last executing test programs: 5m2.158665842s ago: executing program 2 (id=2812): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "30bd05a78f0edbcb66cce5984343e09c262fc62d381cd6515d33e142245708d9", "85db081dcb26409ecb60274324d72410", {"0c1c28b8552c9dfdf23da2340cb8cbc7", "1f5489d79cc13665174cedcb215e4a1a"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000140), 0x7, r3}, 0xfffffffffffffc1a) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 5m1.268298902s ago: executing program 2 (id=2818): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099"], 0x38}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5m1.023547747s ago: executing program 2 (id=2824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13", 0x11}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @empty}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x60}}, 0x8000) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x1401, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x6048095) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x6, 0x8}, {0xfffd, 0xfff1}, {0x1, 0x8}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0xed8}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4880}, 0x1) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000740)=0x5, 0x4) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) 5m0.611277644s ago: executing program 2 (id=2835): r0 = socket(0x1e, 0x805, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "8750bb", 0x28, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0x23}, @empty, {[@dstopts={0x2, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn, @hao={0xc9, 0x10, @empty}]}]}}}}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r0}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r0}]}}}]}, 0x80}}, 0x0) 5m0.441615064s ago: executing program 2 (id=2839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5d}}, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macvtap0\x00'}) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0x9efbf000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09fd8c0fe5000000040008001200f3dc7efc3243c67300000500", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008fc4f8bbf001c000000000008001d00"], 0x44}}, 0x0) bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x4000094) 5m0.292211373s ago: executing program 2 (id=2843): r0 = socket(0x2d, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x4000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) 4m45.082182721s ago: executing program 32 (id=2843): r0 = socket(0x2d, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x4000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) 2m32.989770076s ago: executing program 1 (id=5188): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20040005) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) 2m32.815921281s ago: executing program 1 (id=5192): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r1, r2, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) syz_emit_ethernet(0x73, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff003d3a0000000000000000000000ff02000000000000000000000000000102009078000000006000000000001100fe88000000000000000000000000010100000000000000000000ffffe0000001330006d16600000017c17f0791"], 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) (async) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 2m32.646393475s ago: executing program 1 (id=5198): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4) (async) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0xfe33) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x70bd6c, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 2m32.464939091s ago: executing program 1 (id=5204): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000007c0), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)={0x1d4, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x1ac, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x180, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @loopback, 0x157}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) 2m32.303345711s ago: executing program 1 (id=5206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0x9}, {0x13, 0xffff}}, [@TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x84, 0x4, 0x3, 0x9, 0x1, 0x1, 0x400, 0x5}}, {0xe, 0x2, [0x0, 0x7ff, 0xe7, 0x7, 0x5]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018008000200", @ANYRES32=0x0, @ANYBLOB="08000f00", @ANYRES32=0x0, @ANYBLOB="04672d802d1cdc98208781e633b4d5e6159d2c0ab36d5d0bc7"], 0x30}}, 0xc000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 2m32.012636299s ago: executing program 1 (id=5212): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xac, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_INDEX}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x56, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0xc000) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000800)={&(0x7f0000000080), 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x2bc, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x1d0, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabe1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64f57d42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x308a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcfee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b4b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd33c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb0fd292}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdd56}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d85}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x714a6cdd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6caacbcc}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46e3775a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dda2038}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43851f7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x642a7648}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x130a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda8a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40de664e}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18e00018}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7343ce22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x180984e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfdd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6449}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x316246bc}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b08e004}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6fb2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67b61ea5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21ed0b50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x114b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa879d25}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12ca072c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x138f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b688c86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ef7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f8c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfffffffb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d8b8e98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40c1}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x258cd40e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15bafea4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77bbfd16}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d38}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77a9a37f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7222c017}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x519}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2de6b7d5}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42bceee8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x503f5645}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c2e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60c11958}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c068d5d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51467447}]}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) r8 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, 0x0, &(0x7f0000000040)) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000000340)=""/93, 0x5d}, {&(0x7f00000003c0)=""/204, 0xcc}], 0x3}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000700", @ANYRES16=r9, @ANYBLOB="04002cbd7000fddbdf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4050) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0x3}, 0x6) write$bt_hci(r11, &(0x7f00000002c0)=ANY=[@ANYRES64=r10], 0x6) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r10, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r12, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x8040) 2m6.098615701s ago: executing program 33 (id=5212): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xac, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_INDEX}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x56, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0xc000) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000800)={&(0x7f0000000080), 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x2bc, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x1d0, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabe1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64f57d42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x308a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcfee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b4b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd33c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb0fd292}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdd56}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d85}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x714a6cdd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6caacbcc}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46e3775a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dda2038}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43851f7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x642a7648}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x130a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda8a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40de664e}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18e00018}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7343ce22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x180984e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfdd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6449}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x316246bc}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b08e004}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6fb2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67b61ea5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21ed0b50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x114b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa879d25}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12ca072c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x138f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b688c86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ef7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f8c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfffffffb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d8b8e98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40c1}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x258cd40e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15bafea4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77bbfd16}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d38}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77a9a37f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7222c017}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x519}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2de6b7d5}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42bceee8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x503f5645}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c2e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60c11958}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c068d5d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51467447}]}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) r8 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, 0x0, &(0x7f0000000040)) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000000340)=""/93, 0x5d}, {&(0x7f00000003c0)=""/204, 0xcc}], 0x3}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000700", @ANYRES16=r9, @ANYBLOB="04002cbd7000fddbdf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4050) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0x3}, 0x6) write$bt_hci(r11, &(0x7f00000002c0)=ANY=[@ANYRES64=r10], 0x6) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r10, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r12, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x8040) 1m24.776321721s ago: executing program 3 (id=5564): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xd, 0x2, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x310000, 0x1000, 0x4, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r7, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000200)={0x2c, 0x1, r5, 0x25, r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3a, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x6}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r10}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) 1m24.512505167s ago: executing program 3 (id=5571): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m24.354888334s ago: executing program 3 (id=5575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000000c0)=0x7, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000200), 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100)=0xf7fffffd, 0x4) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xcac, 0x0, 0x0, 0x9, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x11, 0x8, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x7fff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1m24.282964727s ago: executing program 3 (id=5577): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m24.122559741s ago: executing program 3 (id=5579): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x16, 0x2, 0x1, 0x40000000}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100, @val=0x80}}}}}}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'hsr0\x00', 0x5dc}) 1m24.003618235s ago: executing program 3 (id=5582): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b80)={0x320, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x147}, @nested={0x308, 0x1, 0x0, 0x1, [@nested={0x304, 0xd, 0x0, 0x1, [@typed={0x6, 0x5a, 0x0, 0x0, @str='\xeb\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}, @nested={0x2e1, 0xa6, 0x0, 0x1, [@nested={0x4, 0x83}, @nested={0x4, 0x3e}, @typed={0x8, 0xf, 0x0, 0x0, @pid}, @generic="c32bf4a76b6d80d958b215d5722da11c3329fb931578bb94bdac6efb3a00428c5b7404768247da10169e3fe65c76e1b51778a24bed80b227bf25b1161d57219ff2c4f158c59eda45c55c14cc646f0bafd0872aed47c21e0619da153ca82efda184309747037183322bb0ed24ed78cbfd93f34b3e6462177ebdfef8ef35ad495044ba2ec56d1abf6df83a157c705c7b0791d7897d2e89f3f759", @nested={0x234, 0xe3, 0x0, 0x1, [@nested={0x10, 0x51, 0x0, 0x1, [@nested={0x8, 0xb8, 0x0, 0x1, [@nested={0x4, 0xef}]}, @nested={0x4, 0xcd}]}, @nested={0x21f, 0x93, 0x0, 0x1, [@generic="c3f5c72cd0fa27fd1c6812ef8e1befc6dd66baf5ffb4010bfed22627401146e7362051466d419863ff93", @generic="7925f7688169ace0cfecc23d527792f6b6a7dfe6814c3ee36fcdb8fe9325ff82d35e2dce7f5147adf53307102b43dd61927df8018decd7cd814e7fe1e20c26be1a6955e1db3230ae1febf44420e698437ea4f25385ab85b2332bc76b3e869874ecb86162ced3d690c075cd44e816e360194eadc984cbdd5e66b0b9c1b7b9db2f73469ece210d75d94e1acf6148c065b424146eccba9b59d95846d0d3799317d807e5ee8f218b482c1a480d4ed62d5e45941e335b9d", @nested={0x13c, 0x142, 0x0, 0x1, [@generic="352c67d5fc6fd9d898304b8fe2df42dd8add262d407a3b1e1ee8e1e806524e78c2557cf46a858819aaa7764e598cca6810d40c23597951909e8ad7054b916a31d649da23375477de43bf7dd115ea89729088681f0de11c79f4045d945728135678d570382ed4370e0bf9a99d567c05d20b0bfb2fc53c2e4f216c0af47c0e", @nested={0x4, 0x2a}, @generic="c7cf100e376fb37d2f0d5a2f57e36a36d627c64421fe11e61a0b012c0fa5905bd7b65b9439a2969a8e5ee440e3f43c38a813a5859d4b22fddfd850b4bc30152976fa710e8ab96100ecee9042eaa9d6983009c3103f263c67b3063bafadfaac3fbb9558bb194d32cfef71c926772ccf28740d1e53581e16fed2dd1ba34f7f6785298a94215ee89cc2c228cd0bbe451348090f36dde427c3fe307a", @typed={0x8, 0x102, 0x0, 0x0, @fd}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback}]}]}]}]}]}]}]}, 0x320}}, 0xc000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000080000000000000000000000000000000000000000000000001857709695ad5bb501bff1caca7befae210f3259b4f00ac0621ce1ac4e479255eabd7f66d78fe8700b4506894ca62ad948bbfa6010e7da4f9be61dff4c518f50bc3c7ef5cea40ab51b1651fe1c30773833c62ae840918ea77c74fd34afaed07d375fdb10f0daeb244a1d89a5aeb12515c739b3a1f3865401d37818cc4e76409a8885a16579587b1f1a8bc09b9505c7cecb92"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b80)={0x320, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x147}, @nested={0x308, 0x1, 0x0, 0x1, [@nested={0x304, 0xd, 0x0, 0x1, [@typed={0x6, 0x5a, 0x0, 0x0, @str='\xeb\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}, @nested={0x2e1, 0xa6, 0x0, 0x1, [@nested={0x4, 0x83}, @nested={0x4, 0x3e}, @typed={0x8, 0xf, 0x0, 0x0, @pid}, @generic="c32bf4a76b6d80d958b215d5722da11c3329fb931578bb94bdac6efb3a00428c5b7404768247da10169e3fe65c76e1b51778a24bed80b227bf25b1161d57219ff2c4f158c59eda45c55c14cc646f0bafd0872aed47c21e0619da153ca82efda184309747037183322bb0ed24ed78cbfd93f34b3e6462177ebdfef8ef35ad495044ba2ec56d1abf6df83a157c705c7b0791d7897d2e89f3f759", @nested={0x234, 0xe3, 0x0, 0x1, [@nested={0x10, 0x51, 0x0, 0x1, [@nested={0x8, 0xb8, 0x0, 0x1, [@nested={0x4, 0xef}]}, @nested={0x4, 0xcd}]}, @nested={0x21f, 0x93, 0x0, 0x1, [@generic="c3f5c72cd0fa27fd1c6812ef8e1befc6dd66baf5ffb4010bfed22627401146e7362051466d419863ff93", @generic="7925f7688169ace0cfecc23d527792f6b6a7dfe6814c3ee36fcdb8fe9325ff82d35e2dce7f5147adf53307102b43dd61927df8018decd7cd814e7fe1e20c26be1a6955e1db3230ae1febf44420e698437ea4f25385ab85b2332bc76b3e869874ecb86162ced3d690c075cd44e816e360194eadc984cbdd5e66b0b9c1b7b9db2f73469ece210d75d94e1acf6148c065b424146eccba9b59d95846d0d3799317d807e5ee8f218b482c1a480d4ed62d5e45941e335b9d", @nested={0x13c, 0x142, 0x0, 0x1, [@generic="352c67d5fc6fd9d898304b8fe2df42dd8add262d407a3b1e1ee8e1e806524e78c2557cf46a858819aaa7764e598cca6810d40c23597951909e8ad7054b916a31d649da23375477de43bf7dd115ea89729088681f0de11c79f4045d945728135678d570382ed4370e0bf9a99d567c05d20b0bfb2fc53c2e4f216c0af47c0e", @nested={0x4, 0x2a}, @generic="c7cf100e376fb37d2f0d5a2f57e36a36d627c64421fe11e61a0b012c0fa5905bd7b65b9439a2969a8e5ee440e3f43c38a813a5859d4b22fddfd850b4bc30152976fa710e8ab96100ecee9042eaa9d6983009c3103f263c67b3063bafadfaac3fbb9558bb194d32cfef71c926772ccf28740d1e53581e16fed2dd1ba34f7f6785298a94215ee89cc2c228cd0bbe451348090f36dde427c3fe307a", @typed={0x8, 0x102, 0x0, 0x0, @fd}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback}]}]}]}]}]}]}]}, 0x320}}, 0xc000) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000080000000000000000000000000000000000000000000000001857709695ad5bb501bff1caca7befae210f3259b4f00ac0621ce1ac4e479255eabd7f66d78fe8700b4506894ca62ad948bbfa6010e7da4f9be61dff4c518f50bc3c7ef5cea40ab51b1651fe1c30773833c62ae840918ea77c74fd34afaed07d375fdb10f0daeb244a1d89a5aeb12515c739b3a1f3865401d37818cc4e76409a8885a16579587b1f1a8bc09b9505c7cecb92"], 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 1m9.012674287s ago: executing program 34 (id=5582): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b80)={0x320, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x147}, @nested={0x308, 0x1, 0x0, 0x1, [@nested={0x304, 0xd, 0x0, 0x1, [@typed={0x6, 0x5a, 0x0, 0x0, @str='\xeb\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}, @nested={0x2e1, 0xa6, 0x0, 0x1, [@nested={0x4, 0x83}, @nested={0x4, 0x3e}, @typed={0x8, 0xf, 0x0, 0x0, @pid}, @generic="c32bf4a76b6d80d958b215d5722da11c3329fb931578bb94bdac6efb3a00428c5b7404768247da10169e3fe65c76e1b51778a24bed80b227bf25b1161d57219ff2c4f158c59eda45c55c14cc646f0bafd0872aed47c21e0619da153ca82efda184309747037183322bb0ed24ed78cbfd93f34b3e6462177ebdfef8ef35ad495044ba2ec56d1abf6df83a157c705c7b0791d7897d2e89f3f759", @nested={0x234, 0xe3, 0x0, 0x1, [@nested={0x10, 0x51, 0x0, 0x1, [@nested={0x8, 0xb8, 0x0, 0x1, [@nested={0x4, 0xef}]}, @nested={0x4, 0xcd}]}, @nested={0x21f, 0x93, 0x0, 0x1, [@generic="c3f5c72cd0fa27fd1c6812ef8e1befc6dd66baf5ffb4010bfed22627401146e7362051466d419863ff93", @generic="7925f7688169ace0cfecc23d527792f6b6a7dfe6814c3ee36fcdb8fe9325ff82d35e2dce7f5147adf53307102b43dd61927df8018decd7cd814e7fe1e20c26be1a6955e1db3230ae1febf44420e698437ea4f25385ab85b2332bc76b3e869874ecb86162ced3d690c075cd44e816e360194eadc984cbdd5e66b0b9c1b7b9db2f73469ece210d75d94e1acf6148c065b424146eccba9b59d95846d0d3799317d807e5ee8f218b482c1a480d4ed62d5e45941e335b9d", @nested={0x13c, 0x142, 0x0, 0x1, [@generic="352c67d5fc6fd9d898304b8fe2df42dd8add262d407a3b1e1ee8e1e806524e78c2557cf46a858819aaa7764e598cca6810d40c23597951909e8ad7054b916a31d649da23375477de43bf7dd115ea89729088681f0de11c79f4045d945728135678d570382ed4370e0bf9a99d567c05d20b0bfb2fc53c2e4f216c0af47c0e", @nested={0x4, 0x2a}, @generic="c7cf100e376fb37d2f0d5a2f57e36a36d627c64421fe11e61a0b012c0fa5905bd7b65b9439a2969a8e5ee440e3f43c38a813a5859d4b22fddfd850b4bc30152976fa710e8ab96100ecee9042eaa9d6983009c3103f263c67b3063bafadfaac3fbb9558bb194d32cfef71c926772ccf28740d1e53581e16fed2dd1ba34f7f6785298a94215ee89cc2c228cd0bbe451348090f36dde427c3fe307a", @typed={0x8, 0x102, 0x0, 0x0, @fd}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback}]}]}]}]}]}]}]}, 0x320}}, 0xc000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000080000000000000000000000000000000000000000000000001857709695ad5bb501bff1caca7befae210f3259b4f00ac0621ce1ac4e479255eabd7f66d78fe8700b4506894ca62ad948bbfa6010e7da4f9be61dff4c518f50bc3c7ef5cea40ab51b1651fe1c30773833c62ae840918ea77c74fd34afaed07d375fdb10f0daeb244a1d89a5aeb12515c739b3a1f3865401d37818cc4e76409a8885a16579587b1f1a8bc09b9505c7cecb92"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b80)={0x320, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x147}, @nested={0x308, 0x1, 0x0, 0x1, [@nested={0x304, 0xd, 0x0, 0x1, [@typed={0x6, 0x5a, 0x0, 0x0, @str='\xeb\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}, @nested={0x2e1, 0xa6, 0x0, 0x1, [@nested={0x4, 0x83}, @nested={0x4, 0x3e}, @typed={0x8, 0xf, 0x0, 0x0, @pid}, @generic="c32bf4a76b6d80d958b215d5722da11c3329fb931578bb94bdac6efb3a00428c5b7404768247da10169e3fe65c76e1b51778a24bed80b227bf25b1161d57219ff2c4f158c59eda45c55c14cc646f0bafd0872aed47c21e0619da153ca82efda184309747037183322bb0ed24ed78cbfd93f34b3e6462177ebdfef8ef35ad495044ba2ec56d1abf6df83a157c705c7b0791d7897d2e89f3f759", @nested={0x234, 0xe3, 0x0, 0x1, [@nested={0x10, 0x51, 0x0, 0x1, [@nested={0x8, 0xb8, 0x0, 0x1, [@nested={0x4, 0xef}]}, @nested={0x4, 0xcd}]}, @nested={0x21f, 0x93, 0x0, 0x1, [@generic="c3f5c72cd0fa27fd1c6812ef8e1befc6dd66baf5ffb4010bfed22627401146e7362051466d419863ff93", @generic="7925f7688169ace0cfecc23d527792f6b6a7dfe6814c3ee36fcdb8fe9325ff82d35e2dce7f5147adf53307102b43dd61927df8018decd7cd814e7fe1e20c26be1a6955e1db3230ae1febf44420e698437ea4f25385ab85b2332bc76b3e869874ecb86162ced3d690c075cd44e816e360194eadc984cbdd5e66b0b9c1b7b9db2f73469ece210d75d94e1acf6148c065b424146eccba9b59d95846d0d3799317d807e5ee8f218b482c1a480d4ed62d5e45941e335b9d", @nested={0x13c, 0x142, 0x0, 0x1, [@generic="352c67d5fc6fd9d898304b8fe2df42dd8add262d407a3b1e1ee8e1e806524e78c2557cf46a858819aaa7764e598cca6810d40c23597951909e8ad7054b916a31d649da23375477de43bf7dd115ea89729088681f0de11c79f4045d945728135678d570382ed4370e0bf9a99d567c05d20b0bfb2fc53c2e4f216c0af47c0e", @nested={0x4, 0x2a}, @generic="c7cf100e376fb37d2f0d5a2f57e36a36d627c64421fe11e61a0b012c0fa5905bd7b65b9439a2969a8e5ee440e3f43c38a813a5859d4b22fddfd850b4bc30152976fa710e8ab96100ecee9042eaa9d6983009c3103f263c67b3063bafadfaac3fbb9558bb194d32cfef71c926772ccf28740d1e53581e16fed2dd1ba34f7f6785298a94215ee89cc2c228cd0bbe451348090f36dde427c3fe307a", @typed={0x8, 0x102, 0x0, 0x0, @fd}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback}]}]}]}]}]}]}]}, 0x320}}, 0xc000) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000080000000000000000000000000000000000000000000000001857709695ad5bb501bff1caca7befae210f3259b4f00ac0621ce1ac4e479255eabd7f66d78fe8700b4506894ca62ad948bbfa6010e7da4f9be61dff4c518f50bc3c7ef5cea40ab51b1651fe1c30773833c62ae840918ea77c74fd34afaed07d375fdb10f0daeb244a1d89a5aeb12515c739b3a1f3865401d37818cc4e76409a8885a16579587b1f1a8bc09b9505c7cecb92"], 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 1.571697171s ago: executing program 5 (id=6930): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) (async) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) close(r2) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a00)=""/4101, 0x1005}], 0x1}, 0x2101) (async) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a00)=""/4101, 0x1005}], 0x1}, 0x2101) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x400454da, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r6, &(0x7f00000019c0)={&(0x7f00000002c0)=@nl, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000340)=""/5, 0x5}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001900)=""/182, 0xb6}, 0x162) (async) recvmsg(r6, &(0x7f00000019c0)={&(0x7f00000002c0)=@nl, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000340)=""/5, 0x5}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001900)=""/182, 0xb6}, 0x162) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x62, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x4000, 0x1}, 0x8}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x62, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x4000, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000600000000005e00fcffffff9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000600000000005e00fcffffff9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000000130ba84085834b00f0000009500000000000009e93f375c1882c71d25cd779f1688e3e0ade4ca691004000000ea6ce8c754965d5cd653ebec8328f2f9c5f2cc33b9d30f7ba30719b8a1286864d2f6e2b1a8c5e71ad30c5e975e245cce1343c89c53ebff581600"/128], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) setsockopt(r4, 0x84, 0x23, &(0x7f0000000040)="1875008e80d51858", 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r10, 0x8000000000000000}, 0x18) recvfrom$inet(r9, 0x0, 0x0, 0x40, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000300)="9000", 0x2, 0x40, 0x0, 0x0) (async) sendto$inet6(r9, &(0x7f0000000300)="9000", 0x2, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000008180a05000000000000000000020000000900020073797a30000000002c000000180a01010000000000000000020000040c00054000000000000000020900010073797a3000000000140000001100010000000000000000000100000a"], 0x74}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000008180a05000000000000000000020000000900020073797a30000000002c000000180a01010000000000000000020000040c00054000000000000000020900010073797a3000000000140000001100010000000000000000000100000a"], 0x74}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x1804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0xa) 1.407362606s ago: executing program 5 (id=6934): syz_emit_ethernet(0x1a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x8864, "11703067c7e064cc"}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getqdisc={0x28, 0x26, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0x6}, {0x5, 0xfff2}, {0xfffa, 0xd}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4040, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1.375630904s ago: executing program 5 (id=6938): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x600}, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/220, 0xdc}, {&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f0000000340)=""/133, 0x85}], 0x4) 1.26028754s ago: executing program 5 (id=6941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x5e}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 931.671748ms ago: executing program 4 (id=6950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r3, 0x2, 0x30}, &(0x7f0000000240)=0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0x38, r1, 0x87898b830c7bd19d, 0x3, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffff0, 0x67}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008080}, 0x20008000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x7f, 0x0, 0x40, 0x10, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1, 0x7800, 0x8000, 0x2, 0x6}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newchain={0x6c, 0x64, 0x400, 0x170bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffff, 0xf}, {0x9, 0xc}, {0x4810024c8be5aa8f, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xb1}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x6, 0x31}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @TCA_RATE={0x6, 0x5, {0xaa, 0x2}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}]}, 0x6c}}, 0x40040d0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000), 0xe) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000500050040"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80800) (async) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r11, 0x4030582a, &(0x7f0000000300)={0x1100, 0x1, 0xb, 0x2a42}) (async) recvmsg$can_bcm(r12, &(0x7f0000001800)={&(0x7f0000000200)=@caif=@rfm, 0x80, &(0x7f0000001680)=[{&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000340)=""/60, 0x3c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/78, 0x4e}, {&(0x7f0000001400)=""/159, 0x9f}, {&(0x7f00000014c0)=""/95, 0x5f}, {&(0x7f0000001540)=""/223, 0xdf}, {&(0x7f0000001640)=""/59, 0x3b}], 0x8, &(0x7f0000001700)=""/245, 0xf5}, 0x40000000) (async) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) openat$cgroup_ro(r12, &(0x7f0000001840)='cgroup.controllers\x00', 0x0, 0x0) (async) r13 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r13, 0x11e, 0xd, 0x0, &(0x7f0000000100)=0xfffffd46) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100000006000200040000000000000e040000000000000000000000000074308f4f93cebd2c000d00000000000000000000001304000000000000008000000a97fc"], 0x0, 0x52}, 0x20) (async) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno', 0xa) 931.13672ms ago: executing program 0 (id=6951): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x48}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x14, r9, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}}, 0x48080) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r8, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r9, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x800) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0xffffffffffffffff, 0x4, 0x77}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) socket$netlink(0x10, 0x3, 0x6) 895.495492ms ago: executing program 4 (id=6952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xbe3) (async) close(r0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x400000000001, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) (async, rerun: 32) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r5], 0x44}}, 0x40848c0) (async, rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="380000001002839dda9d435025c9767d74299261010400000000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="1b2e010001a00100080004000400000008001d000600000008000500", @ANYRES32=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) (rerun: 64) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000000)=0x10000, 0x4) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r7) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000080)={r9, 0x808000}, 0x8) (async) getsockopt$bt_hci(r7, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 801.897742ms ago: executing program 7 (id=6953): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003a00010327bd7000fcffffff08f3"], 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'macsec0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x46, 0x3, 0x6, 0x8000, 0x7, "5f9260", 0x5, [0x9, 0xffff7fff, 0x5c, 0x0, 0xffffffff]}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) 691.715762ms ago: executing program 4 (id=6954): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/51, &(0x7f0000000140)=0x33) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000000019078e3bf14bbac1414aa030490780300000045000000000000000033000064010101e0000001040022eb00000000"], 0x0) (async) getsockname(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000180)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x9fc5dedc9d07b3db, 0x1, 0x7, 0x1ff, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, {[@rr={0x7, 0x7, 0xdc, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ifreq(r0, 0x8943, &(0x7f00000004c0)={'dvmrp0\x00', @ifru_names='veth0_macvtap\x00'}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000008000000020000000400000020a00000", @ANYRES32=r1, @ANYBLOB="b38d000000000000ffffffff000000000000d600", @ANYRES32=r3, @ANYRES32, @ANYBLOB="0300000001000000020000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r7, &(0x7f0000000040)=0xfffffffffffffffc, r6, 0x0, 0x800000000ff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000140)={{0x2, 0x4e20, @broadcast}, {0x1, @local}, 0x58, {0x2, 0x4e23, @local}, 'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00'}) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x6, [@enum64={0x7, 0x5, 0x0, 0x13, 0x1, 0x1, [{0x2, 0x6, 0x1}, {0x3, 0x7fffffff, 0x401}, {0xd, 0x8, 0x8001}, {0xf, 0x1000, 0x10001}, {0x6, 0x3, 0x80}]}, @ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x4}]}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x61]}}, &(0x7f0000000640)=""/4096, 0x86, 0x1000, 0x1, 0x1}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r4}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0x5d, 0xa, 0xa640, 0x1, 0x6, '\x00', 0x0, r7, 0x0, 0x4, 0x8, 0xe, @value=r9}, 0x50) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000000c0)={0x7, 0x10, [0x1e3c, 0xa90e, 0x0, 0xffffffffffff7fff], &(0x7f0000000000)=[0x0, 0x0]}) 690.228922ms ago: executing program 7 (id=6955): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000640)={0x0, 0x80000000}, &(0x7f0000000680)=0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03316844268cb89e14f00800", 0x0, 0x20000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000}, 0x50) 689.079491ms ago: executing program 6 (id=6956): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000100), &(0x7f00000001c0)='GPL\x00', 0x0, 0x76, &(0x7f0000000200)=""/118, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, &(0x7f0000000280)={0x5, 0x5, 0x400, 0x7ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x1], &(0x7f0000000300)=[{0x4, 0x5, 0x4, 0x1}], 0x10, 0x3}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x14, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_fd={0x18, 0x5}, @call={0x85, 0x0, 0x0, 0x3a}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xaa1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000004c0)='GPL\x00', 0x7, 0xaa, &(0x7f0000000500)=""/170, 0x40f00, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xd, 0x210, 0x46}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000640)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x2, 0x5, 0xe, 0xa}, {0x2, 0x3, 0xf, 0x7}, {0x4, 0x4, 0x5, 0x1}], 0x10, 0x9}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@cgroup, 0x8, 0x1, 0x80000000, &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0}, 0x40) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, &(0x7f0000000040), r5, 0x0, 0x800000000ff, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ac0)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x256c, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000a00)=""/4096, 0x40f00, 0x64, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001a40)={0x4, 0xf, 0xeb1e, 0x9}, 0x10, 0x1f847, 0xffffffffffffffff, 0x0, &(0x7f0000001a80)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@cgroup=r5, r1, 0x2d, 0x0, r2, @void, @value=r6, @void, @void, r3}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) 680.862238ms ago: executing program 0 (id=6957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="877304fd", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25040000002000018008000100", @ANYRES32=r3, @ANYBLOB="140002006272696467655f736c6176655f310000"], 0x34}, 0x1, 0x0, 0x0, 0x10008890}, 0x20000000) 610.985883ms ago: executing program 7 (id=6958): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc4}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) 547.688424ms ago: executing program 4 (id=6959): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000019c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6080a08300180000fc010000000000000000000000000000fe8000000000000000000000000000bb0002000000000000040100040100c20402"], 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xb, 0x7, 0x10000008, 0x22, 0x12403, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, @void, @value, @value=r1}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac"], 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg$inet(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000003180)="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", 0x1000}, {&(0x7f0000000440)="8fa3c1461384cc858dc7a07fce5b67a2c536af36638bfed278bb4b92fecac25a7e2c49448fded5a11f27ff49a768b7cb6edb1c3736dc44520cb72d0a63961a9f5eaecd00178a328aaaffdcb4a6065610ea94200f2c0202983f7c875d4e1cd17c7d1890db2e976f5f79b71692870e81bc2ca33765a7073641e5fa821be5fdb3fb92365bd2597f27a12d5a059aa96ff5dc5626e5", 0x93}, {&(0x7f0000004240)="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", 0xbb5}], 0x3}}, {{&(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000580)=[{&(0x7f00000002c0)="6c137a8f726ef247ee5559a3968c82523b73c31181114ddf6a300eca6807ebccef6d5c199726b73ecc9833a7f2365b11d012e263e700340f994c17e7f9288edc8d6bf18acc17bde1ab37ba30cc3316a44fd0f781e240cd4373fa9b33cae4c73f52fe2028f748000a53ed4a57b794056619415f08209a2c91d00898142cc8ce6b8fb2421254d295939295b1e610d9a232d663dbfb18d7caa7c06e8aaa8b27abf814270a62473cd1b64786b1a325b096587c8655c51a8fbfe06887c8c30c7cc693a571483fe79097bfb62fc491be9e5ec83ce5438e7bd2399febf30f1e8e8b87d766d1", 0xe2}, {&(0x7f00000003c0)}, {&(0x7f0000000500)="d6d553f8175526d512081b6ea1b02cc4e446df5ca40c3836bcb5377b8bcfe29cc24de495d3949fffb3f8ea3816332281922cc10b621e214915f171d0e69a6cada3196e", 0x43}], 0x3, &(0x7f00000005c0)=[@ip_retopts={{0x44, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x35, 0x0, 0x9, [0x80]}, @ssrr={0x89, 0x2b, 0x3a, [@multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2, @rand_addr=0x64010100, @local, @rand_addr=0x64010102, @remote, @rand_addr=0x64010101]}]}}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x6d, 0x0, 0x6, [0x2, 0x28, 0x2, 0xc, 0x4, 0x8001, 0x2, 0x8d4c]}, @timestamp_addr={0x44, 0x1c, 0xfb, 0x1, 0x0, [{@multicast2, 0x7}, {@empty, 0x6}, {@rand_addr=0x64010101, 0x3}]}, @rr={0x7, 0x1b, 0xfb, [@broadcast, @multicast2, @loopback, @loopback, @loopback, @multicast1]}, @cipso={0x86, 0x2a, 0x2, [{0x7, 0xa, "1e937167abfdc843"}, {0x1, 0xa, "3869997d3f3415ff"}, {0x6, 0xc, "39762f51d323c1e7412e"}, {0x2, 0x4, "01c4"}]}]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x6f, 0x0, 0x4, [0x10, 0x401, 0x7]}, @lsrr={0x83, 0xf, 0xad, [@remote, @loopback, @remote]}]}}}], 0x110}}], 0x2, 0x40) r3 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4e, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaabaaaaaa28cfaa448100200086dd6000550700140600fc010000000000000000000000000002fe8000000000000000000000000000aa0000cbae9b95610e0fe3f3ba7d1ca3a817c1666f6e3c496d6890158dc5385bf547d215386a4d2b3839c7d4e91657b62f04dc3aba18299afad9df4bdfa3012bd69851f01fdb8d1fa8a6", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090787ffe"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6eb}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x2, 0x9, 0x4, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000400)={r6, 0x10}, &(0x7f0000000840)=0x8) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) socket$unix(0x1, 0x5, 0x0) close(r7) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="f257a8ea7bc073dfaeab968508064aef7ac6c18b281fed8792804592a1679354e272cc16b232b6f4afc5e8e25881797909d1b0df1e95eda3d7509b915704b0ed958e4e4afce603873cd598f855b95b841de2c5d46ea406f7ed9db4e26d3d50", 0x5f, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) 547.426123ms ago: executing program 6 (id=6960): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000400)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "10b1a0", 0x0, 0x0, 0x0, @empty, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x4, 0x8, 0xadaa}], "fafb17c133d11e59"}}}}}}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x500, 0x4) sendmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="1000"], 0x10}}], 0x1, 0x40) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 547.12492ms ago: executing program 0 (id=6961): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/223, 0xdf}, 0x8}], 0x1, 0x20010060, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-generic\x00'}, 0x58) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x51, 0x5, 0xa, 0x30, @local, @remote, 0x80, 0x40, 0x5, 0x7fff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x0, 0x400}, [@RTA_OIF={0x8, 0x4, r10}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x5c, 0x0, 0x4, 0x0, 0x2, 0x58, 0x7}}}}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x94, r3, 0x600, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000801}, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0x0) 452.779587ms ago: executing program 6 (id=6962): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r3, 0x1, 0xe, 0x0, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'bond_slave_1\x00', @remote}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@ipv4_newnexthop={0x1c, 0x68, 0x430, 0x70bd2c, 0x25dfdbfe, {0x2, 0x0, 0x2}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0xba01}, 0x810) 441.623937ms ago: executing program 7 (id=6963): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) (async) close(0x3) (async) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) 383.731727ms ago: executing program 4 (id=6964): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000400000000000000090000850000005400000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000ce327b416f960b9be275d38bb311e4309bd47be5ff", @ANYRES16=r1, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000740000000800a0009e090000080026006c09000008009f0005000000"], 0x40}}, 0x20000000) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x8, @private0, 0x4005}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x40040) r5 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r6, 0x2f, 0x30, 0x5, 0x0, 0x64, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x7f01, 0x6, 0x549}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000340)={0x0, 0x0, 0x3}, 0x8) r10 = socket$kcm(0x2, 0xa, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a94000000060a0904000000000000000002000002680004803c0001800e000100696d6d65646961746500000028000280729001c0180002800900820073797a320000000008000180fffffffc0800014000000000280001800b0001006f626a72656600001800028008000140000000090900020073797a30000000000900010073797a30000000000900020073797a3200"], 0xbc}}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) write$tun(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2981000e0086dd6d002008009c11ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20009c90"], 0xd6) 340.278247ms ago: executing program 5 (id=6965): ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000100)) syz_emit_ethernet(0x4e, &(0x7f0000001740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @local}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x28, 0x803, 0x1) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x54, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x4, @loopback, 0x2}, @in6={0xa, 0x4e24, 0x1, @mcast2, 0x8cf2}, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x9}]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000440)={r7, 0x7ff}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 329.902496ms ago: executing program 6 (id=6966): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$pppl2tp(r0, &(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x26) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x80, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x9, 0x2, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8800}, 0x0) close(r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r6, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\f\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, r7, 0x4}, 0x38) r8 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r8, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/323], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 263.710796ms ago: executing program 7 (id=6967): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133}], 0x9}, 0x40020000) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r6, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a") sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120065f2000000005c8602fb93ba9c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000980)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000002780)={r7, 0x5}) 250.515649ms ago: executing program 0 (id=6968): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x50}}, 0x90) 209.175647ms ago: executing program 0 (id=6969): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x20, 0x4}, [@RTA_DST={0x8, 0x1, {0x8100}}]}, 0x24}}, 0x0) 159.660038ms ago: executing program 6 (id=6970): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)="f78d9ca38fff48f3be52163448412ba8ea2945e56c9d0c07b90e0aa06445cf2b74c2278ad7ad8633cd51dd7acf4536bac8c4635ff529b680a56b712e3cb5af7936e279fe07ba2f20334a4fdaec8c909e48d219b0e7e978166e29f691adec0e5526148adbaad390b4bd6b7e1050abf68515280ca2189a069539aacd9840e7c5b133180a836a9c7dc456448eafb217def1d6ca3e62338caebb4ed33a7c9eabec21a6f247d02a244e0cefaaf4386e99396a5afe2c34149995de08a45d3f2177579a01e0a2ea114a7e0e23cc5c260ed375faa4b119b2c8a8942a2f089cf952b6e4b21ba713", 0xe3}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4dbc3ae079f5fee8f28051926aae1efd7e0054a863f425cfe6cb54e7cb51726b360fbb37b4fe035bbb095873048", 0x48}, {&(0x7f0000000d00)="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", 0x1d5}], 0x3, 0x0, 0x0, 0x80}], 0x1, 0x20000801) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x100, 0xffffffffffffffff, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r4, @ANYBLOB="0500330022"], 0x24}}, 0x18) 114.494141ms ago: executing program 4 (id=6971): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) socket$inet6(0xa, 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001380)}, 0xe}], 0x1, 0x40000120, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x6, 0x200, 0x0, @empty, @remote, 0xb00730c9670eacc9, 0x10, 0xfffffff7, 0xd72e}}) 114.010475ms ago: executing program 0 (id=6972): syz_emit_ethernet(0x86, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @mcast1, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x11, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x7, 0x0, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) splice(r4, 0x0, r5, 0x0, 0xfffffffffffffff1, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x9, &(0x7f0000000600)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @ldst={0x3, 0x3, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffc}], &(0x7f0000000680)='GPL\x00', 0x6, 0x32, &(0x7f00000006c0)=""/50, 0x41100, 0x20, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x5, 0x3, 0xfffffff3, 0x100}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r6], 0x0, 0x10, 0x100}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"/272], 0x270}, 0x1, 0x0, 0x0, 0x20048010}, 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x4, 0x0, 0x0, 0xc, 0x4}, @func={0x3, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/201, 0x34, 0xc9, 0x0, 0x7, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x6, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @ldst={0x0, 0x2, 0x3, 0x0, 0x7cfa370907b97655, 0x2, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000040)='syzkaller\x00', 0x2100000, 0x38, &(0x7f0000000080)=""/56, 0x41100, 0x8, '\x00', r3, 0x0, r7, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x7ff, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 113.637208ms ago: executing program 5 (id=6973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f0000000000)={0x2a, 0x1, 0x2}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x12, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@generic={0x1, 0x0, 0x4, 0xfff8, 0x1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xd4, &(0x7f0000000100)=""/212, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x8682, 0x8}, 0x10, 0x9a79, 0xffffffffffffffff, 0x5, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x3, 0x5, 0xc, 0x3}, {0x2, 0x2, 0xa, 0x9}, {0x3, 0x5, 0x0, 0x6}, {0x2, 0x5, 0x4, 0xb}, {0x1, 0x4, 0xd, 0x7}], 0x10, 0x8}, 0x94) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000400)=r0, 0x4) ioctl$OCFS2_IOC_GROUP_ADD(r4, 0x40186f02, &(0x7f00000003c0)={0x7, 0x1000, 0x80000000, 0x401}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="05fb00ffffffffffffff1f"], 0x18}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) bind$qrtr(r1, &(0x7f0000000000)={0x2a, 0x1, 0x2}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x12, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@generic={0x1, 0x0, 0x4, 0xfff8, 0x1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xd4, &(0x7f0000000100)=""/212, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x8682, 0x8}, 0x10, 0x9a79, 0xffffffffffffffff, 0x5, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x3, 0x5, 0xc, 0x3}, {0x2, 0x2, 0xa, 0x9}, {0x3, 0x5, 0x0, 0x6}, {0x2, 0x5, 0x4, 0xb}, {0x1, 0x4, 0xd, 0x7}], 0x10, 0x8}, 0x94) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000400)=r0, 0x4) (async) ioctl$OCFS2_IOC_GROUP_ADD(r4, 0x40186f02, &(0x7f00000003c0)={0x7, 0x1000, 0x80000000, 0x401}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="05fb00ffffffffffffff1f"], 0x18}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013}) (async) 77.96544ms ago: executing program 6 (id=6974): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) (rerun: 32) 0s ago: executing program 7 (id=6975): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x68, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "322d73352d5f955d482ee5364c432384"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8041}, 0x24004010) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f1, &(0x7f0000000000)) kernel console output (not intermixed with test programs): dding VLANs will be blocked as long as it is part of bond. [ 516.576121][T24374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.604126][T24380] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5110'. [ 516.684423][T24384] team0: Device xfrm0 is of different type [ 516.719927][T24391] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5115'. [ 516.793270][T24396] h: entered promiscuous mode [ 516.842819][T24401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5118'. [ 516.856555][T24401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5118'. [ 517.022415][T24410] block nbd0: Unsupported socket: should be TCP or UNIX. [ 517.435672][T24450] No such timeout policy "syz0" [ 517.476599][T24454] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 517.616822][T24469] netlink: 'syz.1.5137': attribute type 2 has an invalid length. [ 517.930406][T24491] netlink: 'syz.3.5143': attribute type 2 has an invalid length. [ 518.037083][T24498] netlink: 'syz.4.5145': attribute type 83 has an invalid length. [ 518.088221][T24498] xt_cluster: node mask cannot exceed total number of nodes [ 518.119391][T24498] netlink: 'syz.4.5145': attribute type 83 has an invalid length. [ 518.314675][T24527] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 518.342341][T24529] netlink: 'syz.4.5153': attribute type 1 has an invalid length. [ 518.916606][T24588] x_tables: duplicate underflow at hook 1 [ 521.635302][T24562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.801401][T24618] __nla_validate_parse: 11 callbacks suppressed [ 521.801419][T24618] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.5178'. [ 521.973757][T24635] 0: reclassify loop, rule prio 0, protocol 700 [ 522.076207][T24646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5190'. [ 522.107219][T24644] netlink: 'syz.5.5189': attribute type 3 has an invalid length. [ 522.128729][T24644] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5189'. [ 522.191908][T24650] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5191'. [ 522.235386][T24651] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5191'. [ 522.305754][T24664] syzkaller1: entered promiscuous mode [ 522.331185][T24664] syzkaller1: entered allmulticast mode [ 522.512091][T24685] syzkaller0: entered promiscuous mode [ 522.533745][T24685] syzkaller0: entered allmulticast mode [ 522.568547][T24682] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5201'. [ 522.587342][T24682] 0·: renamed from hsr0 [ 522.603275][T24682] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 522.619209][T24682] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 522.630843][T24682] 0·: entered allmulticast mode [ 522.635770][T24682] hsr_slave_0: entered allmulticast mode [ 522.641860][T24682] hsr_slave_1: entered allmulticast mode [ 522.648554][T24682] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 522.668790][T24697] 8021q: VLANs not supported on syzkaller1 [ 522.735284][T24699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5206'. [ 522.758220][T24699] openvswitch: netlink: Flow actions attr not present in new flow. [ 522.859591][T24713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5209'. [ 522.893221][T24714] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 522.908193][T24716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5211'. [ 522.919190][T24716] netlink: 'syz.4.5211': attribute type 1 has an invalid length. [ 522.927924][T24716] netlink: 'syz.4.5211': attribute type 1 has an invalid length. [ 522.935917][T24716] netlink: 'syz.4.5211': attribute type 2 has an invalid length. [ 522.944219][T24716] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5211'. [ 523.007500][T24720] netlink: 'syz.0.5213': attribute type 1 has an invalid length. [ 523.017384][T24720] openvswitch: netlink: Key type 212 is out of range max 32 [ 523.316058][T24736] bond0: Caught tx_queue_len zero misconfig [ 523.883122][T24780] syzkaller0: entered promiscuous mode [ 523.888981][T24780] syzkaller0: entered allmulticast mode [ 529.150091][ T5621] Bluetooth: hci6: command 0x0406 tx timeout [ 529.629912][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 548.893634][T24790] __nla_validate_parse: 16 callbacks suppressed [ 548.893654][T24790] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.5236'. [ 549.010348][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 549.018483][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 549.019645][T24793] syzkaller0: entered promiscuous mode [ 549.027136][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 549.032709][T24793] syzkaller0: entered allmulticast mode [ 549.040741][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 549.051857][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 549.086805][T24793] netlink: 'syz.5.5238': attribute type 7 has an invalid length. [ 549.113514][T24796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.229379][T24817] syzkaller0: left promiscuous mode [ 549.235984][T24817] syzkaller0: left allmulticast mode [ 549.250426][T24816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.334022][T24827] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5246'. [ 549.354734][T24826] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5246'. [ 549.461656][T24832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5247'. [ 549.471318][T24832] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5247'. [ 549.705176][T24851] syzkaller0: entered promiscuous mode [ 549.711291][T24851] syzkaller0: entered allmulticast mode [ 549.768017][T24802] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 549.777655][T24857] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5253'. [ 549.791912][T24855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5254'. [ 549.810879][T24855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5254'. [ 549.874881][T24855] syzkaller0: entered promiscuous mode [ 549.890098][T24855] syzkaller0: entered allmulticast mode [ 550.032578][T24870] netlink: 'syz.5.5259': attribute type 1 has an invalid length. [ 550.047319][T24868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5258'. [ 550.057013][T24870] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5259'. [ 550.083725][T24870] netlink: 'syz.5.5259': attribute type 1 has an invalid length. [ 550.103247][T24870] netlink: 'syz.5.5259': attribute type 8 has an invalid length. [ 550.391033][T24894] netlink: 'syz.5.5265': attribute type 12 has an invalid length. [ 550.523330][T24902] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 550.661834][T24802] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.677206][T24802] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.693397][T24802] bridge_slave_0: entered allmulticast mode [ 550.703837][T24802] bridge_slave_0: entered promiscuous mode [ 550.722939][T24802] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.737456][T24802] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.756826][T24802] bridge_slave_1: entered allmulticast mode [ 550.777256][T24802] bridge_slave_1: entered promiscuous mode [ 550.846799][T24802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.881632][T24802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.989319][T24802] team0: Port device team_slave_0 added [ 551.014687][T24802] team0: Port device team_slave_1 added [ 551.056757][T24802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.070025][ T4937] Bluetooth: hci2: command tx timeout [ 551.071662][T24802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.110944][T24802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.123555][T24802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.130837][T24802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.173575][T24802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.288500][T24949] netlink: 'syz.4.5277': attribute type 1 has an invalid length. [ 551.310705][T24949] netlink: 'syz.4.5277': attribute type 3 has an invalid length. [ 551.316689][T24802] hsr_slave_0: entered promiscuous mode [ 551.331054][T24802] hsr_slave_1: entered promiscuous mode [ 551.341346][T24802] debugfs: 'hsr0' already exists in 'hsr' [ 551.347173][T24802] Cannot create hsr debugfs directory [ 551.442179][T24961] sctp: [Deprecated]: syz.5.5280 (pid 24961) Use of int in maxseg socket option. [ 551.442179][T24961] Use struct sctp_assoc_value instead [ 551.669862][T24802] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 551.692581][T24802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 551.715723][T24802] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 551.726969][T24802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 551.736186][T24802] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 551.750943][T24802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 551.776659][T24802] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 551.802105][T24802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 551.822331][T24981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.994850][T25001] bridge5: entered promiscuous mode [ 552.009803][T25001] bridge5: entered allmulticast mode [ 552.045871][T24802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.098750][T24802] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.128952][ T9170] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.136161][ T9170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.169312][T25015] tipc: Bearer : already 2 bearers with priority 10 [ 552.178202][T25015] tipc: Bearer : trying with adjusted priority [ 552.187955][T25015] tipc: Enabling of bearer rejected, failed to enable media [ 552.202251][T24320] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.209428][T24320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.372796][T25027] netlink: 'syz.3.5296': attribute type 1 has an invalid length. [ 552.424254][T25027] 8021q: adding VLAN 0 to HW filter on device bond7 [ 552.453073][T25027] 8021q: adding VLAN 0 to HW filter on device bond7 [ 552.460366][T25027] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 552.472766][T25027] bond7: (slave gre1): Error -95 calling set_mac_address [ 552.507197][T25032] gretap1: entered promiscuous mode [ 552.777980][T24802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.062610][T25064] tc action pedit 'at' offset 5 out of bounds [ 553.068778][T25064] tc action pedit 'at' offset 5 out of bounds [ 553.074940][T25064] tc action pedit 'at' offset 5 out of bounds [ 553.081075][T25064] tc action pedit 'at' offset 5 out of bounds [ 553.087200][T25064] tc action pedit 'at' offset 5 out of bounds [ 553.093353][T25064] tc action pedit 'at' offset 5 out of bounds [ 553.099473][T25064] tc action pedit 'at' offset 5 out of bounds [ 553.105613][T25064] tc action pedit 'at' offset 5 out of bounds [ 553.111747][T25064] tc action pedit 'at' offset 5 out of bounds [ 553.117866][T25064] tc action pedit 'at' offset 5 out of bounds [ 553.124019][T25064] 0: reclassify loop, rule prio 0, protocol 800 [ 553.159074][ T4937] Bluetooth: hci2: command tx timeout [ 553.392778][T25087] netlink: 'syz.4.5306': attribute type 4 has an invalid length. [ 553.417816][T25086] 8021q: adding VLAN 0 to HW filter on device bond9 [ 553.426869][T25086] bond0: (slave bond9): Enslaving as an active interface with a down link [ 553.436375][T24802] veth0_vlan: entered promiscuous mode [ 553.476142][T24802] veth1_vlan: entered promiscuous mode [ 553.524933][T24802] veth0_macvtap: entered promiscuous mode [ 553.535390][T24802] veth1_macvtap: entered promiscuous mode [ 553.553033][T24802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.570087][T24802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.608072][T24320] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.637022][T24320] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.646717][T24320] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.672480][T24320] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.842424][T25099] syzkaller0: entered promiscuous mode [ 553.847964][T25099] syzkaller0: entered allmulticast mode [ 553.939566][T25113] __nla_validate_parse: 12 callbacks suppressed [ 553.939588][T25113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5312'. [ 553.984520][ T9181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.998290][ T9181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.075623][T25131] netlink: 'syz.0.5317': attribute type 26 has an invalid length. [ 554.102947][T24320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.118940][T24320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.561838][T25179] openvswitch: netlink: IP tunnel dst address not specified [ 554.675619][T25185] netlink: 'syz.4.5335': attribute type 2 has an invalid length. [ 554.702376][T25185] netlink: 'syz.4.5335': attribute type 2 has an invalid length. [ 554.727526][T25191] veth0_to_hsr: mtu less than device minimum [ 554.748052][T25194] netlink: 124 bytes leftover after parsing attributes in process `syz.6.5336'. [ 554.757253][T25191] netlink: 'syz.5.5333': attribute type 1 has an invalid length. [ 554.757276][T25191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5333'. [ 554.941462][T25207] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 554.957117][T25207] netlink: 'syz.5.5341': attribute type 3 has an invalid length. [ 554.985951][T25207] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5341'. [ 555.081235][T25215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5344'. [ 555.134003][T25222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5344'. [ 555.232605][ T4937] Bluetooth: hci2: command tx timeout [ 555.334857][T25235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5351'. [ 555.979199][T25246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5354'. [ 556.028597][T25246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5354'. [ 556.092171][T25254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5357'. [ 556.167847][T25262] gre0: left promiscuous mode [ 556.173387][T25262] gre0: left allmulticast mode [ 556.345237][T25262] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.727182][T25262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.742526][T25262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.794662][T25262] macvlan0: left promiscuous mode [ 556.813915][T25262] veth0_macvtap: left allmulticast mode [ 556.853214][T25262] gtp1: left promiscuous mode [ 556.858076][T25262] gtp1: left allmulticast mode [ 556.885276][T25262] bond6: left promiscuous mode [ 556.892164][T25262] macsec1: left allmulticast mode [ 556.916844][T24320] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.936679][T24320] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.958956][T24320] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.980467][T24320] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.989487][T24320] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.021419][T24320] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.042503][T24320] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.051889][T24320] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.310222][ T4937] Bluetooth: hci2: command tx timeout [ 559.514112][ T4937] Bluetooth: hci0: link tx timeout [ 559.519270][ T4937] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 561.550328][ T4937] Bluetooth: hci0: command 0x0406 tx timeout [ 580.684132][T25413] __nla_validate_parse: 2 callbacks suppressed [ 580.684156][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5367'. [ 581.212773][T25421] bond6: option lp_interval: invalid value (0) [ 581.238048][T25421] bond6: option lp_interval: allowed values 1 - 2147483647 [ 581.254749][T25421] bond6 (unregistering): Released all slaves [ 581.307458][T25430] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.5370'. [ 581.324714][T25430] netlink: Unknown conntrack attr (0) [ 581.373403][T25443] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5374'. [ 581.429260][T25439] syzkaller0: entered promiscuous mode [ 581.464034][T25439] syzkaller0: entered allmulticast mode [ 581.494131][T25449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5377'. [ 581.523615][T25450] syzkaller0: entered promiscuous mode [ 581.537482][T25450] syzkaller0: entered allmulticast mode [ 581.548199][T25452] can: request_module (can-proto-0) failed. [ 581.576595][T25450] netlink: 'syz.5.5376': attribute type 15 has an invalid length. [ 581.600143][T25450] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5376'. [ 581.647746][T25458] sctp: [Deprecated]: syz.0.5380 (pid 25458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 581.647746][T25458] Use struct sctp_sack_info instead [ 581.941643][T25474] netlink: 'syz.0.5385': attribute type 1 has an invalid length. [ 581.954879][T25474] netlink: 'syz.0.5385': attribute type 3 has an invalid length. [ 581.964700][T25474] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5385'. [ 581.974506][T25474] NCSI netlink: No device for ifindex 813332851 [ 582.338576][T25503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5395'. [ 582.351364][T25503] netlink: 'syz.3.5395': attribute type 8 has an invalid length. [ 582.370466][T25505] IPVS: set_ctl: invalid protocol: 39 100.1.1.1:20000 [ 582.440724][T25511] netlink: 'syz.0.5400': attribute type 4 has an invalid length. [ 582.491898][T25516] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5401'. [ 582.715425][T25543] vlan2: left allmulticast mode [ 582.740084][T25543] vlan2: left promiscuous mode [ 582.758307][T25543] bridge0: port 3(vlan2) entered disabled state [ 582.783270][T25543] bridge_slave_1: left allmulticast mode [ 582.793866][T25543] bridge_slave_1: left promiscuous mode [ 582.805876][T25543] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.823578][T25543] bridge_slave_0: left allmulticast mode [ 582.835771][T25543] bridge_slave_0: left promiscuous mode [ 582.845316][T25543] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.635346][T25591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.737156][T25604] netlink: 288 bytes leftover after parsing attributes in process `syz.5.5422'. [ 584.020673][T25621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5431'. [ 584.182678][T25631] syzkaller0: entered promiscuous mode [ 584.205133][T25631] syzkaller0: entered allmulticast mode [ 584.237832][T25631] tipc: Enabled bearer , priority 0 [ 584.252360][T25644] netlink: 'syz.0.5437': attribute type 1 has an invalid length. [ 584.300964][T25648] x_tables: duplicate underflow at hook 1 [ 584.336135][T25649] netlink: 'syz.4.5440': attribute type 1 has an invalid length. [ 584.351781][T25644] bond10: entered promiscuous mode [ 584.358217][T25644] 8021q: adding VLAN 0 to HW filter on device bond10 [ 584.397308][T25631] bond8 (unregistering): Released all slaves [ 584.462873][T25648] netlink: 'syz.4.5440': attribute type 1 has an invalid length. [ 584.488680][T25658] netlink: 'syz.6.5442': attribute type 39 has an invalid length. [ 584.510392][T25656] 8021q: adding VLAN 0 to HW filter on device bond10 [ 584.526519][T25656] bond10: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 584.559253][T25656] bond10: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 584.575019][T25656] bond10: (slave ip6gre3): making interface the new active one [ 584.583075][T25656] ip6gre3: entered promiscuous mode [ 584.590276][T25656] bond10: (slave ip6gre3): Enslaving as an active interface with an up link [ 584.602116][T25630] tipc: Resetting bearer [ 584.624624][T25630] tipc: Disabling bearer [ 584.639601][T25658] hsr_slave_0: left promiscuous mode [ 584.657388][T25658] hsr_slave_1: left promiscuous mode [ 585.070384][T25686] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 585.209621][T25689] netlink: 'syz.3.5453': attribute type 17 has an invalid length. [ 585.270084][T25692] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 585.284639][T25689] virtio_net virtio1 eth0: entered promiscuous mode [ 585.293937][T25689] ifb1: entered promiscuous mode [ 585.304895][T25689] : Slave B (ifb1) is not up; please bring it up to get a fully working HSR network [ 585.343814][T25702] vcan2: entered promiscuous mode [ 585.348912][T25702] vcan2: entered allmulticast mode [ 585.888354][T25732] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 586.034317][T25744] __nla_validate_parse: 6 callbacks suppressed [ 586.035055][T25744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5466'. [ 586.098209][T25749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5466'. [ 586.136026][T25749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5466'. [ 586.212240][T25748] bond6: entered promiscuous mode [ 586.219497][T25748] 8021q: adding VLAN 0 to HW filter on device bond6 [ 586.242163][T25737] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 586.347495][T25748] bond6: (slave bridge0): making interface the new active one [ 586.364068][T25748] bridge0: entered promiscuous mode [ 586.379418][T25748] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 586.751518][T25777] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 587.159043][T25818] x_tables: unsorted entry at hook 3 [ 587.182421][T25817] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5481'. [ 587.347924][T25833] validate_nla: 1 callbacks suppressed [ 587.347943][T25833] netlink: 'syz.3.5486': attribute type 2 has an invalid length. [ 587.416850][T25835] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 587.445007][T25844] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5487'. [ 587.484575][T25844] IPVS: Error connecting to the multicast addr [ 587.780914][T25873] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5494'. [ 587.852481][T25873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5494'. [ 587.958972][T25889] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5499'. [ 588.102086][T25897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5501'. [ 588.145228][T25897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5501'. [ 588.176083][T25902] netlink: 'syz.0.5502': attribute type 6 has an invalid length. [ 588.180032][T25906] netlink: 'syz.6.5504': attribute type 1 has an invalid length. [ 588.255044][T24320] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.255166][T25902] netlink: 'syz.0.5502': attribute type 6 has an invalid length. [ 588.292306][T24320] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.331419][T24320] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.828989][T25965] syzkaller0: entered promiscuous mode [ 588.835555][T25965] syzkaller0: entered allmulticast mode [ 588.962780][T25975] netlink: 'syz.0.5525': attribute type 4 has an invalid length. [ 588.990801][T25978] syzkaller1: entered promiscuous mode [ 589.003309][T25978] syzkaller1: entered allmulticast mode [ 589.132000][T25990] pimreg: left allmulticast mode [ 589.197248][T25993] : entered promiscuous mode [ 589.975792][ T5621] block nbd2: Receive control failed (result -1) [ 590.621632][T26121] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 590.719463][T26128] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 590.755128][T26128] netlink: 'syz.4.5576': attribute type 10 has an invalid length. [ 590.781609][T26128] team0: left promiscuous mode [ 590.790824][T26128] team_slave_0: left promiscuous mode [ 590.802578][T26128] team_slave_1: left promiscuous mode [ 590.869061][T26134] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 590.904893][T26136] netlink: 'syz.4.5580': attribute type 2 has an invalid length. [ 590.965059][T26141] netlink: zone id is out of range [ 590.976664][T26141] netlink: zone id is out of range [ 590.989208][T26141] netlink: zone id is out of range [ 590.999332][T26141] netlink: zone id is out of range [ 591.006903][T26141] netlink: zone id is out of range [ 591.016281][T26141] netlink: zone id is out of range [ 591.026199][T26141] netlink: zone id is out of range [ 591.034800][T26141] netlink: zone id is out of range [ 591.044735][T26141] netlink: zone id is out of range [ 591.164719][T26150] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 591.175536][T26150] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 591.185238][T26150] gretap2: entered promiscuous mode [ 591.191162][T26150] gretap2: entered allmulticast mode [ 591.211430][T26152] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 591.226089][T26152] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 591.236821][T26152] gretap2: entered promiscuous mode [ 591.244031][T26152] gretap2: entered allmulticast mode [ 591.250888][T26154] __nla_validate_parse: 21 callbacks suppressed [ 591.250905][T26154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5585'. [ 591.354201][T26159] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.5587'. [ 591.383734][T26163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5589'. [ 591.412625][T26163] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5589'. [ 591.455663][T26163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5589'. [ 591.465490][T26163] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5589'. [ 591.475642][T24320] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.485053][T24320] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.498028][T26167] syzkaller0: entered promiscuous mode [ 591.506931][T26167] syzkaller0: entered allmulticast mode [ 591.521393][T24320] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.540909][T24320] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.716050][T26185] netlink: 'syz.0.5598': attribute type 1 has an invalid length. [ 591.777713][T26192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5600'. [ 591.917884][T26203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5602'. [ 591.936891][T26203] netlink: 'syz.0.5602': attribute type 2 has an invalid length. [ 591.951206][T26203] netlink: 'syz.0.5602': attribute type 8 has an invalid length. [ 591.962303][T26203] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5602'. [ 592.007736][T26203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5602'. [ 592.307779][T26236] IPv6: Can't replace route, no match found [ 592.481682][T26242] netlink: 'syz.4.5617': attribute type 26 has an invalid length. [ 592.604023][T26252] netlink: 'syz.0.5620': attribute type 12 has an invalid length. [ 593.039337][T26292] netlink: 'syz.5.5631': attribute type 4 has an invalid length. [ 593.107339][T26292] netlink: 'syz.5.5631': attribute type 4 has an invalid length. [ 593.117638][T24114] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 593.124182][T24114] syú2: Port: 1 Link ACTIVE [ 595.634369][T26254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 595.858773][T26330] net_ratelimit: 52 callbacks suppressed [ 595.858795][T26330] netlink: get zone limit has 4 unknown bytes [ 595.968686][T26333] bridge6: entered promiscuous mode [ 595.978001][T26333] bridge6: entered allmulticast mode [ 596.206743][T26362] syzkaller1: entered promiscuous mode [ 596.212714][T26362] syzkaller1: entered allmulticast mode [ 596.219232][ T29] audit: type=1107 audit(1782370260.336:20): pid=26359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='[A¯ÉÕFâ/»]'´Q™*O [ 596.219232][ T29] E:^cù²<Ì' [ 596.227048][T26361] netlink: 'syz.6.5651': attribute type 3 has an invalid length. [ 596.344617][T26370] netlink: 'syz.0.5655': attribute type 10 has an invalid length. [ 596.355677][T26370] __nla_validate_parse: 8 callbacks suppressed [ 596.355695][T26370] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5655'. [ 596.439245][T26377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5657'. [ 596.450824][T26377] netlink: 'syz.4.5657': attribute type 4 has an invalid length. [ 596.458740][T26377] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5657'. [ 596.484911][T26377] .`: renamed from bond0 [ 596.556453][T26386] bond0: Removing last arp target with arp_interval on [ 596.586776][T26390] h: entered promiscuous mode [ 596.608605][T26390] ÿÿÿÿÿÿ: renamed from vlan1 [ 596.631814][T26392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5663'. [ 596.642397][T26394] Bluetooth: MGMT ver 1.23 [ 596.647864][T26394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5664'. [ 596.716208][T26398] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5665'. [ 596.936258][T26407] netlink: zone id is out of range [ 596.942156][T26407] netlink: zone id is out of range [ 596.947362][T26407] netlink: zone id is out of range [ 596.952999][T26407] netlink: zone id is out of range [ 596.958206][T26407] netlink: zone id is out of range [ 596.963958][T26407] netlink: zone id is out of range [ 596.969150][T26407] netlink: zone id is out of range [ 596.975131][T26407] netlink: zone id is out of range [ 596.980657][T26407] netlink: zone id is out of range [ 597.182634][T26415] vlan0: entered promiscuous mode [ 597.188649][T26415] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5671'. [ 597.662576][T26430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5677'. [ 597.684130][T26430] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5677'. [ 597.693697][T26431] netlink: 'syz.6.5676': attribute type 1 has an invalid length. [ 597.736126][T26431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.745013][T26430] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5677'. [ 597.779593][T26439] netlink: 'syz.0.5680': attribute type 1 has an invalid length. [ 597.795847][T26431] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 597.927081][T26450] netlink: 'syz.6.5683': attribute type 1 has an invalid length. [ 597.974148][T26452] syzkaller0: entered promiscuous mode [ 597.980659][T26452] syzkaller0: entered allmulticast mode [ 598.282370][T26475] netlink: 'syz.6.5690': attribute type 8 has an invalid length. [ 598.701806][T26519] tipc: Started in network mode [ 598.713214][T26519] tipc: Node identity 84e, cluster identity 4711 [ 598.729316][T26519] tipc: Node number set to 2126 [ 598.767957][T26525] netlink: 'syz.5.5705': attribute type 8 has an invalid length. [ 598.874514][T26533] netlink: 'syz.5.5709': attribute type 7 has an invalid length. [ 598.888746][ T9181] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.897762][T26533] netlink: 'syz.5.5709': attribute type 7 has an invalid length. [ 598.906317][ T9181] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.929788][ T9181] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.938560][ T9181] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.217285][T24107] IPVS: starting estimator thread 0... [ 599.330432][T26558] IPVS: using max 37 ests per chain, 88800 per kthread [ 599.413471][T26571] bridge7: entered allmulticast mode [ 599.570814][T26585] netlink: 'syz.0.5726': attribute type 18 has an invalid length. [ 599.590080][T26585] netlink: 'syz.0.5726': attribute type 18 has an invalid length. [ 600.170882][T26640] sctp: [Deprecated]: syz.6.5736 (pid 26640) Use of int in maxseg socket option. [ 600.170882][T26640] Use struct sctp_assoc_value instead [ 600.193049][T26640] IPVS: length: 122 != 8 [ 600.578167][T26686] tipc: Enabled bearer , priority 0 [ 600.586288][T26686] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 600.924333][T26717] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 601.139345][T26737] net_ratelimit: 10 callbacks suppressed [ 601.139365][T26737] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 601.178009][T26732] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 601.201366][ T29] audit: type=1804 audit(1782370265.306:21): pid=26738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5764" name="/newroot/576/cgroup.controllers" dev="tmpfs" ino=2954 res=1 errno=0 [ 601.224705][ T29] audit: type=1800 audit(1782370265.306:22): pid=26738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5764" name="cgroup.controllers" dev="tmpfs" ino=2954 res=0 errno=0 [ 601.300037][T26741] syzkaller0: entered promiscuous mode [ 601.305569][T26741] syzkaller0: entered allmulticast mode [ 601.403940][T26754] __nla_validate_parse: 17 callbacks suppressed [ 601.403960][T26754] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5769'. [ 601.447236][T26756] netlink: 'syz.4.5768': attribute type 4 has an invalid length. [ 601.492864][T26758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5770'. [ 601.520281][T26760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5770'. [ 601.763321][T26784] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5777'. [ 601.775649][T26783] syzkaller1: entered promiscuous mode [ 601.782327][T26783] syzkaller1: entered allmulticast mode [ 601.799279][T26783] sctp: [Deprecated]: syz.6.5778 (pid 26783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 601.799279][T26783] Use struct sctp_sack_info instead [ 601.836486][T26789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5780'. [ 601.847360][T26789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5780'. [ 601.930764][T26794] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.5780'. [ 602.034462][T26799] netlink: zone id is out of range [ 602.043359][T26799] netlink: del zone limit has 4 unknown bytes [ 602.123201][T26804] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5785'. [ 602.139953][T26804] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5785'. [ 602.150993][T26804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5785'. [ 602.209018][T24114] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 602.254401][T26810] syzkaller0: entered promiscuous mode [ 602.260672][T26810] syzkaller0: entered allmulticast mode [ 602.529089][T26836] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 602.556002][T26836] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 602.958474][T26878] 8021q: adding VLAN 0 to HW filter on device bond7 [ 602.980942][T26878] bond0: (slave bond7): Enslaving as an active interface with a down link [ 603.110571][T26901] geneve1: Caught tx_queue_len zero misconfig [ 603.201348][T26904] 8021q: adding VLAN 0 to HW filter on device bond3 [ 603.235138][T26904] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 603.691838][T26949] only policy match revision 0 supported [ 603.691856][T26949] unable to load match [ 603.815870][T26956] validate_nla: 3 callbacks suppressed [ 603.815892][T26956] netlink: 'syz.6.5831': attribute type 30 has an invalid length. [ 604.082175][T26964] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 604.107776][T26961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.331864][T26986] syzkaller0: entered promiscuous mode [ 604.337496][T26986] syzkaller0: entered allmulticast mode [ 604.383787][T26989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.460630][T26991] xt_hashlimit: invalid rate [ 604.617691][T27010] netlink: 'syz.0.5848': attribute type 13 has an invalid length. [ 604.626005][T27010] netlink: 'syz.0.5848': attribute type 27 has an invalid length. [ 604.721152][T27015] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 605.133285][T27051] macvtap1: entered promiscuous mode [ 605.145127][T27051] vlan0: entered promiscuous mode [ 605.151248][T27051] macvtap1: entered allmulticast mode [ 605.156679][T27051] vlan0: entered allmulticast mode [ 605.309701][ T4937] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 605.318307][ T4937] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 605.325905][ T4937] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 605.335055][ T4937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 605.345687][ T4937] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 605.357318][T27059] gretap2: left promiscuous mode [ 605.379321][T27059] gretap2: left allmulticast mode [ 605.410180][T11204] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 605.435166][ T776] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.445936][T11204] syú2: Port: 1 Link DOWN [ 605.475094][ T776] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.523434][ T776] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.625716][T27076] netlink: 'syz.6.5868': attribute type 1 has an invalid length. [ 605.742136][ T776] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.805197][T27076] 8021q: adding VLAN 0 to HW filter on device bond5 [ 605.844011][T27078] bond5: (slave veth0_to_bond): making interface the new active one [ 605.865097][T27078] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 605.891689][T27074] bond5: entered promiscuous mode [ 605.899827][T27074] veth0_to_bond: entered promiscuous mode [ 605.907391][T27074] bond5: entered allmulticast mode [ 605.912634][T27074] veth0_to_bond: entered allmulticast mode [ 606.227389][T27099] netlink: 'syz.6.5874': attribute type 1 has an invalid length. [ 606.242782][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 606.250215][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 606.258032][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 606.266951][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 606.276776][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 606.296310][T27062] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 606.817439][T27137] __nla_validate_parse: 24 callbacks suppressed [ 606.817457][T27137] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5880'. [ 606.872772][T27062] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.880354][T27062] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.887668][T27062] bridge_slave_0: entered allmulticast mode [ 606.895242][T27062] bridge_slave_0: entered promiscuous mode [ 606.903704][T27062] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.911266][T27062] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.918612][T27062] bridge_slave_1: entered allmulticast mode [ 606.927132][T27062] bridge_slave_1: entered promiscuous mode [ 606.961019][T27098] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 607.030002][T27062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.063780][T27062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.125200][T27148] netlink: 'syz.6.5884': attribute type 1 has an invalid length. [ 607.132665][T27062] team0: Port device team_slave_0 added [ 607.143229][T27062] team0: Port device team_slave_1 added [ 607.206584][T27149] netlink: 'syz.0.5883': attribute type 4 has an invalid length. [ 607.216767][T27062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.223622][T27154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.234510][T27062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.291659][T27062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.328586][T27062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.354575][T27062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.395108][ T5621] Bluetooth: hci7: command tx timeout [ 607.415560][T27062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.451856][T27163] vlan1: entered promiscuous mode [ 607.464660][T27163] bridge0: entered promiscuous mode [ 607.474581][T27165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5889'. [ 607.497137][T27165] netlink: 'syz.5.5889': attribute type 3 has an invalid length. [ 607.506750][T27167] netlink: 'syz.6.5888': attribute type 83 has an invalid length. [ 607.595768][T27062] hsr_slave_0: entered promiscuous mode [ 607.605595][T27062] hsr_slave_1: entered promiscuous mode [ 607.613642][T27062] debugfs: 'hsr0' already exists in 'hsr' [ 607.620626][T27062] Cannot create hsr debugfs directory [ 607.625625][T27176] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5891'. [ 607.651087][T27180] netlink: 'syz.5.5890': attribute type 83 has an invalid length. [ 607.696951][T27185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5893'. [ 607.889332][T27062] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.926608][T27062] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 607.978027][T27203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5894'. [ 608.034179][T27062] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.063427][T27062] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 608.142692][T27062] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.160720][T27062] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 608.181040][T27098] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.192424][T27098] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.200289][T27098] bridge_slave_0: entered allmulticast mode [ 608.207458][T27098] bridge_slave_0: entered promiscuous mode [ 608.217870][T27098] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.230345][T27098] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.237748][T27098] bridge_slave_1: entered allmulticast mode [ 608.245446][T27098] bridge_slave_1: entered promiscuous mode [ 608.288269][T27062] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.313942][T27062] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 608.349891][ T5621] Bluetooth: hci3: command tx timeout [ 608.401192][T27098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.436178][T27098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.512013][T27233] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5901'. [ 608.562046][T27098] team0: Port device team_slave_0 added [ 608.580543][T27098] team0: Port device team_slave_1 added [ 608.587623][T27062] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 608.603837][T27062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 608.624124][T27062] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 608.634411][T27062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 608.679835][T27062] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 608.702089][T27062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.732581][T27098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.750861][T27098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.777951][T27098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.789254][T27062] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 608.800159][T27062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.824530][T27098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.842994][T27098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.874545][T27098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.898939][T27262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5908'. [ 608.978607][T27262] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 608.982995][T27098] hsr_slave_0: entered promiscuous mode [ 609.006787][T27098] hsr_slave_1: entered promiscuous mode [ 609.014303][T27098] debugfs: 'hsr0' already exists in 'hsr' [ 609.020586][T27098] Cannot create hsr debugfs directory [ 609.161481][T27281] validate_nla: 4 callbacks suppressed [ 609.161503][T27281] netlink: 'syz.5.5913': attribute type 12 has an invalid length. [ 609.181280][T27281] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5913'. [ 609.247574][T27285] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20000 [ 609.329280][T27287] nbd: must specify at least one socket [ 609.372109][T27291] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5918'. [ 609.418181][T27062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.441928][T27098] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 609.467256][T27098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 609.480934][ T5621] Bluetooth: hci7: command tx timeout [ 609.520732][T27098] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 609.549259][T27098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 609.559101][T27301] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 609.586584][T27098] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 609.597753][T27098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 609.615770][T27306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5922'. [ 609.635103][T27062] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.643994][T27098] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 609.663846][T27098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 609.705870][T24317] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.713045][T24317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.773363][T24323] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.780560][T24323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.039376][T27098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.083025][T27098] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.115897][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.123098][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.176563][ T9181] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.183790][ T9181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.431145][ T5621] Bluetooth: hci3: command tx timeout [ 610.766456][T27062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.813007][T27390] netlink: 'syz.5.5940': attribute type 2 has an invalid length. [ 610.862014][T27393] netlink: 'syz.6.5941': attribute type 2 has an invalid length. [ 610.933778][T27393] bond6: Unable to set down delay as MII monitoring is disabled [ 610.967315][T27393] bond6 (unregistering): Released all slaves [ 611.166433][T27393] syzkaller0: entered promiscuous mode [ 611.178557][T27393] syzkaller0: entered allmulticast mode [ 611.209097][T27098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.400546][T27062] veth0_vlan: entered promiscuous mode [ 611.435275][T27062] veth1_vlan: entered promiscuous mode [ 611.523017][T27062] veth0_macvtap: entered promiscuous mode [ 611.549870][ T5621] Bluetooth: hci7: command tx timeout [ 611.565618][T27062] veth1_macvtap: entered promiscuous mode [ 611.605722][T27062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.624544][T27062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.647797][ T9181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.672776][ T9181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.694960][ T9181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.746057][T27443] syzkaller0: entered promiscuous mode [ 611.752085][T27443] syzkaller0: entered allmulticast mode [ 611.765325][ T9181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.781332][T27446] netlink: 'syz.5.5950': attribute type 4 has an invalid length. [ 611.886799][T27098] veth0_vlan: entered promiscuous mode [ 611.917372][T27456] __nla_validate_parse: 3 callbacks suppressed [ 611.917387][T27456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5952'. [ 611.948867][T27098] veth1_vlan: entered promiscuous mode [ 611.960615][ T9181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.979905][ T9181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.004874][T27456] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5952'. [ 612.024628][ T9181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.047422][T27098] veth0_macvtap: entered promiscuous mode [ 612.053897][ T9181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.072232][T27098] veth1_macvtap: entered promiscuous mode [ 612.087455][T27461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5955'. [ 612.117205][T27098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.156269][T27098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.212608][ T9183] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.248562][ T9183] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.287711][ T9183] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.337079][ T9183] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.395006][T27480] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5958'. [ 612.460952][T27490] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 612.510062][ T5621] Bluetooth: hci3: command tx timeout [ 612.563934][ T9183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.583872][ T9183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.607657][ T776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.633295][ T776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.643695][T27501] netlink: 'syz.0.5963': attribute type 16 has an invalid length. [ 612.653367][T27501] netlink: 'syz.0.5963': attribute type 17 has an invalid length. [ 612.666303][T27501] tunl0: left promiscuous mode [ 612.677460][T27501] gre0: left promiscuous mode [ 612.686644][T27501] gre0: left allmulticast mode [ 612.703491][T27501] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 612.717760][T27501] mac80211_hwsim hwsim35 wlan0: left promiscuous mode [ 612.726231][T27501] ipvlan2: left allmulticast mode [ 612.731577][T27501] batadv_slave_1: left allmulticast mode [ 612.737662][T27501] geneve2: left promiscuous mode [ 612.744071][T27501] geneve2: left allmulticast mode [ 612.749587][T27501] geneve3: left promiscuous mode [ 612.756025][T27501] bond2: left allmulticast mode [ 612.758604][T27506] IPv6: NLM_F_REPLACE set, but no existing node found! [ 612.763618][T27501] tipc: Resetting bearer [ 612.784060][T27501] mac80211_hwsim hwsim36 syzkaller0: left promiscuous mode [ 612.791533][T27501] mac80211_hwsim hwsim36 syzkaller0: left allmulticast mode [ 612.805590][T27501] ip6erspan0: left allmulticast mode [ 612.811896][T27501] bond5: left promiscuous mode [ 612.816891][T27501] bridge2: left promiscuous mode [ 612.837019][T27501] bridge5: left promiscuous mode [ 612.842501][T27501] bridge5: left allmulticast mode [ 612.850726][T27501] bond10: left promiscuous mode [ 612.855847][T27501] ip6gre3: left promiscuous mode [ 612.883648][T27501] bridge6: left promiscuous mode [ 612.888902][T27501] bridge6: left allmulticast mode [ 612.896558][T27501] h: left promiscuous mode [ 612.901728][T27501] bridge7: left allmulticast mode [ 612.917830][T27501] vlan0: left allmulticast mode [ 612.923748][T27501] vlan0: left promiscuous mode [ 612.929304][T27501] macvtap1: left promiscuous mode [ 612.935003][T27501] macvtap1: left allmulticast mode [ 612.945353][T27501] vlan1: left promiscuous mode [ 612.950438][T27501] bridge0: left promiscuous mode [ 612.961418][T27508] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 612.989372][T27507] gre1: entered promiscuous mode [ 613.030922][T24317] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.056592][T24317] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.087529][T27514] netlink: get zone limit has 4 unknown bytes [ 613.119591][T27515] netlink: get zone limit has 4 unknown bytes [ 613.151711][T27513] syzkaller0: entered promiscuous mode [ 613.169846][T27513] syzkaller0: entered allmulticast mode [ 613.186391][T24317] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.335500][ T4937] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 613.344453][ T4937] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 613.353371][ T4937] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 613.361181][ T4937] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 613.369644][ T4937] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 613.629768][ T4937] Bluetooth: hci7: command tx timeout [ 613.668583][T27545] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5973'. [ 613.859234][T27564] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 613.873549][T27564] bond1 (unregistering): Released all slaves [ 614.036398][T27577] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5981'. [ 614.049003][T27577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5981'. [ 614.083054][T27582] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5984'. [ 614.130465][T24317] ÿÿÿÿÿÿ: left allmulticast mode [ 614.136215][T24317] veth0_vlan: left allmulticast mode [ 614.213019][T24317] bond10 (unregistering): (slave ip6gre3): Releasing backup interface [ 614.348245][T24317] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 614.397917][T24317] bond8 (unregistering): (slave macvlan2): Releasing backup interface [ 614.410926][T24317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.422122][T24317] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 614.431619][T24317] bond0 (unregistering): (slave bond9): Releasing backup interface [ 614.443480][T24317] bond0 (unregistering): Released all slaves [ 614.454073][T24317] bond1 (unregistering): Released all slaves [ 614.466290][T24317] bond2 (unregistering): Released all slaves [ 614.479393][T24317] bond3 (unregistering): Released all slaves [ 614.497877][T24317] bond4 (unregistering): Released all slaves [ 614.517957][T24317] bond5 (unregistering): Released all slaves [ 614.531710][T24317] bond6 (unregistering): Released all slaves [ 614.542199][T24317] bond7 (unregistering): Released all slaves [ 614.555619][T24317] bond8 (unregistering): Released all slaves [ 614.574183][T24317] bond9 (unregistering): Released all slaves [ 614.586242][T24317] bond10 (unregistering): Released all slaves [ 614.592573][ T4937] Bluetooth: hci3: command tx timeout [ 614.621909][T27524] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 614.760627][T24317] tipc: Disabling bearer [ 614.776561][T24317] tipc: Disabling bearer [ 614.804660][T24317] tipc: Disabling bearer [ 614.835356][T24317] tipc: Left network mode [ 614.885410][T27608] syzkaller0: entered promiscuous mode [ 614.909059][T27608] syzkaller0: entered allmulticast mode [ 614.972032][T27608] netlink: 'syz.5.5990': attribute type 75 has an invalid length. [ 615.002050][T27614] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5992'. [ 615.015304][T27617] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5992'. [ 615.088066][T27619] Cannot find add_set index 0 as target [ 615.377222][T27635] veth0_to_team: entered promiscuous mode [ 615.390389][ T4937] Bluetooth: hci8: command tx timeout [ 615.407661][T27635] gretap0: entered promiscuous mode [ 615.415375][T27635] debugfs: 'hsr0' already exists in 'hsr' [ 615.421699][T27635] Cannot create hsr debugfs directory [ 615.690447][T24317] hsr_slave_0: left promiscuous mode [ 615.719234][T24317] hsr_slave_1: left promiscuous mode [ 615.734854][T24317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.753976][T24317] batman_adv: batadv0: Removing interface: ipvlan2 [ 615.939022][T27690] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20003 [ 616.105516][T27677] bridge1: entered promiscuous mode [ 616.111026][T27677] bridge1: entered allmulticast mode [ 616.122399][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 616.328977][T27714] h: entered promiscuous mode [ 616.424578][T27524] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.432271][T27524] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.439928][T27524] bridge_slave_0: entered allmulticast mode [ 616.447107][T27524] bridge_slave_0: entered promiscuous mode [ 616.454918][T27524] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.463584][T27524] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.471022][T27524] bridge_slave_1: entered allmulticast mode [ 616.478408][T27524] bridge_slave_1: entered promiscuous mode [ 616.520216][T27723] syzkaller0: entered promiscuous mode [ 616.542998][T27723] syzkaller0: entered allmulticast mode [ 616.602869][T27524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.663555][T27524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.769580][T24317] IPVS: stop unused estimator thread 0... [ 616.841750][T27524] team0: Port device team_slave_0 added [ 616.862643][T27524] team0: Port device team_slave_1 added [ 616.940726][T27524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.974746][T27524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.053220][T27524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.075623][T27524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.089451][T27524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.118686][T27524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.161806][T27774] ICMPv6: NA: bb:bb:bb:bb:bb:bb advertised our address fe80::aa on syz_tun! [ 617.325006][T27766] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 617.342842][T27524] hsr_slave_0: entered promiscuous mode [ 617.365962][T27524] hsr_slave_1: entered promiscuous mode [ 617.386166][T27524] debugfs: 'hsr0' already exists in 'hsr' [ 617.404128][T27524] Cannot create hsr debugfs directory [ 617.469800][ T4937] Bluetooth: hci8: command tx timeout [ 617.562063][T27790] __nla_validate_parse: 7 callbacks suppressed [ 617.562084][T27790] netlink: 189 bytes leftover after parsing attributes in process `syz.5.6026'. [ 617.622320][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 618.157205][T27524] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 618.182619][T27524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.194247][T27524] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 618.228635][T27524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.255821][T27524] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 618.293557][T27524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 618.323605][T27524] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 618.348037][T27524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 618.404967][T27833] sctp: [Deprecated]: syz.7.6035 (pid 27833) Use of int in maxseg socket option. [ 618.404967][T27833] Use struct sctp_assoc_value instead [ 618.424260][T27833] sctp: [Deprecated]: syz.7.6035 (pid 27833) Use of int in max_burst socket option. [ 618.424260][T27833] Use struct sctp_assoc_value instead [ 618.507375][T27837] vlan0: entered promiscuous mode [ 618.577963][T27838] syzkaller1: entered promiscuous mode [ 618.652769][T27524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.654677][T27849] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6040'. [ 618.706802][T27849] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6040'. [ 618.716145][T27524] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.733071][T24317] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.740263][T24317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.794694][T24317] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.801865][T24317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.917986][T27862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.975621][T27862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6043'. [ 618.987936][T27872] xt_cgroup: invalid path, errno=-2 [ 619.147886][T27884] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6045'. [ 619.174409][T27884] veth0_macvtap: left promiscuous mode [ 619.324610][T27897] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6049'. [ 619.378337][T27900] x_tables: duplicate underflow at hook 2 [ 619.503398][T27907] netlink: 'syz.4.6051': attribute type 1 has an invalid length. [ 619.549799][ T4937] Bluetooth: hci8: command tx timeout [ 619.664644][T27924] xt_ecn: cannot match TCP bits for non-tcp packets [ 619.687756][T27925] xt_ecn: cannot match TCP bits for non-tcp packets [ 619.698450][T27524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.782898][T27524] veth0_vlan: entered promiscuous mode [ 619.816087][T27524] veth1_vlan: entered promiscuous mode [ 619.864981][T27936] netlink: 220 bytes leftover after parsing attributes in process `syz.6.6057'. [ 619.891996][T27941] netlink: 'syz.4.6058': attribute type 1 has an invalid length. [ 619.907904][T27935] geneve3: entered promiscuous mode [ 619.932668][T27935] geneve3: entered allmulticast mode [ 619.958390][T27648] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 619.998065][T27648] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 620.035765][T27941] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6058'. [ 620.086322][T27950] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6058'. [ 620.100490][T27648] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 620.124772][T27648] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 620.208972][T27524] veth0_macvtap: entered promiscuous mode [ 620.252941][T27524] veth1_macvtap: entered promiscuous mode [ 620.332983][T27524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.382370][T27977] netlink: 'syz.4.6066': attribute type 1 has an invalid length. [ 620.392779][T27524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.400982][T27977] netlink: 280 bytes leftover after parsing attributes in process `syz.4.6066'. [ 620.510859][T27642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.547177][T27979] vcan0: entered allmulticast mode [ 620.558426][T27642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.605673][T27642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.657719][T27642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.670130][T27995] netlink: 'syz.7.6071': attribute type 27 has an invalid length. [ 620.746957][T27991] IPv6: Can't replace route, no match found [ 620.772758][T27992] IPv6: Can't replace route, no match found [ 620.858306][ T776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.899367][ T776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.953874][ T776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.986681][ T776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.158793][T28031] nftables ruleset with unbound chain [ 621.480022][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 621.488614][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 621.496321][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 621.505985][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 621.515429][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 621.630977][T24171] Bluetooth: hci8: command tx timeout [ 621.673734][T28044] nbd3: detected capacity change from 0 to 63 [ 621.705694][ T4937] block nbd3: Receive control failed (result -104) [ 621.706629][ T5621] block nbd3: Receive control failed (result -32) [ 621.929500][T28071] syzkaller0: entered promiscuous mode [ 621.940819][T28071] syzkaller0: entered allmulticast mode [ 622.045536][T28081] tipc: Started in network mode [ 622.057422][T28081] tipc: Node identity 12b9bf0749de, cluster identity 4711 [ 622.065549][T28081] tipc: Enabled bearer , priority 0 [ 622.126575][T28069] tipc: Resetting bearer [ 622.160940][T28069] tipc: Disabling bearer [ 622.278650][T28048] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 622.391581][T28107] tc_dump_action: action bad kind [ 622.503846][T28112] vlan2: entered allmulticast mode [ 622.515617][T28112] bond0: entered allmulticast mode [ 622.525368][T28118] netlink: 'syz.6.6100': attribute type 10 has an invalid length. [ 622.531318][T28112] bond_slave_0: entered allmulticast mode [ 622.539004][T28112] bond_slave_1: entered allmulticast mode [ 622.568896][T28118] dummy0: entered allmulticast mode [ 622.574937][T28118] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 622.673345][T28129] __nla_validate_parse: 9 callbacks suppressed [ 622.673365][T28129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6102'. [ 622.906260][T28155] netlink: 'syz.4.6104': attribute type 10 has an invalid length. [ 622.965448][T28155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6104'. [ 623.038023][T28168] tunl0: entered promiscuous mode [ 623.061657][T28168] netlink: 'syz.0.6107': attribute type 3 has an invalid length. [ 623.093531][T28168] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6107'. [ 623.174925][T28179] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6112'. [ 623.183170][T28048] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.193838][T28179] netlink: 'syz.6.6112': attribute type 1 has an invalid length. [ 623.216330][T28048] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.238673][T28048] bridge_slave_0: entered allmulticast mode [ 623.246431][T28048] bridge_slave_0: entered promiscuous mode [ 623.270960][T28048] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.294571][T28048] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.319072][T28048] bridge_slave_1: entered allmulticast mode [ 623.332506][T28048] bridge_slave_1: entered promiscuous mode [ 623.354597][T28182] syzkaller0: entered promiscuous mode [ 623.362266][T28182] syzkaller0: entered allmulticast mode [ 623.439940][T28048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.453289][T28048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.487735][T28191] netlink: 'syz.0.6115': attribute type 14 has an invalid length. [ 623.498559][T28048] team0: Port device team_slave_0 added [ 623.501130][T28191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6115'. [ 623.528032][T28048] team0: Port device team_slave_1 added [ 623.549842][ T5621] Bluetooth: hci5: command tx timeout [ 623.574006][T28191] netlink: 'syz.0.6115': attribute type 14 has an invalid length. [ 623.583035][T28195] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 623.593926][T28191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6115'. [ 623.607556][T28048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.616386][T28048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.649228][T28048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.661319][ T9171] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.691013][T28209] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6118'. [ 623.702966][T28048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.716411][T28048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.778207][T28048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.799425][ T9171] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.814574][ T9171] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.828004][T28217] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6122'. [ 623.849488][ T9171] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.907500][T28048] hsr_slave_0: entered promiscuous mode [ 623.922609][T28048] hsr_slave_1: entered promiscuous mode [ 623.938722][T28048] debugfs: 'hsr0' already exists in 'hsr' [ 623.959297][T28048] Cannot create hsr debugfs directory [ 623.975402][T28221] openvswitch: netlink: Flow actions attr not present in new flow. [ 624.047871][T28232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6125'. [ 624.101481][T28232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.126415][T28232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.152053][T28239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6125'. [ 624.280543][T28247] pim6reg: entered allmulticast mode [ 624.307186][T28247] pim6reg: left allmulticast mode [ 624.503211][T28265] xfrm1: entered promiscuous mode [ 624.524134][T28265] xfrm1: entered allmulticast mode [ 624.544146][T28269] netlink: 'syz.7.6135': attribute type 21 has an invalid length. [ 624.544771][T28270] netlink: 'syz.7.6135': attribute type 21 has an invalid length. [ 624.842506][T28288] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 624.860990][T28288] bond1 (unregistering): Released all slaves [ 624.892144][T28297] netlink: 'syz.4.6144': attribute type 11 has an invalid length. [ 624.934118][T28048] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 624.946588][T28048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 624.960978][T28048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 624.977123][T28048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 625.006527][T28048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 625.026188][T28048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 625.035363][T28048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 625.055361][T28048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 625.286504][T28048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.323550][T28048] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.343144][T24323] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.350320][T24323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.368912][T27642] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.376097][T27642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.640604][ T4937] Bluetooth: hci5: command tx timeout [ 625.866550][T28048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.939213][T28376] syzkaller0: entered promiscuous mode [ 625.947671][T28376] syzkaller0: entered allmulticast mode [ 626.065453][T28048] veth0_vlan: entered promiscuous mode [ 626.082527][T28048] veth1_vlan: entered promiscuous mode [ 626.132244][T28048] veth0_macvtap: entered promiscuous mode [ 626.149190][T28048] veth1_macvtap: entered promiscuous mode [ 626.186367][T28048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.214984][T28048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.241154][T24323] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.269564][T24323] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.290493][T28396] block nbd7: not configured, cannot reconfigure [ 626.301105][T24323] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.311342][T24323] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.417079][T27642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.440298][T27642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.513283][T27642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.537944][T27642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.557179][T28411] 8021q: adding VLAN 0 to HW filter on device bond6 [ 626.867447][T28441] validate_nla: 4 callbacks suppressed [ 626.867467][T28441] netlink: 'syz.4.6178': attribute type 1 has an invalid length. [ 626.952438][T28441] macvlan2: entered promiscuous mode [ 626.957896][T28441] macvlan2: entered allmulticast mode [ 626.967045][T28441] bond1: entered promiscuous mode [ 626.972919][T28441] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 626.981177][T28441] bond1: left promiscuous mode [ 627.229348][T28469] ipt_ECN: cannot use operation on non-tcp rule [ 627.488713][T28486] vlan2: entered allmulticast mode [ 627.496353][T28486] bond0: entered allmulticast mode [ 627.502269][T28486] bond_slave_0: entered allmulticast mode [ 627.508469][T28486] bond_slave_1: entered allmulticast mode [ 627.614665][T28489] syzkaller0: entered promiscuous mode [ 627.632939][T28489] syzkaller0: entered allmulticast mode [ 627.709914][ T5621] Bluetooth: hci5: command tx timeout [ 627.779078][T28508] __nla_validate_parse: 19 callbacks suppressed [ 627.779100][T28508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6197'. [ 627.803306][T28508] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6197'. [ 627.982592][T28524] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6203'. [ 628.075549][T28530] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6205'. [ 628.176465][T28538] openvswitch: netlink: IP tunnel dst address not specified [ 628.193771][T28538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.905815][T28553] can: request_module (can-proto-0) failed. [ 628.949370][T28553] batman_adv: batadv0: Adding interface: dummy0 [ 628.965939][T28553] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.998116][T28553] batman_adv: batadv0: Interface activated: dummy0 [ 629.016685][T28553] batadv0: mtu less than device minimum [ 629.029398][T28553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.040476][T28553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.051548][T28553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.062686][T28553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.073747][T28553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.084792][T28553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.095923][T28553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.106915][T28553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.117966][T28553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 629.123458][T28567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6215'. [ 629.207663][T28574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6217'. [ 629.249848][T28574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6217'. [ 629.284619][T28574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6217'. [ 629.503032][ T808] IPVS: starting estimator thread 0... [ 629.551534][T28606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6226'. [ 629.568809][T28609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6228'. [ 629.600007][T28602] IPVS: using max 45 ests per chain, 108000 per kthread [ 629.716698][T28598] batadv_slave_0: entered promiscuous mode [ 629.757694][T28606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.778537][T28606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.791249][ T5621] Bluetooth: hci5: command tx timeout [ 629.839807][T24119] IPVS: starting estimator thread 0... [ 629.961421][T28617] IPVS: using max 37 ests per chain, 88800 per kthread [ 630.336429][T28646] netlink: 'syz.4.6239': attribute type 2 has an invalid length. [ 630.434821][T28654] team0 (unregistering): Port device team_slave_0 removed [ 630.474381][T28654] team0 (unregistering): Port device team_slave_1 removed [ 630.558591][T28664] netlink: 'syz.4.6244': attribute type 1 has an invalid length. [ 630.602799][T28664] netlink: 'syz.4.6244': attribute type 1 has an invalid length. [ 630.722447][T28676] netlink: 'syz.4.6248': attribute type 2 has an invalid length. [ 630.873924][T28688] netlink: 'syz.5.6252': attribute type 1 has an invalid length. [ 630.906862][T28693] ksmbd: Unknown IPC event: 4, ignore. [ 630.915634][T28688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 630.950807][T28688] bond1: (slave veth0_to_bond): making interface the new active one [ 630.978228][T28688] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 631.550859][T28736] tcf_pedit_act: 7 callbacks suppressed [ 631.550874][T28736] tc action pedit 'at' offset 14 out of bounds [ 631.630958][T28738] macvtap1: entered promiscuous mode [ 631.636664][T28738] macvtap1: entered allmulticast mode [ 631.644605][T28738] veth1_vlan: entered allmulticast mode [ 631.667882][T28738] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.716821][T28740] ipvlan2: entered allmulticast mode [ 631.722446][T28740] batadv_slave_1: entered allmulticast mode [ 631.730342][T28740] batman_adv: batadv0: Adding interface: ipvlan2 [ 631.736829][T28740] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.765976][T28740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.776640][T28740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.787329][T28740] batman_adv: batadv0: Interface activated: ipvlan2 [ 631.799409][T28744] ipvlan3: entered allmulticast mode [ 631.806467][T28744] batman_adv: batadv0: Adding interface: ipvlan3 [ 631.813447][T28744] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.840201][T28744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.850778][T28744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.860791][T28744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 631.872249][T28744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.882188][T28744] batman_adv: batadv0: Interface activated: ipvlan3 [ 631.903844][T28738] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.977854][T28748] syzkaller0: entered promiscuous mode [ 631.995004][T28748] syzkaller0: entered allmulticast mode [ 632.015641][T28738] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.088650][T28738] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.178017][T24317] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.197804][T24317] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.214996][T24317] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.230177][T28770] veth0: entered promiscuous mode [ 632.248002][T24317] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.267293][T28770] veth0: left promiscuous mode [ 632.351490][T28778] netlink: 'syz.5.6278': attribute type 1 has an invalid length. [ 632.407158][T28782] veth0_macvtap: left promiscuous mode [ 632.482344][T28784] netlink: 'syz.6.6279': attribute type 1 has an invalid length. [ 632.501815][T28784] bond7: entered promiscuous mode [ 632.507257][T28784] 8021q: adding VLAN 0 to HW filter on device bond7 [ 632.525719][T28784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.547267][T28784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.062161][T28770] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 634.349979][ T5621] Bluetooth: hci2: command 0x0401 tx timeout [ 634.993823][T28752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 635.089048][T28794] __nla_validate_parse: 21 callbacks suppressed [ 635.089067][T28794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6283'. [ 635.122102][T28793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6283'. [ 635.154540][T28804] bond0: entered promiscuous mode [ 635.163912][T28804] bond_slave_0: entered promiscuous mode [ 635.170656][T28804] bond_slave_1: entered promiscuous mode [ 635.179584][T28804] batadv0: entered promiscuous mode [ 635.197942][T28804] debugfs: 'hsr1' already exists in 'hsr' [ 635.208750][T28804] Cannot create hsr debugfs directory [ 635.215072][T28804] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 635.226224][T28804] bond0: left promiscuous mode [ 635.238724][T28804] bond_slave_0: left promiscuous mode [ 635.247396][T28804] bond_slave_1: left promiscuous mode [ 635.257119][T28804] batadv0: left promiscuous mode [ 635.348022][T28821] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 635.467288][T28833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6293'. [ 635.517574][T28833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6293'. [ 635.538268][T28835] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6294'. [ 635.551287][T28837] bridge_slave_1: left promiscuous mode [ 635.557092][T28837] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.572696][T28837] ¾x9ÿ: left allmulticast mode [ 635.577589][T28837] ¾x9ÿ: left promiscuous mode [ 635.583829][T28837] bridge0: port 1(1¾x9ÿ) entered disabled state [ 635.615542][T28842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6294'. [ 635.728805][T28849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6298'. [ 635.775965][T28851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6299'. [ 635.820916][T28857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6301'. [ 635.936751][T28867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6304'. [ 636.175733][T28889] syzkaller0: entered promiscuous mode [ 636.182176][T28889] syzkaller0: entered allmulticast mode [ 636.512839][T28916] veth3: entered promiscuous mode [ 636.567657][T28919] syzkaller0: entered promiscuous mode [ 636.583722][T28919] syzkaller0: entered allmulticast mode [ 636.639557][T28926] netlink: 'syz.4.6321': attribute type 21 has an invalid length. [ 636.737912][T24323] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.746955][T28926] netlink: 'syz.4.6321': attribute type 21 has an invalid length. [ 636.768756][T24323] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.796401][T24323] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.824716][T24323] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.879605][T28934] net_ratelimit: 12 callbacks suppressed [ 636.899843][T28934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.091279][T28943] syzkaller0: entered promiscuous mode [ 637.097242][T28943] syzkaller0: entered allmulticast mode [ 637.184346][T28959] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 637.584864][T28979] syzkaller0: entered promiscuous mode [ 637.597124][T28979] syzkaller0: entered allmulticast mode [ 638.209671][T29017] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.217210][T29017] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.296804][T29026] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 638.656260][T29040] netlink: 'syz.5.6353': attribute type 1 has an invalid length. [ 638.711563][T29040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 641.108314][T29010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 641.207270][T29050] __nla_validate_parse: 15 callbacks suppressed [ 641.207289][T29050] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6355'. [ 641.248383][T29054] netlink: 'syz.4.6356': attribute type 1 has an invalid length. [ 641.279878][T29054] netlink: 280 bytes leftover after parsing attributes in process `syz.4.6356'. [ 641.370924][T29063] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6361'. [ 641.453318][T29068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6363'. [ 641.466286][T29074] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6364'. [ 641.506423][T29068] erspan0: entered promiscuous mode [ 641.620963][T29084] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6368'. [ 641.873749][T29117] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6375'. [ 642.180178][T29136] netlink: 'syz.4.6380': attribute type 1 has an invalid length. [ 642.237569][T29139] netlink: 'syz.0.6382': attribute type 23 has an invalid length. [ 642.278287][T29140] netlink: 'syz.0.6382': attribute type 23 has an invalid length. [ 642.360178][T29146] netlink: 408 bytes leftover after parsing attributes in process `syz.0.6384'. [ 642.407570][T29151] netlink: 'syz.6.6383': attribute type 8 has an invalid length. [ 642.615701][T29168] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 642.695456][T29170] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6390'. [ 642.704900][T29170] netlink: 'syz.7.6390': attribute type 3 has an invalid length. [ 642.742908][ T24] IPVS: starting estimator thread 0... [ 642.841227][T29175] IPVS: using max 41 ests per chain, 98400 per kthread [ 642.894350][T29185] blkio.reset_stats is deprecated [ 642.895965][T29184] netlink: 'syz.5.6395': attribute type 49 has an invalid length. [ 642.979276][T29184] ip6gretap0: entered promiscuous mode [ 642.993902][T29184] ip6gretap0: entered allmulticast mode [ 643.165825][T29195] tipc: Invalid UDP bearer configuration [ 643.165865][T29195] tipc: Enabling of bearer rejected, failed to enable media [ 643.569322][T29225] netlink: 'syz.4.6405': attribute type 11 has an invalid length. [ 643.805845][T29246] netlink: 'syz.7.6410': attribute type 29 has an invalid length. [ 643.835543][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6410'. [ 643.853566][T29249] lo: entered allmulticast mode [ 643.883265][T29249] tunl0: left promiscuous mode [ 643.907677][T29249] tunl0: entered allmulticast mode [ 643.929085][T29249] gre0: entered allmulticast mode [ 643.976365][T29249] gretap0: entered allmulticast mode [ 644.000463][T29249] erspan0: entered allmulticast mode [ 644.021618][T29249] ip_vti0: entered allmulticast mode [ 644.032682][T29249] ip6_vti0: entered allmulticast mode [ 644.041242][T29249] sit0: entered allmulticast mode [ 644.048383][T29262] nbd: illegal input index -1 [ 644.058288][T29249] ip6tnl0: entered allmulticast mode [ 644.067217][T29249] ip6gre0: entered allmulticast mode [ 644.075220][T29249] syz_tun: entered allmulticast mode [ 644.092303][T29249] ip6gretap0: entered allmulticast mode [ 644.107075][T29249] bridge0: entered allmulticast mode [ 644.114832][T29249] vcan0: entered allmulticast mode [ 644.122278][T29249] bond0: entered allmulticast mode [ 644.127595][T29249] bond_slave_0: entered allmulticast mode [ 644.133645][T29249] bond_slave_1: entered allmulticast mode [ 644.145390][T29249] dummy0: entered allmulticast mode [ 644.153510][T29249] nlmon0: entered allmulticast mode [ 644.161890][T29249] batadv0: entered allmulticast mode [ 644.173099][T29249] vxcan0: entered allmulticast mode [ 644.180278][T29249] vxcan1: entered allmulticast mode [ 644.186724][T29249] veth0: entered allmulticast mode [ 644.196685][T29249] veth1: entered allmulticast mode [ 644.204922][T29249] wg0: entered allmulticast mode [ 644.213303][T29249] wg1: entered allmulticast mode [ 644.220504][T29249] wg2: entered allmulticast mode [ 644.226809][T29249] veth0_to_bridge: entered allmulticast mode [ 644.236662][T29249] veth1_to_bridge: entered allmulticast mode [ 644.246322][T29249] veth0_to_bond: entered allmulticast mode [ 644.255533][T29249] veth1_to_bond: entered allmulticast mode [ 644.264841][T29249] veth0_to_team: entered allmulticast mode [ 644.273535][T29249] team_slave_0: entered allmulticast mode [ 644.280502][T29249] veth1_to_team: entered allmulticast mode [ 644.288334][T29249] team_slave_1: entered allmulticast mode [ 644.294578][T29249] veth0_to_batadv: entered allmulticast mode [ 644.303300][T29249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.311640][T29249] batadv_slave_0: entered allmulticast mode [ 644.320446][T29249] xfrm0: entered allmulticast mode [ 644.328906][T29249] veth0_to_hsr: entered allmulticast mode [ 644.336666][T29249] hsr_slave_0: entered allmulticast mode [ 644.345670][T29249] veth1_to_hsr: entered allmulticast mode [ 644.354320][T29249] hsr_slave_1: entered allmulticast mode [ 644.362868][T29249] hsr0: entered allmulticast mode [ 644.370690][T29249] veth1_virt_wifi: entered allmulticast mode [ 644.379108][T29249] veth0_virt_wifi: entered allmulticast mode [ 644.390714][T29249] virt_wifi0: entered allmulticast mode [ 644.397234][T29249] veth1_vlan: entered allmulticast mode [ 644.405974][T29249] veth0_vlan: entered allmulticast mode [ 644.423558][T29249] vlan0: entered allmulticast mode [ 644.428924][T29249] vlan1: entered allmulticast mode [ 644.436379][T29249] macvlan0: entered allmulticast mode [ 644.445174][T29249] macvlan1: entered allmulticast mode [ 644.452625][T29249] ipvlan0: entered allmulticast mode [ 644.458031][T29249] ipvlan1: entered allmulticast mode [ 644.463693][T29249] veth1_macvtap: entered allmulticast mode [ 644.471815][T29249] veth0_macvtap: entered allmulticast mode [ 644.480902][T29249] macvtap0: entered allmulticast mode [ 644.489393][T29249] macsec0: entered allmulticast mode [ 644.496822][T29249] geneve0: entered allmulticast mode [ 644.504328][T29249] geneve1: entered allmulticast mode [ 644.512597][T29249] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 644.524308][T29249] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 644.534730][T29249] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 644.545137][T29249] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 644.557194][T29249] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 644.569011][T29249] mac80211_hwsim hwsim70 wlan1: entered allmulticast mode [ 644.577863][T29249] @: entered allmulticast mode [ 644.584597][T29249] xfrm1: left promiscuous mode [ 644.589572][T29249] ip6tnl1: entered allmulticast mode [ 644.595779][T29249] bridge1: entered allmulticast mode [ 644.604749][T29249] mac80211_hwsim hwsim69 pim6reg0: entered allmulticast mode [ 644.612439][T29249] geneve1.2: entered allmulticast mode [ 644.618557][T29249] macsec1: entered allmulticast mode [ 644.635941][T27642] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.672340][T27642] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.686321][T27642] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.695881][T27642] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.727551][T27642] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.756312][T27642] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.795769][T27642] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.838176][T27642] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.902764][T29291] netlink: 'syz.6.6421': attribute type 2 has an invalid length. [ 644.940267][T29291] netlink: 'syz.6.6421': attribute type 2 has an invalid length. [ 645.269431][T29311] netlink: 'syz.6.6427': attribute type 63 has an invalid length. [ 645.292707][T29311] netlink: 'syz.6.6427': attribute type 63 has an invalid length. [ 645.497504][T29337] IPVS: length: 158 != 8 [ 645.670788][T29352] syzkaller0: entered promiscuous mode [ 645.693006][T29352] syzkaller0: entered allmulticast mode [ 645.956390][T29382] nbd: couldn't find a device at index 1048580 [ 645.965183][T29384] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 645.977568][T29384] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 646.007324][T29368] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.015054][T29368] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.097966][T29368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.112146][T29368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.199586][T29377] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.214770][T27642] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.227025][T27642] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.246108][T27642] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.385520][T29402] bond3: (slave gre0): Device is not bonding slave [ 646.392616][T29402] bond3: option active_slave: invalid value (gre0) [ 646.400841][T29402] bond3 (unregistering): Released all slaves [ 646.437917][T29405] xt_nfacct: accounting object `syz1' does not exist [ 646.458980][T29407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.477186][T29407] netlink: 'syz.4.6449': attribute type 1 has an invalid length. [ 646.485433][T29407] __nla_validate_parse: 7 callbacks suppressed [ 646.485453][T29407] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6449'. [ 646.500899][T29407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6449'. [ 646.560394][T29409] netlink: 'syz.4.6450': attribute type 2 has an invalid length. [ 646.767540][T29427] netlink: 'syz.4.6457': attribute type 1 has an invalid length. [ 646.776241][T29427] netlink: 'syz.4.6457': attribute type 1 has an invalid length. [ 646.785529][T29427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6457'. [ 646.795216][T29427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6457'. [ 646.805454][T29427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6457'. [ 646.883621][T29432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6460'. [ 646.896422][T29434] x_tables: duplicate underflow at hook 3 [ 647.004765][ T9171] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa3 [ 647.522298][T29452] 8021q: VLANs not supported on vcan0 [ 649.939517][T29444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 650.067651][T29478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6473'. [ 650.124078][ T42] IPVS: starting estimator thread 0... [ 650.231181][T29485] IPVS: using max 41 ests per chain, 98400 per kthread [ 650.264359][T29502] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6479'. [ 650.322482][T29502] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 650.355532][T29502] bond1 (unregistering): Released all slaves [ 650.434264][T29517] netlink: 71 bytes leftover after parsing attributes in process `syz.6.6483'. [ 650.559589][T29528] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6487'. [ 650.875216][T29548] syzkaller0: entered promiscuous mode [ 650.899816][T29548] syzkaller0: entered allmulticast mode [ 650.982429][T29556] netlink: 'syz.6.6498': attribute type 2 has an invalid length. [ 651.377900][T29599] netlink: 'syz.4.6510': attribute type 5 has an invalid length. [ 651.426976][T29599] netlink: 'syz.4.6510': attribute type 6 has an invalid length. [ 651.552634][T29610] syzkaller0: entered promiscuous mode [ 651.560094][T29610] syzkaller0: entered allmulticast mode [ 651.645164][T29624] netlink: 'syz.4.6518': attribute type 1 has an invalid length. [ 651.671851][T29627] __nla_validate_parse: 8 callbacks suppressed [ 651.671867][T29627] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6520'. [ 651.761223][T29630] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.6521'. [ 651.782392][T29630] netlink: 496 bytes leftover after parsing attributes in process `syz.5.6521'. [ 651.864272][T29641] netlink: 'syz.5.6524': attribute type 64 has an invalid length. [ 651.875548][ T25] block nbd3: Connection timed out, retrying (0/2 alive) [ 651.883175][ T25] block nbd3: Connection timed out, retrying (0/2 alive) [ 651.891246][ T25] block nbd3: Connection timed out, retrying (0/2 alive) [ 651.898368][ T4952] block nbd3: Dead connection, failed to find a fallback [ 651.906605][ T4952] block nbd3: shutting down sockets [ 651.912150][ T25] block nbd3: Connection timed out, retrying (0/2 alive) [ 651.919252][ T4952] blk_print_req_error: 138 callbacks suppressed [ 651.919268][ T4952] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.935315][ T4952] buffer_io_error: 138 callbacks suppressed [ 651.935330][ T4952] Buffer I/O error on dev nbd3, logical block 1, async page read [ 651.949305][ T4952] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.958920][ T4952] Buffer I/O error on dev nbd3, logical block 0, async page read [ 651.967190][ T4952] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.976384][ T4952] Buffer I/O error on dev nbd3, logical block 3, async page read [ 651.984230][ T4952] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.994628][ T4952] Buffer I/O error on dev nbd3, logical block 2, async page read [ 652.002664][T25589] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.012177][T25589] Buffer I/O error on dev nbd3, logical block 0, async page read [ 652.020309][T25589] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.029475][T25589] Buffer I/O error on dev nbd3, logical block 1, async page read [ 652.037821][T25589] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.047945][T25589] Buffer I/O error on dev nbd3, logical block 2, async page read [ 652.061269][T25589] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.080099][T25589] Buffer I/O error on dev nbd3, logical block 3, async page read [ 652.098067][T25589] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.107524][T25589] Buffer I/O error on dev nbd3, logical block 0, async page read [ 652.118447][T25589] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.128115][T25589] Buffer I/O error on dev nbd3, logical block 1, async page read [ 652.141451][T25589] ldm_validate_partition_table(): Disk read failed. [ 652.149347][T25589] Dev nbd3: unable to read RDB block 0 [ 652.156391][T25589] nbd3: unable to read partition table [ 652.172816][T25589] ldm_validate_partition_table(): Disk read failed. [ 652.191995][T25589] Dev nbd3: unable to read RDB block 0 [ 652.206071][T25589] nbd3: unable to read partition table [ 653.109372][T29624] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 653.153590][T29658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.291465][T29667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6531'. [ 653.315842][T29667] openvswitch: netlink: Unknown nsh attribute 0 [ 653.398848][T29678] netlink: 'syz.5.6534': attribute type 1 has an invalid length. [ 653.413539][T29680] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6531'. [ 653.443148][T29684] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6535'. [ 653.464629][T29684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.561760][T29693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6539'. [ 653.577510][T29687] bond4: (slave bridge1): making interface the new active one [ 653.586475][T29687] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 653.596609][T29693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6539'. [ 653.629600][T29696] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6538'. [ 653.732916][T29701] can: request_module (can-proto-0) failed. [ 653.817909][T29718] netlink: 'syz.5.6545': attribute type 16 has an invalid length. [ 653.860461][T29718] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6545'. [ 653.881023][T29712] syzkaller1: entered promiscuous mode [ 653.899172][T29712] syzkaller1: entered allmulticast mode [ 653.915329][T29712] geneve2: entered promiscuous mode [ 653.927399][T29718] veth0_macvtap: entered allmulticast mode [ 654.072255][T29729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 654.515442][T29763] tipc: Enabling of bearer rejected, failed to enable media [ 654.536106][T29763] netlink: 'syz.6.6555': attribute type 1 has an invalid length. [ 654.562628][T29763] bond8: Unable to set up delay as MII monitoring is disabled [ 654.576458][T29763] bond8 (unregistering): Released all slaves [ 654.674836][T24317] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 654.702383][T24119] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 654.717079][T24317] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 655.120194][T29819] netlink: 'syz.5.6566': attribute type 2 has an invalid length. [ 655.251457][T29830] netlink: 'syz.7.6569': attribute type 1 has an invalid length. [ 655.290034][T29830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 655.469899][T24119] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 655.557109][T29852] syzkaller0: entered promiscuous mode [ 655.563473][T29852] syzkaller0: entered allmulticast mode [ 655.722627][T24119] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 655.932285][T29882] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 656.364684][ T5621] block nbd4: Receive control failed (result -1) [ 656.373353][T29926] veth0_to_bridge: entered promiscuous mode [ 656.497473][T29925] veth0_to_bridge: left promiscuous mode [ 656.768839][T29949] __nla_validate_parse: 17 callbacks suppressed [ 656.768862][T29949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6602'. [ 656.970046][T29963] batadv_slave_1: entered promiscuous mode [ 656.992510][T29963] batadv_slave_1: entered allmulticast mode [ 657.015111][T29963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.060155][T24119] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.110279][T24119] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.168671][T29974] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6609'. [ 657.213780][T29974] 0·: renamed from hsr0 [ 657.225141][T29974] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 657.268684][T29974] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 657.314430][T29974] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 657.505420][T30001] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 657.544736][T30001] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 657.575235][T30013] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6616'. [ 657.605417][T30011] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6616'. [ 657.678604][ T29] audit: type=1107 audit(1782370321.796:23): pid=30018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 657.703077][T30024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6619'. [ 657.845087][T30017] syzkaller0: entered promiscuous mode [ 657.857996][T30031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6619'. [ 657.860036][T30017] syzkaller0: entered allmulticast mode [ 657.946143][T30024] team0 (unregistering): Port device team_slave_0 removed [ 657.979277][T30024] team0 (unregistering): Port device team_slave_1 removed [ 657.999112][T30031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6619'. [ 658.015811][T30031] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6619'. [ 658.028503][T30031] veth1_to_bridge: entered allmulticast mode [ 658.038411][T30031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6619'. [ 658.049830][T30031] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6619'. [ 658.546222][T30084] macvlan0: entered promiscuous mode [ 658.837540][T30122] tun0: tun_chr_ioctl cmd 1074025675 [ 658.850661][T30122] tun0: persist enabled [ 658.874556][T30126] sctp: [Deprecated]: syz.7.6645 (pid 30126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 658.874556][T30126] Use struct sctp_sack_info instead [ 658.993158][T30136] netlink: 'syz.4.6647': attribute type 1 has an invalid length. [ 659.069811][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 659.156844][T30154] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 659.653115][T30205] netlink: 'syz.0.6673': attribute type 21 has an invalid length. [ 659.661476][T30205] IPv6: NLM_F_CREATE should be specified when creating new route [ 659.670541][T30205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 659.677819][T30205] IPv6: NLM_F_CREATE should be set when creating new route [ 659.685136][T30205] IPv6: NLM_F_CREATE should be set when creating new route [ 659.692515][T30205] IPv6: NLM_F_CREATE should be set when creating new route [ 659.710309][T30207] netlink: 'syz.7.6670': attribute type 1 has an invalid length. [ 659.803223][T30211] syzkaller0: entered allmulticast mode [ 659.944879][T30230] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 660.000126][T30237] netlink: 'syz.4.6679': attribute type 11 has an invalid length. [ 660.095087][T30245] sctp: [Deprecated]: syz.6.6684 (pid 30245) Use of int in max_burst socket option. [ 660.095087][T30245] Use struct sctp_assoc_value instead [ 660.125782][T30248] Cannot find del_set index 4 as target [ 660.265780][T30266] gtp0: entered allmulticast mode [ 660.274025][T30266] team0: Device gtp0 is of different type [ 661.279470][T30343] xt_TCPMSS: Only works on TCP SYN packets [ 661.716007][T30361] bond5: Removing last arp target with arp_interval on [ 661.794400][T30361] bond6: Removing last arp target with arp_interval on [ 661.832723][T30361] bond7: Removing last arp target with arp_interval on [ 661.892476][T30371] __nla_validate_parse: 21 callbacks suppressed [ 661.892496][T30371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6720'. [ 661.910784][T30361] bond8: Removing last arp target with arp_interval on [ 661.965025][T30371] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6720'. [ 661.996166][T30361] bond9: Removing last arp target with arp_interval on [ 662.079954][T30361] bond10: Removing last arp target with arp_interval on [ 662.126819][T30361] bond11: Removing last arp target with arp_interval on [ 662.194280][T30361] bond12: Removing last arp target with arp_interval on [ 662.247963][T30361] bond13: Removing last arp target with arp_interval on [ 662.256058][T30392] netlink: 'syz.0.6725': attribute type 10 has an invalid length. [ 662.317092][T30361] bond14: Removing last arp target with arp_interval on [ 662.367757][T30361] bond15: Removing last arp target with arp_interval on [ 662.384089][T30407] netlink: 'syz.7.6732': attribute type 1 has an invalid length. [ 662.404939][T30361] bond16: Removing last arp target with arp_interval on [ 662.412519][T30392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.424862][T30411] bond0: (slave dummy0): Releasing backup interface [ 662.433630][T30411] dummy0: left allmulticast mode [ 662.441355][T30411] batman_adv: batadv0: Adding interface: dummy0 [ 662.447803][T30411] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.474317][T30411] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 662.486060][T30361] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 662.604463][T30424] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6737'. [ 662.627076][T30424] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6737'. [ 662.721548][T30435] netlink: 168 bytes leftover after parsing attributes in process `syz.6.6741'. [ 662.826143][T30448] nftables ruleset with unbound set [ 662.840727][T30444] IPv4: Oversized IP packet from 127.202.26.0 [ 662.906518][T30441] netlink: 'syz.6.6741': attribute type 1 has an invalid length. [ 662.919600][T30441] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6741'. [ 662.948762][T30441] netlink: 'syz.6.6741': attribute type 9 has an invalid length. [ 663.106710][T30467] netlink: 'syz.0.6751': attribute type 12 has an invalid length. [ 663.115336][T30467] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6751'. [ 663.162281][T30471] Bluetooth: MGMT ver 1.23 [ 663.372556][T30490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.392596][T30490] netlink: 'syz.5.6756': attribute type 1 has an invalid length. [ 663.473979][T30495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6757'. [ 663.728361][T30515] netlink: 'syz.0.6763': attribute type 1 has an invalid length. [ 663.851245][T30527] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6765'. [ 663.861884][T30519] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 664.301138][T30563] validate_nla: 1 callbacks suppressed [ 664.301157][T30563] netlink: 'syz.0.6773': attribute type 5 has an invalid length. [ 664.461278][T30573] netlink: 'syz.7.6775': attribute type 5 has an invalid length. [ 664.502647][T30573] netlink: 'syz.7.6775': attribute type 1 has an invalid length. [ 664.542781][T30584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6778'. [ 664.716106][T30604] tipc: Enabling of bearer rejected, failed to enable media [ 664.937498][T30619] netlink: 'syz.7.6786': attribute type 1 has an invalid length. [ 664.956310][T30619] netlink: 'syz.7.6786': attribute type 3 has an invalid length. [ 665.137383][T30629] syzkaller0: entered promiscuous mode [ 665.147238][T30629] syzkaller0: entered allmulticast mode [ 665.386749][T30633] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.517066][T30643] netlink: 'syz.4.6794': attribute type 49 has an invalid length. [ 665.593680][T30645] syzkaller0: entered promiscuous mode [ 665.607826][T30645] syzkaller0: entered allmulticast mode [ 665.863034][T30677] netlink: 'syz.6.6805': attribute type 30 has an invalid length. [ 666.264676][T30725] x_tables: unsorted underflow at hook 2 [ 666.593667][T30758] block nbd0: Unsupported socket: should be TCP or UNIX. [ 666.662190][T30765] sctp: [Deprecated]: syz.7.6830 (pid 30765) Use of int in max_burst socket option deprecated. [ 666.662190][T30765] Use struct sctp_assoc_value instead [ 666.795196][T30771] bond4 (unregistering): Released all slaves [ 666.893742][T30778] netlink: 'syz.6.6834': attribute type 4 has an invalid length. [ 666.964025][T30784] netlink: 'syz.4.6836': attribute type 30 has an invalid length. [ 667.015954][T30787] syzkaller0: entered promiscuous mode [ 667.022510][T30787] syzkaller0: entered allmulticast mode [ 667.277883][T30807] gretap0: entered promiscuous mode [ 667.395629][T30812] netlink: 'syz.6.6848': attribute type 4 has an invalid length. [ 667.410854][T30812] __nla_validate_parse: 12 callbacks suppressed [ 667.410874][T30812] netlink: 17 bytes leftover after parsing attributes in process `syz.6.6848'. [ 667.445212][T30812] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.6848'. [ 667.492959][T30823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6850'. [ 667.533614][T30825] FAULT_INJECTION: forcing a failure. [ 667.533614][T30825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.580977][T30825] CPU: 0 UID: 0 PID: 30825 Comm: syz.6.6851 Not tainted syzkaller #0 PREEMPT(full) [ 667.581007][T30825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 667.581020][T30825] Call Trace: [ 667.581028][T30825] [ 667.581036][T30825] dump_stack_lvl+0xe8/0x150 [ 667.581063][T30825] should_fail_ex+0x40c/0x560 [ 667.581086][T30825] _copy_from_iter+0x1d3/0x1660 [ 667.581113][T30825] ? rcu_is_watching+0x15/0xb0 [ 667.581138][T30825] ? __pfx__copy_from_iter+0x10/0x10 [ 667.581159][T30825] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 667.581191][T30825] ? netlink_sendmsg+0x650/0xb40 [ 667.581209][T30825] ? skb_put+0x112/0x210 [ 667.581239][T30825] netlink_sendmsg+0x6c0/0xb40 [ 667.581269][T30825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.581302][T30825] ? aa_sock_msg_perm+0xf1/0x1b0 [ 667.581324][T30825] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 667.581349][T30825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.581380][T30825] ____sys_sendmsg+0x9b9/0xa20 [ 667.581415][T30825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.581447][T30825] ? lock_release+0x4b/0x3c0 [ 667.581479][T30825] ? import_iovec+0x73/0xa0 [ 667.581508][T30825] ___sys_sendmsg+0x2a5/0x360 [ 667.581536][T30825] ? rcu_is_watching+0x15/0xb0 [ 667.581556][T30825] ? get_pid_task+0x20/0x1f0 [ 667.581576][T30825] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.581608][T30825] ? rcu_is_watching+0x15/0xb0 [ 667.581643][T30825] ? __fget_files+0x2a/0x420 [ 667.581666][T30825] ? __fget_files+0x3a2/0x420 [ 667.581694][T30825] __x64_sys_sendmsg+0x1b1/0x290 [ 667.581725][T30825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.581763][T30825] ? rcu_is_watching+0x15/0xb0 [ 667.581786][T30825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.581808][T30825] do_syscall_64+0x174/0x580 [ 667.581836][T30825] ? trace_irq_disable+0x3b/0x140 [ 667.581863][T30825] ? clear_bhb_loop+0x40/0x90 [ 667.581887][T30825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.581908][T30825] RIP: 0033:0x7fe16259ce59 [ 667.581928][T30825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.581951][T30825] RSP: 002b:00007fe163376028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.581974][T30825] RAX: ffffffffffffffda RBX: 00007fe162815fa0 RCX: 00007fe16259ce59 [ 667.581990][T30825] RDX: 0000000000000000 RSI: 0000200000003880 RDI: 0000000000000003 [ 667.582007][T30825] RBP: 00007fe163376090 R08: 0000000000000000 R09: 0000000000000000 [ 667.582021][T30825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.582034][T30825] R13: 00007fe162816038 R14: 00007fe162815fa0 R15: 00007ffd57dbb6d8 [ 667.582059][T30825] [ 667.869824][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 667.902951][T30837] ip6tnl1: entered allmulticast mode [ 668.141209][T30858] netlink: 228 bytes leftover after parsing attributes in process `syz.6.6862'. [ 668.206781][T30853] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6861'. [ 668.250693][ T5621] Bluetooth: hci5: link tx timeout [ 668.256063][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 668.274434][T30864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6865'. [ 668.925965][T30909] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6873'. [ 668.952825][T30917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6876'. [ 668.997463][T30909] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 669.117842][T30934] netlink: 200760 bytes leftover after parsing attributes in process `syz.6.6880'. [ 669.222133][T30942] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6883'. [ 669.331177][T30957] tipc: MTU too low for tipc bearer [ 669.347800][T30960] tipc: Started in network mode [ 669.354247][T30960] tipc: Node identity ac14140f, cluster identity 4711 [ 669.361628][T30960] tipc: New replicast peer: 255.255.255.255 [ 669.368121][T30960] tipc: Enabled bearer , priority 10 [ 669.625601][T30987] SET target dimension over the limit! [ 669.708019][T30997] validate_nla: 2 callbacks suppressed [ 669.708042][T30997] netlink: 'syz.0.6901': attribute type 1 has an invalid length. [ 669.740636][T30995] netlink: 'syz.7.6902': attribute type 13 has an invalid length. [ 669.782606][T31004] veth0_to_bond: left allmulticast mode [ 669.901536][T31004] netlink: 'syz.0.6901': attribute type 1 has an invalid length. [ 669.910702][T31004] netlink: 'syz.0.6901': attribute type 2 has an invalid length. [ 670.265689][ T4937] Bluetooth: hci5: link tx timeout [ 670.272454][ T4937] Bluetooth: hci5: command 0x0406 tx timeout [ 670.479888][T24111] tipc: Node number set to 2886997007 [ 670.595180][T31030] netlink: 'syz.7.6907': attribute type 4 has an invalid length. [ 670.657311][T31031] openvswitch: netlink: ERSPAN option length err (len 480, max 255). [ 670.666860][T31031] netlink: 'syz.7.6907': attribute type 4 has an invalid length. [ 672.509794][ T5621] Bluetooth: hci2: command 0x0401 tx timeout [ 672.586516][T30983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 672.696161][T31037] syzkaller0: entered promiscuous mode [ 672.706269][T31037] syzkaller0: entered allmulticast mode [ 672.784641][T31052] __nla_validate_parse: 5 callbacks suppressed [ 672.784662][T31052] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6910'. [ 672.869277][T31061] xt_TCPMSS: Only works on TCP SYN packets [ 672.900174][T31065] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6917'. [ 672.920200][T31066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6915'. [ 672.935314][T31066] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 672.978603][T31069] openvswitch: netlink: IP tunnel TTL not specified. [ 672.989513][T31070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6919'. [ 673.004556][T31070] : entered promiscuous mode [ 673.232162][T31092] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 673.264347][T31096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6926'. [ 673.757714][T31141] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6942'. [ 673.781501][T31144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6943'. [ 673.851341][T31149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6945'. [ 673.863404][T31149] tipc: Enabling of bearer rejected, failed to enable media [ 673.984068][T31159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6948'. [ 674.037030][T31161] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6949'. [ 674.062880][T31167] syzkaller0: entered promiscuous mode [ 674.068541][T31167] syzkaller0: entered allmulticast mode [ 674.288654][T31183] netlink: 'syz.6.6956': attribute type 8 has an invalid length. [ 674.441018][T31195] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 674.458801][T31195] 0ªX¹¦Dö»: entered allmulticast mode [ 674.694765][T31222] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 674.913049][ T30] INFO: task syz.1.5212:24718 blocked for more than 143 seconds. [ 674.944219][ T30] Not tainted syzkaller #0 [ 674.963498][T31250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.979121][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.990427][T31250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.001935][ T30] task:syz.1.5212 state:D stack:27168 pid:24718 tgid:24717 ppid:17302 task_flags:0x400140 flags:0x00080002 [ 675.018754][ T30] Call Trace: [ 675.022729][ T30] [ 675.025734][ T30] __schedule+0x17d9/0x56c0 [ 675.030816][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 675.036841][ T30] ? kasan_save_track+0x3e/0x80 [ 675.044164][ T30] ? genl_family_rcv_msg_doit+0x233/0x340 [ 675.053990][T31251] netlink: 'syz.0.6972': attribute type 12 has an invalid length. [ 675.065493][T31251] netlink: 'syz.0.6972': attribute type 29 has an invalid length. [ 675.073655][ T30] ? genl_rcv_msg+0x614/0x7a0 [ 675.080944][ T30] ? __pfx___schedule+0x10/0x10 [ 675.086078][T31250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.102119][ T30] ? rcu_is_watching+0x15/0xb0 [ 675.106987][ T30] ? rcu_is_watching+0x15/0xb0 [ 675.112857][T31250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.128183][ T30] ? lock_release+0x4b/0x3c0 [ 675.133234][ T30] ? rcu_is_watching+0x15/0xb0 [ 675.138085][ T30] schedule+0x164/0x360 [ 675.143130][ T30] schedule_preempt_disabled+0x13/0x30 [ 675.148397][T31250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.148889][ T30] __mutex_lock+0x7bf/0x1550 [ 675.172736][ T30] ? __mutex_lock+0x5d4/0x1550 [ 675.177692][ T30] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 675.184056][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 675.185930][T31250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.189310][ T30] ? __nlmsg_put+0xef/0x1b0 [ 675.210327][ T30] ? genlmsg_put+0x137/0x2e0 [ 675.215097][ T30] nfsd_nl_listener_get_doit+0x104/0x610 [ 675.221340][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 675.227830][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 675.235059][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 675.241005][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 675.247356][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 675.253167][ T30] genl_rcv_msg+0x614/0x7a0 [ 675.257819][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.263670][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 675.271119][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 675.276252][ T30] ? rcu_is_watching+0x15/0xb0 [ 675.281523][ T30] netlink_rcv_skb+0x226/0x4a0 [ 675.286520][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.292095][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 675.297576][ T30] ? down_read+0x2be/0x330 [ 675.302376][ T30] genl_rcv+0x28/0x40 [ 675.306467][ T30] netlink_unicast+0x7bb/0x940 [ 675.313845][ T30] netlink_sendmsg+0x813/0xb40 [ 675.318699][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.324458][ T30] ? futex_unqueue+0x22/0x240 [ 675.329194][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 675.334687][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.341551][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.347087][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 675.352614][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.358153][ T30] ? lock_release+0x4b/0x3c0 [ 675.363269][ T30] ? import_iovec+0x73/0xa0 [ 675.367924][ T30] ___sys_sendmsg+0x2a5/0x360 [ 675.373131][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.378498][ T30] ? futex_wait+0x2a2/0x390 [ 675.384990][ T30] ? __fget_files+0x2a/0x420 [ 675.389931][ T30] ? __fget_files+0x3a2/0x420 [ 675.395023][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 675.400477][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 675.406200][ T30] ? rcu_is_watching+0x15/0xb0 [ 675.411644][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.417923][ T30] do_syscall_64+0x174/0x580 [ 675.423672][ T30] ? trace_irq_disable+0x3b/0x140 [ 675.429010][ T30] ? clear_bhb_loop+0x40/0x90 [ 675.434293][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.441602][ T30] RIP: 0033:0x7f5e4e19ce59 [ 675.446167][ T30] RSP: 002b:00007f5e4f0e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.455473][ T30] RAX: ffffffffffffffda RBX: 00007f5e4e415fa0 RCX: 00007f5e4e19ce59 [ 675.463902][ T30] RDX: 0000000020040000 RSI: 0000200000000140 RDI: 0000000000000007 [ 675.473103][ T30] RBP: 00007f5e4e232e6f R08: 0000000000000000 R09: 0000000000000000 [ 675.481759][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.491347][ T30] R13: 00007f5e4e416038 R14: 00007f5e4e415fa0 R15: 00007ffd242475a8 [ 675.499503][ T30] [ 675.503577][ T30] INFO: lockdep is turned off. [ 675.521904][ T30] NMI backtrace for cpu 1 [ 675.521924][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 675.521948][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 675.521961][ T30] Call Trace: [ 675.521969][ T30] [ 675.521978][ T30] dump_stack_lvl+0xe8/0x150 [ 675.522012][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 675.522124][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 675.522158][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 675.522182][ T30] sys_info+0x135/0x170 [ 675.522201][ T30] watchdog+0xfd7/0x1030 [ 675.522233][ T30] ? watchdog+0x1c7/0x1030 [ 675.522263][ T30] kthread+0x388/0x470 [ 675.522282][ T30] ? __pfx_watchdog+0x10/0x10 [ 675.522308][ T30] ? __pfx_kthread+0x10/0x10 [ 675.522327][ T30] ret_from_fork+0x514/0xb70 [ 675.522349][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 675.522369][ T30] ? __switch_to+0xc89/0x1420 [ 675.522399][ T30] ? __pfx_kthread+0x10/0x10 [ 675.522418][ T30] ret_from_fork_asm+0x1a/0x30 [ 675.522450][ T30] [ 675.522478][ T30] Sending NMI from CPU 1 to CPUs 0: [ 675.638924][ C0] NMI backtrace for cpu 0 [ 675.638942][ C0] CPU: 0 UID: 0 PID: 31260 Comm: sed Not tainted syzkaller #0 PREEMPT(full) [ 675.638961][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 675.638972][ C0] RIP: 0010:__zap_vma_range+0x1144/0x4c70 [ 675.639004][ C0] Code: 48 89 df e8 be a2 1a 00 48 8b 1b 48 8b 7c 24 40 4c 89 fe 48 8b 54 24 18 e8 e9 cf ff ff 48 85 c0 0f 84 e6 00 00 00 48 8d 78 08 <48> 89 f9 48 c1 e9 03 42 80 3c 21 00 48 89 84 24 08 01 00 00 74 0d [ 675.639020][ C0] RSP: 0018:ffffc90004a7f5e0 EFLAGS: 00000282 [ 675.639036][ C0] RAX: ffffea00002eee80 RBX: ffff88808d420000 RCX: ffff88807bc83e00 [ 675.639049][ C0] RDX: 0000000000000000 RSI: 000000000000ba00 RDI: ffffea00002eee88 [ 675.639061][ C0] RBP: ffffc90004a7f8d0 R08: ffffea00002eeef3 R09: 1ffffd400005ddde [ 675.639074][ C0] R10: dffffc0000000000 R11: fffff9400005dddf R12: dffffc0000000000 [ 675.639087][ C0] R13: 0000000000000000 R14: ffff8880647a3ea0 R15: 00007f586c3d4000 [ 675.639099][ C0] FS: 0000000000000000(0000) GS:ffff88812527b000(0000) knlGS:0000000000000000 [ 675.639114][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 675.639126][ C0] CR2: 00007f6cfdd5b368 CR3: 000000000e746000 CR4: 00000000003526f0 [ 675.639142][ C0] Call Trace: [ 675.639148][ C0] [ 675.639156][ C0] ? trace_hrtimer_start+0x82/0x200 [ 675.639200][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 675.639230][ C0] ? mas_find+0xab1/0xcf0 [ 675.639332][ C0] unmap_vmas+0x390/0x550 [ 675.639360][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 675.639395][ C0] exit_mmap+0x293/0x9f0 [ 675.639417][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 675.639448][ C0] ? __pfx_exit_aio+0x10/0x10 [ 675.639479][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 675.639498][ C0] ? uprobe_clear_state+0x2ac/0x3e0 [ 675.639522][ C0] __mmput+0x118/0x420 [ 675.639544][ C0] exit_mm+0x221/0x2d0 [ 675.639561][ C0] do_exit+0x6cd/0x2360 [ 675.639580][ C0] ? __pfx_do_exit+0x10/0x10 [ 675.639595][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 675.639622][ C0] ? rcu_is_watching+0x15/0xb0 [ 675.639641][ C0] ? trace_irq_enable+0x3b/0x140 [ 675.639668][ C0] do_group_exit+0x22d/0x2f0 [ 675.639688][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.639709][ C0] __x64_sys_exit_group+0x3f/0x40 [ 675.639728][ C0] x64_sys_call+0x221a/0x2240 [ 675.639751][ C0] do_syscall_64+0x174/0x580 [ 675.639778][ C0] ? trace_irq_disable+0x3b/0x140 [ 675.639814][ C0] ? clear_bhb_loop+0x40/0x90 [ 675.639834][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.639850][ C0] RIP: 0033:0x7f586c3d36c5 [ 675.639863][ C0] Code: Unable to access opcode bytes at 0x7f586c3d369b. [ 675.639872][ C0] RSP: 002b:00007ffcf21342a8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 675.639906][ C0] RAX: ffffffffffffffda RBX: 00007f586c4d4fe8 RCX: 00007f586c3d36c5 [ 675.639919][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 675.639931][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 675.639941][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 675.639952][ C0] R13: 0000000000000000 R14: 00007f586c4d3680 R15: 00007f586c4d5000 [ 675.639971][ C0] [ 675.950710][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 675.957725][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 675.966868][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 675.976952][ T30] Call Trace: [ 675.980340][ T30] [ 675.983294][ T30] vpanic+0x56c/0xa60 [ 675.987314][ T30] ? __pfx___schedule+0x10/0x10 [ 675.992198][ T30] ? __pfx_vpanic+0x10/0x10 [ 675.996740][ T30] panic+0xc5/0xd0 [ 676.000497][ T30] ? __pfx_panic+0x10/0x10 [ 676.004929][ T30] ? preempt_schedule_common+0x82/0xd0 [ 676.010402][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 676.015801][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 676.022032][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 676.028216][ T30] watchdog+0x1030/0x1030 [ 676.032588][ T30] ? watchdog+0x1c7/0x1030 [ 676.037048][ T30] kthread+0x388/0x470 [ 676.041135][ T30] ? __pfx_watchdog+0x10/0x10 [ 676.045845][ T30] ? __pfx_kthread+0x10/0x10 [ 676.050464][ T30] ret_from_fork+0x514/0xb70 [ 676.055086][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 676.060222][ T30] ? __switch_to+0xc89/0x1420 [ 676.064941][ T30] ? __pfx_kthread+0x10/0x10 [ 676.069549][ T30] ret_from_fork_asm+0x1a/0x30 [ 676.074335][ T30] [ 676.077981][ T30] Kernel Offset: disabled [ 676.082313][ T30] Rebooting in 86400 seconds..