last executing test programs: 1.932887478s ago: executing program 3 (id=1541): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000000c0)="7335731e845ca417c4f53bc3163fff5723d0de67ed56dbc7d8a154fb2d4ad665f0222466ce8e76a7b1406a832eb3bf46eb6e0b9719ab3f544fcfd528e2546aaf28106082bbf90b27a2de26f6ef6e6669978b61f8686a669ad29434e3fc0aebe6e8f915c75811c247c854b895770e02df4eafcaa696b4d191bc552571c2611e02d854313f29261b4f604a726b691ef3ec82daebb22300b04287edb3c53527703a", 0xa0}, {&(0x7f0000000180)="a6c6991f35b0b0fa9ee3cbf853a5d70b62e6d41a171bfcd9c983d285146a53373c7ec35812a45a85e1d75d9216cb4f1ca951336f219e37ae", 0x38}, {&(0x7f00000001c0)="4e797bc71f051db34715b6baf9659550c880921f91d3f1ae92622bfd34e04eb1c95f9b489aaf425ec6bd1169a31dc99b7f3ec7fc20ea408bff23faae832c44771de8917af54f3ca42b22c80ffff123c63ae4ab67ddc85e5ada73e42e6faa8b36c082e374623f98ced7f9938cfafd5b56275c2f", 0x73}, {&(0x7f0000000240)="2632e02466ed0d3b0f4c3c370857ec7d70e5fb86c3a61e08e1db014a280f3e40b236d459c71e467a026d8adde9f2b08a740a2837c7e5e429786169d3d70cf9df66c49947be98cf2223e2387b03e44f14a53c0401e192a1497ce31b338c14f7990266e47fe409347cf250f715249acffa1a8a80742041c8d40b939b81fe12edda0af130a4766387698d2ff58c3167c565cba06fd0baea1c7f447770b9fae7bf6989ecc4f09a5dbedbe63ee098fb2e1a53e3651ee8b3da03ec2103d94fafc836c4def61b11e5d6afebbc310bf94585076c", 0xd0}, {&(0x7f0000000340)}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="e107752f51cfd2636a9f4247c7a3854e42aa87263357f75f99ec1ca883baf1363d5ea29c52289c7d6a313a276b9529a676d93d1fa795ab85ac9e2621c6feadfcafeac4ad0a9eef5c07ec9bc750d89dfcfd2627a640b7987d60a6f473e8db6f4887afd09f8646330f825ec0ae5763b15f6e5eed1a10d1c8cd684c2cfcba7885e887a4356a0c2df3fd4bab46e506e7bbe4078b0183e478e57a3a831b60fc08eba980e615bbfcb13e83e4cbfe8698af8932f36f569cd5d58307a0fdeccadbe417de7ff263af564fde445a09af8956097b58a8a740", 0xd3}], 0x7, &(0x7f0000001500)=[@ip_retopts={{0xd8, 0x0, 0x7, {[@rr={0x7, 0x13, 0xa0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @empty]}, @noop, @rr={0x7, 0x1b, 0xd9, [@dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x32}, @local, @rand_addr=0x64010100, @local, @local]}, @timestamp_prespec={0x44, 0x44, 0xf8, 0x3, 0x8, [{@multicast2, 0x7}, {@broadcast, 0xff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x400}, {@loopback, 0x531}, {@empty, 0x4}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x87, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0xffff}, {@remote, 0xfc}, {@empty, 0xffffffff}, {@loopback, 0x1}, {@local, 0x3}]}, @timestamp_addr={0x44, 0x24, 0xd6, 0x1, 0x7, [{@loopback, 0x2}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0x2b, 0x3f, [@local, @multicast2, @broadcast, @private=0xa010102, @remote, @rand_addr=0x64010102, @broadcast, @local, @broadcast, @private=0xa010102]}]}}}], 0x118}}, {{&(0x7f0000001640)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001680)="384e3ce2d412994b2061139b888c5770f7ea7800fc1db89552fe4de4082b3dd89648aea21ccb05ae5c42cacd48d4e0171940f934fe0f63cdffe406be30db3af31463cf5d7ec017273629fa1f0c165d5242d9d5647d639b66faf6fbfac30a51d5a29911a4c31a98c57f713487cbe2d2605e77edf6a88e77e71a61e42f17fe5c2f80bb24fb9bcc810cd2f7cf53da85e8fee4bc06211ea79d8fba1b572214f912e08564a9b075324c71854387552647", 0xae}, {&(0x7f0000001740)="5278478b2f82b5065feb7f6b8cbed847d1cce38a2da9ece2d1cf0c10a39494500e97b062517ba988401fd95a9e7b44eae6c69643ac424437bd3034bd06cdf07aff2acf9abdf9c18600307c4f799e049dffebae7e6879772f629e9f11018a986935007a66b8dd98d2b8109cce7cfbad0cccbffc079c1ba45f2de264c2881da188ed978de677d5b438b34b4526f17b21f2c0044c340e88cb806ec4a1a2c7c89e2df41352e3ef892154", 0xa8}, {&(0x7f0000001800)="5578530141e4ecd286b728d10c05ed1cb582fdd708ed6544c6f0eb533677cdfc30d29329fd0e21aa910787cecba6c41a471fcad5a6dc030e5cd4b84a9104f03ee7486642c6c000638dd11f", 0x4b}, {&(0x7f0000001880)="8fc743f163a7691cbe460a84", 0xc}], 0x4, &(0x7f0000001900)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xad, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe641}, {@empty, 0x8}, {@broadcast, 0x6ab}]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0x7, 0xbc, [@multicast1]}, @timestamp={0x44, 0x14, 0xa2, 0x0, 0x7, [0x80000001, 0x100, 0x2, 0x0]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0xb0}}, {{&(0x7f00000019c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000001a00)="18cffdf91ebd58290b9693bcc4324290ddee6135d54445257501ed69d7e8647d3ba9826741d8d7ace94aebbae5e8ef3f4c7bcf59e9f648f35b9420b7908110cb9f4896004416d011e9ad69f64320b9f5d487b2d264f4f58212df38753a81ce74fb", 0x61}], 0x1, &(0x7f0000001ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}}], 0x3, 0x4004084) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000002cc0)={{r0, &(0x7f0000001bc0)='\\%\x00', 0x2000, &(0x7f0000001c00)={@_ha_fsid={[0x0, 0x2]}, {0x81, 0x7, 0x7, 0xd7}}, 0xb5, &(0x7f0000001c40)={@_ha_fsid}, &(0x7f0000001c80)=0x7}, {[0x1, 0x1, 0xf6, 0x6]}, 0xfffffffd, 0x1000, &(0x7f0000001cc0)=""/4096}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000002e00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x82b5a03b98f3cb14}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x20, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x40, 0x3d}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) read(r1, &(0x7f0000002e40)=""/169, 0xa9) recvmsg$can_raw(r1, &(0x7f0000003600)={&(0x7f0000002f00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000002f80)=""/226, 0xe2}, {&(0x7f0000003080)=""/7, 0x7}, {&(0x7f00000030c0)=""/220, 0xdc}, {&(0x7f00000031c0)=""/67, 0x43}, {&(0x7f0000003240)=""/66, 0x42}, {&(0x7f00000032c0)=""/245, 0xf5}, {&(0x7f00000033c0)=""/7, 0x7}, {&(0x7f0000003400)=""/33, 0x21}, {&(0x7f0000003440)=""/76, 0x4c}], 0x9, &(0x7f0000003580)=""/88, 0x58}, 0x12140) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680), r2) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003700)={&(0x7f00000036c0)={0x14, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000037c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000039c0)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x2004000}, 0xc, &(0x7f0000003980)={&(0x7f0000003840)={0x11c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x53}}}}, [@NL80211_ATTR_MESH_SETUP={0x20, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x6}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x6, 0x1}, {0xc, 0x1}, {0x20}, {0x4, 0x1}, {0x6}, {0x2}, {0x2, 0x1}, {0x16, 0x1}, {0x9, 0x1}, {0xc}, {0x4, 0x1}, {0x9, 0x1}, {0x16}, {0x36, 0x1}, {0x3}, {0x5, 0x1}, {0x8, 0x1}, {0x3}, {0x14, 0x1}, {0x6c}, {0x48, 0x1}, {0x24, 0x1}, {0x18, 0x1}, {0x16}, {0xb}, {0x1}, {0x12, 0x1}, {0x48, 0x1}, {0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x98, 0x70, [@NL80211_MESH_SETUP_IE={0x92, 0x3, "e8d56eb0ba64aabce6f18180540bdc4e5f7568ce2e147a5bb661964414e644ccfa21b5d3e99070c61df6dcea9f19f4aa9d276b0c722e8f2a2ef2a8cab324e8279af6ffaec9087a7ccc780c0a0f3be63c626c93a61cd5a8ca6dfe2be74bf9b583ed4ef5459b590d13a11e4667033e4b718f8abc36e864c530ba30800b1cd91d2099363680b19894431594f7af44a9"}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20020000}, 0x20000001) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000003a00)=0x4, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000003a40), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000003b40)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000003b80)={0x1a, 0x30b, 0x93, 0xfa, 0x0, 0xa6}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000003c00), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000003c40)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r6, &(0x7f0000003d00)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003d80), r6) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000004180)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004140)={&(0x7f0000003dc0)={0x380, r9, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x114, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xabb81a2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8872}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa225}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4be50938}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa74}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f8bd6b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x373c40af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71420cea}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d9d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x555af99e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x429df7fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2243ca04}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32d35a8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b49}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x97da3d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd6e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96b6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7864}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a32ee5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x740207f2}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e16}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53f01bd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd23f}]}, {0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x284d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1433c344}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e81}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x791bc8157a843dd9}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffc}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a68ebe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31e57bf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26264ace}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4373c59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c9a57d5}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d23b8ef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6249510c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43f63b7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x515a27c9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48f73d64}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ca6a8bc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3796172f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c4dd5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4906304e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x495e4545}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1665e955}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x130, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2969}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fa347bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb87b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b885192}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb707}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa017}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12f12f81}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x721e7d42}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x765125c0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ffd3073}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd978}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ca59e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2064}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e200271}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc57}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x381f1c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ade}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e979d41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b2d36ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f4540ba}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x324d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63a03b3f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5dad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb58da63}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefa1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb898}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5beb9a76}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c3d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3dc2}]}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x884}, 0x840) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000004280)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x40, r4, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x76}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40015}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000004340)={'ip6_vti0\x00', &(0x7f00000042c0)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x3, 0x1, 0x10, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x20, 0x0, 0x8, 0x8}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000043c0)={r1, r10, 0x25, 0x4, @val=@iter={&(0x7f0000004380)=@cgroup={0x1, r1, 0x3}, 0x10}}, 0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000004400)={0x0, 0x2}, &(0x7f0000004440)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000004500)={r11, 0x78, &(0x7f0000004480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @private=0xa010102}]}, &(0x7f0000004540)=0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000045c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r12, &(0x7f00000046c0)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004680)={&(0x7f0000004600)={0x70, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="10a2f4a99e01"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c891dba7d2d4"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x44010) 1.875577383s ago: executing program 0 (id=1543): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x1c, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0xa, 0x2, 0x7, 0x40}, @ldst={0x1, 0x1, 0x6, 0xa, 0x1, 0x6, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @printk={@lx}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x54, &(0x7f0000000480)=""/84, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xe, 0x7, 0x8}, 0x10, 0xffffffffffffffff, r1, 0x4, &(0x7f0000000540)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, 0xffffffffffffffff], &(0x7f0000000600)=[{0x1, 0x4, 0xd, 0xa}, {0x3, 0x2, 0xa, 0x8}, {0x0, 0x3, 0xf, 0x5}, {0x4, 0x5, 0x3, 0x5}], 0x10, 0x5}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000700)=r3) unshare(0x8060000) 1.696803858s ago: executing program 3 (id=1546): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {@in=@empty, 0x4d4, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x8}, {}, {}, 0x0, 0x3502, 0xa}, [@algo_auth_trunc={0x8d, 0x14, {{'sha1\x00'}, 0x208, 0x0, "b01f46fc7c0ff1ba6ae78607befd59c34031658fd87baff04f012138bf21fa481731c1a993da6cf3ec79d3767409b63af2c8cc54637c3d7545c6b42a31f9b7ef21"}}]}, 0x180}}, 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200), &(0x7f0000000280)=0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x34, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xf4, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x409}, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800"/20, @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000100"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1}, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000840)={r0, &(0x7f0000000740)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4900, &(0x7f0000000780)={@_ha_fsid={[0xfffffff7, 0x7f]}, {0x4, 0x840, 0xf}}, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0x1}) 1.651800329s ago: executing program 1 (id=1547): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x10000, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f0000000480)={0x11, 0x0, r2, 0x1, 0x62, 0x6, @broadcast}, 0x14) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xd6a}, 0x8) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}}, 0x8814) 1.640290751s ago: executing program 0 (id=1548): r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000300)=0x3ff, 0x4) connect$caif(r0, &(0x7f0000000100)=@rfm={0x25, 0x0, "d034e68fae880aca9de7751355b0eb74"}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@bcast, @remote, @bcast, @remote, @default, @netrom, @null, @null]}, &(0x7f0000000080)=0x48) sendto$ax25(r2, &(0x7f00000000c0)="129de7b1ac32e1dd13b5", 0xff71, 0x70bb23d7c2585368, &(0x7f0000000100)={{0x3, @default, 0x4}, [@bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f00000017c0)) 1.493915685s ago: executing program 1 (id=1550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="d035744442723da11446d9ce15f0c917b3288e7f3273843d86137fad735383512cc2c072d3580436cd1991bd9b16f968a7a23b0ca2f9748a", 0x38}, {0x0}, {0x0}], 0x3}, 0x4048081) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="d035744442723da11446d9ce15f0c917b3288e7f3273843d86137fad735383512cc2c072d3580436cd1991bd9b16f968a7a23b0ca2f9748a", 0x38}, {0x0}, {0x0}], 0x3}, 0x4048081) (async) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) 1.492778058s ago: executing program 3 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r2, 0x917}, 0x14}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0}, 0x40000) (async) socket$packet(0x11, 0x2, 0x300) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4884}, 0x2) (async) pread64(r4, &(0x7f0000000200)=""/83, 0x53, 0x3) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x20, 0x20, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10}}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x0) 1.481573662s ago: executing program 0 (id=1552): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x800) unshare(0x6a040000) r1 = socket(0x8, 0x800, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x18}], 0x1, &(0x7f0000000100)=[@iv={0x78, 0x117, 0x2, 0x62, "5dcd71b3914a7a6ca15f141f759504457c8b57a276ddea36e8d326844cf49bea2b869a63c96fa07e694617ecfc6435468b27e9ad8ccf501d9b68071107cdf7dc1fa8af206ff8dd8f865ddfc50f1df17c1abc0f9fa95c5cfef58ef5ef4495ed76302a"}], 0x78}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)}, 0x0) ioctl$IMGETCOUNT(r1, 0x400261f2, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) socket(0x28, 0x5, 0x0) (async) socket(0x28, 0x5, 0x0) (async) connect$vsock_stream(r0, 0x0, 0x0) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x800) (async) unshare(0x6a040000) (async) socket(0x8, 0x800, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async) accept(r2, 0x0, 0x0) (async) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x18}], 0x1, &(0x7f0000000100)=[@iv={0x78, 0x117, 0x2, 0x62, "5dcd71b3914a7a6ca15f141f759504457c8b57a276ddea36e8d326844cf49bea2b869a63c96fa07e694617ecfc6435468b27e9ad8ccf501d9b68071107cdf7dc1fa8af206ff8dd8f865ddfc50f1df17c1abc0f9fa95c5cfef58ef5ef4495ed76302a"}], 0x78}], 0x1, 0x0) (async) recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)}, 0x0) (async) ioctl$IMGETCOUNT(r1, 0x400261f2, &(0x7f0000000000)) (async) 1.346772851s ago: executing program 3 (id=1553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0xc000) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xcc}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f000000a280), 0x204200, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f000000a800)={'veth1_to_team\x00', 0x1000}) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @timestamp_reply}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) recvmmsg(r2, &(0x7f000000a600)=[{{&(0x7f0000005b80)=@phonet, 0x80, &(0x7f0000006080)=[{&(0x7f0000005c00)=""/246, 0xf6}, {&(0x7f0000009340)=""/244, 0xf2}, {&(0x7f0000005e00)=""/163, 0xa3}, {&(0x7f0000009100)=""/129, 0x78}, {&(0x7f0000005f40)=""/177, 0xb1}, {&(0x7f0000006000)=""/128, 0x80}], 0x6, &(0x7f0000000300)=""/39, 0x27}, 0x80000000}, {{&(0x7f0000006100)=@sco={0x1f, @none}, 0x80, &(0x7f0000009280)=[{&(0x7f0000006180)=""/121, 0x79}, {&(0x7f0000006200)=""/4096, 0x1000}, {&(0x7f0000007200)=""/84, 0x54}, {&(0x7f0000007280)=""/213, 0xd5}, {&(0x7f0000007380)=""/103, 0x67}, {&(0x7f0000007400)=""/233, 0xe9}, {&(0x7f0000007500)=""/248, 0xf8}, {&(0x7f0000007600)=""/76, 0x4c}, {&(0x7f00000091c0)=""/161}, {&(0x7f0000005ec0)=""/58}], 0x8, &(0x7f0000007700)=""/4096, 0x1000}, 0x100}, {{&(0x7f0000008700)=@nl=@proc, 0x80, &(0x7f00000024c0)=[{&(0x7f0000008780)=""/108, 0x6c}, {&(0x7f0000008800)=""/187, 0xbb}], 0x2, &(0x7f00000088c0)=""/7, 0x7}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000008a00)=[{&(0x7f0000008900)=""/252, 0xfc}], 0x1}, 0x1}, {{&(0x7f0000008a40)=@caif=@rfm, 0x80, &(0x7f0000008d00)=[{&(0x7f0000008ac0)=""/234, 0xea}, {&(0x7f0000008bc0)=""/122, 0x7a}, {&(0x7f0000008c40)=""/163, 0xa3}], 0x3}, 0x7fffffff}, {{0x0, 0x0, &(0x7f000000a100)=[{&(0x7f0000008d40)=""/177, 0xb1}, {&(0x7f0000008e00)=""/76, 0x4c}, {&(0x7f0000008e80)=""/9, 0x9}, {&(0x7f0000008ec0)=""/10, 0xa}, {&(0x7f0000008f00)=""/214, 0xd6}, {&(0x7f0000009000)=""/201, 0xc9}, {&(0x7f000000a840)=""/4096, 0x1000}], 0x7, &(0x7f000000a180)=""/178, 0xb2}, 0x79f}, {{0x0, 0x0, &(0x7f000000a500)=[{&(0x7f000000a240)=""/41, 0x29}, {&(0x7f000000a280)}, {&(0x7f000000a2c0)=""/20, 0x14}, {&(0x7f000000a300)=""/198, 0xc6}, {&(0x7f000000a400)=""/195, 0xc3}], 0x5, &(0x7f000000a580)=""/91, 0x87}, 0x8}], 0x7, 0x100, &(0x7f000000a7c0)) (async) recvmmsg(r0, &(0x7f0000005980)=[{{&(0x7f0000000400)=@x25, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000480)=""/12, 0xc}, 0x6}, {{&(0x7f00000004c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000540)=""/115, 0x73}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/197, 0xc5}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/17, 0x11}, {&(0x7f00000017c0)=""/218, 0xda}, {&(0x7f00000018c0)=""/135, 0x87}], 0x7, &(0x7f0000001a00)=""/226, 0xe2}, 0x9}, {{&(0x7f0000001b00)=@nfc_llcp, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001b80)=""/92, 0x5c}, {&(0x7f0000001c00)=""/105, 0x69}, {&(0x7f0000001c80)=""/123, 0x7b}, {&(0x7f0000001d00)=""/225, 0xe1}, {&(0x7f0000001e00)=""/110, 0x6e}, {&(0x7f0000001e80)=""/229, 0xe5}], 0x6, &(0x7f0000002000)=""/222, 0xde}, 0x100004}, {{&(0x7f0000002100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002180)=""/105, 0x69}, {&(0x7f0000002200)=""/126, 0x7e}, {&(0x7f0000002280)=""/254, 0xfe}, {&(0x7f0000002380)=""/71, 0x47}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)}, {&(0x7f0000002500)=""/1, 0x1}, {&(0x7f0000002540)=""/161, 0xa1}], 0x8, &(0x7f0000002680)=""/107, 0x6b}, 0x5}, {{&(0x7f0000002700)=@nfc, 0x80, &(0x7f0000003b00)=[{&(0x7f0000002780)=""/66, 0x42}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/238, 0xee}, {&(0x7f0000003900)=""/89, 0x59}, {&(0x7f0000003980)=""/113, 0x71}, {&(0x7f0000003a00)=""/91, 0x5b}, {&(0x7f0000003a80)=""/97, 0x61}], 0x7, &(0x7f0000003b80)=""/183, 0xb7}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000003c40)=""/38, 0x26}, {&(0x7f0000003c80)=""/8, 0x8}, {&(0x7f0000003cc0)=""/206, 0xce}, {&(0x7f0000003dc0)=""/55, 0x37}, {&(0x7f0000003e00)=""/82, 0x52}, {&(0x7f0000003e80)=""/155, 0x9b}, {&(0x7f0000003f40)=""/10, 0xa}, {&(0x7f0000003f80)=""/72, 0x48}, {&(0x7f0000004000)=""/68, 0x44}], 0x9, &(0x7f0000004140)=""/252, 0xfc}, 0x6}, {{&(0x7f0000004240)=@hci, 0x80, &(0x7f00000044c0)=[{&(0x7f00000042c0)=""/54, 0x36}, {&(0x7f00000094c0)=""/243, 0xf3}, {&(0x7f0000004400)=""/189, 0xbd}], 0x3, &(0x7f0000004500)=""/211, 0xd3}, 0x2}, {{&(0x7f0000004600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000005880)=[{&(0x7f0000004680)=""/44, 0x2c}, {&(0x7f00000046c0)=""/84, 0x54}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000005740)=""/187, 0xbb}, {&(0x7f0000005800)=""/3, 0x3}, {&(0x7f0000005840)=""/17, 0x11}], 0x6, &(0x7f0000005900)=""/81, 0x51}, 0x1}], 0x8, 0x60, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000005d00)={0x0, @in6={{0xa, 0x4e24, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, 0x2, 0x7, 0xffffffff, 0xffffff7f, 0x6}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f00000002c0)={r7, 0xadc0}, 0x8) (async, rerun: 32) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300)}, 0x20) (rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000005f00), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000009480)={&(0x7f0000005dc0)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000009440)={&(0x7f0000007680)={0x68, r9, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x49001) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x68}}, 0x4) 1.18279216s ago: executing program 1 (id=1556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x29, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000280)="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") 1.065676629s ago: executing program 3 (id=1557): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x30, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) shutdown(r0, 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b00000018000180147a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x8844}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0xdc, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xa8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x7, &(0x7f0000000000), 0xa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x2, 0x4, 0xe, 0x5, 0x5, 0x0, 0xb7, 0x4, 0x2, 0x8, 0x4, 0xf4}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000080)={r9, 0x9, 0x200, 0x5}, &(0x7f0000000100)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x86c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.022728271s ago: executing program 2 (id=1558): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x4f3e}]}}}]}, 0x3c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xffff0f00}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x6, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x3, 0x5, 0x0, @loopback, @empty, 0x1, 0x80, 0x93091a0, 0x6}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x186}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) 916.046218ms ago: executing program 4 (id=1559): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xb, 0x8, 0xfff, 0xfffffffa, 0x6}, &(0x7f0000000080)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x140c, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) r3 = socket(0x10, 0x803, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000440)=0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x909, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, r5, 0x2, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x20008081) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT], 0x0, 0x2a}, 0x28) connect$can_bcm(r7, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r7, &(0x7f00000005c0)={&(0x7f0000000180), 0xfffffffffffffee2, &(0x7f0000000500)={&(0x7f0000000500)=ANY=[], 0x48}, 0x2, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) 891.045831ms ago: executing program 2 (id=1560): r0 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x8, &(0x7f0000000180)=""/129, &(0x7f0000000040)=0x81) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$rds(r0, &(0x7f0000001b80)={&(0x7f0000000100)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/83, 0x53}, {&(0x7f0000000140)}], 0x2, &(0x7f0000001b00)=[@rdma_args={0x48, 0x114, 0x1, {{0x7, 0x9}, {&(0x7f0000000300)=""/63, 0x3f}, &(0x7f0000001a40)=[{&(0x7f0000000340)=""/40, 0x28}, {&(0x7f0000000500)=""/241, 0xf1}, {&(0x7f0000000380)=""/95, 0x5f}, {&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000400)=""/37, 0x25}, {&(0x7f0000000740)=""/204, 0xcc}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/227, 0xe3}, {&(0x7f0000001940)=""/244, 0xf4}], 0xa, 0x29dd54789c45b5fd, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x4, 0x6}}], 0x60, 0xc0000}, 0xc000) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) 871.1046ms ago: executing program 1 (id=1561): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x6, &(0x7f0000000000)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=@newchain={0x4d4, 0x64, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x10}, {0xfff1, 0xffe0}, {0xe, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_TOS={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x484, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0x4}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x5f}, @TCA_ROUTE4_POLICE={0x468, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7, 0xba7, 0xef3, 0x8, 0x6, 0x6, 0x3, 0x5, 0xfba, 0x10001, 0x0, 0x401, 0x7, 0x4, 0xbbde, 0x612f, 0xffffff2b, 0x4, 0x7, 0x2, 0x7f, 0x3, 0x1, 0x0, 0x7, 0x5, 0x5, 0x0, 0x8, 0x6, 0x0, 0x9, 0xa, 0x81, 0x8, 0x5, 0x6, 0xfc1, 0xfffffffa, 0x8, 0x5, 0xff, 0x2, 0x3, 0x7, 0xffffffff, 0x4, 0x3, 0x2, 0x2, 0xfffffff9, 0xfffffffc, 0x7fff, 0x9, 0x1, 0x7e5, 0x59, 0x4, 0xef7, 0x10000, 0x3, 0x10001, 0x5, 0x10, 0x3, 0x6, 0x132, 0x10, 0x9, 0x6, 0x6, 0x0, 0x0, 0x3, 0xfffffffd, 0x2, 0x5, 0x1, 0x7d, 0x7, 0x8, 0x6, 0xe, 0x3, 0x4, 0x6, 0x6, 0xc6, 0x1, 0x5, 0x4, 0x3, 0x7ff, 0x1, 0x3, 0xaca, 0x3, 0x6, 0x1, 0x9, 0x6cba, 0x5, 0xfffffc00, 0x101, 0xe7a, 0x1, 0x0, 0x4, 0x38b, 0x9, 0x8001, 0x4, 0xffff, 0x4, 0xd, 0xff, 0x8000, 0x9, 0x5, 0x7, 0x2, 0x8, 0x3, 0x2, 0x0, 0xa395, 0xffffff62, 0x4, 0x1, 0x7, 0x1ff, 0x2, 0x0, 0x6c6d, 0x3, 0x10000, 0xffffffff, 0x1, 0x1000, 0x4, 0x3, 0x400, 0x477f, 0x4, 0x100, 0x5, 0x60, 0x1, 0x7, 0x3ff, 0x10, 0x1, 0x5, 0x8, 0xd9, 0x1, 0x8, 0x4e3b, 0xa0, 0x10001, 0x2, 0x180ca343, 0x1, 0x572, 0x4, 0xa17, 0x5, 0x64, 0x1, 0x0, 0x3, 0x9, 0x6, 0x8, 0xc, 0x7, 0x9, 0x7fff, 0xffff, 0x1, 0x1, 0x8, 0x6, 0x195, 0x0, 0x6, 0xd8e, 0x6, 0x3, 0x1, 0x8000, 0x80, 0x3ff, 0x1, 0x2, 0x800, 0xd, 0x7ff, 0x9, 0x7, 0x1, 0x8, 0x8, 0x8, 0x4, 0x7, 0xf, 0xcf, 0x7, 0x4, 0x3, 0xe, 0x1, 0x5d4, 0x9, 0x800, 0x80000001, 0x80, 0x7, 0x5a6, 0x7, 0x8, 0x5, 0xae, 0x9, 0xb, 0x1ef0, 0x401, 0x101, 0x1ff, 0x5, 0xeb4, 0xfffffff7, 0x400, 0x854, 0x6, 0x3, 0x6, 0x4, 0x59, 0x4, 0x6a3, 0x8, 0x7fffffff, 0x80, 0x9, 0x7fff, 0x1, 0x7b7, 0x7c6a, 0x0, 0xd62d, 0x40, 0x9, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x8, 0x874a, 0x200, {0x80, 0x2, 0x7, 0x1, 0x4, 0x80000000}, {0xff, 0x2, 0x0, 0x3, 0x8, 0xf}, 0xff, 0x9, 0xffffff00}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r8}]}}, @TCA_CHAIN={0x8, 0xb, 0xb}]}, 0x4d4}}, 0x0) (async, rerun: 64) r9 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x3d, 0x301, 0x70bd28, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) (async, rerun: 64) sendmsg$can_bcm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x4, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x7f, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async, rerun: 64) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r12) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r12, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r14], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 756.319171ms ago: executing program 2 (id=1562): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400125e09000100626f6e64000000001400029c7d4c5b00030000000800150000000000"], 0x44}}, 0x0) 690.545003ms ago: executing program 4 (id=1563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073016200000000009500000000000000a6692aae1a43fa0bf68bbf0c19b1e9020b3ed65b5d9fdfc2ca5fe8966d8b6e8212a5c72a2c32d3e821d446355e043be398137c9733d3925e4280e1224bd05ba6f04f93f5ac29bc54caed1fc7f417b74304197b062f10950ce043bf3bddf4d824304dbe407b281b030f592f85bc23d29dd493b9003386"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r3, 0x0, 0x2, &(0x7f00000007c0)=0x7, 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x100, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87, 0x2}}]}, 0x4c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRES8=r4, @ANYRES8=r4, @ANYRESDEC=r4], 0x30}, 0x1, 0x0, 0x0, 0x44084}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000180)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff}, @generic={0x1, 0x3, 0x6, 0x9dc7, 0x1ff}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xc}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x293}], &(0x7f00000002c0)='GPL\x00', 0x8001, 0x55, &(0x7f0000000400)=""/85, 0x40f00, 0x45, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xf, 0xa, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff], &(0x7f0000000500)=[{0x2, 0x3, 0x5, 0xc}], 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0x0, 0x1000, 0x28, &(0x7f0000000a40)="56bee4f1a6f58735bfe5928268a68e480f04a22dd3a163e9b49011e2adf907d08c04efe37949c15fc5436ce2ee17a8caabbc2ddd64c4b28da056f55bfb1fdb1895a587b4be3c5749a3005ad2b34ea5a421463bdaf2bb8f0c6399a22a42c8be97b1fc131afb9c1ed03146d1646cb310898ae78cfe154b43ee74cad9e6d1e43281e93d8fe4f87b19191bc0bdf97f76cad3d04d7d1b860ed4e1a945c1ea47dc311a86dd573ef157d4e43b8d92bca35e40f15f7e94303323ce5574cf5a76246f49dfda1aa343d9619018e8b1516bf42d48f497902de4cf48d957b6e38ee8a75b1f9a0cfb40fe264d1811e82b5365769a9710f8a21ba33952a5900da3894251fd6cf5f31b8422dec3b2f4c76b1467be11f4cdb173e08d0c8863c153d86ebc18ecbe36db3777ea4b81609fa8dbe3ac250ec8c17878efe5b9277fa3434f3b6d79c411719d6e5adaca225aaaf169d88e976dd9ae93de66283aecb166d2629660b0b6811ffc9472fbb7e11f62efb53fb9697e3144da16a2c087cd07a6c9b0d4d274d9c47c40f79158e06ed2ebffb0a430faa8b416829ea93000fd676d6329cf3e6cc11f595ea1dbde115e881c560a3f3ed462f997e29bcd5593fe72d22740a88997667e4365a0a313d064be1a1865bd411b7785497b323ddfb9e10c0c306b718517faf1b5f6aee68e1197e6eecdcaece0e2c7e7636c019ecb72842c5607d838bdd8c0101f00a14f11fa5d575bd3009bb70e397e03157acc4acc73ad67be1892ea7d17c127a1a8d68cf5a4ca8b98441b46717faa5a3c63004b9dfbc36f9a5e981dbe5441cc073a045f275aa27e74a516b02f56c2b3bb5ace47ec2a5b44e15684f6f5cae4306c77d00c1dc222714c65e4fe063efe91249ec1469d1bcbd3f20198ecb2714ebe49cafa1c0a482ccdea3693c3e91da470386ed5f51d93fc7342f50ca04fd5c149bc0a53676c58460a6dbefc828d1166419f997cce99a16becb5f835820793faab93f6b6c9f2b1cea418f9a5143ca7ef092bf29fb85f135332e5f14c8f264df96e870a16365bd2fa28ccee64f1fbe2cec10274ca6d9de67990348eb533bc13e16e41c3409022466868e39994db1c19b2709d94d28334c8b3cc2b2e77c0275719581eb9bda5ac5c8c961810848617c50c58b8ce8da6d5cefc806f262cc2a29119b6567c622799b50cab9beec40eb85664396f22de3db2cdeaaf21fde768ae9c4cb6ce407dac0a9e1e22b0f5bd4307e99895a44d05dd948183754aba21fcebc574dac89b890dc7fdba74afd6adbdfb7b32c73639afb4438aec701c25a30c88fb8e41de9348a017773deddc1b83a30d2983542722338e541ebf196c031eac380e3162d5129533b0b9035aa2f5b19e0038d7d5c236b73d96f9589854edcc1aed00233001bc4b7f2732ff52e38a214638da647c0d303b1733c23f5e519b2cd0b21b3b2c63de52dbcc2502d09b73cd8996b5aac3090f19d38f951990a98b232b429a5d171141a8a2e7f3e3cb32e8709238aca1948b5b987686b969bd018a959b81087a03069e5d9e3ebcbdc94b5b070e898af585b8f447d4abc50b1484d3ac9dcfc97564dbbe34d89b0928beb0bdb5f6a12d9f62309a8a4920b805dd3b42e03b5bc811393e7ad9fa825f0d1cb96501937c9520b13dc9e726088b6c55d248f36c113c483a013a98d60ee608611533d6d3634aae4a9cacda35ca73bc1e436011796ef25af0ccf82f5151768f0b7e510224ea379f55019758324e7b8df65c3ae164104ff7219fbc52c286c3c742cfe7b1b53791705c9fd6b1681223a54148ef2a711cf92320876198a86f7accad1c4d1eb9e2195cdbc6dfacec7d3712b8c8d0f5d41d90613ebabfd80b845e39328a4ea060d332a4880ab0fa08b63a25c8bc7e7896e0321a289fa292f44980e135ac657b917e4fca7d77d00cfa84b74cf158008ec3226af83649f9856a1a142eefae18afc8b6813913f9ad4268a04fd553ec277edc4dbb86bd1bed3f37a6ac4e1deebfc8f8016721c908cb20afc97edf7c43e527a324954c762d9ff180dc153608449756abc27576b75ddf784ba4f8962a5ffd9c846faf017d8a1958e5d3e9956d1401a319620787fe3dd1d5c4d3d5ebd9c6a04eedea5f1168f18aa4203009ef3ccc0af7dde042162d5a4f70964c7334e46773f439b1c5d34ff0e876c9e04f11825dcb93389b9f4e4b43bbefecc62f9439b03af956c8147b31ed5c125da58192b4ad7a6ff60df466237471fd6e05dcf68e1f56688d60f663a545552f223ab58d0952dec5b07145ae2859dab9c6b689df33d0d8362eacb97c2d5cc9acd81f8787e765258a2479cd2e014563cc14ff33a5d77bd244f16313994a55a150295b841a083c5cbab688ef4f1119b464c6f00f6a4fa8845b4a017c6a2868666a5e6b87472bd74af4b02d191a046b75749c46e82abadbf034257538da517691b81454ccb646e715f33db10e1131171463799dd9c7d1aff53cfee17440c67917cc5723e0f1a53fc733ca830a104f32d8b1adab9d5fc284c076091a287d1868f3267e7c54d54a173e4657845f0f6ffccb1d403c9d6e55e26e44012af58f1a43730c4162553b128ab25fe48e686a7dc9458f61d83277eeef8fdf7f45041606dfc7338432cd1fc676d00ca01fd153027cf7bd4246e0f7d5f87d4fe1a994653689f18229408336fb81ee9219470995430c09b52a0f323f50b85bfaa7b5da0be8c11d6f5172396530261b321724079ca3fa50a90664814dd786b5f39be8a318efb3aca8ad46d24516b52316d999cbf9e2f87460ef16b778a02b660e161b254f64fdf0e08eb174d7d8d38ab8eaa7ae4cd3ffb8f959632a20a36e65f141f837cc2d1f574c0a26ecf6b69078ed3e66033d499199c696d6035c348a666a575fcf803eef23588dc2e1a5a359db6c387e90dfdaf8e03eca77127e3447b4c2b60785dc998954b0f02ad20a83568687a708b2f3cdec1937df164e2f01b3d8a049449fd15b086e66bf6bc86f43f8e76cbfc25b327055505d80f766b187396a0abd66f22143eaf2c09d92576254a18cb5eb81f8e0a9f179de4958d4bce6367b455b2ec33b83a01f665aaba1e7eccb2751089c1bfd805abe8c742e69c785878fa9930e87ace2f82a72e4bcf18ba0b64c6564e097cc71c96d725e37260515efec51c39316f855aba54c80769e9fdec6b68a87e3492795c7ca05dfc2574c53aa187c1bfe40f9a1754fe155dd7d325d00291c7a314849e6e1841d3d1a903b9f3aecc2eebad12ba6b0fcf8311d1d2e347f7f1798717ad3ecb463c09e75ed9c80948d01e17159e2556bb0f493972e59664a3af173c519b7f4aeedce4ec9f1a3ba789385691b49786de5b9715bc007f36ec8e6a2235355ef0334b91b115ccb8bf4046ff086e83f739a637bcfdad4ccb0c9c57fc18e1d75621d0f0733fd3b01ac45c3e68ee0e01113241cfeba419f94e74799955fd4c3984004c82f813f8d2290d67caba7970db221dd478e42bf414e2f3d56932fc965628a29d9b66cb9c4b3c7841d062e0ff845cd55634c97b3e16d218704820599cc285a045e60d05cb2b5ef5839c05d4061ef32e8b3361c77192888726fdc2fa0239be3f4f11f5545d72b55b912f3c4041e4937fc928932640f5fa7f1c251c55cb9b3b4241a10eb0fe996be5a9b8d9632bdc1ded1dd94f272134dc5700b4d78a890bd2ce10d650a57bdb7d1c8cc3b7ceaab9146d64cfbf7f43ac0a7343266d1ec6c59930a07ab50475e1d3c7ed5333e01f2d493de278c46def3026ee5cf70a86f17c71a6b7aa24647ed5301f87d8736c814fa0fec72bff85ecf458403cb4a8d9792d4deff3d53ddd08fce959a1f3adfa47495f449732fefec07fd6689bde86a69f23f22772ea50e3a26f3d568a8615195bc86a6741b9a54ff1126086910d2f1b007d9efbfcf4295f0889e5457024add345c07abfa24c4bb7cfe99a2ba808bc9f95b5f6f8da640ab4be0e0ae0f02196f3e28d07ddc1f6403123762cb0b067757a49ceabb016a04e8698a157596dd14155973b2095fca679161ad8974841025147a7ce556a69ce274b4ca60a07088876876e98a5ea131efbbe7d5f015d1f1e8b6ad33f477275b69381184765fe220f5548bbe97ff4406ffdd6d658d51bcfdeccbaf7cc6c14842e72bbccb8f820373d15119c8fa1d851c6f35dd7546ba4b336ffbfbe1cbefbed9400ec24f72fffd9751b4a9e10b41c3b9afae9dd8833d5d81c25d33f9639928028e404cb793f16bf8ae6f53a966d986f2fd80e307d7bc9ae869f06f0b1ea4b57c4f978f00be6bcb4f9eb3d2c11afd0bbd8a83348470e5eeed621ea1cc9d0c742aa503489f8f701f662722d6ac7d3db71be9ffed99101e04a331e2d4a0b2f956928c1dc8c5ffe6e811348750ea6a401f4d01b8cad6ac9c7918e3aee181cdb768bf9ac443179de1ae456e667669afcd0addb8598ddd52d3104db7288c11cd7e50c1873593132aa927c5b5edd5f66bf10ab18dce48712b672234e5510e3f72bb1954f10fc70424e7ed49941f89705a989edd345a3f0991008e50eb79e2d6f4db2bea26c7f295470f8687af5aa68c28a23bb9d1344882f7a63263683e21027416486f09f70dbb15011391bfc450088d41c0b5496d334e2678c1dba01d871bc3d2542839456d3709cf39221f3204691b0a167474ad66d484c13716dd3546a6a01a3a5f9b5b1303190b0528cc069236c0e67fa319920b4605182d08d0911515cff46b5d292326e06e79c665f5c79e5b462715f1e68b2eeece68f7bb03e58e29d9290f61e3f140682b049ec4f6170ae92dc8db2d7a16c2ddba58613a0e68c1d6d93c734a89043a6e8b61d529bdf6515c8fa99eb4c4996cf6de36b09f1c5a89bfb26c5b0e99f6595de6c24537493fc5c048d18581e553bc5079a8f8135e0e9c6ec701358051e9249fa9028816b962626c34960c1aa60e9ce2aa19006e3e5d8d9b044ffea5f2e2b8bee2dac727b8f4fdb801b81c484d775d9a0dd1ff005d6e4017c9d583a8e00539c3d129eb932db9e5813848eec45d16bab4f15402a91e1a14d059d9e4568237fdd9d4825889cb861651e864d3ea0e39339641778cc88600fff6d0e8e90ee4664a9f387011db77243a7bef56e769dd0d2afd9c0962305564d2bdfffba36488758bec5a9ab7956ed5a7a926e5e699e41875b04e19f100e398e4a8f6a2f28131c3b5514dd9be895de5143e1390575d4a769d4a8c8f05070c92960355e53c2ad28d5f6cddc648e5266c44f300d1ba5cc763cd06f95fda29e52bc09277b1912045296a5a3227ee6679d4774b3cd1deeddadfc67672ba4f403e45742feb8557934f3921c78cd2deb65c1354f88c0e018b743a53e426050fad79c6336f741b0d0e57147b8182fa1a931fe7df9baf68b2b802200ecbc35f7ad70c0f8fda5d6333158b50ab02c378dcb203c5a63c739493b58bcbbaf47f06e6c1c7ec898b6731d4dde11cf4489854084c8dd7088c37909d327c17b47017fa4cb1f9ff3ffd4e447e20ae4a4434ccd62c81635aceeec815701811ef4a10ae91b195cbb47c47c3614582f4f81c8ebb5442be0676cfa48f75460c133c09bb697be18f1a73fbe3337fee818071560cc453f5faceaaeddd2b6ad722b5017b2dd4d4824bcab5961e1d0f329e4e07ccf80a9824d141f015ee5b53de0b36070724b29462fcce3aab5087b01c68f2144d51d848e30c3690a203d9893a1c2dbb2ffffe3c71fa10e5d30665e71d9a81cd973aa66b3d58ec3e877c41fa9df3611464f4297a0d79a1bb56a69de4e804a127c0b8cd4b75333a6f7bc470697d", &(0x7f0000000600)=""/40, 0x9, 0x0, 0xf, 0xa5, &(0x7f0000000640)="9060ab8c7139859844899ccf462e9e", &(0x7f0000000680)="8b44847a21553eb6011a985566bbceeed261bb397e38b6da869a038d796bde8077463c08dc3669ff3688cf7f4a9b782b27c7ac6cf34f0ec81e92071a7c1ce10664ac974c53bb288e5e06481dc8be066c9f8d78832a725edc422c7a5759b354eeea391ae8cb8eab6ef31626844b5ea168ecd8cecf5f9841eed6c88c69f020715ebc0303a917b6c3b81b11fb99076925990b914dd40fcfec5954fe701dc0e2e379bee1de0d67", 0x5, 0x0, 0x4}, 0x50) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000002000)={0x1, 'batadv_slave_1\x00'}, 0x18) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x3c}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x11, 0x3, 0x0) 658.768918ms ago: executing program 0 (id=1564): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002280)={'vlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="3303120081fd140000007ef52f555f2a0c09000000fd88a800f788a83baa99000f8588a832f4", 0x26, 0x24000841, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0xcf}, 0x14) 568.888968ms ago: executing program 2 (id=1565): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000000000008000900000000000600020001e0000008000a0000000000080017"], 0x3c}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffe, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYRES64=0x0], 0x3bc}, 0x1, 0x0, 0x0, 0x4080}, 0x10000080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000208ab01dad5afeaf0000000000000000000d000300686173683a6e6574000000040d000400000000000900020073797a31000000000c000780080013400000e5d73ffddb6b17e5050005000200000005000100060000002cdc3d4b2abe8527da14f28f64c9028ef4e6c270b94fe1"], 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x30, r7, 0x1, 0x3, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) 492.844896ms ago: executing program 2 (id=1566): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) (async, rerun: 64) r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl(r0, 0x8b21, &(0x7f0000000040)) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@remote, @default, @null, @bcast, @bcast, @null, @remote, @netrom]}, &(0x7f00000000c0)=0x48) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000100)=0x1) 460.48075ms ago: executing program 1 (id=1567): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x24004801) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 417.121416ms ago: executing program 4 (id=1568): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd28, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000844) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 339.338003ms ago: executing program 0 (id=1569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000100)={0x1, 0x0, 0xb6, 0x1, 0xc, 0x619}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x64, 0x0, 0x1, 0xfffffffa, 0x10000}, 0x28) r7 = socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a00"/27], 0x2c}}, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[], 0x44}}, 0x0) close(0x3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x4000030) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r9, 0x11, 0x0, 0xffffffff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r1, 0x300, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r11, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000540)={'erspan0\x00', r12, 0x40, 0x20, 0x6, 0x57, {{0x5, 0x4, 0x2, 0x12, 0x14, 0x67, 0x0, 0x40, 0x29, 0x0, @multicast1, @remote}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000180)={r2, 0x1, 0x800, 0x8}) 284.849958ms ago: executing program 2 (id=1570): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r0, 0xc0189436, 0x1ffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000015000100000000000000000000000000c427370d27a817292b995d9e0e66ba503a8a78397aacda4b6a9f60f7728772c1ca6f3a21f7158ab55828f2b81d73607f707f265e202d798c52fb6af85af4a383e5bf15951fa7f1d916de7e567fd9d1d51926e64acb5382bea9b66b3e30c2cc62547e9b21f22ed8e52246c4a06f3b1f3e9d453b2ba8cad155cce11ed344907ceb66d85ea5bbcab240902b444568f00823d29a4e6896d422383a0c58f1b6cbd51f885adac1f4ad0693e48939df4195627bed64e8b1e60872", @ANYRES32=r3, @ANYBLOB="08000100e0000001"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES64=r4], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x840) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES64=r4], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x840) 236.937792ms ago: executing program 1 (id=1571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) (async, rerun: 32) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (rerun: 32) write$tcp_mem(r2, &(0x7f0000000040)={0xfffffffffffffffe, 0x20, 0x4, 0x20, 0x3}, 0x48) (async) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) 235.765552ms ago: executing program 4 (id=1572): socket(0x27, 0x2, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r1, r0, 0x7}, 0x10) socket(0x27, 0x2, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r1, r0, 0x7}, 0x10) (async) 157.258209ms ago: executing program 4 (id=1573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x1c}}, 0x0) 95.518686ms ago: executing program 4 (id=1574): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) connect$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x14, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000300)=0x11, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x44, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd21}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe8}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x24000014) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000ea65766811590800450000300000000000019078ac1e0001ac1414aa030190781200183f250c00020000000000010004e00000017f000001"], 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket(0x840000000002, 0x3, 0xff) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 1.082693ms ago: executing program 3 (id=1575): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0xffffffff}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 0s ago: executing program 0 (id=1576): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60d2004000343a00fe800000000000000000000000000000fe8000000000000000000000000000aa04009078000000006031c94400002b0000000000000000000000000000000000fe8000000000000000000000010000bbd4a3fb00"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r11, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0x7, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r8, &(0x7f0000000240)="bad330752181090000316f3a277f953286ddd1030000004000000025e4a40e81692d09dc6b6b0ef1", 0x28, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r7, 0x1, 0xda, 0x6, @remote}, 0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r14, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000000580)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003880)={0x27a0, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x81f}, @nested={0x9c, 0x1, 0x0, 0x1, [@typed={0x95, 0x6, 0x0, 0x0, @str='\x80\nu@)\x83\xab\xdb*\xf5\x05W\xe1\x18\xf4\"\x85\xbe\xf0:\xa2nE4\x9f\x1a\xf9\x91\x14\xd0\xca\x98\x8f\rWl$\x87\x8dG\xda\x93UI^\xe4ql\xd2\x1c\x863\xd2L\xcd\xeaPi\xf3i\xb8p\xcdY\x85\xe96\xc1\x19\x9e\x87\x8c\x05\xf4\x1d\xf0\xf0W\x10\x01\xc4\xcb\x10e\xfawgv\x9cO\x19\xe9\xa7\xb4n%al\xc7\xcaf\n\xa7\xe8\xc4R\x13G\xb9\a\xe0\b9\xe3}G>Fp\xf2\xbb\xf6\x01\b\xdd;\x89\xc9\xe5&\xc2\xad\a<\xdf\xa0\xd6\xc2\x8f\xac\xeb\xc9>M\xac'}]}, @typed={0x8, 0x136, 0x0, 0x0, @uid=r15}, @nested={0x25fe, 0xb, 0x0, 0x1, [@generic="70d0112d49b40ecd05590c363a6e63f4a04870a39878abbaf1231fde930885e3cd7c8947ca2ab41e93fc0c3d41eab05a1e5875f678215fcd8a000506c7501bcee4f4fa835fa26167ed83a473335dcd1904622ae110db0e27333c834e4a850b2642347fbc64e299db4074fbcab5774ca21312ace93bc05d1cc1641349cc7dbf579ad8ec7b36a3f26e488e0b5391490ad9d042afe9a53f3087982bec4d69f7d50d95b1379f286f7c2715a8", @nested={0x11fc, 0xd4, 0x0, 0x1, [@nested={0x11f8, 0x157, 0x0, 0x1, [@generic="8568c29247f0a53f1b3797006c566ce05a487e8de6cfdff1801ff03a0496d9a96c5656b00974bc35c6ff5c317b1d90ce906ced4744f4", @generic="0f05672d2d627f2cf456565ce960374c337296b8d8626ad22ed76dbc196efb39c38ac2cf3ccf753ef67f913bd39d884ce29bde79058eda644befefbf2eb23c3e3235e58716b58cce21ae71433ab2ab76af90edbbf4ff64c38cce9cd81b85d46e0e2ff815dd11470a73bb9507bac10c14eb44770d550887e20ed838b7cbbff91dd9aa4e20f43064175ce89e7a977df9858549691dbbb6aacb3d215e9a772135ac8d849929d9130b463a755a66683de555d8c9a4c527", @typed={0x4, 0xa}, @generic="144ab960b5e69917ad1d3e68a49b22311ab61baef481736336b1ab49", @nested={0x4, 0x2d}, @nested={0x4, 0x115}, @typed={0x1004, 0x7, 0x0, 0x0, @binary="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"}, @generic="1cc59f2bdd9a5645c6a0e641c4b0161b2134155539adb22acf3d9ed3d3725cfa486a71ef1aa35437968cf05642692ac7242bdb2fdc0463e70f2bedd3a38ee85616b036232b477c334c24748003965d6b62ea6dc9638f97b02036fafe0f90eb71ec72630d0aabfbaf1f0c9e0fcb76a067d6999f8558e70ccadd539bda39a751b4ab359f4b8891eae7ee2903d91e02cd89827ecddee5086df1efa4acfc2220a6947f7867f070c3a898cf2b78a6a43ace19e0ae9da9737b37986179db20df6c5827de4978b5907989808e503f2d47d13e56aba401459670381a7c", @nested={0x4, 0x5}]}]}, @nested={0x1018, 0x11, 0x0, 0x1, [@typed={0x4, 0xd9}, @typed={0xc, 0x6c, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0xea}, @generic="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"]}, @typed={0x8, 0x40, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="f105345291158c92e2ed41027b8929971327adfd845a53eff3ae83c929ee53410ee463ce365eeccee9a309963f29391efdfce0592e834551c4ac224446b04b5d4d7f434ed7afd0c3642123d051a87363bf56d5ed34d7930d1f5c2c4dd1c13307359f88d659dcbb1ed259f7977f4e17b9257814af960c66daf08eb52f5692ec99a0572d470e9e826c2f", @typed={0x8, 0x134, 0x0, 0x0, @u32=0x1}, @typed={0xab, 0x7d, 0x0, 0x0, @binary="7f4808bee9b652ce42c90220b858327d5c43cc0e4cce1b3d4b8815dd26a2e4755df7d5f74a296fd0a16d0a9abafb200afafefb2e86c901a99d963d031aad6f044a46eeccbaa3a259fb557de9216a6b7e34a63958c1bd26273b8b90a345c6a20ab502b6c5c143651d937f2f0d5cd1a2258b649eee2f095385a4e91bc940931ee956f6f629e2c9a3c08fd8ff60a408b90a775a9e7a6d405cfd33c43960328a3b5f7dcc6876d6709c"}, @generic="e3ba45b7bf3d73b94c34836b2cbafdde4b05e3695aad934a5289d3fb5a2efa3ab418be10d94bb463a522d90edfc984f8a50c5511957563190d8b87e8bb7145b61b0622b48883f7de7be8504a380a22ad88ffebcc55a5299231a146316e2bda2f9952616373bc567119bc73744876bce46635352e0d19f62f16b8a97b746a2ab6ac89ee9548ec816e0dd022e19d190422ce3dd0e9d970e582fc3be15036f2b918", @generic="e74234a46be93dcc431137d34113154c45b503529bea941d64510e72cf1c1771e2cddcde650eae815879435e37e9930d48e9de44e68cf9374a0fe8a3438c1502343cbe5616cbb405f6c570c06373ad56e061c08e16bcf2f3e45b7d136b326d5b6e6a09b785e049ec7b2f76cf1691e8ee9849d4ca059c397585e7b6e494f272b2e0edb501823e010d9d2548813c48987b8c463838824c482b6f4d0803a2f6a2ecae3f", @generic="deba5371e8ffa1ead4661784b7e9e95937d9aecc2e6cbca3039b4a718c3854ba429c0c209ce07e856dded5d8002d3837b18dce93032f5ee26539db37bd4f77744472b30bf4968d750adf4ae4c41980d01fa46dd9d10656c45703b635a3e76fee9df11e2e23a4914715ddcb4194eca5a783b200f0dae82558ec28a5eaf0011d5bbeb87f954532ef2c7390719012c44f20b728df03002f3415b4917469b7c52608d5de50ef6214fe5958f38e0b4417640de73597ce88"]}, @generic="fc1aba814c3de42d7f74ffc2da0e3c235e2530cbfaebfedd6cab3cd2a1b9b67353373703d45922de5fa0b0f678b3dbc8a9d71797ca26fe91e59c86ed89f65210d62ac1a578de4a7bf0a8ae3b8dde551fb817b6ef2b527b501b6bbc0c9f5d495209affff2a0efc50839db99bfc98b5148308693778bc0848928c1fe6913fa2349b58371b21c971d8093d5788f32825ff0df5a28338d5ba78c294a17bd71ca7ab83fb99ac5ead6ed3c573945521a4700a921e7bd7ed648c9e46f1bb518bfaa4d8c19a646723717312dc70c02175562a9bf7fa908f466d861a3530fa4e5e19ea226bd"]}, 0x27a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0x96, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x60, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x7, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c692056"}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): timeout [ 89.719299][ T5831] team0: Port device team_slave_0 added [ 89.726100][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.733202][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.763214][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.801982][ T5831] team0: Port device team_slave_1 added [ 89.808847][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.816021][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.842457][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.855431][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.862551][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.889352][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.916652][ T5834] team0: Port device team_slave_0 added [ 89.942153][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.949458][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.975811][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.997574][ T5834] team0: Port device team_slave_1 added [ 90.016892][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.024859][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.051803][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.096630][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.103942][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.131103][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.224029][ T5828] hsr_slave_0: entered promiscuous mode [ 90.230937][ T5828] hsr_slave_1: entered promiscuous mode [ 90.237935][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 90.245730][ T5828] Cannot create hsr debugfs directory [ 90.264989][ T5827] hsr_slave_0: entered promiscuous mode [ 90.271970][ T5827] hsr_slave_1: entered promiscuous mode [ 90.279467][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 90.287152][ T5827] Cannot create hsr debugfs directory [ 90.300405][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.308288][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.337583][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.380548][ T5831] hsr_slave_0: entered promiscuous mode [ 90.387607][ T5831] hsr_slave_1: entered promiscuous mode [ 90.394659][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 90.400688][ T5831] Cannot create hsr debugfs directory [ 90.414929][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.430392][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.460012][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.698434][ T5834] hsr_slave_0: entered promiscuous mode [ 90.705846][ T5834] hsr_slave_1: entered promiscuous mode [ 90.712372][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 90.719493][ T5834] Cannot create hsr debugfs directory [ 91.151631][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.168860][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.181397][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.194483][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.270231][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.295744][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.327793][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.342630][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.447584][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.459595][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.489326][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.516031][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.617237][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.626621][ T5825] Bluetooth: hci0: command tx timeout [ 91.633768][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.648137][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.659111][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.671633][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.714241][ T5825] Bluetooth: hci2: command tx timeout [ 91.719137][ T5145] Bluetooth: hci3: command tx timeout [ 91.722573][ T5840] Bluetooth: hci1: command tx timeout [ 91.784350][ T5840] Bluetooth: hci4: command tx timeout [ 91.800220][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.832708][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.841088][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.858438][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.869599][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.891487][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.898834][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.961031][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.968227][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.995240][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.061148][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.111359][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.136883][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.145290][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.175149][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.209377][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.217321][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.252631][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.260174][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.297692][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.305497][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.350188][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.498406][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.529795][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.607367][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.664786][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.672934][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.688264][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.695616][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.715891][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.723716][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.740028][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.779526][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.788271][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.117494][ T5823] veth0_vlan: entered promiscuous mode [ 93.202187][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.288995][ T5823] veth1_vlan: entered promiscuous mode [ 93.381072][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.439293][ T5823] veth0_macvtap: entered promiscuous mode [ 93.487630][ T5823] veth1_macvtap: entered promiscuous mode [ 93.558267][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.619990][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.631601][ T5831] veth0_vlan: entered promiscuous mode [ 93.664718][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.697546][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.707099][ T5840] Bluetooth: hci0: command tx timeout [ 93.745625][ T3014] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.768867][ T5831] veth1_vlan: entered promiscuous mode [ 93.781713][ T3014] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.792677][ T5840] Bluetooth: hci2: command tx timeout [ 93.798975][ T5825] Bluetooth: hci1: command tx timeout [ 93.799017][ T5825] Bluetooth: hci3: command tx timeout [ 93.813929][ T3014] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.863707][ T5840] Bluetooth: hci4: command tx timeout [ 93.927878][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.028664][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.044099][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.068951][ T5834] veth0_vlan: entered promiscuous mode [ 94.095628][ T5834] veth1_vlan: entered promiscuous mode [ 94.132641][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.151829][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.166600][ T5831] veth0_macvtap: entered promiscuous mode [ 94.195944][ T5828] veth0_vlan: entered promiscuous mode [ 94.215038][ T5831] veth1_macvtap: entered promiscuous mode [ 94.242628][ T5828] veth1_vlan: entered promiscuous mode [ 94.288585][ T5834] veth0_macvtap: entered promiscuous mode [ 94.295186][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.312616][ T5827] veth0_vlan: entered promiscuous mode [ 94.336262][ T5834] veth1_macvtap: entered promiscuous mode [ 94.366106][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.379181][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.394310][ T5827] veth1_vlan: entered promiscuous mode [ 94.412340][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.472001][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.526266][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.535715][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.558401][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.592877][ T5827] veth0_macvtap: entered promiscuous mode [ 94.636448][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.657029][ T5827] veth1_macvtap: entered promiscuous mode [ 94.682582][ T5828] veth0_macvtap: entered promiscuous mode [ 94.728169][ T5828] veth1_macvtap: entered promiscuous mode [ 94.768068][ T144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.782898][ T144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.809952][ T159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.841587][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.869926][ T159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.901056][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.924506][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.940544][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.968205][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.991784][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.011560][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.042193][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.085026][ T1098] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.095566][ T1098] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.129041][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.139441][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.178544][ T1098] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.202074][ T1098] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.258634][ T1098] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.270427][ T1098] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.343545][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.351999][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.541812][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.568481][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.648429][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.663715][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.683495][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.719243][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.784154][ T5840] Bluetooth: hci0: command tx timeout [ 95.807357][ T5965] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11'. [ 95.838425][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.864554][ T5840] Bluetooth: hci2: command tx timeout [ 95.870029][ T5840] Bluetooth: hci3: command tx timeout [ 95.874229][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.877814][ T5145] Bluetooth: hci1: command tx timeout [ 95.902097][ T5968] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11'. [ 95.944319][ T5840] Bluetooth: hci4: command tx timeout [ 95.974250][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.041798][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.419074][ T5989] tipc: Enabling of bearer rejected, failed to enable media [ 96.494313][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 96.513514][ T5985] tipc: Started in network mode [ 96.523714][ T5985] tipc: Node identity 16604414181e, cluster identity 4711 [ 96.531674][ T5985] tipc: Enabled bearer , priority 0 [ 96.641437][ T5997] Zero length message leads to an empty skb [ 96.658650][ T5989] macvtap1: entered promiscuous mode [ 96.661888][ T5999] netlink: 'syz.2.16': attribute type 1 has an invalid length. [ 96.687126][ T5989] vlan0: entered promiscuous mode [ 96.695873][ T5989] macvtap1: entered allmulticast mode [ 96.704638][ T6000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.714584][ T5989] vlan0: entered allmulticast mode [ 96.721685][ T5989] veth0_vlan: entered allmulticast mode [ 96.745737][ T6005] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.764154][ T6005] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 96.826502][ T5991] syzkaller0: entered promiscuous mode [ 96.832147][ T5991] syzkaller0: entered allmulticast mode [ 96.838933][ T5991] tipc: Resetting bearer [ 96.958938][ T5985] netlink: 'syz.4.5': attribute type 5 has an invalid length. [ 96.969279][ T6011] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18'. [ 97.002284][ T6013] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.098680][ T6018] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.19'. [ 97.102589][ T6009] syz_tun: entered allmulticast mode [ 97.116361][ T6018] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.19'. [ 97.228548][ T5997] dvmrp8: entered allmulticast mode [ 97.271989][ T6022] sctp: [Deprecated]: syz.0.20 (pid 6022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.271989][ T6022] Use struct sctp_sack_info instead [ 97.292560][ T5982] tipc: Resetting bearer [ 97.528761][ T6033] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.551599][ T10] cfg80211: failed to load regulatory.db [ 98.885027][ T5982] tipc: Disabling bearer [ 98.918577][ T5996] syz_tun: left allmulticast mode [ 98.939166][ T5945] tipc: Node number set to 243155988 [ 99.831948][ T6081] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 99.903729][ T6087] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 99.971180][ T6081] bond1: (slave lo): Enslaving as an active interface with an up link [ 100.059177][ T6096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.063294][ T6081] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 100.674420][ T6111] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 100.696548][ T6114] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 100.733197][ T6111] syz_tun: entered allmulticast mode [ 100.752038][ T6110] syz_tun: left allmulticast mode [ 100.845997][ T6118] syz.0.42 uses obsolete (PF_INET,SOCK_PACKET) [ 101.005583][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 101.018712][ T6116] veth3: entered allmulticast mode [ 101.067184][ T6121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.44'. [ 101.301012][ T6146] netlink: 'syz.4.51': attribute type 8 has an invalid length. [ 101.329280][ T6150] netlink: 'syz.4.51': attribute type 8 has an invalid length. [ 101.411711][ T6154] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 101.572350][ T6163] netlink: 10 bytes leftover after parsing attributes in process `syz.2.54'. [ 101.842901][ T6186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.58'. [ 101.875019][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.58'. [ 101.924759][ T6188] syzkaller0: entered promiscuous mode [ 101.956878][ T6188] syzkaller0: entered allmulticast mode [ 102.071225][ T6198] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20004 [ 102.407537][ T6215] netlink: 32 bytes leftover after parsing attributes in process `syz.1.67'. [ 102.451374][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 102.478207][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.645413][ T6221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.777060][ T6228] netlink: 'syz.2.72': attribute type 4 has an invalid length. [ 102.877996][ T6234] syzkaller1: entered promiscuous mode [ 102.884545][ T6234] syzkaller1: entered allmulticast mode [ 104.202470][ T6282] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 104.216626][ T6285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.84'. [ 104.555013][ T6309] netlink: 76 bytes leftover after parsing attributes in process `syz.4.87'. [ 104.623753][ T6306] syzkaller0: entered promiscuous mode [ 104.629326][ T6306] syzkaller0: entered allmulticast mode [ 104.669201][ T6314] netlink: 104 bytes leftover after parsing attributes in process `syz.1.89'. [ 104.821081][ T6321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.138999][ T6330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.220109][ T159] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.253539][ T159] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.262336][ T159] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.321597][ T35] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.858173][ T6358] bond2 (unregistering): Released all slaves [ 105.889972][ T6370] netlink: 'syz.2.102': attribute type 1 has an invalid length. [ 106.058897][ T6370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.077465][ T6371] warning: `syz.0.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.129280][ T6370] netlink: 'syz.2.102': attribute type 2 has an invalid length. [ 106.153974][ T6370] __nla_validate_parse: 6 callbacks suppressed [ 106.153995][ T6370] netlink: 100 bytes leftover after parsing attributes in process `syz.2.102'. [ 106.474923][ T6384] netlink: 108 bytes leftover after parsing attributes in process `syz.0.106'. [ 106.492405][ T6387] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 106.520197][ T6387] syz_tun: entered allmulticast mode [ 106.590021][ T6387] dvmrp8: entered allmulticast mode [ 106.632051][ T6382] syz_tun: left allmulticast mode [ 106.845960][ T6402] virt_wifi0 speed is unknown, defaulting to 1000 [ 106.855448][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.112'. [ 106.874419][ T6402] virt_wifi0 speed is unknown, defaulting to 1000 [ 106.914333][ T6402] virt_wifi0 speed is unknown, defaulting to 1000 [ 106.957640][ T6402] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.002649][ T6402] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 107.152189][ T6402] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.181202][ T6402] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.208697][ T6411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.116'. [ 107.224772][ T6402] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.253719][ T6402] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.275344][ T6402] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.369520][ T6417] netlink: 'syz.2.116': attribute type 11 has an invalid length. [ 107.695833][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.122'. [ 107.734819][ T6432] netlink: 'syz.3.123': attribute type 1 has an invalid length. [ 107.758556][ T6432] ipvlan2: entered allmulticast mode [ 107.766116][ T6432] veth0_vlan: entered allmulticast mode [ 107.892018][ T6437] syz.1.125: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 107.908262][ T6437] CPU: 0 UID: 0 PID: 6437 Comm: syz.1.125 Not tainted syzkaller #0 PREEMPT(full) [ 107.908292][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.908315][ T6437] Call Trace: [ 107.908324][ T6437] [ 107.908333][ T6437] dump_stack_lvl+0xe8/0x150 [ 107.908376][ T6437] warn_alloc+0x249/0x340 [ 107.908404][ T6437] ? stack_trace_save+0xa9/0x100 [ 107.908433][ T6437] ? __pfx_warn_alloc+0x10/0x10 [ 107.908466][ T6437] ? kasan_save_track+0x4f/0x80 [ 107.908491][ T6437] ? kasan_save_track+0x3e/0x80 [ 107.908512][ T6437] ? __kasan_kmalloc+0x93/0xb0 [ 107.908534][ T6437] ? __kmalloc_cache_noprof+0x31c/0x660 [ 107.908558][ T6437] ? xskq_create+0x56/0x170 [ 107.908578][ T6437] ? xsk_setsockopt+0x54c/0x990 [ 107.908609][ T6437] ? do_sock_setsockopt+0x17c/0x1b0 [ 107.908633][ T6437] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 107.908655][ T6437] ? do_syscall_64+0x14d/0xf80 [ 107.908682][ T6437] __vmalloc_node_range_noprof+0x132/0x1730 [ 107.908745][ T6437] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.908778][ T6437] ? __kasan_kmalloc+0x93/0xb0 [ 107.908809][ T6437] vmalloc_user_noprof+0xad/0xe0 [ 107.908834][ T6437] ? xskq_create+0xbf/0x170 [ 107.908855][ T6437] xskq_create+0xbf/0x170 [ 107.908879][ T6437] xsk_init_queue+0x8a/0xe0 [ 107.908924][ T6437] xsk_setsockopt+0x54c/0x990 [ 107.908960][ T6437] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.908994][ T6437] ? __pfx_aa_sk_perm+0x10/0x10 [ 107.909031][ T6437] ? aa_sock_opt_perm+0xff/0x1a0 [ 107.909068][ T6437] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 107.909094][ T6437] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.909129][ T6437] do_sock_setsockopt+0x17c/0x1b0 [ 107.909158][ T6437] __x64_sys_setsockopt+0x13d/0x1b0 [ 107.909189][ T6437] do_syscall_64+0x14d/0xf80 [ 107.909212][ T6437] ? trace_irq_disable+0x3b/0x150 [ 107.909244][ T6437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.909266][ T6437] ? clear_bhb_loop+0x40/0x90 [ 107.909294][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.909324][ T6437] RIP: 0033:0x7f0401b9c799 [ 107.909351][ T6437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.909370][ T6437] RSP: 002b:00007f04029e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.909393][ T6437] RAX: ffffffffffffffda RBX: 00007f0401e15fa0 RCX: 00007f0401b9c799 [ 107.909409][ T6437] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 107.909422][ T6437] RBP: 00007f0401c32c99 R08: 0000000000000004 R09: 0000000000000000 [ 107.909435][ T6437] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.909449][ T6437] R13: 00007f0401e16038 R14: 00007f0401e15fa0 R15: 00007ffc6464d6c8 [ 107.909484][ T6437] [ 107.910091][ T6437] Mem-Info: [ 108.028414][ T6411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.213582][ T6437] active_anon:5728 inactive_anon:0 isolated_anon:0 [ 108.213582][ T6437] active_file:2564 inactive_file:39933 isolated_file:0 [ 108.213582][ T6437] unevictable:768 dirty:402 writeback:0 [ 108.213582][ T6437] slab_reclaimable:10511 slab_unreclaimable:94574 [ 108.213582][ T6437] mapped:29147 shmem:1409 pagetables:1341 [ 108.213582][ T6437] sec_pagetables:0 bounce:0 [ 108.213582][ T6437] kernel_misc_reclaimable:0 [ 108.213582][ T6437] free:1332541 free_pcp:15704 free_cma:0 [ 108.351071][ T6437] Node 0 active_anon:23212kB inactive_anon:0kB active_file:10256kB inactive_file:159536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117088kB dirty:1608kB writeback:0kB shmem:4500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12068kB pagetables:5216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.414909][ T6437] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.523524][ T6437] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.614940][ T6437] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 108.615891][ T6451] netlink: 220 bytes leftover after parsing attributes in process `syz.0.127'. [ 108.622258][ T6437] Node 0 DMA32 free:1372136kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26352kB inactive_anon:0kB active_file:10256kB inactive_file:159536kB unevictable:1536kB writepending:1608kB zspages:0kB present:3129332kB managed:2552712kB mlocked:0kB bounce:0kB free_pcp:54340kB local_pcp:22844kB free_cma:0kB [ 108.670079][ T6437] lowmem_reserve[]: 0 0 0 0 0 [ 108.675639][ T6437] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.707836][ T6437] lowmem_reserve[]: 0 0 0 0 0 [ 108.712645][ T6437] Node 1 Normal free:3946908kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 108.758878][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.767759][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.795148][ T6437] lowmem_reserve[]: 0 0 0 0 0 [ 108.827558][ T6437] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 108.862800][ T6437] Node 0 DMA32: 2676*4kB (UM) 850*8kB (UME) 299*16kB (UM) 93*32kB (UM) 163*64kB [ 108.873913][ T6447] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 108.909619][ T6437] (UME) 154*128kB (UME) 129*256kB (UME) 76*512kB (UM) 56*1024kB (UME) 25*2048kB (UM) 277*4096kB (UM) = 1370480kB [ 108.970447][ T6437] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 108.982819][ T6437] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 5*32kB (UM) 6*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3946960kB [ 109.000468][ T6437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.012031][ T6437] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.021917][ T6437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.029393][ T6454] bond2: option fail_over_mac: invalid value (16) [ 109.032020][ T6437] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.048000][ T6437] 46759 total pagecache pages [ 109.052737][ T6437] 0 pages in swap cache [ 109.057280][ T6437] Free swap = 124996kB [ 109.061785][ T6437] Total swap = 124996kB [ 109.071003][ T6437] 2097051 pages RAM [ 109.075540][ T6437] 0 pages HighMem/MovableOnly [ 109.080304][ T6437] 427038 pages reserved [ 109.084698][ T6437] 0 pages cma reserved [ 109.096921][ T6454] bond2 (unregistering): Released all slaves [ 109.221173][ T6463] x_tables: duplicate underflow at hook 3 [ 109.228958][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 109.444632][ T6469] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.482006][ T6470] netlink: 40 bytes leftover after parsing attributes in process `syz.2.132'. [ 109.509651][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 109.554891][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 109.574874][ T6473] netlink: 'syz.1.133': attribute type 12 has an invalid length. [ 109.603717][ T6473] netlink: 'syz.1.133': attribute type 11 has an invalid length. [ 109.986339][ T6503] netlink: 'syz.3.141': attribute type 1 has an invalid length. [ 110.093763][ T6497] virt_wifi0 speed is unknown, defaulting to 1000 [ 110.660771][ T6537] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 110.759285][ T6537] bond2: entered promiscuous mode [ 110.793009][ T6537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.008327][ T6536] bond2: (slave bridge1): making interface the new active one [ 111.017050][ T6536] bridge1: entered promiscuous mode [ 111.029758][ T6536] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 111.259265][ T6565] openvswitch: netlink: IPv4 tun info is not correct [ 111.282737][ T6563] bond0: Unable to set down delay as MII monitoring is disabled [ 111.294542][ T6565] __nla_validate_parse: 3 callbacks suppressed [ 111.294563][ T6565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.157'. [ 111.326835][ T6568] netlink: 48 bytes leftover after parsing attributes in process `syz.4.158'. [ 111.965183][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 111.977982][ T6603] netlink: 'syz.0.164': attribute type 2 has an invalid length. [ 112.677356][ T6627] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 112.726555][ T6627] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 112.739774][ T6627] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 112.753746][ T6627] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 112.764390][ T6627] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 112.776704][ T6627] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 112.795428][ T6627] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 112.805798][ T6627] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 112.817331][ T6627] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 112.828622][ T6627] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 115.531267][ T6644] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 115.581756][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 115.726145][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'. [ 115.749913][ T6644] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.788252][ T6649] bond2: (slave veth0_to_bond): making interface the new active one [ 115.817806][ T6649] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 116.096212][ T6674] netlink: 13 bytes leftover after parsing attributes in process `syz.1.185'. [ 116.269229][ T6681] bridge_slave_0: left allmulticast mode [ 116.289186][ T6681] bridge_slave_0: left promiscuous mode [ 116.298430][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.316809][ T6685] openvswitch: netlink: IP tunnel dst address not specified [ 116.355908][ T6688] xt_TCPMSS: Only works on TCP SYN packets [ 116.378388][ T6681] bridge_slave_1: left allmulticast mode [ 116.384996][ T6681] bridge_slave_1: left promiscuous mode [ 116.391329][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.430574][ T6681] bond0: (slave bond_slave_0): Releasing backup interface [ 116.455161][ T6681] bond0: (slave bond_slave_1): Releasing backup interface [ 116.462157][ T6693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.186'. [ 116.478375][ T6681] team0: Port device team_slave_0 removed [ 116.491435][ T6681] team0: Port device team_slave_1 removed [ 116.498806][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.507156][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.516545][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.524393][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.535771][ T6681] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.578858][ T6688] netlink: 766 bytes leftover after parsing attributes in process `syz.3.188'. [ 116.892502][ T6706] netlink: 'syz.1.194': attribute type 1 has an invalid length. [ 116.943140][ T6706] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 117.019514][ T6722] netlink: 'syz.3.196': attribute type 5 has an invalid length. [ 117.303056][ T6743] Cannot find del_set index 0 as target [ 117.341102][ T6742] nft_compat: unsupported protocol 1 [ 117.617581][ T6756] netlink: zone id is out of range [ 117.636560][ T6756] netlink: zone id is out of range [ 117.652480][ T6756] netlink: zone id is out of range [ 117.681325][ T6756] netlink: zone id is out of range [ 117.695291][ T6761] netlink: 68 bytes leftover after parsing attributes in process `syz.2.208'. [ 117.706142][ T6756] netlink: zone id is out of range [ 117.712912][ T6755] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 117.739220][ T6756] netlink: zone id is out of range [ 117.819410][ T6756] netlink: zone id is out of range [ 117.865699][ T6756] netlink: zone id is out of range [ 117.955582][ T6775] xt_TCPMSS: Only works on TCP SYN packets [ 118.138284][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 118.190695][ T6787] netlink: 'syz.2.213': attribute type 10 has an invalid length. [ 118.338105][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 118.356908][ T6795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.215'. [ 118.875889][ T6819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.219'. [ 119.092010][ T6824] netlink: 56 bytes leftover after parsing attributes in process `syz.1.223'. [ 119.254962][ T6828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 119.373842][ T6831] nbd0: detected capacity change from 0 to 63 [ 119.384667][ T5145] Bluetooth: hci4: command tx timeout [ 119.390744][ T5840] block nbd0: Receive control failed (result -32) [ 119.404727][ T6731] block nbd0: Dead connection, failed to find a fallback [ 119.587333][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'. [ 119.802425][ T6850] netlink: 'syz.4.234': attribute type 4 has an invalid length. [ 120.007758][ T6858] sctp: [Deprecated]: syz.4.235 (pid 6858) Use of int in maxseg socket option. [ 120.007758][ T6858] Use struct sctp_assoc_value instead [ 120.272023][ T6868] netlink: 'syz.0.238': attribute type 11 has an invalid length. [ 120.597184][ T6866] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 120.724474][ T50] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.767947][ T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.793920][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.803058][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.297263][ T6896] syzkaller0: entered promiscuous mode [ 121.302813][ T6896] syzkaller0: entered allmulticast mode [ 121.449684][ T6905] syzkaller0: entered promiscuous mode [ 121.486723][ T6905] syzkaller0: entered allmulticast mode [ 121.975922][ T6933] __nla_validate_parse: 11 callbacks suppressed [ 121.975943][ T6933] netlink: 27 bytes leftover after parsing attributes in process `syz.1.256'. [ 122.091278][ T6941] netlink: 36 bytes leftover after parsing attributes in process `syz.2.258'. [ 122.136193][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 122.566589][ T6964] netlink: 76 bytes leftover after parsing attributes in process `syz.3.264'. [ 122.605959][ T6964] syzkaller0: entered promiscuous mode [ 122.611714][ T6964] syzkaller0: entered allmulticast mode [ 122.692836][ T6969] tap0: tun_chr_ioctl cmd 1074025676 [ 122.698502][ T6969] tap0: owner set to 0 [ 122.704460][ T6969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'. [ 122.805589][ T6969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.267'. [ 123.115492][ T6981] team0: Cannot enslave team device to itself [ 123.178952][ T6992] Bluetooth: MGMT ver 1.23 [ 123.188205][ T6992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.274'. [ 123.211388][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 123.233557][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 123.634740][ T7008] syzkaller0: entered promiscuous mode [ 123.654947][ T7008] syzkaller0: entered allmulticast mode [ 123.976997][ T7023] net_ratelimit: 188 callbacks suppressed [ 123.977021][ T7023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.049907][ T7027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.286'. [ 124.187512][ T7031] macvtap1: entered promiscuous mode [ 124.213524][ T7031] macvtap1: entered allmulticast mode [ 124.239360][ T7031] veth1_vlan: entered allmulticast mode [ 124.366792][ T7042] macvtap2: entered promiscuous mode [ 124.417038][ T7042] macvtap2: entered allmulticast mode [ 124.824643][ T7071] bond1 (unregistering): Released all slaves [ 125.094051][ T7085] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 125.131681][ T7082] syzkaller0: entered promiscuous mode [ 125.137355][ T7082] syzkaller0: entered allmulticast mode [ 125.158734][ T7082] tipc: Started in network mode [ 125.165063][ T7082] tipc: Node identity 3644aa85e2ad, cluster identity 4711 [ 125.191987][ T7082] tipc: Enabled bearer , priority 0 [ 125.216441][ T7081] tipc: Resetting bearer [ 125.267327][ T7081] tipc: Disabling bearer [ 126.840862][ T7171] bond3: Unable to set up delay as MII monitoring is disabled [ 126.973935][ T7171] bond3 (unregistering): Released all slaves [ 127.000842][ T7191] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 127.245965][ T7178] __nla_validate_parse: 3 callbacks suppressed [ 127.245985][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 127.266599][ T7200] netlink: 'syz.0.324': attribute type 2 has an invalid length. [ 127.330271][ T7178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.321'. [ 127.843561][ T7213] geneve2: entered promiscuous mode [ 127.852086][ T7168] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 46300 - 0 [ 127.882468][ T7168] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 46300 - 0 [ 127.916524][ T7168] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 46300 - 0 [ 127.953478][ T7157] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 46300 - 0 [ 128.195803][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 128.205920][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 128.231403][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 128.304081][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 128.333671][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 128.345093][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 128.354604][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 128.368695][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 128.410606][ T7239] netlink: Unknown conntrack attr (type=2304, max=9) [ 128.550142][ T7243] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 128.860043][ T7255] openvswitch: netlink: Flow actions attr not present in new flow. [ 129.259294][ T7263] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 129.293761][ T7263] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 129.484356][ T7277] netlink: 'syz.4.347': attribute type 21 has an invalid length. [ 129.505039][ T7277] netlink: 'syz.4.347': attribute type 5 has an invalid length. [ 129.565023][ T7283] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 129.587861][ T7285] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 129.751531][ T7295] netlink: get zone limit has 4 unknown bytes [ 129.762558][ T7290] bond3: (slave gretap1): making interface the new active one [ 129.775477][ T7290] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 129.787680][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b884400: rx timeout, send abort [ 130.136821][ T7315] netlink: 'syz.2.355': attribute type 21 has an invalid length. [ 130.184922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.216441][ T7315] netlink: 'syz.2.355': attribute type 21 has an invalid length. [ 130.288496][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d269400: rx timeout, send abort [ 130.300517][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b884400: abort rx timeout. Force session deactivation [ 130.344242][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.514898][ T7329] netlink: 'syz.2.359': attribute type 4 has an invalid length. [ 130.537682][ T7323] xt_hashlimit: size too large, truncated to 1048576 [ 130.612139][ T7337] bridge: RTM_NEWNEIGH with invalid ether address [ 130.798167][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d269400: abort rx timeout. Force session deactivation [ 131.386409][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.008318][ T7403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.114273][ T7403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.140096][ T7403] bond0 (unregistering): Released all slaves [ 132.389094][ T7423] __nla_validate_parse: 45 callbacks suppressed [ 132.389116][ T7423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.386'. [ 132.424931][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.744336][ T7436] syzkaller0: entered promiscuous mode [ 132.750018][ T7436] syzkaller0: entered allmulticast mode [ 132.769294][ T7446] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.392'. [ 132.909731][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.397834][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.405851][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.473999][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.556011][ T5145] Bluetooth: hci4: command 0x0405 tx timeout [ 134.030782][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.040644][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.503942][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.590892][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.4.400'. [ 134.647135][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 134.952542][ T7502] geneve2: entered promiscuous mode [ 135.057716][ T7508] 8021q: VLANs not supported on syzkaller1 [ 135.080644][ T7510] ip6gre1: entered allmulticast mode [ 135.545494][ T796] net_ratelimit: 2 callbacks suppressed [ 135.545513][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.582773][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'. [ 135.677751][ T7531] FAULT_INJECTION: forcing a failure. [ 135.677751][ T7531] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 135.710462][ T7531] CPU: 1 UID: 0 PID: 7531 Comm: syz.0.416 Not tainted syzkaller #0 PREEMPT(full) [ 135.710491][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.710503][ T7531] Call Trace: [ 135.710512][ T7531] [ 135.710521][ T7531] dump_stack_lvl+0xe8/0x150 [ 135.710567][ T7531] should_fail_ex+0x412/0x560 [ 135.710605][ T7531] _copy_from_user+0x2d/0xb0 [ 135.710630][ T7531] l2cap_sock_setsockopt+0xf13/0x20d0 [ 135.710662][ T7531] ? aa_sk_perm+0x6d5/0x900 [ 135.710694][ T7531] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 135.710719][ T7531] ? audit_unix_addr+0x71/0x150 [ 135.710749][ T7531] ? inode_unpin_lru_isolating+0x40/0x200 [ 135.710775][ T7531] ? aa_sock_opt_perm+0xff/0x1a0 [ 135.710808][ T7531] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 135.710831][ T7531] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 135.710855][ T7531] do_sock_setsockopt+0x17c/0x1b0 [ 135.710884][ T7531] __x64_sys_setsockopt+0x13d/0x1b0 [ 135.710913][ T7531] do_syscall_64+0x14d/0xf80 [ 135.710936][ T7531] ? trace_irq_disable+0x3b/0x150 [ 135.710967][ T7531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.710989][ T7531] ? clear_bhb_loop+0x40/0x90 [ 135.711016][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.711037][ T7531] RIP: 0033:0x7f1e95f9c799 [ 135.711064][ T7531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.711081][ T7531] RSP: 002b:00007f1e96d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.711113][ T7531] RAX: ffffffffffffffda RBX: 00007f1e96215fa0 RCX: 00007f1e95f9c799 [ 135.711129][ T7531] RDX: 0000000000000004 RSI: 0000000000000112 RDI: 0000000000000004 [ 135.711140][ T7531] RBP: 00007f1e96d87090 R08: 0000000000000002 R09: 0000000000000000 [ 135.711153][ T7531] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 135.711165][ T7531] R13: 00007f1e96216038 R14: 00007f1e96215fa0 R15: 00007ffffe5c8488 [ 135.711198][ T7531] [ 136.145799][ T7541] validate_nla: 3 callbacks suppressed [ 136.145820][ T7541] netlink: 'syz.1.419': attribute type 1 has an invalid length. [ 136.227001][ T7552] netlink: 'syz.0.422': attribute type 13 has an invalid length. [ 136.311745][ T7562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.425'. [ 136.521079][ T7570] netlink: 'syz.1.426': attribute type 2 has an invalid length. [ 136.583985][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.609255][ T7576] netlink: 'syz.4.429': attribute type 1 has an invalid length. [ 136.642072][ T7578] netlink: 'syz.0.428': attribute type 3 has an invalid length. [ 136.783277][ T7578] vlan2: entered promiscuous mode [ 136.789575][ T7578] geneve1: entered promiscuous mode [ 136.795865][ T7578] vlan2: entered allmulticast mode [ 136.801498][ T7578] geneve1: entered allmulticast mode [ 136.814001][ T7581] bond2: entered promiscuous mode [ 136.819719][ T7581] bond2: entered allmulticast mode [ 136.825741][ T7581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.923255][ T7597] netlink: 'syz.1.433': attribute type 16 has an invalid length. [ 136.936592][ T7597] netlink: 'syz.1.433': attribute type 17 has an invalid length. [ 137.063835][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.279613][ T7597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.626515][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.728734][ T7635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'. [ 138.173014][ T7657] xt_hashlimit: overflow, try lower: 3/0 [ 138.254350][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 138.653309][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.454'. [ 138.675226][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.031252][ T7687] netlink: 'syz.4.458': attribute type 1 has an invalid length. [ 139.120608][ T7691] bond3: (slave ip6gretap1): making interface the new active one [ 139.130121][ T7691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 139.138775][ T7691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 139.149902][ T7691] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 139.161462][ T7692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.217623][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 139.228079][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 139.395843][ T7698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.463'. [ 139.680925][ T7703] syzkaller0: entered promiscuous mode [ 139.704312][ T7703] syzkaller0: entered allmulticast mode [ 139.711231][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.735475][ T7707] netlink: 'syz.1.466': attribute type 3 has an invalid length. [ 139.744478][ T7707] netlink: 224 bytes leftover after parsing attributes in process `syz.1.466'. [ 140.106735][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.747794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.767584][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.554872][ T7758] veth0_virt_wifi: mtu less than device minimum [ 141.575943][ T7751] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.476'. [ 141.731928][ T7768] netlink: 'syz.3.480': attribute type 39 has an invalid length. [ 141.740418][ T7765] netlink: 'syz.2.481': attribute type 4 has an invalid length. [ 141.774541][ T7766] pim6reg527: entered allmulticast mode [ 141.783829][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.849521][ T7765] netlink: 'syz.2.481': attribute type 10 has an invalid length. [ 141.906577][ T7771] dvmrp0: entered allmulticast mode [ 141.938730][ T7765] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 142.179771][ T7786] netlink: 'syz.3.488': attribute type 1 has an invalid length. [ 142.236932][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'. [ 142.258104][ T7786] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.298197][ T7792] bond3: (slave veth5): Enslaving as an active interface with a down link [ 142.712636][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.495'. [ 142.757887][ T7812] tipc: Started in network mode [ 142.764095][ T7812] tipc: Node identity 16b624c5f099, cluster identity 4711 [ 142.771849][ T7812] tipc: Enabled bearer , priority 0 [ 142.828884][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.937746][ T7821] netlink: 'syz.2.496': attribute type 21 has an invalid length. [ 142.969309][ T7812] syzkaller0: entered promiscuous mode [ 142.993030][ T7812] syzkaller0: entered allmulticast mode [ 143.029558][ T7812] tipc: Resetting bearer [ 143.041275][ T7814] tipc: New replicast peer: 0.0.0.0 [ 143.049482][ T7814] tipc: Enabled bearer , priority 10 [ 143.057437][ T7821] netlink: 'syz.2.496': attribute type 1 has an invalid length. [ 143.081430][ T7815] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 143.121610][ T7811] tipc: Resetting bearer [ 143.145468][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.633723][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.866480][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.574197][ T7811] tipc: Disabling bearer [ 144.593646][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.503'. [ 144.606084][ T796] tipc: Node number set to 3861849285 [ 144.630680][ T5963] tipc: Node number set to 3572083333 [ 144.777640][ T7854] openvswitch: netlink: IP tunnel dst address not specified [ 144.859603][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 144.906385][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.060087][ T7864] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 145.129429][ T7873] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 145.174248][ T7876] netlink: 'syz.3.512': attribute type 10 has an invalid length. [ 145.206521][ T7876] bridge_slave_1: left allmulticast mode [ 145.212469][ T7876] bridge_slave_1: left promiscuous mode [ 145.233887][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.272713][ T7876] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 145.286296][ T7884] sctp: [Deprecated]: syz.2.511 (pid 7884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.286296][ T7884] Use struct sctp_sack_info instead [ 145.536012][ T7897] IPv6: NLM_F_REPLACE set, but no existing node found! [ 145.963894][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.015532][ T7914] netlink: 43 bytes leftover after parsing attributes in process `syz.0.520'. [ 146.184176][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.351205][ T7925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.523'. [ 146.401560][ T7925] : renamed from bond0 [ 146.571475][ T7936] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.527'. [ 146.765234][ T7948] netlink: 48 bytes leftover after parsing attributes in process `syz.1.529'. [ 146.812968][ T7958] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 146.832521][ T7956] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.532'. [ 146.853798][ T7957] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.532'. [ 146.972734][ T7967] netlink: 'syz.1.529': attribute type 1 has an invalid length. [ 146.985976][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.149459][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 147.321588][ T7967] bond1: entered promiscuous mode [ 147.394406][ T7967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.449949][ T7979] bond1: (slave bridge2): making interface the new active one [ 147.458669][ T7979] bridge2: entered promiscuous mode [ 147.466614][ T7979] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 147.478750][ T7994] netlink: 40 bytes leftover after parsing attributes in process `syz.3.540'. [ 147.504545][ T7993] 8021q: VLANs not supported on ip6_vti0 [ 147.693304][ T7999] veth0_to_batadv: entered allmulticast mode [ 147.860208][ T8009] Bluetooth: MGMT ver 1.23 [ 148.024167][ T8012] bridge3: entered promiscuous mode [ 148.029757][ T8012] bridge3: entered allmulticast mode [ 148.035846][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.323196][ T796] IPVS: starting estimator thread 0... [ 148.443713][ T8036] IPVS: using max 29 ests per chain, 69600 per kthread [ 148.515286][ T8044] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 148.546780][ T8044] syz_tun: entered allmulticast mode [ 148.566436][ T8044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.581773][ T8042] syz_tun: left allmulticast mode [ 149.068554][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.226078][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.357017][ T8090] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 149.455777][ T8096] lo: entered allmulticast mode [ 149.509597][ T8090] dvmrp8: entered allmulticast mode [ 149.565546][ T8088] lo: left allmulticast mode [ 149.659695][ T8105] xt_policy: too many policy elements [ 149.685029][ T29] audit: type=1107 audit(1774288301.286:2): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='—§ ‘33üºÌ8c!sÿXÐ2$R.{+gɲäGeÇÜ²ÃøX²bØ^trøÂm…†‡åÀh»Åé€?½†F(Èx¶¼‘žAn~¡.l¥¡š*üf÷ƒ)­ê= UGNÒÒ—²4M´Þ¢.‡p®ýºŒM2°BIFó0B [ 149.685029][ T29] ÃÔ©‹EòÞ¶‹Dë|AkWª x[bk´Ÿ.zþ-ñ¬A8U#0&ŠZ|ÉÉXܲSNEj-¤´áòøã5pó|ó‡+ [ 149.685029][ T29] _Ç|f4%f>T‚D.¶%¸a[M_=' [ 150.111307][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.181207][ T8120] __nla_validate_parse: 6 callbacks suppressed [ 150.181227][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.576'. [ 150.470541][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.3.581'. [ 150.533710][ T8139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.581'. [ 150.690904][ T8149] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 150.703043][ T8149] syz_tun: entered allmulticast mode [ 150.731241][ T8149] dvmrp8: entered allmulticast mode [ 150.757144][ T8147] syz_tun: left allmulticast mode [ 151.144057][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.184183][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.264966][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.228036][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.239227][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.249300][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.266937][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.505256][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.304770][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.345801][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.074377][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.384374][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.544385][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.424113][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.464070][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.625014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.504053][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.583876][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.546505][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.584633][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.464212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.623969][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.632320][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.664193][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.747198][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.705273][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.665011][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.755377][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.783982][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.792708][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.823904][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.864045][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.823953][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.904230][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.975116][ T8154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.585'. [ 171.007912][ T8158] netlink: 44 bytes leftover after parsing attributes in process `syz.3.588'. [ 171.014362][ T8155] netlink: 32 bytes leftover after parsing attributes in process `syz.1.586'. [ 171.037147][ T8159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.587'. [ 171.052208][ T8160] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 171.068817][ T8155] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 171.203724][ T8170] netlink: 36 bytes leftover after parsing attributes in process `syz.0.590'. [ 171.230178][ T8155] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 171.231579][ T8160] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 171.259618][ T8179] netlink: 2 bytes leftover after parsing attributes in process `syz.0.590'. [ 171.536210][ T8189] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 171.550414][ T8189] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 171.561473][ T8188] x_tables: duplicate underflow at hook 1 [ 171.567803][ T8191] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 171.574968][ T8191] syz_tun: entered allmulticast mode [ 171.589223][ T8191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.599759][ T8190] syz_tun: left allmulticast mode [ 171.619707][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 171.664015][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 171.705619][ T8188] netlink: 'syz.2.593': attribute type 12 has an invalid length. [ 171.739732][ T8188] netlink: 'syz.2.593': attribute type 11 has an invalid length. [ 171.945627][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.992961][ T8207] netlink: 224 bytes leftover after parsing attributes in process `syz.4.601'. [ 172.003179][ T8206] netlink: 224 bytes leftover after parsing attributes in process `syz.4.601'. [ 172.246571][ T8216] IPv6: sit1: Disabled Multicast RS [ 172.253257][ T8216] sit1: entered allmulticast mode [ 172.289178][ T8218] syzkaller0: entered promiscuous mode [ 172.305979][ T8218] syzkaller0: entered allmulticast mode [ 172.486979][ T8228] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 172.525593][ T8228] syz_tun: entered allmulticast mode [ 172.590358][ T8232] x_tables: duplicate underflow at hook 3 [ 172.618012][ T8228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.634900][ T8227] syz_tun: left allmulticast mode [ 172.641969][ T8235] ipt_ECN: cannot use operation on non-tcp rule [ 172.707128][ T8237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.873527][ T8242] openvswitch: netlink: Flow key attr not present in new flow. [ 172.984552][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.224554][ T8258] netlink: 'syz.3.618': attribute type 1 has an invalid length. [ 173.597855][ T8275] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 173.638540][ T8275] dvmrp8: entered allmulticast mode [ 173.718965][ T8279] bridge_slave_0: left allmulticast mode [ 173.759812][ T8279] bridge_slave_0: left promiscuous mode [ 173.815872][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.871740][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.918488][ T8279] bridge_slave_1: left allmulticast mode [ 173.976381][ T8279] bridge_slave_1: left promiscuous mode [ 173.982314][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.020208][ T8279] bond0: (slave bond_slave_0): Releasing backup interface [ 174.025771][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.042971][ T8279] bond0: (slave bond_slave_1): Releasing backup interface [ 174.058977][ T8279] team0: Port device team_slave_0 removed [ 174.072676][ T8279] team0: Port device team_slave_1 removed [ 174.080535][ T8279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.089280][ T8279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.099360][ T8279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.107420][ T8279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.117818][ T8279] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 174.138082][ T8284] team0: Mode changed to "activebackup" [ 174.155983][ T8298] veth0_macvtap: left promiscuous mode [ 174.342835][ T8308] netlink: 'syz.1.635': attribute type 1 has an invalid length. [ 174.371956][ T8308] netlink: 'syz.1.635': attribute type 3 has an invalid length. [ 174.473558][ T8308] netlink: 'syz.1.635': attribute type 1 has an invalid length. [ 174.481298][ T8308] netlink: 'syz.1.635': attribute type 3 has an invalid length. [ 174.501097][ T8321] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 174.661996][ T8326] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 174.738706][ T5145] Bluetooth: hci4: link tx timeout [ 174.746523][ T5145] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.813502][ T8330] syz_tun: entered allmulticast mode [ 174.835580][ T8324] syz_tun: left allmulticast mode [ 174.906899][ T8341] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 175.053059][ T8343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.463019][ T8372] trusted_key: syz.0.653 sent an empty control message without MSG_MORE. [ 175.621076][ T8382] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 175.754479][ T8384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.761959][ T8384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.930555][ T8390] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 176.017428][ T8396] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 176.129850][ T8394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.164220][ T8401] netlink: 'syz.3.660': attribute type 1 has an invalid length. [ 176.256300][ T8404] __nla_validate_parse: 18 callbacks suppressed [ 176.256319][ T8404] netlink: 40 bytes leftover after parsing attributes in process `syz.2.662'. [ 176.396340][ T8401] bond4: entered promiscuous mode [ 176.405268][ T8401] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.503065][ T8419] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.664'. [ 176.524869][ T8401] bond4: (slave bridge4): making interface the new active one [ 176.538100][ T8401] bridge4: entered promiscuous mode [ 176.544851][ T8419] x_tables: unsorted underflow at hook 4 [ 176.562042][ T8401] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 176.575786][ T8419] netlink: 31 bytes leftover after parsing attributes in process `syz.4.664'. [ 176.593672][ T8409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.660'. [ 176.645507][ T8424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.665'. [ 176.819348][ T8393] xt_hashlimit: size too large, truncated to 1048576 [ 176.824102][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 177.095428][ T8442] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 177.113859][ T8440] virt_wifi0 speed is unknown, defaulting to 1000 [ 177.144476][ T5883] net_ratelimit: 5 callbacks suppressed [ 177.144528][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.340041][ T8453] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 177.366713][ T8444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.667'. [ 177.402428][ T8443] netlink: 'syz.2.668': attribute type 1 has an invalid length. [ 177.665563][ T8458] syzkaller0: entered promiscuous mode [ 177.680180][ T8458] syzkaller0: entered allmulticast mode [ 178.186587][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.851522][ T8450] syzkaller1: entered promiscuous mode [ 178.857570][ T8450] syzkaller1: entered allmulticast mode [ 178.865032][ T5490] veth0_vlan: left promiscuous mode [ 178.890288][ T5490] veth0_vlan: entered promiscuous mode [ 178.949096][ T8475] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 179.087696][ T8479] netlink: 260 bytes leftover after parsing attributes in process `syz.4.674'. [ 179.184550][ T8484] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 179.224146][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.419003][ T8500] netlink: 'syz.4.679': attribute type 9 has an invalid length. [ 179.678511][ T8506] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 179.729535][ T8506] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 179.840415][ T8519] lo: entered promiscuous mode [ 179.850818][ T8519] tunl0: entered promiscuous mode [ 179.860464][ T8508] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 179.880859][ T8519] gre0: entered promiscuous mode [ 179.944919][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.972402][ T8519] gretap0: entered promiscuous mode [ 180.017134][ T8519] erspan0: entered promiscuous mode [ 180.044986][ T8519] ip_vti0: entered promiscuous mode [ 180.046631][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 180.206730][ T8534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.686'. [ 180.266139][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.287900][ T7164] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.328826][ T5945] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.344005][ T7164] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.365601][ T5945] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.613647][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.639556][ T8555] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 180.755205][ T8562] netlink: 'syz.3.692': attribute type 10 has an invalid length. [ 180.817278][ T8555] syzkaller0: entered promiscuous mode [ 180.847996][ T8555] syzkaller0: entered allmulticast mode [ 180.981360][ T8578] netlink: 36 bytes leftover after parsing attributes in process `syz.0.696'. [ 181.011986][ T8578] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 181.246493][ T8593] netlink: 'syz.2.701': attribute type 11 has an invalid length. [ 181.301821][ T8595] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 181.319374][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.346861][ T8596] netlink: 224 bytes leftover after parsing attributes in process `syz.2.701'. [ 182.344497][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.579109][ T8601] lo: entered allmulticast mode [ 182.593726][ T8601] lo: left allmulticast mode [ 182.986535][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.385632][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.575010][ T8677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.584205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.728201][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.735962][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.921923][ T8679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.942393][ T8679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.088767][ T8679] vlan0: left allmulticast mode [ 184.094361][ T8679] veth0_vlan: left allmulticast mode [ 184.099748][ T8679] vlan0: left promiscuous mode [ 184.107172][ T8679] macvtap1: left promiscuous mode [ 184.112265][ T8679] macvtap1: left allmulticast mode [ 184.122480][ T8679] vlan2: left promiscuous mode [ 184.127627][ T8679] geneve1: left promiscuous mode [ 184.132903][ T8679] vlan2: left allmulticast mode [ 184.138135][ T8679] geneve1: left allmulticast mode [ 184.175315][ T7161] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.187449][ T7161] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.197347][ T7161] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.208904][ T7161] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.302691][ T8707] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 184.424651][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.540146][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 184.614495][ T8721] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 184.661695][ T8721] netlink: 'syz.2.725': attribute type 2 has an invalid length. [ 184.743587][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.806857][ T8737] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 184.847151][ T8737] netlink: 'syz.3.730': attribute type 11 has an invalid length. [ 184.882364][ T8737] netlink: 'syz.3.730': attribute type 4 has an invalid length. [ 184.893603][ T8737] netlink: 199768 bytes leftover after parsing attributes in process `syz.3.730'. [ 185.050824][ T8749] netlink: 'syz.4.732': attribute type 2 has an invalid length. [ 185.099842][ T8749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.732'. [ 185.108950][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 185.473780][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.718007][ T8786] netlink: 76 bytes leftover after parsing attributes in process `syz.2.739'. [ 185.741458][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 185.757860][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.738'. [ 185.864471][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.943008][ T8794] rdma_op ffff88807d8c01f0 conn xmit_rdma 0000000000000000 [ 186.029448][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.184764][ T8806] Cannot find set identified by id 65534 to match [ 186.471192][ T8824] lo: entered promiscuous mode [ 186.504569][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.554277][ T8828] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 186.815549][ T8842] nbd: must specify at least one socket [ 186.845136][ T8843] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.010361][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 187.151416][ T5945] IPVS: starting estimator thread 0... [ 187.168410][ T8862] x_tables: duplicate underflow at hook 1 [ 187.204794][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 187.263458][ T8863] IPVS: using max 28 ests per chain, 67200 per kthread [ 187.367245][ T8857] bond5 (unregistering): Released all slaves [ 187.735396][ T8888] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 187.988048][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.771'. [ 188.045131][ T8900] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 188.207258][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.777'. [ 188.217385][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 188.383093][ T8916] virt_wifi0 speed is unknown, defaulting to 1000 [ 188.426929][ T8921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.779'. [ 188.561902][ T8930] netlink: 'syz.3.781': attribute type 11 has an invalid length. [ 188.572127][ T8930] netlink: 64 bytes leftover after parsing attributes in process `syz.3.781'. [ 188.601250][ T8930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.781'. [ 188.751397][ T8936] x_tables: unsorted entry at hook 3 [ 188.905254][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 188.937408][ T8947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.784'. [ 189.436737][ T8970] netlink: 'syz.2.792': attribute type 4 has an invalid length. [ 189.582352][ T8978] delete_channel: no stack [ 189.724314][ T8983] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 189.744584][ T8983] lo: entered allmulticast mode [ 189.751512][ T8982] lo: left allmulticast mode [ 190.342028][ T9010] syz_tun: entered allmulticast mode [ 190.418050][ T9009] syz_tun: left allmulticast mode [ 190.488612][ T9023] syzkaller0: entered promiscuous mode [ 190.509041][ T9023] syzkaller0: entered allmulticast mode [ 190.935593][ T9048] netlink: 'syz.2.816': attribute type 1 has an invalid length. [ 190.947995][ T9042] bond5 (unregistering): Released all slaves [ 191.200283][ T9042] syzkaller1: entered promiscuous mode [ 191.228434][ T9042] syzkaller1: entered allmulticast mode [ 191.265974][ T9064] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 191.417975][ T9064] syzkaller0: entered promiscuous mode [ 191.426359][ T9064] syzkaller0: entered allmulticast mode [ 191.443021][ T9068] tipc: Enabled bearer , priority 0 [ 191.477724][ T9061] tipc: Resetting bearer [ 191.595233][ T9061] tipc: Disabling bearer [ 191.992855][ T9104] netlink: 'syz.0.830': attribute type 21 has an invalid length. [ 192.119135][ T9108] wlan0 speed is unknown, defaulting to 1000 [ 192.146102][ T9108] wlan0 speed is unknown, defaulting to 1000 [ 192.341816][ T9108] wlan0 speed is unknown, defaulting to 1000 [ 192.354420][ T9115] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 192.371827][ T9108] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 192.384628][ T9115] __nla_validate_parse: 8 callbacks suppressed [ 192.384646][ T9115] netlink: 36 bytes leftover after parsing attributes in process `syz.4.833'. [ 192.498571][ T9108] wlan0 speed is unknown, defaulting to 1000 [ 192.510312][ T9108] wlan0 speed is unknown, defaulting to 1000 [ 192.541767][ T9108] wlan0 speed is unknown, defaulting to 1000 [ 192.573849][ T9119] netlink: 14 bytes leftover after parsing attributes in process `syz.2.835'. [ 192.591482][ T9108] wlan0 speed is unknown, defaulting to 1000 [ 192.676226][ T9108] wlan0 speed is unknown, defaulting to 1000 [ 192.700679][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.836'. [ 193.009096][ T9133] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.840'. [ 193.046284][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 193.055295][ T9138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.841'. [ 193.759146][ T9167] netlink: 'syz.4.848': attribute type 1 has an invalid length. [ 194.052918][ T9171] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 194.101126][ T9174] netlink: 'syz.4.850': attribute type 7 has an invalid length. [ 194.183561][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.468147][ T9190] netlink: 'syz.4.854': attribute type 1 has an invalid length. [ 194.503194][ T9190] netlink: 224 bytes leftover after parsing attributes in process `syz.4.854'. [ 194.520709][ T9194] netlink: 52 bytes leftover after parsing attributes in process `syz.0.855'. [ 194.545703][ T9199] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 194.627881][ T9196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.855'. [ 194.672441][ T9208] netlink: 'syz.2.858': attribute type 21 has an invalid length. [ 194.713548][ T9208] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.839574][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.018231][ T9220] tipc: Started in network mode [ 195.033292][ T9220] tipc: Node identity 6697ad983011, cluster identity 4711 [ 195.064033][ T9220] tipc: Enabled bearer , priority 0 [ 195.092477][ T9223] syzkaller0: entered promiscuous mode [ 195.148027][ T9223] syzkaller0: entered allmulticast mode [ 195.159642][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.862'. [ 195.211949][ T9228] netlink: 'syz.4.862': attribute type 3 has an invalid length. [ 195.265046][ T9220] tipc: Resetting bearer [ 195.430456][ T9218] tipc: Resetting bearer [ 195.747514][ T9218] tipc: Disabling bearer [ 195.956117][ T9261] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 196.221404][ T9283] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 196.292119][ T9283] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 196.321502][ T9283] gretap1: entered promiscuous mode [ 196.351596][ T9283] gretap1: entered allmulticast mode [ 196.465009][ T9298] netlink: 'syz.0.876': attribute type 1 has an invalid length. [ 196.551551][ T9298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.620247][ T9304] netlink: 'syz.3.877': attribute type 1 has an invalid length. [ 196.694696][ T9310] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 197.360015][ T9318] lo: entered allmulticast mode [ 197.360077][ T9323] netlink: 'syz.4.882': attribute type 1 has an invalid length. [ 197.384472][ T9323] netlink: 'syz.4.882': attribute type 7 has an invalid length. [ 197.393405][ T9323] netlink: 'syz.4.882': attribute type 8 has an invalid length. [ 197.401572][ T9323] __nla_validate_parse: 5 callbacks suppressed [ 197.401589][ T9323] netlink: 208 bytes leftover after parsing attributes in process `syz.4.882'. [ 197.421128][ T9323] NCSI netlink: No device for ifindex 65584 [ 197.439222][ T9337] netlink: 'syz.2.881': attribute type 3 has an invalid length. [ 197.471631][ T9303] lo: left allmulticast mode [ 197.565756][ T9343] netlink: 'syz.1.884': attribute type 1 has an invalid length. [ 197.944938][ T9368] netlink: 'syz.3.893': attribute type 10 has an invalid length. [ 197.967474][ T9368] netlink: 40 bytes leftover after parsing attributes in process `syz.3.893'. [ 197.999157][ T9368] dummy0: entered promiscuous mode [ 198.041278][ T9368] bridge0: port 2(dummy0) entered blocking state [ 198.092716][ T9368] bridge0: port 2(dummy0) entered disabled state [ 198.134728][ T9368] dummy0: entered allmulticast mode [ 198.167656][ T9380] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.428970][ T9384] : entered promiscuous mode [ 198.529159][ T9396] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 198.543610][ T9396] netlink: 224 bytes leftover after parsing attributes in process `syz.2.898'. [ 198.612645][ T9390] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 198.678977][ T9390] syz_tun: entered allmulticast mode [ 198.688352][ T9388] syz_tun: left allmulticast mode [ 198.716117][ T9402] xt_l2tp: unknown flags: 10 [ 198.766071][ T9403] netlink: 'syz.3.900': attribute type 11 has an invalid length. [ 198.793257][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 198.811444][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 198.826228][ T9407] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.900'. [ 198.878700][ T7179] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.891194][ T9411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'. [ 198.902064][ T7179] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.959141][ T7179] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.977640][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'. [ 199.135976][ T9419] openvswitch: netlink: Message has 8 unknown bytes. [ 199.183846][ T9419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.348101][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'. [ 199.452496][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 199.579941][ T9443] syzkaller1: entered promiscuous mode [ 199.614944][ T9443] syzkaller1: entered allmulticast mode [ 199.667908][ T9447] openvswitch: netlink: Message has 16 unknown bytes. [ 199.746844][ T9454] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 199.809637][ T9445] syz_tun: entered allmulticast mode [ 199.835555][ T9444] syz_tun: left allmulticast mode [ 199.861779][ T9457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.278828][ T9472] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 200.299387][ T9472] syzkaller0: entered promiscuous mode [ 200.305707][ T9472] syzkaller0: entered allmulticast mode [ 200.314693][ T9472] tipc: Enabled bearer , priority 0 [ 200.330612][ T9471] tipc: Resetting bearer [ 200.359651][ T9471] tipc: Disabling bearer [ 200.635516][ T9493] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 200.659776][ T9489] gretap0: entered promiscuous mode [ 200.666163][ T9489] vlan2: entered promiscuous mode [ 200.842271][ T9498] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 200.924602][ T9498] lo: entered allmulticast mode [ 201.019407][ T9497] lo: left allmulticast mode [ 201.466656][ T9530] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.136787][ T9560] bond4: (slave ip6gretap2): making interface the new active one [ 202.147670][ T9560] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 202.292680][ T9574] validate_nla: 6 callbacks suppressed [ 202.292705][ T9574] netlink: 'syz.1.949': attribute type 1 has an invalid length. [ 202.342088][ T9574] netlink: 'syz.1.949': attribute type 1 has an invalid length. [ 202.401874][ T9574] netlink: 'syz.1.949': attribute type 8 has an invalid length. [ 202.408838][ T9579] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 202.447066][ T9574] __nla_validate_parse: 9 callbacks suppressed [ 202.447091][ T9574] netlink: 606 bytes leftover after parsing attributes in process `syz.1.949'. [ 202.721687][ T9589] C: renamed from lo [ 202.747094][ T9589] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 202.776207][ T9594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.958'. [ 203.196962][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.965'. [ 203.274110][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 203.311139][ T9610] bond1: entered promiscuous mode [ 203.512924][ T9628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.971'. [ 204.042949][ T9646] bond5: invalid ARP target 0.0.0.0 specified for addition [ 204.094072][ T9646] bond5: option arp_ip_target: invalid value (0) [ 204.125607][ T9646] bond5 (unregistering): Released all slaves [ 204.157258][ T9666] digital: digital_start_poll: Unknown protocol [ 204.208256][ T9669] tipc: Can't bind to reserved service type 1 [ 204.270921][ T9650] bond5: invalid ARP target 0.0.0.0 specified for addition [ 204.303858][ T9650] bond5: option arp_ip_target: invalid value (0) [ 204.566629][ T9650] bond5 (unregistering): Released all slaves [ 204.642472][ T9647] netlink: 40 bytes leftover after parsing attributes in process `syz.4.974'. [ 204.852614][ T5945] wlan0 speed is unknown, defaulting to 1000 [ 204.860057][ T5945] syz1: Port: 1 Link DOWN [ 205.372621][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.985'. [ 205.578894][ T9707] netlink: 'syz.1.986': attribute type 10 has an invalid length. [ 205.604435][ T9707] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 205.872515][ T9723] netlink: 'syz.4.990': attribute type 1 has an invalid length. [ 205.885132][ T9723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.048007][ T9740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.119603][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'. [ 207.151232][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'. [ 207.163540][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'. [ 207.552484][ T9790] syzkaller0: entered promiscuous mode [ 207.562001][ T9790] syzkaller0: entered allmulticast mode [ 207.964415][ T9815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'. [ 208.131504][ T9822] netlink: 'syz.1.1010': attribute type 1 has an invalid length. [ 208.392711][ T9838] sctp: [Deprecated]: syz.0.1012 (pid 9838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.392711][ T9838] Use struct sctp_sack_info instead [ 208.434269][ T9828] veth5: entered promiscuous mode [ 208.521392][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 209.012997][ T9856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1017'. [ 209.143061][ T9859] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1018'. [ 209.161012][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'. [ 209.197647][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'. [ 209.232946][ T9869] openvswitch: netlink: Message has -2 unknown bytes. [ 209.282916][ T9869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.539145][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 209.561943][ T9876] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1024'. [ 209.589163][ T9876] netem: invalid attributes len -24 [ 209.607373][ T9876] netem: change failed [ 209.623854][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 210.046901][ T9897] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1029'. [ 210.084195][ T9902] tipc: Enabling of bearer rejected, failed to enable media [ 210.577966][ T9929] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 210.755181][ T9934] C: left promiscuous mode [ 210.804061][ T9934] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 211.074710][ T9944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.625780][ T9976] sctp: [Deprecated]: syz.0.1043 (pid 9976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.625780][ T9976] Use struct sctp_sack_info instead [ 211.676254][ T9973] gtp0: entered promiscuous mode [ 211.727048][ T9973] gtp0: entered allmulticast mode [ 211.879914][ T9987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.013177][ T9997] sctp: [Deprecated]: syz.0.1048 (pid 9997) Use of int in max_burst socket option. [ 212.013177][ T9997] Use struct sctp_assoc_value instead [ 212.267345][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 212.278434][ T5145] Bluetooth: hci3: command 0x0406 tx timeout [ 212.285252][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 212.744452][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.809874][T10016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.925277][T10021] bridge0: port 1(veth0_to_bridge) entered blocking state [ 213.954161][T10021] bridge0: port 1(veth0_to_bridge) entered disabled state [ 213.975618][T10021] veth0_to_bridge: entered allmulticast mode [ 214.032004][T10021] veth0_to_bridge: entered promiscuous mode [ 214.120773][T10034] __nla_validate_parse: 6 callbacks suppressed [ 214.120795][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 214.231077][T10037] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1057'. [ 214.377132][T10046] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1060'. [ 214.399800][T10046] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1060'. [ 214.966319][T10067] tipc: Enabled bearer , priority 24 [ 215.031149][T10069] virt_wifi0 speed is unknown, defaulting to 1000 [ 215.090406][T10069] wlan0 speed is unknown, defaulting to 1000 [ 215.317708][T10100] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1076'. [ 215.350494][T10098] netlink: 'syz.4.1075': attribute type 10 has an invalid length. [ 215.390376][T10098] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 215.439418][T10095] veth1_macvtap: left promiscuous mode [ 215.962267][T10123] Cannot find add_set index 2 as target [ 216.079237][T10131] netlink: 'syz.0.1083': attribute type 1 has an invalid length. [ 216.110562][T10131] netlink: 'syz.0.1083': attribute type 4 has an invalid length. [ 216.128757][T10131] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1083'. [ 216.151766][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1084'. [ 216.306785][T10139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1086'. [ 217.113461][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 217.134465][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 217.340671][T10176] syzkaller1: entered promiscuous mode [ 217.364174][T10176] syzkaller1: entered allmulticast mode [ 217.771468][ T9733] tipc: Subscription rejected, illegal request [ 218.187020][T10221] netlink: 'syz.3.1115': attribute type 1 has an invalid length. [ 218.524381][T10234] netlink: 'syz.1.1121': attribute type 1 has an invalid length. [ 218.558300][T10234] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 218.867547][T10246] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.892243][T10246] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.066916][T10246] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.090857][T10246] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.309767][T10246] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.324691][T10246] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.374074][T10276] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 219.405881][T10276] __nla_validate_parse: 11 callbacks suppressed [ 219.405902][T10276] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1133'. [ 219.802404][ T9728] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.812671][ T9728] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.838333][ T9728] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.847349][ T9728] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.947207][ T9733] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.960870][ T9733] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.983865][ T9733] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.053614][ T9733] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.267210][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 220.305199][T10325] netlink: 'syz.3.1145': attribute type 11 has an invalid length. [ 220.351237][T10325] netlink: 'syz.3.1145': attribute type 4 has an invalid length. [ 220.374071][T10325] netlink: 199768 bytes leftover after parsing attributes in process `syz.3.1145'. [ 220.454522][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1145'. [ 220.627481][T10335] sctp: [Deprecated]: syz.1.1148 (pid 10335) Use of int in maxseg socket option. [ 220.627481][T10335] Use struct sctp_assoc_value instead [ 220.860020][T10349] netlink: 'syz.2.1154': attribute type 83 has an invalid length. [ 221.098277][T10355] netlink: 'syz.4.1156': attribute type 1 has an invalid length. [ 221.255094][T10355] bond5: entered allmulticast mode [ 221.328992][T10364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1158'. [ 221.415933][T10364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1158'. [ 221.430324][T10377] netlink: 'syz.4.1165': attribute type 2 has an invalid length. [ 222.000373][T10406] geneve2: entered promiscuous mode [ 222.013232][T10406] geneve2: entered allmulticast mode [ 222.057454][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 222.182937][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1173'. [ 222.247353][T10422] netlink: 'syz.3.1176': attribute type 1 has an invalid length. [ 222.303837][T10422] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1176'. [ 222.358275][T10430] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1176'. [ 222.380246][T10422] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 222.480275][T10422] lo: entered allmulticast mode [ 222.495336][T10421] lo: left allmulticast mode [ 222.788254][T10448] veth0: entered promiscuous mode [ 223.203206][T10447] veth0: left promiscuous mode [ 223.585223][T10483] netlink: 'syz.4.1191': attribute type 1 has an invalid length. [ 223.650198][T10483] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 223.678213][T10490] netlink: 'syz.0.1192': attribute type 1 has an invalid length. [ 223.800537][T10490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.874631][T10494] vlan0: entered promiscuous mode [ 223.893492][T10494] bond2: entered promiscuous mode [ 223.898888][T10494] vlan0: entered allmulticast mode [ 223.923810][T10494] bond2: entered allmulticast mode [ 224.245413][T10521] netlink: 'syz.0.1199': attribute type 8 has an invalid length. [ 224.340816][T10519] tipc: Disabling bearer [ 224.361337][T10521] bond0: entered promiscuous mode [ 224.368692][T10521] gretap0: entered promiscuous mode [ 224.377114][T10521] bond0: left promiscuous mode [ 224.385782][T10521] gretap0: left promiscuous mode [ 224.722882][T10542] netlink: 'syz.2.1206': attribute type 1 has an invalid length. [ 224.739395][T10542] __nla_validate_parse: 10 callbacks suppressed [ 224.739417][T10542] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1206'. [ 224.788612][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 224.803624][T10546] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 226.168036][T10540] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 226.206695][T10551] syz_tun: entered allmulticast mode [ 226.212322][T10551] syz_tun: left allmulticast mode [ 226.452638][T10568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1208'. [ 226.542574][T10565] bond6: entered promiscuous mode [ 226.549710][T10565] bond6: entered allmulticast mode [ 226.557352][T10565] 8021q: adding VLAN 0 to HW filter on device bond6 [ 226.803076][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 226.884084][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 227.392132][T10614] netlink: 'syz.4.1219': attribute type 1 has an invalid length. [ 227.399967][T10609] xt_hashlimit: size too large, truncated to 1048576 [ 227.461177][T10614] netlink: 'syz.4.1219': attribute type 2 has an invalid length. [ 227.548354][T10614] netlink: 'syz.4.1219': attribute type 1 has an invalid length. [ 227.583576][T10614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1219'. [ 228.071761][T10637] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1227'. [ 228.276527][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1229'. [ 228.567468][T10654] netlink: 'syz.1.1231': attribute type 1 has an invalid length. [ 228.580549][T10654] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1231'. [ 228.615354][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'. [ 228.655805][T10654] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 228.670729][T10654] syz_tun: entered allmulticast mode [ 228.682380][T10653] syz_tun: left allmulticast mode [ 228.809747][T10668] netlink: 'syz.2.1235': attribute type 1 has an invalid length. [ 228.830740][T10670] netlink: 'syz.1.1236': attribute type 1 has an invalid length. [ 228.979204][T10672] macvlan0: entered promiscuous mode [ 228.988632][T10672] macvlan0: entered allmulticast mode [ 228.996703][T10672] bond7: entered promiscuous mode [ 229.003434][T10672] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 229.020518][T10672] bond7: left promiscuous mode [ 229.056947][T10673] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 229.073584][T10673] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 229.105212][T10673] bond2: (slave ip6gre1): making interface the new active one [ 229.124864][T10673] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 229.152662][T10641] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 229.170152][T10641] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 229.726455][T10707] pim6reg: entered allmulticast mode [ 229.766368][T10707] pim6reg: left allmulticast mode [ 229.968855][T10724] netlink: 'syz.2.1251': attribute type 11 has an invalid length. [ 230.005254][T10724] __nla_validate_parse: 1 callbacks suppressed [ 230.005274][T10724] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1251'. [ 230.094012][ T5945] IPVS: starting estimator thread 0... [ 230.100843][T10727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1252'. [ 230.162925][T10732] IPVS: sh: FWM 3 0x00000003 - no destination available [ 230.213457][T10728] IPVS: using max 29 ests per chain, 69600 per kthread [ 230.355407][T10743] netlink: 'syz.0.1256': attribute type 7 has an invalid length. [ 230.520446][T10746] virt_wifi0 speed is unknown, defaulting to 1000 [ 230.542732][T10746] wlan0 speed is unknown, defaulting to 1000 [ 230.595521][T10748] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 231.345002][ T9] IPVS: starting estimator thread 0... [ 231.453936][T10794] IPVS: using max 29 ests per chain, 69600 per kthread [ 231.459778][T10788] IPVS: sh: FWM 3 0x00000003 - no destination available [ 231.653690][T10804] syzkaller0: entered promiscuous mode [ 231.660420][T10804] syzkaller0: entered allmulticast mode [ 231.674852][T10804] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 231.790135][T10811] netlink: 'syz.2.1273': attribute type 1 has an invalid length. [ 231.873546][T10811] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1273'. [ 231.900474][T10811] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1273'. [ 232.225953][T10830] netlink: 'syz.2.1277': attribute type 25 has an invalid length. [ 232.350499][T10835] netlink: 'syz.0.1278': attribute type 10 has an invalid length. [ 232.507046][T10842] netlink: 'syz.2.1280': attribute type 1 has an invalid length. [ 232.546563][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1282'. [ 232.576702][T10844] openvswitch: netlink: Unknown nsh attribute 0 [ 232.597635][T10846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1283'. [ 232.642015][T10842] 8021q: adding VLAN 0 to HW filter on device bond8 [ 232.676227][T10846] syzkaller0: entered promiscuous mode [ 232.681867][T10846] syzkaller0: entered allmulticast mode [ 232.894789][T10860] IPVS: Unknown mcast interface: vcan0 [ 232.998832][T10868] ±ÿ: renamed from team_slave_1 [ 233.257070][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1294'. [ 233.272330][T10885] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20001 [ 233.536425][T10895] syzkaller0: entered promiscuous mode [ 233.542564][T10895] syzkaller0: entered allmulticast mode [ 233.821001][T10906] tls_set_device_offload_rx: netdev not found [ 233.855487][T10910] netlink: 'syz.2.1302': attribute type 10 has an invalid length. [ 233.911284][T10910] team0: Device vxcan1 is of different type [ 234.179156][T10927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.730543][T10952] netlink: 'syz.0.1308': attribute type 9 has an invalid length. [ 234.748199][T10953] netlink: 'syz.0.1308': attribute type 9 has an invalid length. [ 234.998275][T10964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1309'. [ 235.009437][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1309'. [ 235.026760][T10963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1309'. [ 235.210780][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'. [ 235.273789][T10973] bridge_slave_1: left allmulticast mode [ 235.283776][T10973] bridge_slave_1: left promiscuous mode [ 235.323840][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.389481][T10973] bridge_slave_0: left allmulticast mode [ 235.401055][T10973] bridge_slave_0: left promiscuous mode [ 235.411171][T10973] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.620792][T10898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.639600][T10926] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 236.794444][T10985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.843005][T10985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1312'. [ 237.115522][T11006] rdma_rxe: rxe_newlink: failed to add veth1_virt_wifi [ 237.156381][T11013] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 237.164976][T11013] nbd: error processing sock list [ 237.170043][T11007] syzkaller0: entered promiscuous mode [ 237.181819][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'. [ 237.191245][T11007] syzkaller0: entered allmulticast mode [ 237.284384][ T5945] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.489084][T11029] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1326'. [ 237.546746][T11025] syzkaller1: entered promiscuous mode [ 237.552369][T11025] syzkaller1: entered allmulticast mode [ 237.583658][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.656122][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'. [ 237.680443][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'. [ 237.768089][T11035] openvswitch: netlink: Key type 41 is out of range max 32 [ 237.828675][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 240.107582][T11009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.365375][T11041] netlink: 'syz.3.1331': attribute type 39 has an invalid length. [ 240.443659][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 240.486426][T11051] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1334'. [ 240.610443][T11059] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1335'. [ 240.654008][T11062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1336'. [ 240.688278][T11066] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1338'. [ 240.743873][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.945024][T11076] netlink: 'syz.0.1341': attribute type 12 has an invalid length. [ 240.959626][T11079] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.1340'. [ 241.045564][T11076] bond3: option primary_reselect: invalid value (255) [ 241.055643][T11083] netlink: 'syz.0.1341': attribute type 9 has an invalid length. [ 241.064410][T11083] netlink: 'syz.0.1341': attribute type 11 has an invalid length. [ 241.064542][T11085] netlink: 'syz.2.1343': attribute type 4 has an invalid length. [ 241.073621][T11083] netlink: 'syz.0.1341': attribute type 12 has an invalid length. [ 241.091009][T11076] bond3 (unregistering): Released all slaves [ 241.098142][T11083] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.1341'. [ 241.109853][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'. [ 241.120538][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 241.182848][T11085] netlink: 'syz.2.1343': attribute type 4 has an invalid length. [ 241.337481][T11096] tipc: Started in network mode [ 241.344300][T11096] tipc: Node identity de60b12af8b2, cluster identity 4711 [ 241.352971][T11096] tipc: Enabled bearer , priority 0 [ 241.428946][T11098] syzkaller0: entered promiscuous mode [ 241.454152][T11098] syzkaller0: entered allmulticast mode [ 241.485910][T11098] tipc: Resetting bearer [ 241.519389][T11094] tipc: Resetting bearer [ 241.701886][T11110] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20004 [ 243.334826][T11094] tipc: Disabling bearer [ 243.374328][ T5945] tipc: Node number set to 651342122 [ 243.459370][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1352'. [ 243.637152][T11141] syzkaller1: entered promiscuous mode [ 243.642801][T11141] syzkaller1: entered allmulticast mode [ 243.676208][T11145] netlink: 'syz.3.1354': attribute type 21 has an invalid length. [ 243.684715][T11145] netlink: 'syz.3.1354': attribute type 22 has an invalid length. [ 243.692615][T11145] netlink: 'syz.3.1354': attribute type 23 has an invalid length. [ 243.726712][T11145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.738588][T11145] syzkaller0: entered promiscuous mode [ 243.766242][T11145] syzkaller0: entered allmulticast mode [ 244.145512][T11164] tap0: tun_chr_ioctl cmd 1074025676 [ 244.159387][T11164] tap0: owner set to 0 [ 244.501002][T11186] sctp: [Deprecated]: syz.4.1367 (pid 11186) Use of int in max_burst socket option. [ 244.501002][T11186] Use struct sctp_assoc_value instead [ 245.427716][T11229] ieee802154 phy1 wpan1: encryption failed: -22 [ 245.475707][T11234] __nla_validate_parse: 15 callbacks suppressed [ 245.475730][T11234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1381'. [ 245.560312][T11237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1383'. [ 245.712830][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'. [ 245.780098][T11245] xt_hashlimit: overflow, try lower: 3/0 [ 245.816679][T11245] xt_hashlimit: overflow, try lower: 3/0 [ 246.036831][T11261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1389'. [ 246.089647][T11261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1389'. [ 246.102118][T11261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1389'. [ 246.299502][T11271] xt_l2tp: missing protocol rule (udp|l2tpip) [ 246.318604][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'. [ 246.438727][T11277] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 246.458474][T11280] sock: sock_timestamping_bind_phc: sock not bind to device [ 246.628228][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 246.916060][T11300] bond6: option min_links: invalid value (18446744073709551614) [ 246.924999][T11300] bond6: option min_links: allowed values 0 - 2147483647 [ 246.944792][T11300] bond6 (unregistering): Released all slaves [ 247.027704][T11307] netlink: zone id is out of range [ 247.033187][T11307] netlink: zone id is out of range [ 247.040565][T11307] netlink: zone id is out of range [ 247.046605][T11307] netlink: zone id is out of range [ 247.052009][T11307] netlink: zone id is out of range [ 247.065745][T11307] netlink: zone id is out of range [ 247.074107][T11307] netlink: zone id is out of range [ 247.081579][T11307] netlink: zone id is out of range [ 247.084906][T11303] bond6: option fail_over_mac: invalid value (16) [ 247.094782][T11307] netlink: zone id is out of range [ 247.096439][T11303] bond6 (unregistering): Released all slaves [ 247.100902][T11307] netlink: zone id is out of range [ 247.478804][T11325] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1409'. [ 247.770620][T11341] syzkaller0: entered promiscuous mode [ 247.788820][T11341] syzkaller0: entered allmulticast mode [ 247.875472][T11344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1415'. [ 247.887892][T11344] xt_hashlimit: size too large, truncated to 1048576 [ 248.401696][T11379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.475519][T11381] xt_NFQUEUE: number of total queues is 0 [ 248.790027][T11398] validate_nla: 2 callbacks suppressed [ 248.790047][T11398] netlink: 'syz.2.1429': attribute type 3 has an invalid length. [ 249.222970][T11421] netlink: 'syz.4.1436': attribute type 9 has an invalid length. [ 249.231361][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 249.338905][T11425] gtp1: entered promiscuous mode [ 249.344406][T11425] gtp1: entered allmulticast mode [ 249.530084][T11435] netlink: 'syz.0.1442': attribute type 11 has an invalid length. [ 249.676025][T11439] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.724415][T11439] wlan0 speed is unknown, defaulting to 1000 [ 249.863642][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.932177][T11503] netlink: 'syz.2.1459': attribute type 1 has an invalid length. [ 250.991090][T11503] 8021q: adding VLAN 0 to HW filter on device bond9 [ 251.050339][T11503] bond9: (slave batadv1): Opening slave failed [ 251.062832][T11515] __nla_validate_parse: 12 callbacks suppressed [ 251.062857][T11515] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1462'. [ 251.103150][T11515] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1462'. [ 251.150767][T11510] bond9: (slave veth7): Enslaving as an active interface with a down link [ 251.289150][T11521] vcan0: entered allmulticast mode [ 251.654615][T11539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1469'. [ 251.732833][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 251.768199][T11548] tipc: New replicast peer: 0.0.0.0 [ 251.805399][T11548] tipc: Enabled bearer , priority 10 [ 251.835609][T11548] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 251.855592][ T9727] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.057113][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'. [ 252.071456][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'. [ 252.476398][T11574] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1478'. [ 252.688316][T11585] netlink: 'syz.4.1483': attribute type 4 has an invalid length. [ 252.730184][T11585] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1483'. [ 252.923725][ T5883] tipc: Node number set to 1451666840 [ 253.163071][T11611] netlink: 'syz.4.1489': attribute type 10 has an invalid length. [ 253.200907][T11611] netlink: 396 bytes leftover after parsing attributes in process `syz.4.1489'. [ 253.465629][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 253.483516][T11627] net_ratelimit: 46 callbacks suppressed [ 253.483540][T11627] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 253.844330][T11651] netlink: 'syz.4.1494': attribute type 1 has an invalid length. [ 254.069559][T11654] bond6: (slave geneve3): making interface the new active one [ 254.114293][T11654] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 254.194196][ T9729] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 254.232886][T11655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.250763][ T9729] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 254.316526][ T9729] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 254.359069][ T9729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 254.432429][ T29] audit: type=1800 audit(1774288406.026:3): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1499" name="memory.events" dev="tmpfs" ino=1514 res=0 errno=0 [ 254.462651][ T29] audit: type=1804 audit(1774288406.056:4): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1499" name="/newroot/293/memory.events" dev="tmpfs" ino=1514 res=1 errno=0 [ 255.378843][T11723] ±ÿ: renamed from team_slave_1 [ 255.420921][T11730] xt_nat: multiple ranges no longer supported [ 255.429922][T11729] xt_nat: multiple ranges no longer supported [ 255.493214][T11723] netlink: 'syz.0.1511': attribute type 10 has an invalid length. [ 255.646667][T11740] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 255.841912][T11740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.855767][T11740] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 255.910832][T11749] bond3: (slave geneve2): making interface the new active one [ 256.012247][T11749] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 256.079529][T11740] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 256.139900][T11740] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 256.236396][T11740] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 256.269078][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.324361][T11740] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 256.380413][T11740] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 256.397610][T11771] __nla_validate_parse: 5 callbacks suppressed [ 256.397631][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1523'. [ 256.486749][T11785] xt_ecn: cannot match TCP bits for non-tcp packets [ 256.504423][T11779] team0: No ports can be present during mode change [ 256.908378][T11799] sctp: [Deprecated]: syz.4.1530 (pid 11799) Use of int in max_burst socket option. [ 256.908378][T11799] Use struct sctp_assoc_value instead [ 256.998448][T11803] netlink: 'syz.0.1532': attribute type 10 has an invalid length. [ 257.088514][T11803] team0: Device vxcan1 is of different type [ 257.252291][T11812] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 257.349284][T11812] bond4: entered promiscuous mode [ 257.566856][T11837] 8021q: VLANs not supported on ip6gre0 [ 257.577303][T11834] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1542'. [ 257.691041][T11844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1545'. [ 257.718732][T11844] xfrm1: entered promiscuous mode [ 257.736390][T11844] xfrm1: entered allmulticast mode [ 257.762202][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1545'. [ 257.958323][T11857] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 257.986265][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1550'. [ 258.111507][T11863] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.122317][T11863] wlan0 speed is unknown, defaulting to 1000 [ 259.383107][T11929] bond10: (slave ip_vti0): Device is not bonding slave [ 259.444323][T11929] bond10: option active_slave: invalid value (ip_vti0) [ 259.550451][T11929] bond10 (unregistering): Released all slaves [ 259.611942][T11927] bond10: (slave ip_vti0): Device is not bonding slave [ 259.623483][T11927] bond10: option active_slave: invalid value (ip_vti0) [ 259.632820][T11927] bond10 (unregistering): Released all slaves [ 259.717080][T11945] veth0_vlan: mtu less than device minimum [ 259.903035][T11953] syzkaller0: entered promiscuous mode [ 259.909442][T11953] syzkaller0: entered allmulticast mode [ 259.977263][T11940] x_tables: unsorted entry at hook 1 [ 259.989484][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 259.998599][T11940] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1576'. [ 259.998632][T11940] openvswitch: netlink: Flow actions attr not present in new flow. [ 260.060105][T11976] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1581'. [ 260.069559][T11969] openvswitch: netlink: Flow actions attr not present in new flow. [ 260.606346][T12011] xt_hashlimit: size too large, truncated to 1048576 [ 265.318264][ T5195] udevd[5195]: worker [6731] /devices/virtual/block/nbd0 is taking a long time [ 265.863714][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.143918][ T30] INFO: task udevd:6731 blocked for more than 143 seconds. [ 267.151769][ T30] Not tainted syzkaller #0 [ 267.157335][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 267.166257][ T30] task:udevd state:D stack:23464 pid:6731 tgid:6731 ppid:5195 task_flags:0x400140 flags:0x00080000 [ 267.178455][ T30] Call Trace: [ 267.181786][ T30] [ 267.184928][ T30] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 267.189501][ T30] ? blk_mq_flush_plug_list+0x443/0x570 [ 267.195254][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 267.202024][ T30] ? __blk_flush_plug+0x416/0x4d0 [ 267.208146][ T30] ? __pfx___schedule+0x10/0x10 [ 267.213075][ T30] ? schedule+0x90/0x360 [ 267.217559][ T30] schedule+0x164/0x360 [ 267.221885][ T30] schedule_timeout+0x158/0x2c0 [ 267.227241][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 267.232703][ T30] ? __pfx_process_timeout+0x10/0x10 [ 267.238334][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 267.244352][ T30] ? prepare_to_wait_event+0x436/0x480 [ 267.250057][ T30] nbd_queue_rq+0x857/0x1100 [ 267.254912][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 267.259995][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 267.267138][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 267.272806][ T30] ? sbitmap_get+0x229/0x390 [ 267.316664][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 267.323002][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 267.384354][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 267.403473][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 267.410434][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 267.453380][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 267.458796][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 267.473553][ T30] blk_mq_dispatch_list+0xd16/0xe10 [ 267.478961][ T30] ? bdev_count_inflight+0x1cf/0x210 [ 267.484991][ T30] ? blk_mq_dispatch_list+0x1c0/0xe10 [ 267.490633][ T30] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 267.497190][ T30] ? rcu_is_watching+0x15/0xb0 [ 267.502071][ T30] blk_mq_flush_plug_list+0x48d/0x570 [ 267.508259][ T30] ? blk_add_rq_to_plug+0x300/0x450 [ 267.514012][ T30] ? blk_mq_submit_bio+0xef8/0x2810 [ 267.519287][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 267.526354][ T30] __blk_flush_plug+0x3ed/0x4d0 [ 267.531285][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 267.537311][ T30] __submit_bio+0x28d/0x580 [ 267.541905][ T30] ? __pfx___submit_bio+0x10/0x10 [ 267.547801][ T30] ? bio_associate_blkg+0x6d/0x230 [ 267.553003][ T30] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 267.560044][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 267.583725][ T30] ? bio_alloc_bioset+0xbe2/0x11b0 [ 267.589226][ T30] block_read_full_folio+0x599/0x830 [ 267.603847][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 267.609399][ T30] filemap_read_folio+0x137/0x3b0 [ 267.623782][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 267.629381][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 267.643719][ T30] ? filemap_add_folio+0x356/0x530 [ 267.649211][ T30] do_read_cache_folio+0x358/0x590 [ 267.673758][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 267.679517][ T30] read_part_sector+0xb6/0x2b0 [ 267.693373][ T30] adfspart_check_ICS+0xa5/0xa40 [ 267.698535][ T30] ? snprintf+0xe8/0x140 [ 267.702858][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 267.715897][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 267.722104][ T30] bdev_disk_changed+0x7ba/0x1550 [ 267.743446][ T30] ? bdev_open+0xe0/0xd30 [ 267.747924][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 267.763366][ T30] blkdev_get_whole+0x380/0x510 [ 267.768325][ T30] bdev_open+0x31e/0xd30 [ 267.772627][ T30] blkdev_open+0x470/0x610 [ 267.783829][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 267.788851][ T30] do_dentry_open+0x785/0x14e0 [ 267.807646][ T30] vfs_open+0x3b/0x340 [ 267.811962][ T30] ? path_openat+0x2df0/0x3860 [ 267.833449][ T30] path_openat+0x2e08/0x3860 [ 267.838234][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 267.853436][ T30] ? stack_depot_save_flags+0x33/0x810 [ 267.859279][ T30] ? __pfx_path_openat+0x10/0x10 [ 267.864704][ T30] ? __x64_sys_openat+0x138/0x170 [ 267.869929][ T30] ? do_syscall_64+0x14d/0xf80 [ 267.880571][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.886968][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 267.892074][ T30] do_file_open+0x23e/0x4a0 [ 267.896747][ T30] ? __pfx_do_file_open+0x10/0x10 [ 267.902037][ T30] ? _raw_spin_unlock+0x28/0x50 [ 267.907048][ T30] ? alloc_fd+0x64b/0x6c0 [ 267.911603][ T30] do_sys_openat2+0x113/0x200 [ 267.916660][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 267.922435][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.927996][ T30] ? rcu_is_watching+0x15/0xb0 [ 267.932943][ T30] __x64_sys_openat+0x138/0x170 [ 267.939180][ T30] do_syscall_64+0x14d/0xf80 [ 267.944455][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.950685][ T30] ? clear_bhb_loop+0x40/0x90 [ 267.955711][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.961658][ T30] RIP: 0033:0x7f5e76ca7407 [ 267.966162][ T30] RSP: 002b:00007ffcecf3cad0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 267.975208][ T30] RAX: ffffffffffffffda RBX: 00007f5e77451880 RCX: 00007f5e76ca7407 [ 267.983711][ T30] RDX: 00000000000a0800 RSI: 0000559a4232c030 RDI: ffffffffffffff9c [ 267.991823][ T30] RBP: 0000559a42301910 R08: 0000000000000000 R09: 0000000000000000 [ 268.000406][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559a4239bd10 [ 268.008748][ T30] R13: 0000559a4230f190 R14: 0000000000000000 R15: 0000559a4239bd10 [ 268.017374][ T30] [ 268.020580][ T30] [ 268.020580][ T30] Showing all locks held in the system: [ 268.050595][ T30] 1 lock held by khungtaskd/30: [ 268.055609][ T30] #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 268.082466][ T30] 2 locks held by getty/5581: [ 268.087332][ T30] #0: ffff888032e660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 268.097579][ T30] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 268.107932][ T30] 2 locks held by syz-executor/5823: [ 268.154961][ T30] 5 locks held by syz-executor/5827: [ 268.160322][ T30] #0: ffff888034704ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 268.184762][ T30] #1: ffff8880347040c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 268.203425][ T30] #2: ffffffff8fd5abe8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 268.223414][ T30] #3: ffff88807cc95300 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 268.232952][ T30] #4: ffffffff8e7647b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 268.264456][ T30] 1 lock held by syz-executor/5828: [ 268.269748][ T30] 3 locks held by syz-executor/5834: [ 268.295371][ T30] #0: ffff88802b464ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 268.331586][ T30] #1: ffff88802b4640c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 268.363614][ T30] #2: ffffffff8fd5abe8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 268.393457][ T30] 3 locks held by kworker/1:7/5925: [ 268.398929][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 268.453578][ T30] #1: ffffc90004417c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 268.473461][ T30] #2: ffffffff8e7647b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 268.484875][ T30] 3 locks held by udevd/6731: [ 268.489745][ T30] #0: ffff888026ea1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 268.499720][ T30] #1: ffff888026e2e718 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 268.509798][ T30] #2: ffff888026ef0180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 268.519088][ T30] 3 locks held by kworker/u8:24/9729: [ 268.525006][ T30] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 268.535534][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 268.545104][ T30] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 268.554517][ T30] 2 locks held by kworker/u8:29/9735: [ 268.560417][ T30] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 268.570999][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 268.599381][ T30] [ 268.601772][ T30] ============================================= [ 268.601772][ T30] [ 268.624757][ T30] NMI backtrace for cpu 0 [ 268.624780][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 268.624803][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 268.624824][ T30] Call Trace: [ 268.624832][ T30] [ 268.624842][ T30] dump_stack_lvl+0xe8/0x150 [ 268.624877][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 268.624908][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 268.624938][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 268.624972][ T30] sys_info+0x135/0x170 [ 268.624998][ T30] watchdog+0xfd9/0x1030 [ 268.625084][ T30] ? watchdog+0x21a/0x1030 [ 268.625124][ T30] kthread+0x388/0x470 [ 268.625146][ T30] ? __pfx_watchdog+0x10/0x10 [ 268.625176][ T30] ? __pfx_kthread+0x10/0x10 [ 268.625198][ T30] ret_from_fork+0x51e/0xb90 [ 268.625229][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 268.625255][ T30] ? __switch_to+0xc7d/0x1450 [ 268.625284][ T30] ? __pfx_kthread+0x10/0x10 [ 268.625306][ T30] ret_from_fork_asm+0x1a/0x30 [ 268.625356][ T30] [ 268.625364][ T30] Sending NMI from CPU 0 to CPUs 1: [ 268.741986][ C1] NMI backtrace for cpu 1 [ 268.742012][ C1] CPU: 1 UID: 0 PID: 1326 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 268.742034][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 268.742047][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 268.742082][ C1] RIP: 0010:check_preemption_disabled+0x1/0xe0 [ 268.742109][ C1] Code: a0 c1 27 8c 48 c7 c6 e0 c1 27 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 57 93 6d 07 65 8b 0d 4c 93 6d 07 f7 c1 ff [ 268.742127][ C1] RSP: 0018:ffffc900052cf3b0 EFLAGS: 00000283 [ 268.742142][ C1] RAX: 0000000000000001 RBX: ffffffff897512bd RCX: 0000000000000002 [ 268.742155][ C1] RDX: 0000000000000000 RSI: ffffffff8c27c1e0 RDI: ffffffff8c27c1a0 [ 268.742168][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.742179][ C1] R10: ffffc900052cf578 R11: ffffffff81b0c260 R12: 0000000000000002 [ 268.742192][ C1] R13: ffffffff8e75e520 R14: 0000000000000000 R15: 0000000000000000 [ 268.742204][ C1] FS: 0000000000000000(0000) GS:ffff88812555d000(0000) knlGS:0000000000000000 [ 268.742220][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.742232][ C1] CR2: 000055652263fee8 CR3: 0000000064b00000 CR4: 00000000003526f0 [ 268.742249][ C1] Call Trace: [ 268.742257][ C1] [ 268.742267][ C1] rcu_is_watching+0x15/0xb0 [ 268.742295][ C1] ? __kfree_skb+0x5d/0x210 [ 268.742315][ C1] lock_acquire+0x57/0x2e0 [ 268.742341][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 268.742368][ C1] ? __kfree_skb+0x5d/0x210 [ 268.742387][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 268.742413][ C1] unwind_next_frame+0xc2/0x23c0 [ 268.742439][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 268.742469][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 268.742496][ C1] ? skb_release_data+0x6f0/0x940 [ 268.742515][ C1] ? __kfree_skb+0x5d/0x210 [ 268.742535][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 268.742556][ C1] arch_stack_walk+0x11b/0x150 [ 268.742587][ C1] ? __kfree_skb+0x5d/0x210 [ 268.742608][ C1] stack_trace_save+0xa9/0x100 [ 268.742626][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 268.742652][ C1] kasan_save_track+0x3e/0x80 [ 268.742672][ C1] ? kasan_save_track+0x3e/0x80 [ 268.742690][ C1] ? kasan_save_free_info+0x46/0x50 [ 268.742716][ C1] ? __kasan_slab_free+0x5c/0x80 [ 268.742735][ C1] ? kfree+0x1c1/0x630 [ 268.742751][ C1] ? skb_release_data+0x6f0/0x940 [ 268.742777][ C1] ? __kfree_skb+0x5d/0x210 [ 268.742822][ C1] ? __asan_memset+0x22/0x50 [ 268.742839][ C1] kasan_save_free_info+0x46/0x50 [ 268.742866][ C1] __kasan_slab_free+0x5c/0x80 [ 268.742887][ C1] kfree+0x1c1/0x630 [ 268.742902][ C1] ? skb_release_data+0x6f0/0x940 [ 268.742925][ C1] skb_release_data+0x6f0/0x940 [ 268.742952][ C1] __kfree_skb+0x5d/0x210 [ 268.742971][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 268.743007][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 268.743034][ C1] process_scheduled_works+0xb6e/0x18c0 [ 268.743076][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 268.743103][ C1] ? assign_work+0x3d5/0x5e0 [ 268.743129][ C1] worker_thread+0xa53/0xfc0 [ 268.743171][ C1] kthread+0x388/0x470 [ 268.743189][ C1] ? __pfx_worker_thread+0x10/0x10 [ 268.743213][ C1] ? __pfx_kthread+0x10/0x10 [ 268.743230][ C1] ret_from_fork+0x51e/0xb90 [ 268.743257][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 268.743281][ C1] ? __switch_to+0xc7d/0x1450 [ 268.743308][ C1] ? __pfx_kthread+0x10/0x10 [ 268.743326][ C1] ret_from_fork_asm+0x1a/0x30 [ 268.743367][ C1] [ 269.113420][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 269.120783][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 269.130031][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.140316][ T30] Call Trace: [ 269.144083][ T30] [ 269.147051][ T30] vpanic+0x56c/0xa60 [ 269.151177][ T30] ? __pfx___schedule+0x10/0x10 [ 269.156272][ T30] ? __pfx_vpanic+0x10/0x10 [ 269.161077][ T30] panic+0xc5/0xd0 [ 269.165272][ T30] ? __pfx_panic+0x10/0x10 [ 269.169812][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 269.175397][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 269.182838][ T30] watchdog+0x1023/0x1030 [ 269.188152][ T30] ? watchdog+0x21a/0x1030 [ 269.192823][ T30] kthread+0x388/0x470 [ 269.197112][ T30] ? __pfx_watchdog+0x10/0x10 [ 269.202110][ T30] ? __pfx_kthread+0x10/0x10 [ 269.206746][ T30] ret_from_fork+0x51e/0xb90 [ 269.211460][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 269.216603][ T30] ? __switch_to+0xc7d/0x1450 [ 269.221310][ T30] ? __pfx_kthread+0x10/0x10 [ 269.226012][ T30] ret_from_fork_asm+0x1a/0x30 [ 269.230887][ T30] [ 269.234633][ T30] Kernel Offset: disabled [ 269.239062][ T30] Rebooting in 86400 seconds..