166][T14964] --map-set only usable from mangle table [ 326.977014][T14964] --map-set only usable from mangle table [ 327.057456][T14968] ipip0: entered promiscuous mode [ 328.112382][T15007] netlink: 'syz.3.2167': attribute type 1 has an invalid length. [ 328.123011][T15007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2167'. [ 328.266748][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2168'. [ 328.279425][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2168'. [ 328.356306][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2171'. [ 328.512554][T15025] netlink: 'syz.1.2173': attribute type 2 has an invalid length. [ 328.552472][T15025] : entered promiscuous mode [ 328.734709][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2177'. [ 328.750476][T15037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2177'. [ 328.983509][ T4944] Bluetooth: hci4: link tx timeout [ 328.998360][ T4944] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 329.129186][T15061] tipc: Enabling of bearer rejected, already enabled [ 329.307174][T15073] netlink: 'syz.0.2184': attribute type 4 has an invalid length. [ 329.427979][T15068] netlink: 'syz.0.2184': attribute type 4 has an invalid length. [ 329.473064][T15077] A link change request failed with some changes committed already. Interface ªªªªª! may have been left with an inconsistent configuration, please check. [ 329.666124][T15095] vti0: entered promiscuous mode [ 329.680652][T15095] vti0: entered allmulticast mode [ 330.119648][T15109] bridge0: port 1(ipvlan3) entered blocking state [ 330.126593][T15109] bridge0: port 1(ipvlan3) entered disabled state [ 330.133694][T15109] ipvlan3: entered allmulticast mode [ 330.139736][T15109] bridge0: entered allmulticast mode [ 330.148112][T15109] ipvlan3: left allmulticast mode [ 330.157803][T15109] bridge0: left allmulticast mode [ 330.970949][ T33] tipc: Subscription rejected, illegal request [ 331.019690][ T4944] Bluetooth: hci4: command 0x0405 tx timeout [ 331.041142][T15164] netlink: 'syz.4.2210': attribute type 10 has an invalid length. [ 331.260862][T15169] netlink: 'syz.3.2211': attribute type 4 has an invalid length. [ 331.283468][T15169] netlink: 'syz.3.2211': attribute type 10 has an invalid length. [ 331.515999][T15191] tap0: tun_chr_ioctl cmd 1074025677 [ 331.530040][T15191] tap0: linktype set to 804 [ 331.571274][T15189] tap0: tun_chr_ioctl cmd 2148553947 [ 332.044280][T15197] __nla_validate_parse: 14 callbacks suppressed [ 332.044300][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'. [ 332.114486][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'. [ 332.767571][T15223] xt_hashlimit: size too large, truncated to 1048576 [ 333.241734][T15248] netlink: 'syz.2.2231': attribute type 1 has an invalid length. [ 333.277112][T15248] 8021q: adding VLAN 0 to HW filter on device bond15 [ 333.284995][T15245] tipc: Failed to obtain node identity [ 333.298150][T15245] tipc: Enabling of bearer rejected, failed to enable media [ 333.430318][T15256] netlink: 'syz.2.2234': attribute type 4 has an invalid length. [ 333.442723][T15256] netlink: 'syz.2.2234': attribute type 4 has an invalid length. [ 333.483694][T15256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2234'. [ 333.493413][T15256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2234'. [ 333.551594][T15261] netlink: 'syz.0.2221': attribute type 11 has an invalid length. [ 333.632010][T15261] netlink: 'syz.0.2221': attribute type 11 has an invalid length. [ 333.743363][T15270] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2239'. [ 333.804129][T15272] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 334.226703][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2241'. [ 334.268643][T15305] netlink: 'syz.3.2241': attribute type 10 has an invalid length. [ 334.283412][T15309] geneve3: entered promiscuous mode [ 334.291022][T15305] syz_tun: entered promiscuous mode [ 334.395022][T15311] bond16 (unregistering): Released all slaves [ 334.721036][T15325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2250'. [ 335.259885][T15360] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 335.283898][T15360] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.293194][T15360] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.437529][T15370] netlink: 'syz.3.2262': attribute type 1 has an invalid length. [ 336.027724][T15391] tipc: Started in network mode [ 336.033556][T15391] tipc: Node identity , cluster identity 4711 [ 336.048722][T15391] tipc: Failed to obtain node identity [ 336.075245][T15391] tipc: Enabling of bearer rejected, failed to enable media [ 336.206439][T15400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2269'. [ 336.447782][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2273'. [ 338.902851][T15429] sctp: [Deprecated]: syz.4.2276 (pid 15429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.902851][T15429] Use struct sctp_sack_info instead [ 339.014149][T15438] netlink: 'syz.3.2279': attribute type 50 has an invalid length. [ 340.010936][T15464] netlink: 'syz.4.2283': attribute type 1 has an invalid length. [ 340.155937][T15464] bond11: entered promiscuous mode [ 340.168562][T15464] bond11: entered allmulticast mode [ 340.180179][T15464] 8021q: adding VLAN 0 to HW filter on device bond11 [ 340.218250][T15468] macvlan3: entered promiscuous mode [ 340.224113][T15468] macvlan3: entered allmulticast mode [ 340.233247][T15468] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 340.285670][T15466] syz.3.2286 (15466) used obsolete PPPIOCDETACH ioctl [ 340.552484][ T1122] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.579156][ T1122] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.600390][ T1122] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.621141][ T1122] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.813485][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2294'. [ 340.861073][T15497] netlink: 'syz.4.2295': attribute type 1 has an invalid length. [ 340.900723][T15497] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2295'. [ 340.906819][T15499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2293'. [ 340.943240][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2294'. [ 340.955795][T15498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2295'. [ 340.965827][T15497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2295'. [ 340.987697][T15497] veth1_to_batadv: entered allmulticast mode [ 341.403780][T15499] netlink: 'syz.0.2293': attribute type 1 has an invalid length. [ 341.872731][T15526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2300'. [ 341.883306][T15526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2300'. [ 341.953621][T15530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2300'. [ 342.575726][T15558] netlink: 'syz.1.2307': attribute type 1 has an invalid length. [ 342.643695][T15564] ieee802154 phy1 wpan1: encryption failed: -90 [ 342.649787][T15565] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2309'. [ 343.021210][T15582] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20004 [ 343.641741][T15597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.690597][T15601] netlink: 'syz.4.2322': attribute type 1 has an invalid length. [ 343.709257][T15601] netlink: 'syz.4.2322': attribute type 2 has an invalid length. [ 343.850163][T15613] netlink: 'syz.3.2324': attribute type 1 has an invalid length. [ 343.892455][T15613] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 344.062902][T15626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.151224][T15629] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 344.172676][T15629] bond12: (slave lo): Enslaving as an active interface with an up link [ 344.184126][T15629] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 344.323685][T15646] IPVS: set_ctl: invalid protocol: 255 172.20.20.32:20128 [ 344.599923][T15660] netlink: 'syz.3.2335': attribute type 10 has an invalid length. [ 344.633212][T15660] netlink: 'syz.3.2335': attribute type 1 has an invalid length. [ 344.655846][T15660] netlink: 'syz.3.2335': attribute type 2 has an invalid length. [ 344.991423][T15684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.243375][T15702] netlink: 'syz.3.2349': attribute type 1 has an invalid length. [ 345.354523][T15702] bond7: entered promiscuous mode [ 345.375520][T15702] 8021q: adding VLAN 0 to HW filter on device bond7 [ 345.396217][T15691] bridge0: Device is already in use. [ 345.515043][T15719] netlink: 'syz.3.2354': attribute type 1 has an invalid length. [ 345.681096][T15724] xt_hashlimit: size too large, truncated to 1048576 [ 345.885159][T15739] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 [ 346.697959][T15793] tipc: Enabling of bearer rejected, already enabled [ 346.710558][T15794] tipc: Enabling of bearer rejected, already enabled [ 346.734898][T15792] __nla_validate_parse: 12 callbacks suppressed [ 346.734915][T15792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2375'. [ 346.752405][T15793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2375'. [ 346.811220][T15792] tipc: Resetting bearer [ 346.943822][T15806] Cannot find del_set index 4 as target [ 346.950822][T15800] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2376'. [ 347.313989][T15824] mac80211_hwsim hwsim9 syzkaller1: entered promiscuous mode [ 347.324616][T15824] mac80211_hwsim hwsim9 syzkaller1: entered allmulticast mode [ 347.488081][T15816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.531340][T15813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2382'. [ 347.545442][T15835] Dropped outbound packet type=200 [ 347.560762][T15837] netlink: 'syz.0.2383': attribute type 8 has an invalid length. [ 347.568878][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2383'. [ 347.765792][T15845] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2390'. [ 347.846301][T15851] netlink: 'syz.0.2393': attribute type 29 has an invalid length. [ 347.943942][T15863] geneve5: entered promiscuous mode [ 347.954084][ T7627] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.963718][ T7627] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.972743][ T7627] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.263739][T15877] can: request_module (can-proto-0) failed. [ 348.435387][T15890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2406'. [ 348.608168][T15895] netlink: 'syz.3.2408': attribute type 1 has an invalid length. [ 348.708186][ T30] audit: type=1804 audit(1782578720.432:8): pid=15902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2410" name="/newroot/506/cgroup.controllers" dev="tmpfs" ino=2595 res=1 errno=0 [ 348.778234][ T30] audit: type=1800 audit(1782578720.462:9): pid=15902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2410" name="cgroup.controllers" dev="tmpfs" ino=2595 res=0 errno=0 [ 348.822227][T15903] bridge12: entered promiscuous mode [ 348.827750][T15903] bridge12: entered allmulticast mode [ 348.866827][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2412'. [ 348.920920][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2412'. [ 348.940549][ T1122] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.958739][ T1122] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.976839][ T1122] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.441769][T15930] sch_tbf: burst 14 is lower than device syzkaller0 mtu (313) ! [ 349.658496][ T4944] Bluetooth: hci4: command 0x0405 tx timeout [ 349.736754][T15945] A link change request failed with some changes committed already. Interface ªªªªª! may have been left with an inconsistent configuration, please check. [ 350.023762][T15961] bond3: (slave erspan0): Releasing active interface [ 350.031414][T15961] erspan0: left promiscuous mode [ 350.036569][T15961] erspan0: left allmulticast mode [ 350.055268][T15961] bridge_slave_0: left allmulticast mode [ 350.061804][T15961] bridge_slave_0: left promiscuous mode [ 350.067569][T15961] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.126340][T15969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2423'. [ 350.149513][T15970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.164912][T15961] bridge_slave_1: left allmulticast mode [ 350.173124][T15961] bridge_slave_1: left promiscuous mode [ 350.179504][T15961] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.194613][T15961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.202255][T15961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.215708][T15961] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 350.224079][T15961] batman_adv: batadv0: Removing interface: syzkaller0 [ 350.232862][T15961] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 350.636737][T15992] syz_tun: entered allmulticast mode [ 350.673259][T15987] syz_tun: left allmulticast mode [ 350.738357][T16000] syzkaller0: left promiscuous mode [ 350.745249][T16000] syzkaller0: left allmulticast mode [ 350.838178][T16008] netlink: 'syz.3.2437': attribute type 49 has an invalid length. [ 350.965860][T16017] IPVS: Unknown mcast interface: vcan0 [ 351.017119][T16019] sctp: [Deprecated]: syz.1.2441 (pid 16019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.017119][T16019] Use struct sctp_sack_info instead [ 351.418010][T16036] netlink: 'syz.4.2448': attribute type 1 has an invalid length. [ 351.470127][T16037] netlink: 'syz.4.2448': attribute type 19 has an invalid length. [ 351.482254][T16037] netlink: 'syz.4.2448': attribute type 20 has an invalid length. [ 351.745445][T16047] §: renamed from sit0 (while UP) [ 352.111860][T16063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.127155][T16063] __nla_validate_parse: 9 callbacks suppressed [ 352.127190][T16063] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2454'. [ 352.211517][T16069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2453'. [ 352.449013][T16073] mac80211_hwsim hwsim9 syzkaller1: left promiscuous mode [ 352.470346][T16073] mac80211_hwsim hwsim9 syzkaller1: left allmulticast mode [ 353.001640][T16098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.011644][T16098] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.033029][T16098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.068325][T16098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.082668][T16098] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 353.389329][T16123] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2471'. [ 353.852033][T16146] xt_CONNSECMARK: invalid mode: 254 [ 354.322312][T16166] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2478'. [ 354.355244][T16166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2478'. [ 354.369417][T16171] nbd: must specify a device to reconfigure [ 354.384008][T16170] nbd: must specify a device to reconfigure [ 354.617404][T16189] vlan0: entered promiscuous mode [ 354.692389][T16190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.976979][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2489'. [ 355.355970][T16241] ±ÿ: renamed from lo (while UP) [ 355.491963][T16245] tipc: Started in network mode [ 355.504922][T16245] tipc: Node identity , cluster identity 4711 [ 355.515412][T16245] tipc: Failed to obtain node identity [ 355.525961][T16245] tipc: Enabling of bearer rejected, failed to enable media [ 355.550406][T16249] syzkaller0: entered promiscuous mode [ 355.568787][T16249] syzkaller0: entered allmulticast mode [ 355.888747][T16270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2504'. [ 355.903532][T16273] IPv6: Can't replace route, no match found [ 355.908663][T16270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2504'. [ 355.931539][T16273] IPv6: Can't replace route, no match found [ 355.947435][T16273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2503'. [ 355.982381][T16275] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 355.990076][T16275] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 356.013720][T16275] netlink: 'syz.4.2505': attribute type 13 has an invalid length. [ 356.022076][T16275] netlink: 'syz.4.2505': attribute type 17 has an invalid length. [ 356.030776][T16275] netlink: 'syz.4.2505': attribute type 27 has an invalid length. [ 356.040414][T16275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2505'. [ 356.281638][T16293] bridge0: port 1(veth1_to_bridge) entered blocking state [ 356.289243][T16293] bridge0: port 1(veth1_to_bridge) entered disabled state [ 356.296737][T16293] veth1_to_bridge: entered allmulticast mode [ 356.305326][T16293] veth1_to_bridge: entered promiscuous mode [ 356.484139][T16295] block nbd0: Unsupported socket: should be TCP or UNIX. [ 356.491677][T16295] block nbd0: shutting down sockets [ 356.575909][T16301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.624830][T16303] netlink: 'syz.0.2514': attribute type 11 has an invalid length. [ 356.633853][T16303] netlink: 'syz.0.2514': attribute type 4 has an invalid length. [ 356.773267][T16305] netlink: 'syz.0.2515': attribute type 10 has an invalid length. [ 356.832817][T16310] netlink: 'syz.0.2516': attribute type 30 has an invalid length. [ 356.832817][T16309] netlink: 'syz.0.2516': attribute type 30 has an invalid length. [ 356.843327][ T7627] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.858610][ T7627] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.868046][ T7627] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.877491][ T7627] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.608339][T16364] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 357.645904][T16366] __nla_validate_parse: 7 callbacks suppressed [ 357.645925][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2528'. [ 357.949007][T16372] bond16: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 357.960858][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2530'. [ 357.971791][T16372] bond16 (unregistering): Released all slaves [ 357.979248][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2530'. [ 358.179074][T16383] IPv6: NLM_F_REPLACE set, but no existing node found! [ 358.315321][T16393] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2534'. [ 358.328758][T16393] netlink: 'syz.1.2534': attribute type 1 has an invalid length. [ 358.331126][T16385] bridge5: entered promiscuous mode [ 358.360314][T16385] bridge5: entered allmulticast mode [ 358.396461][T16385] team0: Port device bridge5 added [ 358.438731][T16395] netlink: 'syz.4.2535': attribute type 12 has an invalid length. [ 358.540374][T16382] netlink: 'syz.0.2529': attribute type 1 has an invalid length. [ 358.557887][T16395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2535'. [ 358.684988][T16405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2538'. [ 358.793148][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2539'. [ 358.807749][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2539'. [ 358.833259][T16408] geneve3: entered promiscuous mode [ 358.840064][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 358.849144][T16408] geneve3: entered allmulticast mode [ 358.862019][ T6229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 60537 - 0 [ 358.888720][ T6229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 60537 - 0 [ 358.906412][ T6229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 60537 - 0 [ 358.917645][T16410] IPVS: Unknown mcast interface: vcan0 [ 358.948713][T16408] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 358.984408][T16408] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 359.025288][ T6229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 60537 - 0 [ 359.206103][T16432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2545'. [ 359.415510][T16435] erspan0: entered promiscuous mode [ 359.479338][T16441] nbd2: detected capacity change from 0 to 63 [ 359.492564][T16438] block nbd2: NBD_DISCONNECT [ 359.505474][T16438] block nbd2: Disconnected due to user request. [ 359.518635][T16438] block nbd2: shutting down sockets [ 359.530597][ C0] blk_print_req_error: 65 callbacks suppressed [ 359.530619][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.546017][ C0] buffer_io_error: 138 callbacks suppressed [ 359.546030][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 359.547380][T16441] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 359.552000][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.552073][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 359.552093][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.552147][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 359.552165][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.552226][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 359.560235][ T4956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 359.560315][ T4956] Buffer I/O error on dev nbd2, logical block 0, async page read [ 359.560369][ T4956] Buffer I/O error on dev nbd2, logical block 1, async page read [ 359.560421][ T4956] Buffer I/O error on dev nbd2, logical block 2, async page read [ 359.560473][ T4956] Buffer I/O error on dev nbd2, logical block 3, async page read [ 359.563014][ T4956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 359.677143][ T4956] Buffer I/O error on dev nbd2, logical block 0, async page read [ 359.685071][ T4956] Buffer I/O error on dev nbd2, logical block 1, async page read [ 359.693242][ T4956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 359.702881][ T4956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 359.712440][ T4956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 359.722117][ T4956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 359.731887][ T5652] ldm_validate_partition_table(): Disk read failed. [ 359.741703][ T5652] Dev nbd2: unable to read RDB block 0 [ 359.749743][ T5652] nbd2: unable to read partition table [ 359.769255][ T5652] ldm_validate_partition_table(): Disk read failed. [ 359.778228][ T5652] Dev nbd2: unable to read RDB block 0 [ 359.786549][ T5652] nbd2: unable to read partition table [ 360.162916][T16467] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 360.178250][T16467] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 360.188776][T16467] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 360.322537][T16477] 8021q: adding VLAN 0 to HW filter on device bond13 [ 360.518290][T16491] 8021q: adding VLAN 0 to HW filter on device bond14 [ 360.556875][T16496] 8021q: adding VLAN 0 to HW filter on device bond14 [ 360.567162][T16496] bond14: (slave gre3): The slave device specified does not support setting the MAC address [ 360.585480][T16496] bond14: (slave gre3): Error -95 calling set_mac_address [ 360.624021][T16491] gretap2: entered promiscuous mode [ 360.648628][T16491] bond14: (slave gretap2): making interface the new active one [ 360.657776][T16491] bond14: (slave gretap2): Enslaving as an active interface with an up link [ 361.004121][T16512] 8021q: adding VLAN 0 to HW filter on device bond13 [ 361.244798][T16529] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 361.441348][T16542] validate_nla: 6 callbacks suppressed [ 361.441366][T16542] netlink: 'syz.3.2572': attribute type 1 has an invalid length. [ 361.475097][T16537] sctp: [Deprecated]: syz.4.2571 (pid 16537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.475097][T16537] Use struct sctp_sack_info instead [ 361.664351][T16546] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 361.729356][T16552] ipt_ECN: cannot use operation on non-tcp rule [ 361.806378][T16555] tipc: Resetting bearer [ 361.812741][T16555] tipc: Resetting bearer [ 363.045262][T16577] __nla_validate_parse: 11 callbacks suppressed [ 363.045276][T16577] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2580'. [ 363.120499][T16578] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 363.127950][T16578] tap0: tun_chr_ioctl cmd 2148553947 [ 363.134345][T16578] ieee802154 phy1 wpan1: encryption failed: -22 [ 364.224552][T16529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.390348][T16583] nbd: must specify a size in bytes for the device [ 364.436078][T16589] tap0: tun_chr_ioctl cmd 1074025673 [ 364.452223][T16590] tap0: tun_chr_ioctl cmd 1074025676 [ 364.484821][T16590] tap0: owner set to 0 [ 364.507587][T16589] tap0: tun_chr_ioctl cmd 1074025673 [ 364.548229][T16592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2583'. [ 364.765529][T16608] tipc: Enabled bearer , priority 0 [ 364.773160][T16608] syzkaller0: entered promiscuous mode [ 364.779243][T16608] syzkaller0: entered allmulticast mode [ 364.797338][T16608] tipc: Resetting bearer [ 364.817466][T16606] tipc: Resetting bearer [ 364.878091][T16606] tipc: Disabling bearer [ 364.956791][T16614] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2589'. [ 365.198858][T16630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2594'. [ 366.137098][ T3352] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 60537 - 0 [ 366.146933][ T3352] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 60537 - 0 [ 366.156645][ T3352] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 60537 - 0 [ 366.185308][ T3352] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 60537 - 0 [ 366.341729][T16665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2598'. [ 366.367557][ T30] audit: type=1804 audit(1782578738.092:10): pid=16676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2600" name="/newroot/554/memory.events" dev="tmpfs" ino=2844 res=1 errno=0 [ 366.446694][T16681] netlink: del zone limit has 4 unknown bytes [ 366.453319][T16680] netlink: del zone limit has 4 unknown bytes [ 366.541793][T16683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2604'. [ 366.789170][T16689] netlink: 'syz.1.2608': attribute type 32 has an invalid length. [ 367.273096][T16712] =v: renamed from veth0_to_bond [ 367.494295][T16724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2616'. [ 367.661899][T16732] bond12: (slave 26±ÿ): Releasing backup interface [ 367.692074][T16732] bond12: (slave 26±ÿ): last VLAN challenged slave left bond - VLAN blocking is removed [ 367.710057][T16732] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 367.887222][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2625'. [ 368.797201][T16789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2631'. [ 368.844535][ T5644] block nbd2: Receive control failed (result -32) [ 369.118142][T16805] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 369.125946][T16805] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 369.145176][T16805] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 369.823636][T16845] blkio.reset_stats is deprecated [ 369.964671][T16852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2648'. [ 370.347474][T16871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2654'. [ 370.619638][T16888] sctp: [Deprecated]: syz.1.2655 (pid 16888) Use of int in max_burst socket option. [ 370.619638][T16888] Use struct sctp_assoc_value instead [ 371.310978][T16926] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2668'. [ 371.404576][T16929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2669'. [ 371.515430][T16931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 371.646130][T16945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2672'. [ 371.703771][T16945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2672'. [ 371.915892][T16960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.965458][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2672'. [ 371.981652][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2672'. [ 372.031542][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2672'. [ 372.074184][T16964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.213916][T16976] tipc: Enabling of bearer rejected, already enabled [ 372.234298][T16976] tipc: Resetting bearer [ 372.274807][T16976] tipc: Resetting bearer [ 372.529864][T16981] ip6gretap0: entered promiscuous mode [ 372.547355][T16981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.557632][T16981] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.836817][T16981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 372.847662][T16981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.864637][T16981] veth1_vlan: left promiscuous mode [ 372.871663][T16981] v: entered promiscuous mode [ 372.880708][T16981] veth1_vlan: entered promiscuous mode [ 372.895825][T16981] veth0_macvtap: left promiscuous mode [ 372.917122][T16981] veth0_macvtap: entered promiscuous mode [ 372.936612][T16981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.948820][T16981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.959782][T16981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.972212][T16981] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 373.006430][ T6229] bridge0: port 1(veth1_to_bridge) entered blocking state [ 373.013804][ T6229] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 373.120901][ T7627] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.131565][ T7627] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.151073][ T7627] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.173087][ T7627] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.193528][T16996] netlink: 'syz.2.2686': attribute type 14 has an invalid length. [ 373.901200][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 373.916614][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 373.926423][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 373.935476][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 373.944658][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.084841][T17038] __nla_validate_parse: 62 callbacks suppressed [ 374.084860][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2698'. [ 374.674748][T17072] IPv6: NLM_F_CREATE should be specified when creating new route [ 374.684148][T17071] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 374.700286][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2706'. [ 374.710357][T17071] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 374.774482][T17077] block nbd3: Unsupported socket: should be TCP or UNIX. [ 374.960424][T17088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2709'. [ 375.012233][T17081] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 375.037802][T17081] xt_hashlimit: size too large, truncated to 1048576 [ 375.165526][T17084] tipc: Enabled bearer , priority 2 [ 375.871491][T17109] netlink: 'syz.2.2712': attribute type 83 has an invalid length. [ 375.879805][T17104] netlink: 'syz.1.2711': attribute type 1 has an invalid length. [ 375.978887][ T5644] Bluetooth: hci5: command tx timeout [ 376.065905][T17027] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.100701][T17027] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.134105][T17027] bridge_slave_0: entered allmulticast mode [ 376.170244][T17027] bridge_slave_0: entered promiscuous mode [ 376.202438][T17027] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.210672][T17122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2719'. [ 376.231813][T17027] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.258659][T17027] bridge_slave_1: entered allmulticast mode [ 376.278993][T17027] bridge_slave_1: entered promiscuous mode [ 376.582390][T17027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.608558][T17123] tipc: Enabling of bearer rejected, already enabled [ 376.621814][T17027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.826181][T17027] team0: Port device team_slave_0 added [ 376.851861][T17027] team0: Port device team_slave_1 added [ 377.013065][T17027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.038612][T17027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.118597][T17027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.140731][T17027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.147732][T17027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.227526][T17027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.235387][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2729'. [ 377.258783][T17150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2729'. [ 377.389994][T17027] hsr_slave_0: entered promiscuous mode [ 377.404267][T17027] hsr_slave_1: entered promiscuous mode [ 377.422560][T17171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2732'. [ 377.432739][T17027] debugfs: 'hsr0' already exists in 'hsr' [ 377.448922][T17027] Cannot create hsr debugfs directory [ 377.524736][T17173] team0: No ports can be present during mode change [ 377.675589][T17183] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 377.902703][T17191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2736'. [ 378.061620][ T5644] Bluetooth: hci5: command tx timeout [ 378.173485][T17027] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.329200][T17201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2740'. [ 378.362500][T17201] veth1_to_team: entered promiscuous mode [ 378.399332][T17201] gretap0: entered promiscuous mode [ 378.404897][T17201] gretap0: left promiscuous mode [ 378.414265][T17201] veth1_to_team: left promiscuous mode [ 378.525957][T17027] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.705704][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.732524][T17214] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2745'. [ 378.812770][T17217] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 378.820979][T17217] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 378.979205][T17027] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.110235][T17231] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 379.141073][T17027] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.268240][T17236] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2754'. [ 379.292143][T17233] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2753'. [ 379.423421][ T5644] Bluetooth: hci3: command 0x0406 tx timeout [ 379.494764][T17246] netlink: 'syz.1.2757': attribute type 84 has an invalid length. [ 379.526326][T17246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2757'. [ 379.577148][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2757'. [ 379.578849][T17027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 379.615308][T17027] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.675355][T17256] netlink: 'syz.4.2760': attribute type 1 has an invalid length. [ 379.687783][T17027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 379.698781][T17027] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.707397][T17027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.728579][T17027] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 379.736598][T17027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 379.779037][T17027] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 379.915487][T17027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.968036][T17276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2763'. [ 380.002979][T17027] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.027520][ T6229] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.034776][ T6229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.053919][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.061160][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.072147][T17278] nbd: must specify a size in bytes for the device [ 380.101726][T17280] netlink: 'syz.1.2765': attribute type 5 has an invalid length. [ 380.149597][ T5644] Bluetooth: hci5: command tx timeout [ 380.223362][T17284] veth1_to_bond: entered allmulticast mode [ 380.336880][T17284] veth1_to_bond: entered promiscuous mode [ 380.344041][T17290] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2767'. [ 380.346785][T17283] veth1_to_bond: left promiscuous mode [ 380.359227][T17283] veth1_to_bond: left allmulticast mode [ 380.603957][T17304] netlink: 'syz.1.2770': attribute type 16 has an invalid length. [ 380.625614][T17304] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2770'. [ 380.805092][T17027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.928775][T17027] veth0_vlan: entered promiscuous mode [ 380.961204][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'. [ 380.972339][T17027] veth1_vlan: entered promiscuous mode [ 381.081538][T17027] veth0_macvtap: entered promiscuous mode [ 381.124612][T17027] veth1_macvtap: entered promiscuous mode [ 381.147596][T17340] netlink: 'syz.1.2775': attribute type 5 has an invalid length. [ 381.158947][T17340] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2775'. [ 381.171495][T17027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.201767][T17027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.231019][ T1122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.240113][ T1122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.252346][ T1122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.263395][ T1122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.264255][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2776'. [ 382.111701][T17348] 8021q: adding VLAN 0 to HW filter on device bond7 [ 382.166326][T17349] bond7: entered promiscuous mode [ 382.200868][T17349] bond7: entered allmulticast mode [ 382.218566][ T5644] Bluetooth: hci5: command tx timeout [ 382.276487][T17349] 8021q: adding VLAN 0 to HW filter on device bond7 [ 382.290258][T17349] team0: Port device bond7 added [ 382.295805][T17350] team_slave_1: entered promiscuous mode [ 382.325365][T17355] netlink: 'syz.1.2780': attribute type 1 has an invalid length. [ 382.336846][T17355] x_tables: duplicate underflow at hook 1 [ 382.337061][T17350] team0: Port device team_slave_1 removed [ 382.373248][T17358] erspan0: left promiscuous mode [ 382.405799][T17358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.432226][T17365] netlink: 'syz.0.2783': attribute type 1 has an invalid length. [ 382.445493][T17365] netlink: 'syz.0.2783': attribute type 8 has an invalid length. [ 382.446584][T17358] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 382.465219][T17358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.483370][T17358] veth1_vlan: left promiscuous mode [ 382.491774][T17358] veth0_vlan: left promiscuous mode [ 382.499610][T17358] veth0_vlan: entered promiscuous mode [ 382.508269][T17358] veth1_vlan: entered promiscuous mode [ 382.520841][T17358] veth1_macvtap: left promiscuous mode [ 382.528811][T17358] veth0_macvtap: left promiscuous mode [ 382.536164][T17358] veth0_macvtap: entered promiscuous mode [ 382.544681][T17358] veth1_macvtap: entered promiscuous mode [ 382.557334][T17358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.565978][T17358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.574752][T17358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.583946][T17358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.597342][T17358] ip6gretap0: entered promiscuous mode [ 382.617547][T17358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.656027][T17358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.666451][T17358] 8021q: adding VLAN 0 to HW filter on device bond3 [ 382.674644][T17358] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.684994][T17358] 8021q: adding VLAN 0 to HW filter on device bond5 [ 382.695180][T17358] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 382.703141][T17358] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 382.810762][ T5361] bridge0: port 1(vlan4) entered blocking state [ 382.818881][ T5361] bridge0: port 1(vlan4) entered forwarding state [ 382.846505][ T5361] geneve0: entered promiscuous mode [ 382.869922][ T6229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.879437][ T6229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.960037][ T6229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.968993][ T6229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.043397][ T48] bond5: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 383.082037][ T48] bond5: (slave veth3): making interface the new active one [ 383.110695][ T48] bond5: active interface up! [ 383.200241][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.227189][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.311596][ T7627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.328760][ T7627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.635743][T17396] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.937276][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.954131][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.971085][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.993034][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 384.004379][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.526206][T17465] __nla_validate_parse: 6 callbacks suppressed [ 385.526228][T17465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2794'. [ 385.612961][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2803'. [ 385.638648][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2803'. [ 385.736381][T17479] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 386.058629][ T5636] Bluetooth: hci2: command tx timeout [ 386.405577][T17408] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.413140][T17408] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.421153][T17408] bridge_slave_0: entered allmulticast mode [ 386.429818][T17408] bridge_slave_0: entered promiscuous mode [ 386.439530][T17408] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.447033][T17408] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.455408][T17408] bridge_slave_1: entered allmulticast mode [ 386.465321][T17408] bridge_slave_1: entered promiscuous mode [ 386.529478][T17408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.553774][T17408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.618092][T17408] team0: Port device team_slave_0 added [ 386.628634][T17408] team0: Port device team_slave_1 added [ 386.669153][T17408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.676240][T17408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.702407][T17408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.720114][T17408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.727453][T17408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.753500][T17408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.847631][T17408] hsr_slave_0: entered promiscuous mode [ 386.862000][T17408] hsr_slave_1: entered promiscuous mode [ 386.879450][T17408] debugfs: 'hsr0' already exists in 'hsr' [ 386.886773][T17408] Cannot create hsr debugfs directory [ 387.194847][T17542] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2813'. [ 387.226082][T17542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2813'. [ 387.235776][T17542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2813'. [ 387.311669][T17408] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.326243][T17408] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.434789][T17408] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.448603][T17408] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.563804][T17408] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.574798][T17408] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.139021][ T5636] Bluetooth: hci2: command tx timeout [ 389.066549][T17497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.154979][T17570] netlink: 'syz.2.2819': attribute type 1 has an invalid length. [ 389.170992][T17408] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 389.235945][T17408] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.250309][T17408] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 389.274138][T17408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.297192][T17576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.335172][T17570] 8021q: adding VLAN 0 to HW filter on device bond16 [ 389.359573][T17582] IPv6: addrconf: prefix option has invalid lifetime [ 389.375424][T17574] veth15: entered allmulticast mode [ 389.387742][T17408] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 389.413020][T17408] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.436308][T17577] bond16 (unregistering): Released all slaves [ 389.481628][T17408] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 389.496166][T17408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.505113][T17585] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 389.726026][T17613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2827'. [ 389.739846][T17613] bond0: Unable to set up delay as MII monitoring is disabled [ 389.865383][T17615] can: request_module (can-proto-4) failed. [ 389.891814][T17408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.939827][T17408] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.955062][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2829'. [ 389.959628][ T6229] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.971154][ T6229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.993652][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.000861][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.076344][T17618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.086793][T17622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2831'. [ 390.096278][T17618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.129287][T17408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.158019][T17622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2831'. [ 390.219614][ T5636] Bluetooth: hci2: command tx timeout [ 390.432760][T17644] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 390.525196][T17653] tipc: Resetting bearer [ 390.788041][T17408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.803683][T17664] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 390.975902][T17408] veth0_vlan: entered promiscuous mode [ 390.988247][T17408] veth1_vlan: entered promiscuous mode [ 391.070707][T17408] veth0_macvtap: entered promiscuous mode [ 391.091008][T17408] veth1_macvtap: entered promiscuous mode [ 391.119253][T17408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.183885][T17408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.203059][ T7635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.225309][ T7635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.294826][ T7635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.304846][ T7635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.396719][T17677] x_tables: duplicate underflow at hook 3 [ 391.552503][T17681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2843'. [ 392.298695][ T5636] Bluetooth: hci2: command tx timeout [ 392.577819][T17692] netlink: 'syz.4.2846': attribute type 1 has an invalid length. [ 392.602643][T17692] 8021q: adding VLAN 0 to HW filter on device bond14 [ 392.694632][T17694] vlan5: entered allmulticast mode [ 392.701080][T17694] bond14: entered allmulticast mode [ 392.716087][T17694] bond14: (slave geneve4): making interface the new active one [ 392.724378][T17694] geneve4: entered allmulticast mode [ 392.733185][T17694] bond14: (slave geneve4): Enslaving as an active interface with an up link [ 393.308102][T17636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.441221][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.452450][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.548074][ T7635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.579709][ T7635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.589797][T17700] netlink: 'syz.2.2848': attribute type 4 has an invalid length. [ 393.600508][T17700] netlink: 'syz.2.2848': attribute type 4 has an invalid length. [ 393.619595][ T7635] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 394.337173][T17743] bridge0: port 3(vlan2) entered blocking state [ 394.358673][T17743] bridge0: port 3(vlan2) entered disabled state [ 394.382437][T17743] vlan2: entered allmulticast mode [ 394.389304][T17743] geneve0: entered allmulticast mode [ 394.418193][T17743] vlan2: entered promiscuous mode [ 394.426456][T17743] geneve0: entered promiscuous mode [ 394.466144][T17748] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2859'. [ 394.731968][T17759] netlink: 'syz.3.2861': attribute type 1 has an invalid length. [ 394.796103][T17759] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2861'. [ 395.072352][T17784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2865'. [ 395.324164][T17784] 8021q: VLANs not supported on wg2 [ 395.568008][T17811] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2874'. [ 395.763903][T17815] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2875'. [ 395.812865][T17820] sctp: [Deprecated]: syz.2.2876 (pid 17820) Use of int in maxseg socket option. [ 395.812865][T17820] Use struct sctp_assoc_value instead [ 396.251208][T17833] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2880'. [ 396.345054][T17832] nbd: socks must be embedded in a SOCK_ITEM attr [ 396.356436][T17835] IPv6: Can't replace route, no match found [ 396.431585][T17836] batadv_slave_1: entered promiscuous mode [ 396.443994][T17832] nbd: couldn't find a device at index 0 [ 396.851894][T17852] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 396.954238][T17859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2887'. [ 397.106474][T17863] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2889'. [ 397.116403][T17863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2889'. [ 397.136032][T17863] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2889'. [ 397.202764][T17832] batadv_slave_1: left promiscuous mode [ 397.389184][T17870] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2891'. [ 397.769883][T17886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2896'. [ 397.876664][T17890] xt_TCPMSS: Only works on TCP SYN packets [ 397.892176][T17890] geneve3: entered allmulticast mode [ 398.326795][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 398.345165][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 398.356918][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 398.374654][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 398.388697][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 398.407911][T17915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2902'. [ 398.736307][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2905'. [ 398.816679][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2905'. [ 398.958708][T17927] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 398.994436][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.007650][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.449130][T17934] netlink: 'syz.0.2907': attribute type 13 has an invalid length. [ 399.505223][T17935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2907'. [ 400.475519][ T5644] Bluetooth: hci3: command tx timeout [ 402.540127][ T5644] Bluetooth: hci3: command tx timeout [ 403.415786][T17949] netlink: 'syz.2.2909': attribute type 33 has an invalid length. [ 403.426384][T17951] netlink: 'syz.2.2909': attribute type 1 has an invalid length. [ 403.673295][T17961] __nla_validate_parse: 1 callbacks suppressed [ 403.673340][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2910'. [ 403.691263][T17961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2910'. [ 404.247916][T17408] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 404.262574][T17408] CPU: 1 UID: 0 PID: 17408 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 404.262603][T17408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 404.262621][T17408] Call Trace: [ 404.262630][T17408] [ 404.262639][T17408] dump_stack_lvl+0xe8/0x150 [ 404.262747][T17408] dump_header+0xd3/0x4b0 [ 404.262784][T17408] oom_kill_process+0x3ab/0x970 [ 404.262826][T17408] out_of_memory+0x1064/0x1480 [ 404.262847][T17408] ? try_charge_memcg+0xbca/0x1590 [ 404.262903][T17408] ? __pfx_out_of_memory+0x10/0x10 [ 404.262922][T17408] ? do_raw_spin_unlock+0xf5/0x210 [ 404.262968][T17408] try_charge_memcg+0xc74/0x1590 [ 404.263001][T17408] ? __pfx_try_charge_memcg+0x10/0x10 [ 404.263016][T17408] ? percpu_ref_tryget+0x15/0x180 [ 404.263055][T17408] ? charge_memcg+0x20/0x2b0 [ 404.263076][T17408] charge_memcg+0x19c/0x2b0 [ 404.263094][T17408] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 404.263111][T17408] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 404.263131][T17408] swap_cache_alloc_folio+0x4de/0x990 [ 404.263176][T17408] swap_cache_read_folio+0x44/0x120 [ 404.263203][T17408] swap_cluster_readahead+0x3a0/0x640 [ 404.263232][T17408] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 404.263268][T17408] ? get_vma_policy+0x27b/0x3c0 [ 404.263290][T17408] swapin_readahead+0x19a/0xc10 [ 404.263315][T17408] ? swap_table_get+0x1e/0x260 [ 404.263337][T17408] ? swap_table_get+0x1e/0x260 [ 404.263360][T17408] ? __pfx_swapin_readahead+0x10/0x10 [ 404.263413][T17408] ? swap_table_get+0x1e/0x260 [ 404.263433][T17408] ? swap_table_get+0x1e/0x260 [ 404.263451][T17408] ? swap_table_get+0x1e/0x260 [ 404.263472][T17408] ? swap_table_get+0x216/0x260 [ 404.263500][T17408] ? swap_cache_get_folio+0x2e7/0x2f0 [ 404.263533][T17408] do_swap_page+0x455/0x5060 [ 404.263567][T17408] ? __pte_offset_map+0x29/0x240 [ 404.263597][T17408] ? __lock_acquire+0x683/0x2cf0 [ 404.263614][T17408] ? do_swap_page+0x124/0x5060 [ 404.263635][T17408] ? __pfx_do_swap_page+0x10/0x10 [ 404.263661][T17408] ? __pte_offset_map+0x1ae/0x240 [ 404.263686][T17408] ? pte_offset_map_rw_nolock+0xea/0x160 [ 404.263712][T17408] handle_mm_fault+0x124c/0x3080 [ 404.263748][T17408] ? handle_mm_fault+0xec/0x3080 [ 404.263779][T17408] ? __pfx_handle_mm_fault+0x10/0x10 [ 404.263800][T17408] ? lock_vma_under_rcu+0x45a/0x500 [ 404.263849][T17408] do_user_addr_fault+0xa4d/0x1340 [ 404.263893][T17408] ? trace_page_fault_user+0x84/0x1e0 [ 404.263914][T17408] exc_page_fault+0x6a/0xc0 [ 404.264066][T17408] asm_exc_page_fault+0x26/0x30 [ 404.264101][T17408] RIP: 0033:0x7fcabb26ae77 [ 404.264120][T17408] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 39 7c 24 [ 404.264134][T17408] RSP: 002b:00007fff3f10f0c0 EFLAGS: 00010202 [ 404.264150][T17408] RAX: 0000001b34824000 RBX: 0000000000000030 RCX: 0000000000062a20 [ 404.264162][T17408] RDX: 00000000004c0b11 RSI: 00007fff3f10f150 RDI: 0000000000000011 [ 404.264173][T17408] RBP: 00007fff3f10f0fc R08: 00000000012214fa R09: 3fffffffffffffff [ 404.264185][T17408] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 404.264196][T17408] R13: 00000000000927c0 R14: 00000000000628c6 R15: 00007fff3f10f150 [ 404.264225][T17408] [ 404.264435][T17408] memory: usage 307200kB, limit 307200kB, failcnt 671 [ 404.640631][ T5644] Bluetooth: hci3: command tx timeout [ 404.647382][T17408] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 404.657137][T17408] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 404.666582][T17935] bond_slave_0: entered promiscuous mode [ 404.674930][T17408] Memory cgroup stats for /syz1: [ 404.675383][T17408] cache 0 [ 404.684404][T17408] rss 0 [ 404.687493][T17408] rss_huge 0 [ 404.692719][T17408] shmem 0 [ 404.696074][T17408] mapped_file 0 [ 404.702167][T17408] dirty 0 [ 404.706394][T17408] writeback 0 [ 404.710286][T17408] workingset_refault_anon 3 [ 404.716017][T17408] workingset_refault_file 21 [ 404.721338][T17408] swap 200704 [ 404.725105][T17408] swapcached 225280 [ 404.730312][T17408] pgpgin 106314 [ 404.734842][T17408] pgpgout 106311 [ 404.739127][T17408] pgfault 183200 [ 404.743973][T17408] pgmajfault 5 [ 404.747817][T17408] inactive_anon 4096 [ 404.752598][T17408] active_anon 8192 [ 404.756852][T17408] inactive_file 0 [ 404.761869][T17408] active_file 0 [ 404.765708][T17408] unevictable 0 [ 404.769765][T17408] hierarchical_memory_limit 314572800 [ 404.776842][T17408] hierarchical_memsw_limit 9223372036854771712 [ 404.784175][T17408] total_cache 0 [ 404.788898][T17408] total_rss 0 [ 404.792750][T17408] total_rss_huge 0 [ 404.796994][T17408] total_shmem 0 [ 404.801125][T17408] total_mapped_file 0 [ 404.805643][T17408] total_dirty 0 [ 404.810825][T17408] total_writeback 0 [ 404.815156][T17408] total_workingset_refault_anon 3 [ 404.821018][T17408] total_workingset_refault_file 21 [ 404.827669][T17408] total_swap 200704 [ 404.832165][T17408] total_swapcached 225280 [ 404.838971][T17408] total_pgpgin 106365 [ 404.843522][T17408] total_pgpgout 106362 [ 404.848120][T17408] total_pgfault 183243 [ 404.852837][T17408] total_pgmajfault 5 [ 404.857295][T17408] total_inactive_anon 4096 [ 404.864232][T17408] total_active_anon 8192 [ 404.869185][T17408] total_inactive_file 0 [ 404.874255][T17408] total_active_file 0 [ 404.878806][T17408] total_unevictable 0 [ 404.883861][T17408] anon_cost 0 [ 404.887506][T17408] file_cost 0 [ 404.891338][T17408] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2910,pid=17950,uid=0 [ 404.912808][T17408] Memory cgroup out of memory: Killed process 17950 (syz.1.2910) total-vm:102424kB, anon-rss:1244kB, file-rss:22980kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 404.960192][T17935] bond_slave_0: entered allmulticast mode [ 405.053163][T17942] team0: entered promiscuous mode [ 405.061532][T17942] team_slave_0: entered promiscuous mode [ 405.070070][T17942] team_slave_1: entered promiscuous mode [ 405.081031][T17942] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 405.233477][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.268224][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.299188][T17965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2912'. [ 405.531057][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.578281][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.725230][T17973] veth3: entered promiscuous mode [ 405.869411][T17977] x_tables: duplicate underflow at hook 1 [ 405.873133][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.892904][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2916'. [ 405.911181][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.067254][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 406.386193][T17989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2920'. [ 406.698546][ T5644] Bluetooth: hci3: command tx timeout [ 407.197592][ T48] vlan4: left allmulticast mode [ 407.212919][ T48] geneve0: left allmulticast mode [ 407.236847][ T48] bridge0: port 1(vlan4) entered disabled state [ 407.386005][ T48] pim6reg: left allmulticast mode [ 408.048137][ T48] bond9 (unregistering): (slave gretap1): Releasing active interface [ 408.108244][ T48] bond14 (unregistering): (slave geneve4): Releasing active interface [ 408.117243][ T48] geneve4 (unregistering): left allmulticast mode [ 408.137869][ T48] bond2 (unregistering): (slave geneve2): Releasing active interface [ 408.383486][ T48] bond0 (unregistering): Released all slaves [ 408.396895][ T48] bond1 (unregistering): Released all slaves [ 408.433091][ T48] bond2 (unregistering): Released all slaves [ 408.452246][ T48] bond3 (unregistering): Released all slaves [ 408.480319][ T48] bond4 (unregistering): Released all slaves [ 408.501366][ T48] bond5 (unregistering): (slave veth3): Releasing active interface [ 408.512421][ T48] bond5 (unregistering): Released all slaves [ 408.537747][ T48] bond6 (unregistering): Released all slaves [ 408.558808][ T48] bond7 (unregistering): Released all slaves [ 408.582482][ T48] bond8 (unregistering): Released all slaves [ 408.606331][ T48] bond9 (unregistering): Released all slaves [ 408.625733][ T48] bond10 (unregistering): Released all slaves [ 408.646290][ T48] bond11 (unregistering): Released all slaves [ 408.671359][ T48] bond12 (unregistering): Released all slaves [ 408.705057][ T48] bond13 (unregistering): Released all slaves [ 408.731886][ T48] bond14 (unregistering): Released all slaves [ 408.774391][T18003] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 408.784114][T17997] syzkaller0: refused to change device tx_queue_len [ 409.039037][ T48] tipc: Disabling bearer [ 409.051465][ T48] tipc: Left network mode [ 409.222522][ T48] IPVS: stopping backup sync thread 16364 ... [ 409.453925][T18029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2922'. [ 410.428700][T18074] netlink: 'syz.2.2931': attribute type 11 has an invalid length. [ 410.556081][T18082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2933'. [ 410.931613][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2936'. [ 410.943859][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2936'. [ 411.275390][ T48] hsr_slave_0: left promiscuous mode [ 411.295087][ T48] hsr_slave_1: left promiscuous mode [ 411.312222][ T48] veth1_macvtap: left promiscuous mode [ 411.320381][ T48] veth0_macvtap: left promiscuous mode [ 411.326244][ T48] veth1_vlan: left promiscuous mode [ 411.331810][ T48] veth0_vlan: left promiscuous mode [ 411.985910][T18100] syz_tun: left allmulticast mode [ 411.991278][T18100] pimreg: left allmulticast mode [ 412.339283][T17905] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.369053][T17905] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.378031][T17905] bridge_slave_0: entered allmulticast mode [ 412.394509][T17905] bridge_slave_0: entered promiscuous mode [ 412.410188][T18123] tap0: tun_chr_ioctl cmd 2148553947 [ 412.445444][T17905] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.459732][T17905] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.468865][T17905] bridge_slave_1: entered allmulticast mode [ 412.494529][T17905] bridge_slave_1: entered promiscuous mode [ 412.590670][T18132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2944'. [ 412.677945][T18132] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 412.745137][T17905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.786806][T17905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.827653][T12059] IPVS: starting estimator thread 0... [ 412.959720][T18141] IPVS: using max 31 ests per chain, 74400 per kthread [ 412.974890][T17905] team0: Port device team_slave_0 added [ 413.012172][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2947'. [ 413.039109][T17905] team0: Port device team_slave_1 added [ 413.092268][T18146] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2947'. [ 413.117490][ T48] IPVS: stop unused estimator thread 0... [ 413.144245][T17905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.159671][T17905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.218167][T17905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.318004][T18159] IPv6: NLM_F_CREATE should be specified when creating new route [ 413.337720][T17905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.366932][T17905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.466633][T17905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.671446][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2953'. [ 413.716197][T17905] hsr_slave_0: entered promiscuous mode [ 413.751446][T17905] hsr_slave_1: entered promiscuous mode [ 413.785254][T17905] debugfs: 'hsr0' already exists in 'hsr' [ 413.804620][T17905] Cannot create hsr debugfs directory [ 414.052494][T18179] tipc: Resetting bearer [ 414.698309][T18179] ipip0: left promiscuous mode [ 414.740166][T18179] bridge5: left promiscuous mode [ 414.752652][T18179] bridge5: left allmulticast mode [ 414.761672][T18179] veth15: left allmulticast mode [ 414.766874][T18179] geneve3: left allmulticast mode [ 414.800034][T18188] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 414.809510][T18188] virt_wifi0: entered promiscuous mode [ 414.815645][T18188] virt_wifi0: entered allmulticast mode [ 414.831818][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 414.845353][T18193] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2955'. [ 414.879030][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.889160][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.898988][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.909074][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.998108][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.021774][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.031960][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.042836][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.128617][T18205] netlink: 'syz.3.2960': attribute type 1 has an invalid length. [ 415.159422][T18205] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2960'. [ 415.229081][T18203] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2959'. [ 415.345974][T18209] netlink: 'syz.1.2961': attribute type 2 has an invalid length. [ 415.408664][T18218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2963'. [ 415.576886][T18209] syzkaller0: entered promiscuous mode [ 415.594655][T18209] syzkaller0: entered allmulticast mode [ 416.639571][T18255] netlink: 'syz.2.2967': attribute type 13 has an invalid length. [ 416.668674][T18255] netlink: 'syz.2.2967': attribute type 17 has an invalid length. [ 417.012704][T18255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.023667][T18255] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.120118][T18255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 417.131687][T18255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.147790][T18255] virt_wifi0: left promiscuous mode [ 417.153301][T18255] virt_wifi0: left allmulticast mode [ 417.160248][T18255] veth1_vlan: left promiscuous mode [ 417.167016][T18255] veth0_vlan: entered promiscuous mode [ 417.190317][T18255] veth1_vlan: entered promiscuous mode [ 417.220678][T18255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.240029][T18255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.280243][T18255] 8021q: adding VLAN 0 to HW filter on device bond3 [ 417.316575][T18255] 8021q: adding VLAN 0 to HW filter on device bond4 [ 417.337265][T18255] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 417.353123][T18255] netdevsim netdevsim2 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 417.364035][T18255] 8021q: adding VLAN 0 to HW filter on device eth0 [ 417.375678][T18255] netdevsim netdevsim2 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 417.387422][T18255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 417.398239][T18255] netdevsim netdevsim2 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 417.409381][T18255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 417.418094][T18255] netdevsim netdevsim2 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 417.429839][T18255] 8021q: adding VLAN 0 to HW filter on device eth3 [ 417.444335][T18255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 417.453996][T18255] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 417.475961][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 418.005327][T18279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2973'. [ 418.559283][T18283] netlink: 'syz.2.2973': attribute type 10 has an invalid length. [ 418.567730][T18283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2973'. [ 421.634748][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2969'. [ 421.646505][T18263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.680694][ T48] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.708808][ T48] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.733897][ T48] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.767835][T18292] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2974'. [ 421.770928][ T48] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.780535][T18293] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:1045 [ 421.895781][T18280] bridge6: port 1(dummy0) entered blocking state [ 421.916625][T18280] bridge6: port 1(dummy0) entered disabled state [ 421.925666][T18280] dummy0: entered allmulticast mode [ 421.934442][T18280] dummy0: entered promiscuous mode [ 421.998898][T18283] bridge6: port 1(dummy0) entered blocking state [ 422.007550][T18283] bridge6: port 1(dummy0) entered forwarding state [ 422.041054][T18283] dummy0: left allmulticast mode [ 422.060709][T18283] bridge6: port 1(dummy0) entered disabled state [ 422.291935][ T48] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.303202][ T48] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.312574][ T48] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.324272][ T48] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.747575][T18331] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2983'. [ 422.760748][T18334] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2983'. [ 422.922088][T18332] syzkaller0: entered promiscuous mode [ 422.935224][T18332] syzkaller0: entered allmulticast mode [ 427.071381][T17905] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 427.089093][T17905] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.141585][T17905] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 427.168923][T17905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.234644][T17905] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 427.242776][T18392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.257406][T17905] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.270649][T17905] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 427.283971][T18392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.285945][T17905] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.310382][T18392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.420806][T18398] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2991'. [ 427.587818][T17905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.630392][T18405] ip6tnl1: entered allmulticast mode [ 427.640547][T17905] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.665955][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.675357][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.695496][T18407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2993'. [ 427.695634][ T7627] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.711725][ T7627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.837545][T17905] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.873864][T17905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.013085][T18407] geneve0: entered promiscuous mode [ 428.044498][T18407] geneve0: left promiscuous mode [ 428.292744][T18429] IPv6: NLM_F_CREATE should be specified when creating new route [ 428.304948][T18429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2999'. [ 428.422555][T18435] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3001'. [ 428.454069][T18433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.537315][T18432] netlink: 'syz.2.3000': attribute type 4 has an invalid length. [ 428.550582][T18440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3002'. [ 428.771942][T17905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.346901][T17905] veth0_vlan: entered promiscuous mode [ 429.364256][T18472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3007'. [ 429.386827][T18472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3007'. [ 429.394055][T17905] veth1_vlan: entered promiscuous mode [ 429.398509][T18472] netlink: 58 bytes leftover after parsing attributes in process `syz.2.3007'. [ 429.502160][T17905] veth0_macvtap: entered promiscuous mode [ 429.532481][T17905] veth1_macvtap: entered promiscuous mode [ 429.566796][T17905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.608696][T17905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.665329][ T33] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.694500][T18488] xt_hashlimit: size too large, truncated to 1048576 [ 429.694732][ T33] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.744575][ T33] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.765227][ T33] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.792523][T18491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3012'. [ 430.013827][T18496] @0Ù: renamed from bond_slave_1 (while UP) [ 430.193576][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.216346][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.274449][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.304467][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.496721][T18501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3013'. [ 430.548096][T18501] 8021q: adding VLAN 0 to HW filter on device bond16 [ 430.609308][T18501] bond16: (slave veth19): Enslaving as an active interface with an up link [ 430.856815][T18511] bond16: (slave bridge8): Enslaving as an active interface with an up link [ 431.263423][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 431.280266][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 431.290016][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 431.305346][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 431.313360][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.980652][T18513] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 431.993664][T18513] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 432.447892][T18576] __nla_validate_parse: 3 callbacks suppressed [ 432.447910][T18576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3031'. [ 432.511586][T18576] ip6gre1: entered promiscuous mode [ 432.545511][T18576] ip6gre1: entered allmulticast mode [ 432.655169][T18592] netlink: 'syz.1.3034': attribute type 13 has an invalid length. [ 432.673012][T18592] netlink: 'syz.1.3034': attribute type 17 has an invalid length. [ 432.838997][T18591] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.846815][T18591] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.943328][T18591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.959605][T18591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.380961][T18592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.394367][T18592] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.403333][T18610] netlink: 'syz.3.3035': attribute type 10 has an invalid length. [ 433.419268][ T5636] Bluetooth: hci1: command tx timeout [ 433.435189][T18592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.486028][T18592] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.494456][T18592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.513425][T18592] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.520712][T18592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.551738][T18592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.563262][T18592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.597072][T18592] veth1_vlan: left promiscuous mode [ 433.604348][T18592] veth0_vlan: left promiscuous mode [ 433.613238][T18592] veth0_vlan: entered promiscuous mode [ 433.625040][T18592] veth1_vlan: entered promiscuous mode [ 433.652621][T18592] veth1_macvtap: left promiscuous mode [ 433.660506][T18592] veth0_macvtap: left promiscuous mode [ 433.669227][T18592] veth0_macvtap: entered promiscuous mode [ 433.685701][T18592] veth1_macvtap: entered promiscuous mode [ 433.703782][T18592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.720805][T18592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.735718][T18592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.751699][T18592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.769010][T18592] bridge0: port 3(vlan2) entered blocking state [ 433.775452][T18592] bridge0: port 3(vlan2) entered forwarding state [ 433.833943][T18600] tipc: Enabled bearer , priority 10 [ 433.979605][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 434.027304][T18610] geneve1: entered promiscuous mode [ 434.055853][T18610] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 434.164105][T18625] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 434.178774][T18625] syzkaller1: linktype set to 769 [ 434.225209][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 434.394185][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 434.580246][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3041'. [ 434.608221][T18632] netlink: 'syz.3.3040': attribute type 12 has an invalid length. [ 434.626372][T18632] netlink: 'syz.3.3040': attribute type 29 has an invalid length. [ 434.642561][T18632] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3040'. [ 434.670710][T18632] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3040'. [ 434.817166][T18642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3042'. [ 434.828134][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 435.222808][T18649] syzkaller0: entered promiscuous mode [ 435.262213][T18649] syzkaller0: entered allmulticast mode [ 435.388318][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.400725][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.451325][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3045'. [ 435.464510][T18652] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.501840][ T5636] Bluetooth: hci1: command tx timeout [ 435.612777][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 435.628632][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 435.761676][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.776206][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.906056][T18681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3049'. [ 435.966125][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.980574][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.055643][T18536] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.064640][T18536] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.072831][T18536] bridge_slave_0: entered allmulticast mode [ 436.081575][T18536] bridge_slave_0: entered promiscuous mode [ 436.091677][T18536] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.099237][T18536] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.106960][T18536] bridge_slave_1: entered allmulticast mode [ 436.115925][T18536] bridge_slave_1: entered promiscuous mode [ 436.159654][T18536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.173687][T18536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.251657][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.261930][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.286518][T18536] team0: Port device team_slave_0 added [ 436.304889][T18536] team0: Port device team_slave_1 added [ 436.369373][T18536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.376855][T18536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.403596][T18536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.420126][T18536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.433092][T18536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.464966][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 436.477054][T18536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.545445][T18536] hsr_slave_0: entered promiscuous mode [ 436.552735][T18536] hsr_slave_1: entered promiscuous mode [ 436.559842][T18536] debugfs: 'hsr0' already exists in 'hsr' [ 436.565893][T18536] Cannot create hsr debugfs directory [ 436.581676][T18670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.104054][T18704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3054'. [ 437.351758][T18707] syzkaller0: entered promiscuous mode [ 437.366401][T18707] syzkaller0: entered allmulticast mode [ 437.494542][ T12] tipc: Resetting bearer [ 437.514065][T18716] SET target dimension over the limit! [ 437.529970][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3056'. [ 437.579632][ T5636] Bluetooth: hci1: command tx timeout [ 437.620250][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3056'. [ 437.744085][ T12] tipc: Disabling bearer [ 437.909396][ T12] bond11 (unregistering): (slave ip6gretap1): Releasing active interface [ 438.184529][ T12] bond10 (unregistering): (slave gretap1): Releasing active interface [ 438.216480][ T12] bond13 (unregistering): (slave gretap2): Releasing active interface [ 438.395073][ T12] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 438.467969][ T12] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 438.491136][ T12] team0: Port device bridge5 removed [ 438.520100][ T12] bond16 (unregistering): (slave bridge8): Releasing backup interface [ 438.538075][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.554592][ T12] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 438.568078][ T12] bond0 (unregistering): Released all slaves [ 438.581959][ T12] bond1 (unregistering): Released all slaves [ 438.604452][ T12] bond2 (unregistering): Released all slaves [ 438.624958][ T12] bond3 (unregistering): Released all slaves [ 438.651784][ T12] bond4 (unregistering): Released all slaves [ 438.671742][ T12] bond5 (unregistering): Released all slaves [ 438.703344][ T12] bond6 (unregistering): Released all slaves [ 438.724644][ T12] bond7 (unregistering): (slave veth7): Releasing active interface [ 438.735968][ T12] bond7 (unregistering): Released all slaves [ 438.759598][ T12] bond8 (unregistering): Released all slaves [ 438.778749][ T12] bond9 (unregistering): Released all slaves [ 438.798874][ T12] bond10 (unregistering): Released all slaves [ 438.815500][ T12] bond11 (unregistering): Released all slaves [ 438.836946][ T12] bond12 (unregistering): Released all slaves [ 438.863898][ T12] bond13 (unregistering): Released all slaves [ 438.886182][ T12] bond14 (unregistering): Released all slaves [ 438.915234][ T12] bond15 (unregistering): Released all slaves [ 438.936587][ T12] bond16 (unregistering): (slave veth19): Releasing backup interface [ 438.948111][ T12] bond16 (unregistering): Released all slaves [ 439.183261][T18713] C: renamed from veth1_to_team (while UP) [ 439.212156][T18713] netlink: 'syz.3.3057': attribute type 3 has an invalid length. [ 439.227824][T18713] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3057'. [ 439.238215][T18713] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 439.345352][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 439.472135][T18716] veth0_to_bond: entered allmulticast mode [ 439.492173][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 439.574449][T18734] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 439.642011][T18736] netlink: 'syz.1.3060': attribute type 15 has an invalid length. [ 439.655454][T18734] gretap1: entered allmulticast mode [ 439.663100][ T5636] Bluetooth: hci1: command tx timeout [ 439.694946][T18736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3060'. [ 439.727066][ T12] tipc: Left network mode [ 439.850097][ T7637] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 439.879609][ T7637] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 440.027480][ T7637] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 440.063740][ T7637] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 440.162202][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.893011][T18787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3065'. [ 441.305711][T18803] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3069'. [ 441.397374][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3070'. [ 441.729408][ T12] hsr_slave_0: left promiscuous mode [ 441.772759][ T12] hsr_slave_1: left promiscuous mode [ 442.088017][ T12] veth1_vlan: left promiscuous mode [ 442.103691][ T12] veth0_vlan: left promiscuous mode [ 442.261993][T18835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3074'. [ 442.475077][T18840] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3075'. [ 442.497947][T18838] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3075'. [ 442.708890][T18848] __nla_validate_parse: 4 callbacks suppressed [ 442.708908][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3062'. [ 443.054876][ T12] team0 (unregistering): Port device team_slave_1 removed [ 443.075418][ T12] team0 (unregistering): Port device team_slave_0 removed [ 443.731487][T18536] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 443.738126][T18863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3080'. [ 443.778915][T18536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.915898][T18536] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 443.950398][T18536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.963250][T18536] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 443.986918][T18536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.426990][T18536] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.442774][T18536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.702180][T18896] xt_bpf: check failed: parse error [ 444.894000][T18901] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3086'. [ 444.997405][T18902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3082'. [ 445.154980][T18909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3082'. [ 445.167473][ T12] IPVS: stop unused estimator thread 0... [ 445.502739][T18902] veth1_to_team: entered promiscuous mode [ 445.512464][T18902] macvlan4: entered allmulticast mode [ 445.521535][T18902] veth1_to_team: entered allmulticast mode [ 446.082417][T18536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.164115][T18536] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.210384][ T6229] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.217586][ T6229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.267291][ T3359] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.274523][ T3359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.183526][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 447.270679][T18970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3097'. [ 447.284692][T18975] sctp: [Deprecated]: syz.4.3098 (pid 18975) Use of int in max_burst socket option. [ 447.284692][T18975] Use struct sctp_assoc_value instead [ 447.785306][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'. [ 447.859877][T18996] sch_fq: defrate 8 ignored. [ 447.933328][T18996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3102'. [ 448.268886][T19014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3103'. [ 448.658905][T18536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.836455][T19025] tipc: Started in network mode [ 448.863183][T19025] tipc: Node identity 4246, cluster identity 4711 [ 448.902411][T19025] tipc: Node number set to 16966 [ 448.916184][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3107'. [ 448.966635][T19027] pimreg: entered allmulticast mode [ 449.132767][T19038] netlink: 'syz.4.3108': attribute type 83 has an invalid length. [ 449.171604][T19039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3104'. [ 449.288626][T18536] veth0_vlan: entered promiscuous mode [ 449.331436][T18536] veth1_vlan: entered promiscuous mode [ 449.854766][T18536] veth0_macvtap: entered promiscuous mode [ 449.925720][T18536] veth1_macvtap: entered promiscuous mode [ 450.009999][T19062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.110772][T19068] netlink: 480 bytes leftover after parsing attributes in process `syz.4.3115'. [ 450.213418][T18536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.363541][T18536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.720655][ T7632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.730805][ T7632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.093406][ T7632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.131297][ T7632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.063203][T19096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.106567][T19096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.171730][T19093] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 452.398736][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.430918][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.670995][T19117] vlan3: entered promiscuous mode [ 452.729070][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 452.744070][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 452.758491][T19117] bridge0: entered promiscuous mode [ 452.830884][T19130] netlink: 'syz.3.3125': attribute type 1 has an invalid length. [ 452.864959][T19130] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 453.369108][T19151] netlink: 'syz.2.3018': attribute type 1 has an invalid length. [ 453.432782][ T5636] Bluetooth: hci3: command 0x0401 tx timeout [ 453.589421][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 454.726283][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3132'. [ 454.771651][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 455.387491][T19199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 455.444463][T19206] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.3138'. [ 455.463220][T19206] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.3138'. [ 455.789858][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 456.327063][T19229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3142'. [ 456.389752][T19230] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3143'. [ 456.467680][T19230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3143'. [ 456.512478][T19230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3143'. [ 456.603142][T19234] netlink: get zone limit has 8 unknown bytes [ 456.662466][T19234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3144'. [ 456.860425][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 457.109565][T19248] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3146'. [ 457.750159][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 458.434184][T19287] veth1_to_bond: Caught tx_queue_len zero misconfig [ 458.629620][T19290] nbd: couldn't find device at index 3 [ 458.791432][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 458.810565][T19294] netlink: 'syz.4.3159': attribute type 1 has an invalid length. [ 459.150841][T19306] tipc: Enabling not permitted [ 459.171920][T19306] tipc: Enabling of bearer rejected, failed to enable media [ 459.753866][T19324] __nla_validate_parse: 1 callbacks suppressed [ 459.753909][T19324] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3166'. [ 459.830768][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 460.274720][T19342] netlink: 'syz.1.3173': attribute type 4 has an invalid length. [ 460.335275][T19344] netlink: 'syz.1.3173': attribute type 4 has an invalid length. [ 460.582522][T19344] netlink: 'syz.1.3173': attribute type 4 has an invalid length. [ 460.686779][T19354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3175'. [ 460.869436][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 462.055232][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 462.551369][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 462.998265][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 464.099443][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 465.059352][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 465.904298][T19359] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 466.083845][T19365] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 466.269636][T19372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3178'. [ 466.375710][T19375] batman_adv: batadv0: Adding interface: dummy0 [ 466.397634][T19375] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.463440][T19375] batman_adv: batadv0: Interface activated: dummy0 [ 466.733521][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3179'. [ 467.075658][T19383] netlink: 'syz.2.3182': attribute type 2 has an invalid length. [ 467.385456][T19391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3184'. [ 467.524309][T19396] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3183'. [ 467.853369][T19403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3186'. [ 468.039129][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3187'. [ 468.179062][T19417] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3189'. [ 468.193437][T19417] openvswitch: netlink: Message has 512 unknown bytes. [ 468.268282][T19419] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 468.306190][T19417] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3189'. [ 468.410698][T19387] syzkaller0: entered promiscuous mode [ 468.419187][T19387] syzkaller0: entered allmulticast mode [ 468.566469][T19417] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.291949][T19441] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3193'. [ 469.441385][T19441] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 469.790737][T19441] 0ªî{X¹¦: entered allmulticast mode [ 469.805746][T19441] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 470.051348][T19446] lo: Caught tx_queue_len zero misconfig [ 470.105416][T19451] netdevsim netdevsim2: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 470.343648][T19464] netlink: 'syz.0.3200': attribute type 1 has an invalid length. [ 470.366318][T19465] gretap2: entered allmulticast mode [ 471.295750][T19422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.374325][T19473] netlink: 'syz.3.3201': attribute type 4 has an invalid length. [ 471.401000][T19473] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3201'. [ 471.869297][T19490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3206'. [ 472.195081][T19496] sctp: [Deprecated]: syz.2.3207 (pid 19496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.195081][T19496] Use struct sctp_sack_info instead [ 474.293229][T19503] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.302399][T19503] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.461863][T19503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.575155][T19503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.908753][ T5290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.614078][T19556] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3220'. [ 477.665594][T19556] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3220'. [ 477.771612][T19096] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.786076][T19096] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.819507][T19096] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.883102][T19545] vlan2: entered allmulticast mode [ 477.894087][T19545] bond0: entered allmulticast mode [ 477.902197][T19545] bond_slave_0: entered allmulticast mode [ 477.908219][T19545] bond_slave_1: entered allmulticast mode [ 477.931432][T19096] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.435165][T19580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.595835][T19580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.720882][T19579] erspan0: entered promiscuous mode [ 478.735492][T19579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3226'. [ 478.801160][T19585] nbd: socks must be embedded in a SOCK_ITEM attr [ 480.256596][T19626] netlink: 'syz.0.3236': attribute type 1 has an invalid length. [ 480.508777][T19629] 8021q: adding VLAN 0 to HW filter on device bond10 [ 480.522602][T19629] bond9: (slave bond10): making interface the new active one [ 480.532350][T19629] bond9: (slave bond10): Enslaving as an active interface with an up link [ 480.537452][T19636] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3236'. [ 480.695454][T19626] 8021q: adding VLAN 0 to HW filter on device bond9 [ 480.792668][T19633] vlan3: left promiscuous mode [ 480.797775][T19633] bridge0: left promiscuous mode [ 480.921368][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3239'. [ 481.090912][ T3359] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.100687][ T3359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.320041][ T5636] block nbd5: Receive control failed (result -1) [ 481.334308][ T5636] [ 481.336679][ T5636] ====================================================== [ 481.343705][ T5636] WARNING: possible circular locking dependency detected [ 481.350759][ T5636] syzkaller #0 Not tainted [ 481.355183][ T5636] ------------------------------------------------------ [ 481.362216][ T5636] kworker/u9:3/5636 is trying to acquire lock: [ 481.368386][ T5636] ffff888044bc45e0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 481.378142][ T5636] [ 481.378142][ T5636] but task is already holding lock: [ 481.385519][ T5636] ffff88807ec53a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 481.394552][ T5636] [ 481.394552][ T5636] which lock already depends on the new lock. [ 481.394552][ T5636] [ 481.405066][ T5636] [ 481.405066][ T5636] the existing dependency chain (in reverse order) is: [ 481.414266][ T5636] [ 481.414266][ T5636] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 481.422066][ T5636] __mutex_lock+0x19d/0x1550 [ 481.427287][ T5636] nbd_queue_rq+0x373/0x1150 [ 481.432495][ T5636] blk_mq_dispatch_rq_list+0x499/0x1990 [ 481.438734][ T5636] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 481.445689][ T5636] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 481.452232][ T5636] blk_mq_run_work_fn+0x16c/0x300 [ 481.457906][ T5636] process_scheduled_works+0xa8e/0x14e0 [ 481.464026][ T5636] worker_thread+0xa47/0xfb0 [ 481.469262][ T5636] kthread+0x388/0x470 [ 481.473868][ T5636] ret_from_fork+0x514/0xb70 [ 481.479134][ T5636] ret_from_fork_asm+0x1a/0x30 [ 481.484451][ T5636] [ 481.484451][ T5636] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 481.491685][ T5636] __mutex_lock+0x19d/0x1550 [ 481.496817][ T5636] nbd_queue_rq+0xc1/0x1150 [ 481.501866][ T5636] blk_mq_dispatch_rq_list+0x499/0x1990 [ 481.507963][ T5636] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 481.514846][ T5636] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 481.521373][ T5636] blk_mq_run_work_fn+0x16c/0x300 [ 481.526946][ T5636] process_scheduled_works+0xa8e/0x14e0 [ 481.533129][ T5636] worker_thread+0xa47/0xfb0 [ 481.538276][ T5636] kthread+0x388/0x470 [ 481.542892][ T5636] ret_from_fork+0x514/0xb70 [ 481.548028][ T5636] ret_from_fork_asm+0x1a/0x30 [ 481.553352][ T5636] [ 481.553352][ T5636] -> #4 (set->srcu){.+.+}-{0:0}: [ 481.560502][ T5636] __synchronize_srcu+0xc9/0x2f0 [ 481.566204][ T5636] elevator_switch+0x1e8/0x7b0 [ 481.571631][ T5636] elevator_change+0x2fa/0x480 [ 481.577038][ T5636] elevator_set_default+0x375/0x440 [ 481.582823][ T5636] blk_register_queue+0x3f3/0x4e0 [ 481.588646][ T5636] __add_disk+0x6cb/0xe30 [ 481.593583][ T5636] add_disk_fwnode+0xfb/0x4b0 [ 481.598808][ T5636] nbd_dev_add+0x733/0xb60 [ 481.603768][ T5636] nbd_init+0x15f/0x1e0 [ 481.608779][ T5636] do_one_initcall+0x250/0x870 [ 481.614083][ T5636] do_initcall_level+0x10a/0x1a0 [ 481.619708][ T5636] do_initcalls+0x59/0xa0 [ 481.624571][ T5636] kernel_init_freeable+0x29d/0x3e0 [ 481.630282][ T5636] kernel_init+0x1d/0x1d0 [ 481.635229][ T5636] ret_from_fork+0x514/0xb70 [ 481.640531][ T5636] ret_from_fork_asm+0x1a/0x30 [ 481.645816][ T5636] [ 481.645816][ T5636] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 481.653719][ T5636] __mutex_lock+0x19d/0x1550 [ 481.658824][ T5636] elevator_change+0x1af/0x480 [ 481.664114][ T5636] elevator_set_none+0xb5/0x140 [ 481.669488][ T5636] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 481.675806][ T5636] nbd_start_device+0x189/0xb30 [ 481.681185][ T5636] nbd_genl_connect+0x1597/0x1c10 [ 481.686724][ T5636] genl_family_rcv_msg_doit+0x233/0x340 [ 481.692916][ T5636] genl_rcv_msg+0x614/0x7a0 [ 481.697945][ T5636] netlink_rcv_skb+0x226/0x4a0 [ 481.703229][ T5636] genl_rcv+0x28/0x40 [ 481.707727][ T5636] netlink_unicast+0x7bb/0x940 [ 481.713005][ T5636] netlink_sendmsg+0x813/0xb40 [ 481.718284][ T5636] sock_sendmsg_nosec+0x13a/0x180 [ 481.723940][ T5636] ____sys_sendmsg+0x54e/0x850 [ 481.729220][ T5636] ___sys_sendmsg+0x2a5/0x360 [ 481.734412][ T5636] __x64_sys_sendmsg+0x1b1/0x290 [ 481.739870][ T5636] do_syscall_64+0x174/0x580 [ 481.745113][ T5636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.751699][ T5636] [ 481.751699][ T5636] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 481.760404][ T5636] blk_alloc_queue+0x544/0x690 [ 481.765704][ T5636] __blk_mq_alloc_disk+0x194/0x390 [ 481.771353][ T5636] nbd_dev_add+0x494/0xb60 [ 481.777347][ T5636] nbd_init+0x15f/0x1e0 [ 481.782041][ T5636] do_one_initcall+0x250/0x870 [ 481.787450][ T5636] do_initcall_level+0x10a/0x1a0 [ 481.792924][ T5636] do_initcalls+0x59/0xa0 [ 481.797871][ T5636] kernel_init_freeable+0x29d/0x3e0 [ 481.803673][ T5636] kernel_init+0x1d/0x1d0 [ 481.808520][ T5636] ret_from_fork+0x514/0xb70 [ 481.813624][ T5636] ret_from_fork_asm+0x1a/0x30 [ 481.819000][ T5636] [ 481.819000][ T5636] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 481.826206][ T5636] fs_reclaim_acquire+0x71/0x100 [ 481.831673][ T5636] __kmalloc_noprof+0xbc/0x720 [ 481.836988][ T5636] tls_sw_sendmsg+0x599/0x2860 [ 481.842486][ T5636] sock_sendmsg_nosec+0x90/0x180 [ 481.847952][ T5636] sock_sendmsg+0x1ca/0x2d0 [ 481.852971][ T5636] splice_to_socket+0xb5e/0x12a0 [ 481.858554][ T5636] direct_splice_actor+0x101/0x160 [ 481.864267][ T5636] splice_direct_to_actor+0x57b/0xcb0 [ 481.870153][ T5636] do_splice_direct+0x195/0x290 [ 481.875517][ T5636] do_sendfile+0x52e/0x7c0 [ 481.880564][ T5636] __se_sys_sendfile64+0x144/0x1a0 [ 481.886195][ T5636] do_syscall_64+0x174/0x580 [ 481.891313][ T5636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.897723][ T5636] [ 481.897723][ T5636] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 481.905898][ T5636] __lock_acquire+0x1520/0x2cf0 [ 481.911266][ T5636] lock_acquire+0x106/0x350 [ 481.916278][ T5636] lock_sock_nested+0x41/0x100 [ 481.921638][ T5636] inet_shutdown+0x6a/0x390 [ 481.926658][ T5636] nbd_mark_nsock_dead+0x2cb/0x550 [ 481.932392][ T5636] recv_work+0x1cee/0x1e10 [ 481.937384][ T5636] process_scheduled_works+0xa8e/0x14e0 [ 481.943542][ T5636] worker_thread+0xa47/0xfb0 [ 481.948658][ T5636] kthread+0x388/0x470 [ 481.953244][ T5636] ret_from_fork+0x514/0xb70 [ 481.958352][ T5636] ret_from_fork_asm+0x1a/0x30 [ 481.963633][ T5636] [ 481.963633][ T5636] other info that might help us debug this: [ 481.963633][ T5636] [ 481.973859][ T5636] Chain exists of: [ 481.973859][ T5636] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 481.973859][ T5636] [ 481.986891][ T5636] Possible unsafe locking scenario: [ 481.986891][ T5636] [ 481.994350][ T5636] CPU0 CPU1 [ 481.999712][ T5636] ---- ---- [ 482.005070][ T5636] lock(&nsock->tx_lock); [ 482.010014][ T5636] lock(&cmd->lock); [ 482.016518][ T5636] lock(&nsock->tx_lock); [ 482.023455][ T5636] lock(sk_lock-AF_INET6-NBD); [ 482.028299][ T5636] [ 482.028299][ T5636] *** DEADLOCK *** [ 482.028299][ T5636] [ 482.036430][ T5636] 3 locks held by kworker/u9:3/5636: [ 482.041704][ T5636] #0: ffff88802755f940 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 482.052936][ T5636] #1: ffffc90003befc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 482.064686][ T5636] #2: ffff88807ec53a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 482.074091][ T5636] [ 482.074091][ T5636] stack backtrace: [ 482.079973][ T5636] CPU: 1 UID: 0 PID: 5636 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 482.079998][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 482.080009][ T5636] Workqueue: nbd5-recv recv_work [ 482.080030][ T5636] Call Trace: [ 482.080038][ T5636] [ 482.080046][ T5636] dump_stack_lvl+0xe8/0x150 [ 482.080065][ T5636] print_circular_bug+0x2e1/0x300 [ 482.080086][ T5636] check_noncircular+0x12e/0x150 [ 482.080106][ T5636] __lock_acquire+0x1520/0x2cf0 [ 482.080126][ T5636] ? irqentry_exit+0x218/0x8f0 [ 482.080148][ T5636] ? lockdep_hardirqs_on+0x7a/0x110 [ 482.080170][ T5636] ? inet_shutdown+0x6a/0x390 [ 482.080197][ T5636] lock_acquire+0x106/0x350 [ 482.080211][ T5636] ? inet_shutdown+0x6a/0x390 [ 482.080235][ T5636] lock_sock_nested+0x41/0x100 [ 482.080254][ T5636] ? inet_shutdown+0x6a/0x390 [ 482.080274][ T5636] inet_shutdown+0x6a/0x390 [ 482.080296][ T5636] nbd_mark_nsock_dead+0x2cb/0x550 [ 482.080314][ T5636] recv_work+0x1cee/0x1e10 [ 482.080336][ T5636] ? lockdep_unlock+0x5d/0xd0 [ 482.080348][ T5636] ? __lock_acquire+0x13e8/0x2cf0 [ 482.080365][ T5636] ? __pfx_recv_work+0x10/0x10 [ 482.080381][ T5636] ? lockdep_hardirqs_on+0x7a/0x110 [ 482.080401][ T5636] ? irqentry_exit+0x218/0x8f0 [ 482.080421][ T5636] ? trace_irq_disable+0x3b/0x140 [ 482.080473][ T5636] ? rcu_is_watching+0x15/0xb0 [ 482.080491][ T5636] ? process_scheduled_works+0xa20/0x14e0 [ 482.080511][ T5636] process_scheduled_works+0xa8e/0x14e0 [ 482.080540][ T5636] ? __pfx_process_scheduled_works+0x10/0x10 [ 482.080561][ T5636] ? assign_work+0x3cf/0x5d0 [ 482.080581][ T5636] worker_thread+0xa47/0xfb0 [ 482.080610][ T5636] kthread+0x388/0x470 [ 482.080625][ T5636] ? __pfx_worker_thread+0x10/0x10 [ 482.080644][ T5636] ? __pfx_kthread+0x10/0x10 [ 482.080659][ T5636] ret_from_fork+0x514/0xb70 [ 482.080676][ T5636] ? __pfx_ret_from_fork+0x10/0x10 [ 482.080692][ T5636] ? __switch_to+0xc89/0x1420 [ 482.080714][ T5636] ? __pfx_kthread+0x10/0x10 [ 482.080729][ T5636] ret_from_fork_asm+0x1a/0x30 [ 482.080751][ T5636]