last executing test programs: 18.095586875s ago: executing program 0 (id=7030): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, 0x42, 0x1, 0x70bd25, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x38, 0x0, 0x1, [@nested={0x4, 0x6}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x8c8, 0x0, 0x0, @u64=0x2}]}, @nested={0x9, 0x4, 0x0, 0x1, [@generic="56b5bfa75b"]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x1001}], 0x1, 0x0, 0x0, 0x300}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0xfff}, {&(0x7f0000000180)="dd43", 0x2}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x2b0, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NODE={0x254, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0xae, 0x3, "70fc84f34f23d2794deb3cd843554686a2dcbecb81a2339c14ee75c5b4f306a9f5774a552952c6dd18e0abeb73b34fb79673df1de827acbce977182ea3e33a64e51cdd97c37235be0c58cda361d1e9e738fda779608eb4ba0f6122f5edd6886a8948400b599627862274546ec828d640a3399eb9ac2513f6cf0b96832f229d766eba5a2125030432ad941ed40c66230207fcd01881e0b7b2e2ade09e8b05fbd84955d52884b2e651f305"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_ID={0xd4, 0x3, "6cfb5ec338b28ebc53dc76e9bae63bf563690c96cb52a101664d072557b6304591af0fe74bbb776427b13f21b3fec9a581b0054b97a2b394309419a0f344757bca11a050551e4697ec9198827439c7ba1723e14f87b6f674937b885c4094f91150c27caa0cfe9999f2f7766fca509ed5e511493c82b488629ffad9af68ec64d6c2bf13c81ad65a9e5ea13f4e812e5c3dbe518dedd5724cc0ea4b86fa1f1829e3a125d0cb4cb6377546c1cfc5eb09107a1f700f63a1866ec917291b4a795885fbbadfd6e8fe14a80b10a8af71b7cd7aa9"}, @TIPC_NLA_NODE_ID={0xbb, 0x3, "e19430be8317bd1e9a29b401dbce4fbf852ae9fdbf0cce0e931e26f963b0e76eac55ded68f364c957abe6f8fd382843b92290d12f56b96d2310fd099b96771ff8c0255bb0f4e8a5efdfdeba350081a5ffab943f6f629d44a054e8129a488d36b8335bb40a46b809365f5808c5419ee9fed1d5aebb86f5c2a4a88c6df14a873e7772a7fb4d71acd02f53e187d140fd163bf8bbe0e9b92353e88c2eaae2fbc23498f213362b1432acc015f94d4df34b587fdab3f6bbe085b"}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x10}, 0x20000890) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) 2.133847499s ago: executing program 1 (id=7033): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$kcm(0x2b, 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30) (async, rerun: 32) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x2100, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200440d4}, 0x4804) 2.132979224s ago: executing program 1 (id=7034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x5}]}]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x3c}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000150001032bbd7000fcdbdf020c0000000800040083"], 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x30) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000000)='\x00', 0x80200, &(0x7f0000000080)={@_ha_fsid={[0x0, 0x9c]}, {0x2, 0x7, 0xfa, 0xffffffffffff8001}}, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x6}) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000010401010200000000ff02000000080005400000000008000340000000400a000200000000070100000006000640000004000800034000000008"], 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xbc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0900180000000000000030d52159a100000006000000000000000000010300000000020000000300000003000000040000000000000700000000040000000000001202000000006161006100"], 0x0, 0x4e, 0x0, 0x0, 0x100000}, 0x28) unshare(0x8000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x40}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x82001, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000002680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYRES8=r3], 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x40c1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000580)={"7c84430ac9080b4f3d58a841da436880", 0x0, 0x0, {0x10000, 0x8}, {0x7, 0x4c03}, 0x61, [0x10000, 0x9, 0x5, 0xfff, 0x88f9, 0x3ff, 0x401, 0x8, 0x7, 0x8000000000000000, 0xd, 0x66f00000, 0x5, 0x3, 0x0, 0x7]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000680)={0x0, "b43fe083d57f35e2d7065ecb4f20e5f2"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001680)={{r0}, r5, 0x0, @unused=[0x800, 0x0, 0x2, 0x951c], @devid=r6}) 2.130702314s ago: executing program 2 (id=7036): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@x, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110025dbdf251900000008000300", @ANYRES32=r3, @ANYBLOB="05001e0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2, 0x8, 0x7, 0x9, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x7, 0x700, 0xcbe, 0x7}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000dc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="e0010000", @ANYRES16=0x0, @ANYBLOB="240427bd7000fbdbdf250c00000084000180080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766972745f7769666900140002007663616e30000000000000000000000008000300010000001400020067726574617030000000000000000000080003000200000014000200766c616e300000000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0c0001800800030001000000ffffffff300003802c000180040003000b1089004d69727265640000060002003a000000040003000b0002006d6972726564000085000500078afdcf8b66c60366903ba4950ba6d57d53e47b47652336c301c6a9fb7531a6b37e042176ee010c0c2b75d281b8a63d871bd48781dc8f899c89e4ef40015226bda65dbde542a96766ab44de810f4d59dcb0e1fe8a065a9dca69717c78c41705ef557a22e4ee34c2f376da090f3d2e7b5083c45cde19b2280235bef9f5c4bed6b70000000e000500304e52ff1b9b29b51e031c3f3817f3a8507c8cc6845858be6b000040000180080003000200000008000300030000001400020073797a6b616c6c65723100000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000300020000003000018008000300020000001400020062726964676530000000000000000000080003000200000008000100", @ANYRES32=r4, @ANYBLOB], 0x1e0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40010000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="e00000003e665fd1d698b494e92736f02b4d2b6ac7f37b235319f86ccf2190234ab31bbd5c897a693c830afebd01a15cff4e7279a8f7be6c1d50e656595497e6011c57f974f165a32b32d5a10b98d06b55", @ANYRES16=r1, @ANYBLOB="000429bd7000fddbdf250f0000000c0099008b0000004400000038001b800500010011000000040002000500010019000000040002000400030004000300050001003b00000005000100240000000400020008007e0002000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x3, 0x80805, 0x0) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000380)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x2, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}, {{0xa, 0x4e22, 0x6124, @remote, 0x11b}}]}, 0x190) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket(0xb8dbd2bc79866f63, 0x5, 0x6f) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r9}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 2.130410211s ago: executing program 0 (id=7037): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x4, 0x3}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f00000000c0)}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x64604, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x20044850) 2.129921084s ago: executing program 3 (id=7038): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000014c0)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x12, &(0x7f0000001580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x284, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x3, 0x1, 0x0, 0xf, 0x2, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001640)='syzkaller\x00', 0x8, 0xa, &(0x7f0000001680)=""/10, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001700)=[0xffffffffffffffff], &(0x7f0000001740)=[{0x1, 0x2, 0x6, 0x7}, {0x1, 0x2, 0xf, 0xb}, {0x0, 0x4, 0xc, 0xb}, {0x0, 0x1, 0x2, 0xa}, {0x3, 0x3, 0x4, 0xb}, {0x3, 0x3, 0x9, 0xa}, {0x4, 0x5, 0x10, 0x6}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x5, 0x7}], 0x10, 0x401}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000018c0)={r0, 0x9, 0x10001, 0xfffffffffffffff7}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001980)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x1, 0x7, 0xa, 0xfffffffffffffffa, 0x10}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x7, 0x1000, &(0x7f00000004c0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x1a, r3, 0x8, &(0x7f0000001500)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x4, 0x3, 0x80000001, 0xfffffff9}, 0x10, 0x640b, r4, 0x4, &(0x7f0000001900)=[r5, r7], &(0x7f0000001940)=[{0x0, 0x1, 0x3, 0x3}, {0x3, 0x2, 0x2, 0x1}, {0x1, 0x1, 0xa, 0x9}, {0x0, 0x4, 0xc, 0x8}], 0x10, 0x7}, 0x94) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r9, 0x11, 0x68, 0x0, &(0x7f00000025c0)) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 2.12829823s ago: executing program 0 (id=7039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.125920038s ago: executing program 0 (id=7040): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000280)=0xb3e, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000ce100)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xda, "4e9bffb9cc5604"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000cf100)={0x2b, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x1, "17cc971389cfc1"}) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000f02c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000f04c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000f06c0)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x7, "5cdf2d2d778413"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000f04c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000f06c0)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "5cdf2d2d778413"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000d0100)={0x0, 0x0, "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", "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"}) r16 = socket$xdp(0x2c, 0x3, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r18 = openat$cgroup_pressure(r17, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r18, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r17, 0x81f8943c, &(0x7f00000f02c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r18, 0x81f8943c, &(0x7f00000f04c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r16, 0xd000943d, &(0x7f00000f06c0)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r22}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}], 0x7, "5cdf2d2d778413"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000d1100)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000d2100)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {r3, r9}, {r12, r15}, {r19, r24}], 0x40, "5ceb2623b44e6b"}) r25 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r26, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x23, "4b721b782a17a7b6a00d960a64048655bcb0b0ac551fdb8a571f6b3c1cb52ecdf3e872"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="8400080000c5f0a96c0600000500000018110000", @ANYRES32=r25, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 2.125761908s ago: executing program 1 (id=7041): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x52, 0x10, &(0x7f0000000000), 0x85}, 0x52) 2.124755321s ago: executing program 2 (id=7042): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x400, 0xfffeffff, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88ad7fa5}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440d4}, 0x4804) 2.121473443s ago: executing program 3 (id=7043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044090}, 0xc4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r2, @ANYBLOB="04"], 0xc4}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$kcm(0x11, 0xa, 0x300) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000200)={'full', 0x20, 0x4, 0x20, 0x7}, 0x2f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x94}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200006}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2, 0x9, 0xfff8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r6) syz_init_net_socket$ax25(0x3, 0x5, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000880)={@link_local, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x2, 0x0, @opaque="fddc606e6597bced93fa56f4865efb45a2e3a231b7e0565cf59718074c479f86eb89c02913feb3360f30ab79286dbd80d65c736315f3154426ed17adc0f1754bebac9f4248a4df5ad7aee3c0368f8bcfdb7f824c4fec2454e7699dcf6ec0fe5ecbb2b25cf3746f5977f86d6e09768e64762226417b61c8679b6a02e027e66273b3ebb36533acbb9bbbcb836c179a6989849bcb1c0747218fac98bcf1579b0429e25a82"}}}}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@broadcast, @in=@empty, 0x4e21, 0x4, 0x4e20, 0x0, 0x2}, {0x40, 0xae, 0xffffffff, 0x9, 0x9, 0x9, 0x9, 0x5}, {0x10000, 0x7, 0x8}, 0x2, 0x6e6bbf, 0x1, 0x2a515e8a9e1e315e, 0x1}, {{@in6=@loopback, 0x4d2, 0x3c}, 0xa, @in=@multicast2, 0x3503, 0x4, 0x0, 0x48, 0x54, 0x1ff, 0x1}}, 0xe8) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2.121163044s ago: executing program 4 (id=7044): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = socket$inet(0x2, 0x2, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r6, &(0x7f0000000100)=""/114, 0x72) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000101010100"], 0x44}}, 0x4000) (async, rerun: 32) socket$inet(0x2, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x400101a0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @generic="3ed73cfccb"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac00048020000180070001006374000014000280080002400000000c0800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24004804) r10 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000c40), 0x12) (async, rerun: 64) getsockopt$inet_mptcp_buf(r7, 0x6, 0x1f, 0xfffffffffffffffd, &(0x7f0000000000)) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000004c0)=[{{&(0x7f0000000840)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40050}}, {{&(0x7f0000000d80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x38, 0x8011}}], 0x2, 0x44800) 2.044719058s ago: executing program 2 (id=7045): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d616376746170000000090001"], 0xf4}}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)='H\x00', 0x2}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000003000"], 0xfc}}, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x2000000) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0801040000480000000000059078ac14140075acc65f31a03808d9251ec4a60a010100440c0503ac1e510b0000ffffffac141415ac141418070600000080000000f229c7277e2c8a5d5a90d23dfe900a3707dc628c669cdac555aaabdfc11762b3bea0039c8ae590ba0b0e66680fe958f44bae639ecf942c7b0766565a351076551a24dcf8145435cd08581cadc0a746a83fd363fc51e9026e4fad179aca75c7382b0c98be14eab41fda7f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x0, &(0x7f00000001c0)={@_ha_fsid={[0x5, 0x9]}, {0x2, 0x5, 0x1, 0x8}}, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0xfffffff7}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x201}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000300)=0x8, 0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001010000000000000000010100800c00"], 0x114}], 0x1}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r6, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008041}, 0x40008054) sendfile(r6, r4, &(0x7f0000000440)=0x100000000, 0x9) 2.002769286s ago: executing program 4 (id=7046): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x8) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f00000000c0)={0x1, 'wlan1\x00', {}, 0x7}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x22cf}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x8000) 1.887547123s ago: executing program 3 (id=7047): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x4, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)=@newtaction={0x1a8, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x194, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_PARMS={0x2, 0x2, {0x300}}]}, {0x4, 0x6, "9294c48078440a5b991a1436f1c7b7965582000000000000000000000000f4ffffff38f77bf966e7e9dd1d260a681726f9b872d91cb3c263c8506e1527f6e3a9df5b99b34b6eb6e92f65d5277166882436cae2fa9b7eded73a2c2b0a69a028427a6c4f247644fed91f6b95ebff9639f5ab5ad90738ab0166e17b86523bc9f6b8dc3df6bb9c57a8ba67a8ae36cbb1559dddf37b73d7e721a269745b40c6bad48787608bfa984a684efa318c2125d933c96a50ec800a2451caca74096ae9a364e221510269c4b59c"}, {0xc}, {0xc, 0x4}}}, @m_mpls={0x140, 0x1d, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x2a}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9000}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {0x10}, {0x2, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x6, 0xa2d6, 0x33, 0xc}}}}]}, 0x48}}, 0x24008004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009f080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x5) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x8040040}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) 1.652615871s ago: executing program 2 (id=7048): r0 = socket$inet(0x2, 0x802, 0x1) write(r0, &(0x7f0000000080), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000000206010200000000000000000000000a1200031ef14c2c683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007000000"], 0x4c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x4011) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40040) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x6ee, @local, 0x5}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000300)="83", 0x1}], 0x1}}], 0x1, 0x240048d1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="1303587acc2a01b5da63000000000000000002000000"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r5}, &(0x7f0000000d00), &(0x7f0000000d40)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dvmrp0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xef, 0x0, 0x79, 0x1, 0x2, 0xffff8001}, {0xb, 0x2, 0x0, 0x8, 0x4, 0x7f}, 0x9, 0x10001, 0xf44}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd457dc44c41be09a}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x51}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001340000001f0a03000000000000000000020000000900010073797a3000000000080003400000001e0c0006"], 0x98}}, 0x0) socket$kcm(0x10, 0x2, 0x0) 1.474594868s ago: executing program 1 (id=7049): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000e78fcfc310cd00000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x8, [@enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}, {0x0, [0x0, 0x0, 0x30, 0x0, 0x0, 0x2e]}}, 0x0, 0x34, 0x0, 0x1}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)='F', 0x1}], 0x1}, 0x10000) sendmsg$inet(r4, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180700000000000000fa2d12a329f92f191000000000fffffd8500009579964634a5c15e00"/56], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.328323091s ago: executing program 3 (id=7050): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.274605423s ago: executing program 2 (id=7051): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) unshare(0x6a040000) socket$inet(0x2, 0x1, 0x0) (async) socket$inet(0x2, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x4, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) (async) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00", 0x44}], 0x1) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x800) (async) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x800) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {0xf, 0x2}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x6}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {0xf, 0x2}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x6}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 1.219764461s ago: executing program 4 (id=7052): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xdef) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r4, &(0x7f00000004c0)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}}, 0x802) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/13], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="ee3958bb5d27f41a6e1e22c905681d42f555dde1a8210c5514cc12050f", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r8, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r6}, 0x20) close(0x3) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000002b80)={&(0x7f0000000280)=@un=@abs={0xc0ba797ff92cf439, 0x0, 0x4e22}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000300)="2c24561facecae0f150784a142a3025f557c2391e86e9e815a23d4e0c7f87677d816049af46ec84acafef56dde7c23226b5b87bef3f4b4972efb5a97a4d1a8c5a6620fd2e827bf1c704eb6ef2fbb6583ba71106bc8c5a4ccbfb5c2eb4c17efade880cff7a8265cb75b52dee33b28e0a12469afa0f0326d08471f", 0x7a}, {&(0x7f00000005c0)="00524c6b3b0a3e11ab7dc496e52920bff462cc1c8edc21884be476104d5873e5dd4857f1d421f3c495dcd7845544a35c370b463da4ad975669cf70e4bfcc1b22e4296239a889f3c37314036051e8f40a0850e6eec41dc88d334c90795cdf0bd999dd89426acb2996cb95a6ec62ca7e78e278a052fd49ea545e845fa4d4367284a090a2b675973ac99ba6af6387c2a0cf050fb7e31468d3ce6771e280e0b9c00e71829f1d9fb22a2bc78951cedea25fb11d3730438cc2c52d38b64975609fc700f844c6e8b568d5f9cf6f4a8ef4307d93187617a0b259db5b1fead6a6e562afd7c04d9159ab7481dbb64c16da8dee7e8d3537caa195c009d38c633fbfcccda0b311e79e47096e86e7124868d4a65f262aff6110721d6ac945bc0f47a56fe9fb95c4cfa9aa71d1b3aa927dae90e7825bbbf3326aeb5a04c6f34db142bfabfc4068570869a97619475aa9c7964ec80ebbecb9c0c84a20c552a3f56594203d6e95e6b3021ae6fa2c9d5c626fdfd9a3bbd1015ad840701ee95579e9adb6ac856fa19b114ff46069268a4159ca675d8253c55cc10582c419a062141d157f2ed73c588687a1224cb3c79430124b80fdf2a1c2616071b3476e681e4282bd05b36970949a4c6d5f387cd523a60727728e71a94d37cd487d464e36e563f5f697aee17168376493a33bf7d206c7092fffde2a87a453d91fa20e7d3d5cef7a37a739ae6db67604ac0fe1a530b4779bd72d3db539ac1cd63352facec7617a9ba976632e3d04f8d2c5077382f053f005d97f965b5f19b7fa48891abadc9a794f5f3c6453d2cf73aba01aebba52aded50050c949e8e386948f92cd359170a79c8b20fb59e5f99bb3f052b04545fd6fd21bafb7a4a5d2e8a49801fa9c31bb5e841d9802c3216a0ae4ab2ca149111aeeb56c1320bf028cbd8a7588d990e017cf311c9ae26299d76aa86233f2b4e0c64d6282076d116cc4661d76e8fe6697b55c87ca2c5dddcfd7b5b3ee9b41e1397ffe9d728aa687ee8e97713edc05c816629812b66cc46c4e32eeec86ffef2dd8900800aa4591e7082406e471c76b7a4caa06d39ebafe097ea9515d6793c42c1a7692479cb0585dc0e1ed3ad34ef9ca36b5eed2de54c8edd7c3aa5619c1c0762a4c130e9e6386a94acd11d6fe965bacc5d4b72dadb7f65f80b37da058ca1358e3cb751c66539c952d16004aa7642b0acc42539508fc5d9623e424950e7413641dfff1cc23086b515c48a991d4f78496f1da4920c695f6b6446f3f359f22a907a76c54866ef6967af8ed294e0b49d25195805fb9c9881dd08319123e1100203b2555c25bba7187734e58a2f6a4f6d60f0a0b05a3bbd41b340acb2f963f1548a1307d8b7375b7c6899adffd6347f59d3086911e9978ed52fd71f84fac6084d29820ca8834b92c34f998a40eff44b341893409d1d968ad3315ac909c80f69682a7f38fbb2b9bae8a182594cf68789c0aaabdfeaebe27f7f6ff671a86b410d6d6b71c6126515a073be372bb407eddee36a3e4708b626819419dbfde436b012255c8cd32554a2dab9aaec9c5f10faa89b1e73eb2b31896e9fe736094764b0b957e7e0603bc1107dcd7a120f5b187da3e20ffea3599ac53894b5f319bc5c5e24c2fa39c20eaa6c8cffbbca7dfdee3be30ce46d15f015a7a253bd3a7e017d35fba05777c6455501a92d1f6c409ada1d0de45b1abccf24d8ca5db6d7cea1c9359653c2bfc69dd11437388c116f36fc7a839a17a5c8ef1991b888af7f3a5c4988ff94ebe5b65567aaca9ac558a3f72b5354a15b2bff00b94cfab8ecec1034c71333768225f716c63e0c5ce9fda12ae0369f50d2a6d40177557e97c59ffdb58bdf3ba7d442aac9c1148ce8fd58dfe8bc59016aefd29a483dcbe2e637a266197c77ebd0c0f43ec8125b809f059c1c6b2b5227cac9272c405e3f52bb509582b1358937ea5dc6dc0fa5fd8ff37cf555ddf599a056fb533f4e69a65d0baaf74db4bcb599ab44b3bfd34381fda32861c5372c46c3df8f588435e985ebf1f7c70158037bdd199b202466b77ae16ca68e9a83abf477ac4c1c9d0095e4c6828f5dae89eac25e44263a19d991545e80727b6167be18aedfc2e06459aa3a74a29cd2046290eea414158e6b115609fa1f373d51ce3dfe2524ad43eab2f1ff2ca8a2f6eac7d83c555754b08725bb616571edd177409f1680936722d55251847fbf9d96b09b8ed28a2963d97e8c38d3d2e630729ed4e90b390faf3e53946150e9bcbf1ddcdaafc4a62becfb7b1d93d08e3180c2e2550dc7ab046301915b5f9d2eb1facfa6e47b95bb51490223dffa1928f33daae17838be4ae2963cb0c8f1247dffeaed9ec11e02060cc7c265a464091a1c43d6ab55a19b9803e98cbc76fac416177e2645fbe73e6c206b627ed9d7c43e96dd93261252ab16fb8c864c56ef251ac8a3b0d5ff34654b5f8dad575e1112b241959eb9c7068da46e43ca94b49ec9e813738c38bec6e2dba81984ee0ec5363a2f6d1ad0f29d74fb89812a7f80b8f85db75ab63fcf04389e7d9b748840b39b2d4b14e291c5e4e621b172107fabfd85be1c48bc724075366943532ec0a76688bc0cd00ccdac15116da2cf2cc9981df15c81656acfe85ce89f24f46693ba3f2beaaf156314082e03650256ecfb346a8e887a1e90f7a968413e2e295b1757996bf918af9bf9861a1ae58ef71e039b3578b0ed933b5f6d5874661f24400672dc7e0d7b57c9d65b1a1f6cf5de620aa36f46ef52bea9ef27cc8d6b59f72855ced17a641cb49a92714e0e08354898a3dd19297f8f2b60445c9c899673c26996f2547e1996bef98dca99d4bb46b2ccfbc1056f1e5d38e252767c9f38e922029dd8369b6d117539c3640589c26a019ebad794b12731f66e72d46d7a8d96aaa59036fb99650446f43aeac47ce5eb9938741d257a1ebca9c26c7b87432b47ec8cea11005c063098aa23305923162c23b8886be1da2b59ded56e5d9bb92582303a3d1fa1181094bfb7390ce6820c4d68df1885ba6bd38ca6ff2aed44835bb9b3de11b696d000764c95d097bfe9d5a651fead69dc192b96af60378859a543496776aa3c6e075fe05f310f48789283165d77d467c3c63acc9834a4861fc14b59f159809e73fe776f14a0fefdef7891cf5a8983b46cff2c5feb5a7e0d06096051386b789df6411dbd390dd97d1be76b2cb073318817d27d03845dbaabcd9fe0820917705fca1f8b6133e438f41115a32275de78989d4cb3eb37bb34aaa371aa2dcc8077929bd34705c51d81c47f84761a1df6fc805c156208b41bf46e4f0fdb7298f1978630d7bbb35b628972092cb16e11804188dbe8707abdd068e91335cc2fb011c64ea11c0a9873afc70cd19642a6adb0bbf618ffd06b4bfe873e4585ffa8c2f01fcb20e7b6e86f37c50ed46535cdca33890f3c54ec4932bed646cd292c29d511a514f29825fca37c0c4c99c6471275310ec82dcb89c54b2f196c3118b6777cf0321393ad755030ad3dd28a85c3a145ec8eeb2cfc7996000b4a673f2ea7ba2a72e11d1f6618dbfbe5e19927ec9858703b06ad16a62eb0f9987a31f18106906db6e60e06244dd5cc5bb8d4cb3995bfe513bbe0a6ba71490a230c04817d6f9b4acaad4a1301686786c92c82b9aba7f3c6705d90bb1b627366097a1d4d16f73983b4e951ff75ab210241e68d430a568e3e94b29cf54e34f496aed806124115d471af59772448fae5b380356d73d59fcecd6be95affc94d0107e58334875f2ded4c3de6b7907e03165f85e94bba2a7099e1360e45463ea45faadbb24c52ffad215ab5448a6b428585f356ef306ae45550e15d7d87ef1df104d112daa806bf49784db351afe03e5f497d853b00ee3e651e569575ec7f663a1c505a9b8256e53f777f57a324bb2d73c52bd0a30a5115d5f8b8d8dcbd374afdc73c326d3a3e6a35ffce1a7775b576878ee209e1f3c374986307421ea9d541f1e60a71e1d8961693861965b12edf1e2a86ea0920fc7d124cca24ce7e194a3f6154c105d6338c1afddf5f3e0d53d1d9d89b813f879504b943a8acb53c00237c78307fbcedb32d248d5fa6aff37dbc80af68d8cea2ea1cb6648bb3ea47f6c4d73432a1e72bd8de1e036c4e45fd852d47cf121f88a903b9fe794be349be43ccf386b73254f4385b969c088a78bc3e1d02f2ffc1344ebb78046ebfa19b3d1f73dbbc42555b40026537140661a7ac1ea3f9b664b4981fac3e4965f62808aa69aeb1a9ab4804c38085eee6280f766196d4354ea95315696fe88bb30aaa0966e079a876a584021770347d3eaa0a5eedce555c47a043497e0700867dab31dce3a5413f3bd3bdfc75120b7aec15543a56b1564b91219347436c5d5ab8d873a750de2b58b42a913471602a25cd773d06ec9e80621b5c39a29ffe2024726d1a66eb24fa008ad134fb7178170b49b15f92c342247052458b3891b9edc3e3727261909a372dc9ba8be4d323678c51af5660345bf82d3ebafbce6ae5848512c9dcacd5b9a090bb351c99a6f71ab037fdffcd9abdb8781588f918e23743b125db9c3d15b28c52f689ad9a3b61fd8ed8df6efb1362686dc16fc38bc9b4d70505e1714b02abe8f1fabd4a38cda70b6c36b2340fc03ae7b2c7093031507eaaf688c85f1dbba7d57894f9850562bb6e95ac0dbfef93d223fe2d69fc7332815589ce1f0887e6dcec476118b31df185c64affca5e828bc3e3a088b958f9fd6450719942aaca27d5189067e27b2ec999529cd1383017cc0c0b9e1edffa353fc275001d865019c323e97d29578ea7dddd685524408892dca09a828e6ddb15ef34edaf6f51f37d3b988315575cb76d1027d08049fcd7249070b861b3b3c4ace05136b356767dd47a7e9a598100c0d202f7ff81657207ea00a793792c3c74a32eabb15d59e4b23bcdbd3a31a99445e7cc0f5bd011cb8a90bad1323cbacf585084571762198bc9b6f1d7399c9f6357ee63a8d2db7154276fd030f3b7031a46f43b86a585b71afbf2538d2e6e69f95d246aac1446fe13401c5bd9a9c778562ed3c1dabfdc544ea9fc0f06aee04183c53c7598b869902fc7b4a689d6a2ac15b0d2c930ce2c4028d308ec3a748c4bd1be1c7983523699a8b90c60fb0a663abaf7e49eb12505a67c4296f845b48144a3e211a57340b3aa27e43de71980301e6da00daede64e601561c6b371de0d6554c6a5027faafd9c5c38c4a2f92e31536eaa3fad96d818859bda42803bbc96c8b45e8350c0b76032b937c6973fae0b6b5bba35fd0221c71ef80d9f20efba71d4b6038e51c45b6fb0eb877757ef12e8c7734ccd7a0b9d23f43842d1b2af1fffbf645b42c74ece369116fecfd12e90478569b31c2d4e82ee5a44e01fc2870c0afec20b3ecec5537dd82b7e796af0c0543f763123f5cae5d39219b5056cee82ba05125f16934bf6898bcc349bc5e77746f50050e8ef04d9dbe4a027aca608e7ad160f64e7e79d59c05df74379343d3ec3c957c020e9a2379dafff8c575b336749f60bfc0599f0c46d113666bd5681b44e2eb40161493fafd0ed3b3afca1ad460e148d18a9292752863b060d8a82f1bbe688fae4567b4786c481b6f8eb32047234af8b2196d942b0a53c189d570350f5ae74c867a27f7810b94897bad408d5d780a0e4463803d397841b27812b693a97d368b2676271a09f5254c0236b20e020685e92ea2dcfe71391c3c1ba9bd8be253b3afbbf1957daaa03ae08f44667cad438679176e33b9d3699358ab3802a3bbe9eceb61c3e1979db390c234f2b454e93daed73d4ade4fb77f", 0x1000}, {&(0x7f00000015c0)="2c0a280024e570a97676c14c228224857a3a93981313d2a7f37236c3290f1371714bfa53467eeba6ea89041f5a541fda668a2071425636f3a16dbaae6a77ed3f14214e5dfeecf68e9282345fe99b20bd627bdc17fb8665b17d8cad4b648d3e9a675554f0760df7f9a354c261a1688b8469c4e3a4a70a3a4dcabeea07ae05f1d57beeaf2bad5d05f096b71eb931b1cf0320cdb6e9919e8a2e98209a3735b6bc6eb994590d8d9677ae51115ea2", 0xac}, {&(0x7f0000001680)="cee44ad37380d382f5769d22cae2bae9d84c6545f2183d708c297b4a80fa93dae143ac79544edef897f0fda1f4aecbce5df8b7615d63f8411c763e55d6455913319e47fd4ad9344d2447e0274e98c14939aa71a68276b5e3a314eb9822f7c2f332c756fc27fb1b2b24d5ea62a4b633f110838d2498116aaf046ac85a65a9cd5d146e9abbbb02329e9e93d7df3bfcdc0b0771169626b539", 0x97}, {&(0x7f0000001740)="fd1c18e88c133e96e20979fe4f12e7f7c7419df7a55f6979c1f350864c8b74406dda4a0aaf90b864c8e4cfc1d70346771c295e", 0x33}, {&(0x7f0000001780)="c318ac98cfe13d873d5c64e263e2adfeb74a2f2523ca0e1dc54936c4658a45173bd989e9fbcc7cdea1432b1b984508696b39d368baefd6670241e4868605d0d97077146592dc0f82c75c2b158e13fe2a788c6cac683d10ef8af9bda755d4bb1caf5178bbd33c9b6573bee77fad8838477b9e8614d967713ca49db478cd17f7d126e732f07b80645ac34b61e91d74e5c37fecb873ad085fe48580135cd13e33dd9cf053394fdbaad61cba539502df97c23577003a671e8a821d37239bc4f8017995161255a5a8ee9462802a7492ccbe11febcc5ffd4d58c77042782b4", 0xdc}, {&(0x7f0000001880)="383f48bee32e5f6ef9885db814631f1b2bdaa40d5a066459f47fe6773103591d2101045f1c2a4dac7deecf7b3c83b2875b434e391eda26173028aa17134ddbd0ed13d8988d230fc19cb0477e96ae01aa027ab7b5a0e581322d5b2df0777f2683a3d1c08dc4dfc7e7cf0a56034528ef915542345ab80d9d165d4d864733c49304d3a6673b985ac6420086411876d906a4be3c7c08624c71c7c9fe94591fb56344a60010f793a26fdf208eb6fb569747afc6b571bba6714f0359d1616e2bccd75ebd10e531ab8bea78ec0d01cb9456651814214869a7882ed342c61a5b4843cdadf4bbedd85d9d6060a7f95b8cf9e1", 0xee}, {&(0x7f0000001980)="18dd145c2fd9f512db42a7790d5315f8bb6f6247758ab9308bf0bfa4ac5e7b20009645e6df498a93cf73bf5dca97112caf67c9", 0x33}, {&(0x7f00000019c0)="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", 0x1000}], 0x9, &(0x7f0000002a80)=[@mark={{0x14, 0x1, 0x24, 0xff}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}], 0xd8}, 0x20009000) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r10, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route_sched(r9, 0x0, 0x0) ioctl$sock_ifreq(r5, 0x8927, &(0x7f0000000140)={'wg2\x00', @ifru_data=&(0x7f00000000c0)="a2ad686d465bc32d7c5c32b45565c2807e1fe3bd45f7cb3ee9043ea6b11fecbd"}) socket$nl_generic(0x10, 0x3, 0x10) 1.113853654s ago: executing program 3 (id=7053): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={r0, &(0x7f0000000080)='\x00', 0x0, &(0x7f0000000180)={@_ha_fsid={[0x0, 0x7ff]}, {0x0, 0x800, 0xb, 0x1}}, 0x200, &(0x7f00000001c0), &(0x7f0000000200)=0x6a6dece1}) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipmr_getroute={0x1c, 0x1a, 0x200, 0x70bd2b, 0x25dfdbfe, {0x80, 0x14, 0x14, 0x40, 0xfd, 0x3, 0xff, 0x9, 0x2000}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000041) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.040888148s ago: executing program 4 (id=7054): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a0800"], 0x80}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="18010000120001002ebd7000fedbdf25656362"], 0x118}}, 0x4048850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 961.850235ms ago: executing program 4 (id=7055): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000341000030429bd70000200000000008000", @ANYRES32=0x0, @ANYBLOB="00080000000000002400128008000100677265001800028006000e0003000000040012000600030002000000"], 0x44}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x14, 0x2, 0x101) r8 = socket$caif_stream(0x25, 0x1, 0x4) accept4(r8, 0x0, 0x0, 0x80800) accept4(r5, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000380)=0x80, 0x80800) ioctl$sock_SIOCGIFINDEX(r7, 0x61d0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x0, 0x2, 0x0, 0x5}, 0xe) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000140)={r10, 0xf800, 0x3}, &(0x7f0000000180)=0x8) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r11, 0x84, 0x11, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYBLOB="baff55da5b430ec9b1ad7b"], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0xfffffffffffffdcc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=r2], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x841) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000", @ANYBLOB="0fdaafdbea8e92c5c3bcc6919f3e650278585ca7857ddaea00f8e180189e3797c8c3c1dd61eb3375ef74aae624d43c3309d1b82d1cef86c1c77372bdc42cca9b87e94b1f06754976295c49240d441e3bc040e6c20dceb5419778abaa24bcc48f500dbe0fe3df94534e205ee478593ddf366e4f628b30f61ed2b5cdf886e5f35d52f8d0390422a818e5b439e315cf8f25bfe1a5ce824f72e2ea00e5b98412f4ee23346a46f4e6988dee285135850f78e8d756c1777d602029190ebbbfe0167673efc0d1", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x401, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000100010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e7e67a89cf0f0c5700e686a6d0001000000e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 628.224384ms ago: executing program 3 (id=7056): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffd, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffe, 0x8, 0x4000004, 0x0, 0x40000044, 0x0, 0x80000001, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) socket(0x10, 0x803, 0x0) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002480)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x83, 0x6026, 0x10, @mcast1, @mcast1, 0x700, 0x40, 0x1, 0x1}}) 319.014152ms ago: executing program 1 (id=7057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24044000}, 0x44800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback, 0x7, 0x8000, 0x4, 0x84a5}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'team_slave_1\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000800)={&(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000002c0)="a68b0459419cb8b4dc6cbf", 0xb}, {&(0x7f0000000300)="03750d7bff208981d20654b71445241a9e10859c781dcc12f2368a30ef1c382ffddced75b3a0bc7b188e038956a6c09cd9ea746d89719271ee0af8892e7894137aae90a10193f8aed395e78f1379e77a1b1c6e14f5d1097c9b46e13811823607e95a3454426eecef62733d38494d1ae65b4362e06fa4759eac66ddda5b66a3237f", 0x81}, {&(0x7f00000003c0)="035be8b8649f7cc9b2d259d82ec5da16d6fad92ab7076c624bd3065f2aadc289cc1ecddf3a919e8bba06c4ac85706f572c7a89f7aaba3d8a18ece9b1aebdd69be57223edd18e22daac19e8bdd553a0258d6620510e70bc3fd1b181c42ea16d6f8a61b3", 0x63}, {&(0x7f0000000440)="500088f895030e3717c56a30bd183a5c19bfb45ebffc9376e27ec83ebde689ccab14231f5e7e8823419848df96a445eb95810d09c400cfbe2f56cc37e57ca76b52a628e74bbc2b23b1529eb1a57c37a0b00f40b6da9d3f30a28dae5a7dc3300df3ec25d64a0510751746ea4a5353201c62ca70c48a2a84aea64d8e5ebe4604c24e6dd561534e29d45b7ce478c48a48ff3843301ed1981218e242158a57e87cb10e3c86d0c86cdb5dfc1805", 0xab}, {&(0x7f0000000500)="927d783deb1f99054a15a1270020161927589a63b9b6c9a4a561f1b559b2b6e4622d7d23c659c78b08441c4eb91953094e666ef03a04be124264ebe44ca5ac2caf7fa0edfafc7f7df10f390cf690089f11bfc8d345173a4fd2d7ce7d6d725610c0b0bbcfa104154839f6f54f7770", 0x6e}, {&(0x7f0000000580)="e831b58972d50a34f13293489ae56be81badc462cb82b72837104749f2f6bc087b51c768792cdec8a37f71e2b6f2b924eb1260c9324ab7", 0x37}], 0x6, &(0x7f0000000740)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010102, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd89231b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x10}}], 0xc0}, 0x40) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000840)=@gcm_256={{0x303}, "3e864fc7ef3f355e", "4853c054d4ad43cb251006d0bbc0a77d2114a74b7764fc95619a9c3b5291a15e", "65b09ab9", "ca01687cb0757349"}, 0x38) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000a80)={{r0, &(0x7f0000000880)='!\x00', 0x430000, &(0x7f00000008c0)={@align, {0x1, 0xd2, 0xfffffffd, 0x10001}}, 0x2, &(0x7f0000000900), &(0x7f0000000940)}, {[0x6d42, 0x9d, 0xff, 0x6]}, 0x0, 0xd5, &(0x7f0000000980)=""/213}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000b00)={'dvmrp0\x00', 0x1820}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b80)={'xfrm0\x00'}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000d00)={r7, &(0x7f0000000bc0)="b750a173ae76660d393ee7875b5699ace8d0ea1890e395e54279523bb2ad3b16491634b17d68c79a1f4a039b8267cce29ca4f08e4469347259591fc3e4f226311de9e31941e1dbcb71f01cc5ee4aba4c521fb4bf1f8102cf9ef1b8dfd5f7073b1d0bb7e31f66ad4d608566e8b3eed9bdb19837369af8f0565ec8796745d5532eb70954c4f698003bb23a10324eb4817c29a5e71a1f448d9f6ea76e4fe4a7bdab56edd2eb48768869fd4b39202b1fac1fcb0fbe9bb0e88469551c5f178203ff2bedbb208d64b55f5aadb45e5266dc43ce4a09fb042e2fff4d708c0c3e4530a26b887dc46cbf93ded1e14737e098ccfa23be68e439ce", &(0x7f0000000cc0)=""/24}, 0x20) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000dc0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r9, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x15, 0x3, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}}, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000f00)={'filter\x00', 0xc2, "64627eeeb8442b0c0b458d55dc24e978b0d2e60a3f4cb21637a593e950bccfbb474556951bf3500960179d0671bf14d29e485f9218fb8d811343ad432418a68209ca910ac7cff2ad28287420b2696ef2e8e548872e49980834956670aed8f5b36e70f1ca885e83ca7b648380b499068b94856ab6bb1fd71041c3441cb19efa3e6b085a6c6dce4f49c156c8e14019762638982f025f2aa8df51a48ac73fc2e97f849c658213d63f5dff4566b9293557cc43b493696592159ac920edf5e593503ee3f0"}, &(0x7f0000001000)=0xe6) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, r2, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000011) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x74, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f00000012c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x501, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x1, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x48000) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)={0x8c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x40000) recvmsg$can_j1939(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000015c0)=""/30, 0x1e}, {&(0x7f0000001600)=""/231, 0xe7}, {&(0x7f0000001700)=""/162, 0xa2}, {&(0x7f00000017c0)=""/235, 0xeb}, {&(0x7f00000018c0)=""/248, 0xf8}], 0x5}, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f0000001a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$unix(0x1, 0x2, 0x0) 198.026715ms ago: executing program 0 (id=7058): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d1000/0xb000)=nil, 0xb000, 0x0, 0x11, r4, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x40010, r2, 0x5431000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r5, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000027c0)=""/4097, 0x1001}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0xffffffffffffff10, &(0x7f00000002c0)=[{&(0x7f00000023c0)=""/37, 0x25}], 0x1}, 0x7}], 0x1, 0x400001a2, 0x0) close(r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x54, 0x2c, 0xd09, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010100}]}}]}, 0x54}}, 0x24004000) socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x50, 0x140f, 0x8, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f00000002c0), 0x229561d487379d2, 0x4) 44.232578ms ago: executing program 4 (id=7059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000200}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x4}}]}}}]}, 0x78}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0xfffffffffffffffd, &(0x7f00000003c0)=0x4d) 33.049046ms ago: executing program 2 (id=7060): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}, 0x2}}, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async, rerun: 64) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0xfff3, 0x10}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xffff}, @TCA_FLOW_KEYS={0x8, 0x1, 0x3874}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0x40802) (async) close(r3) (async) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r6 = socket$kcm(0x11, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x4) (async) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f00000001c0)) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r11, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r12, 0x40d, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044}, 0x800) 780.584µs ago: executing program 0 (id=7061): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB='\x00'/28], 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r2, 0x1ad72f7) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r5, 0x89e0, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x80000) 0s ago: executing program 1 (id=7062): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r0, r4}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000710000000000000095007400000000000389c0dc1b1e8fcc938d01cf519bb9961bd83651f709c94ff5ae1b8970b266a297034656858dc13d3dc6e7203903445d797181deb467614fe3"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01e19b7fb063f300000000000000003f00007910010300", @ANYRES32=r1, @ANYBLOB="10005e8004000100080005003b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040090}, 0x0) kernel console output (not intermixed with test programs): 0 port 256 - 0 [ 702.744765][T27966] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.767356][T27966] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 702.778328][T27966] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 702.935106][T27966] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.963787][T27966] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 703.002956][T27966] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 703.221298][T27966] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.235495][T27966] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 703.275574][T27966] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 703.309687][T27996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5832'. [ 703.545169][T27984] xt_hashlimit: size too large, truncated to 1048576 [ 703.571570][T27984] xt_hashlimit: max too large, truncated to 1048576 [ 703.662475][T12714] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.670278][T28013] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20002 [ 703.688219][T12714] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 703.707850][T12714] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 703.840955][T12696] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.864856][T12696] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 703.896395][T12696] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 703.930801][T12696] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.960826][T12696] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 703.980626][T12696] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 704.185849][T28031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5837'. [ 704.215561][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.223823][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 704.228167][T28023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5836'. [ 704.285324][ T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 704.305648][T28023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5836'. [ 704.738754][T12707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.748298][T12707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.767767][T12707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.775565][T12707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.821807][T12707] hsr0: left allmulticast mode [ 704.829532][T12707] veth1_to_hsr: left allmulticast mode [ 704.835515][T12707] veth1_to_hsr: left promiscuous mode [ 704.846111][T12707] veth1_macvtap: left promiscuous mode [ 704.851809][T12707] veth0_macvtap: left promiscuous mode [ 704.861380][T12707] veth1_vlan: left promiscuous mode [ 704.869427][T12707] veth0_vlan: left promiscuous mode [ 705.773043][T12707] team0 (unregistering): Port device team_slave_1 removed [ 705.791760][T12707] team0 (unregistering): Port device team_slave_0 removed [ 705.971582][T12707] team0 (unregistering): Port device dummy0 removed [ 706.181720][T12714] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.196981][T12714] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 706.235324][T12714] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 706.277035][T12714] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.311643][T12714] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 706.335313][T12714] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 706.368592][T12714] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.395330][T12714] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 706.397389][T28104] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 706.412669][T28104] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 706.414579][T12714] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 706.484657][T12714] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.493498][T12714] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 706.536645][T12714] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 706.555519][T12714] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.655381][T28107] hsr_slave_0: left promiscuous mode [ 706.684179][T28107] tipc: Disabling bearer [ 706.734202][T12714] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.756677][T12714] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.783312][T12714] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.848647][T28124] __nla_validate_parse: 3 callbacks suppressed [ 706.848668][T28124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5849'. [ 707.024722][T28130] sctp: [Deprecated]: syz.0.5850 (pid 28130) Use of int in max_burst socket option. [ 707.024722][T28130] Use struct sctp_assoc_value instead [ 707.047651][T28124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5849'. [ 708.047734][T28126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5849'. [ 708.616808][T17162] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 708.720054][T28185] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 708.805333][T17162] CPU: 1 UID: 0 PID: 17162 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 708.805360][T17162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 708.805373][T17162] Call Trace: [ 708.805381][T17162] [ 708.805391][T17162] dump_stack_lvl+0xe8/0x150 [ 708.805425][T17162] dump_header+0xd3/0x4c0 [ 708.805453][T17162] oom_kill_process+0x3ab/0x970 [ 708.805482][T17162] out_of_memory+0x106c/0x1410 [ 708.805504][T17162] ? percpu_ref_put+0x19/0x180 [ 708.805532][T17162] ? __pfx___mutex_lock+0x10/0x10 [ 708.805569][T17162] ? __pfx_out_of_memory+0x10/0x10 [ 708.805588][T17162] ? do_raw_spin_unlock+0xf5/0x210 [ 708.805622][T17162] try_charge_memcg+0xc53/0x1560 [ 708.805665][T17162] ? __pfx_try_charge_memcg+0x10/0x10 [ 708.805700][T17162] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 708.805731][T17162] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 708.805761][T17162] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 708.805790][T17162] __swap_cache_prepare_and_add+0xe8/0x760 [ 708.805830][T17162] ? page_rmappable_folio+0x9a/0x170 [ 708.805866][T17162] swap_cache_alloc_folio+0xf1/0x240 [ 708.805903][T17162] swap_cluster_readahead+0x369/0x690 [ 708.805939][T17162] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 708.805975][T17162] ? get_vma_policy+0x27b/0x3c0 [ 708.806005][T17162] swapin_readahead+0x196/0xc50 [ 708.806038][T17162] ? __pfx_swapin_readahead+0x10/0x10 [ 708.806065][T17162] ? swap_table_get+0x1e/0x260 [ 708.806100][T17162] ? swap_table_get+0x1e/0x260 [ 708.806146][T17162] ? swap_table_get+0x1e/0x260 [ 708.806178][T17162] ? swap_table_get+0x216/0x260 [ 708.806211][T17162] ? swap_cache_get_folio+0x513/0x520 [ 708.806251][T17162] do_swap_page+0x56f/0x5a20 [ 708.806307][T17162] ? do_swap_page+0x127/0x5a20 [ 708.806337][T17162] ? __pfx_do_swap_page+0x10/0x10 [ 708.806366][T17162] ? __pte_offset_map+0x1ae/0x240 [ 708.806391][T17162] ? pte_offset_map_rw_nolock+0xea/0x160 [ 708.806417][T17162] handle_mm_fault+0x12d2/0x3310 [ 708.806466][T17162] ? handle_mm_fault+0xee/0x3310 [ 708.806508][T17162] ? __pfx_handle_mm_fault+0x10/0x10 [ 708.806539][T17162] ? lock_vma_under_rcu+0x45a/0x500 [ 708.806593][T17162] do_user_addr_fault+0xa73/0x1340 [ 708.806631][T17162] ? rcu_is_watching+0x15/0xb0 [ 708.806679][T17162] ? trace_page_fault_user+0x84/0x210 [ 708.806711][T17162] exc_page_fault+0x6a/0xc0 [ 708.806742][T17162] asm_exc_page_fault+0x26/0x30 [ 708.806763][T17162] RIP: 0033:0x7f0acd55d04e [ 708.806784][T17162] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 708.806801][T17162] RSP: 002b:00007ffe57c168e8 EFLAGS: 00010246 [ 708.806821][T17162] RAX: 0000000000000000 RBX: 000055556d031500 RCX: 00007f0acd55d04e [ 708.806836][T17162] RDX: 00007ffe57c16940 RSI: 0000000000000000 RDI: 0000000000000000 [ 708.806848][T17162] RBP: 00007ffe57c169ac R08: 0000000000000000 R09: 0000000000000000 [ 708.806861][T17162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 708.806873][T17162] R13: 00000000000927c0 R14: 00000000000ac8f6 R15: 00007ffe57c16a00 [ 708.806924][T17162] [ 709.120023][T17162] memory: usage 307200kB, limit 307200kB, failcnt 943 [ 709.129757][T17162] memory+swap: usage 307344kB, limit 9007199254740988kB, failcnt 0 [ 709.137833][T17162] kmem: usage 307140kB, limit 9007199254740988kB, failcnt 0 [ 709.145300][T17162] Memory cgroup stats for /syz4: [ 709.145617][T17162] cache 0 [ 709.153569][T17162] rss 0 [ 709.156389][T17162] rss_huge 0 [ 709.159624][T17162] shmem 0 [ 709.162595][T17162] mapped_file 0 [ 709.166158][T17162] dirty 0 [ 709.169124][T17162] writeback 0 [ 709.172429][T17162] workingset_refault_anon 81 [ 709.177161][T17162] workingset_refault_file 13 [ 709.181784][T17162] swap 147456 [ 709.185100][T17162] swapcached 540672 [ 709.189045][T17162] pgpgin 178174 [ 709.192532][T17162] pgpgout 178159 [ 709.196141][T17162] pgfault 298592 [ 709.199711][T17162] pgmajfault 47 [ 709.203198][T17162] inactive_anon 8192 [ 709.207175][T17162] active_anon 40960 [ 709.211015][T17162] inactive_file 0 [ 709.214671][T17162] active_file 0 [ 709.218203][T17162] unevictable 0 [ 709.221701][T17162] hierarchical_memory_limit 314572800 [ 709.227287][T17162] hierarchical_memsw_limit 9223372036854771712 [ 709.233475][T17162] total_cache 0 [ 709.237020][T17162] total_rss 0 [ 709.240331][T17162] total_rss_huge 0 [ 709.244072][T17162] total_shmem 0 [ 709.247603][T17162] total_mapped_file 0 [ 709.251616][T17162] total_dirty 0 [ 709.255106][T17162] total_writeback 0 [ 709.258970][T17162] total_workingset_refault_anon 81 [ 709.264105][T17162] total_workingset_refault_file 13 [ 709.269329][T17162] total_swap 147456 [ 709.273175][T17162] total_swapcached 540672 [ 709.277595][T17162] total_pgpgin 178174 [ 709.281606][T17162] total_pgpgout 178159 [ 709.285768][T17162] total_pgfault 298595 [ 709.289872][T17162] total_pgmajfault 47 [ 709.293892][T17162] total_inactive_anon 8192 [ 709.298413][T17162] total_active_anon 40960 [ 709.302774][T17162] total_inactive_file 0 [ 709.307011][T17162] total_active_file 0 [ 709.311018][T17162] total_unevictable 0 [ 709.315023][T17162] anon_cost 0 [ 709.318393][T17162] file_cost 0 [ 709.321730][T17162] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.5848,pid=28120,uid=0 [ 709.338379][T17162] Memory cgroup out of memory: Killed process 28120 (syz.4.5848) total-vm:102288kB, anon-rss:1240kB, file-rss:22724kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 709.542993][T28196] IPVS: Scheduler module ip_vs_sip not found [ 709.649874][T28208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5866'. [ 709.696040][T12707] IPVS: stop unused estimator thread 0... [ 709.732462][T28211] bridge_slave_1: left allmulticast mode [ 709.769043][T28211] bridge_slave_1: left promiscuous mode [ 709.793881][T28211] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.880412][T28211] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 710.039557][T28223] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5868'. [ 710.105406][T28223] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5868'. [ 710.186310][T28231] netlink: 'syz.4.5870': attribute type 21 has an invalid length. [ 710.214579][T28231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5870'. [ 710.295138][T28231] netlink: 'syz.4.5870': attribute type 20 has an invalid length. [ 711.235672][T28280] xt_hashlimit: max too large, truncated to 1048576 [ 711.259370][T28276] syzkaller0: entered promiscuous mode [ 711.264900][T28276] syzkaller0: entered allmulticast mode [ 711.326339][T28234] ±÷ speed is unknown, defaulting to 1000 [ 711.616484][T28293] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 711.664754][T28293] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 711.775887][T28295] 8021q: VLANs not supported on caif0 [ 712.014241][T28302] netlink: 'syz.2.5885': attribute type 1 has an invalid length. [ 712.064388][T28302] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5885'. [ 712.268855][T28306] bond9: option mode: invalid value (37) [ 712.326768][T28306] bond9 (unregistering): Released all slaves [ 712.339637][T21442] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 712.352661][T21442] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 712.361014][T21442] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 712.369146][T21442] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 712.376958][T21442] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 712.456248][T28273] ±÷ speed is unknown, defaulting to 1000 [ 713.958585][T28336] syzkaller1: entered promiscuous mode [ 713.964205][T28336] syzkaller1: entered allmulticast mode [ 713.971830][T28309] ±÷ speed is unknown, defaulting to 1000 [ 714.452126][T28349] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 714.465666][ T5834] Bluetooth: hci1: command tx timeout [ 714.525477][T28342] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 715.404742][T28309] chnl_net:caif_netlink_parms(): no params data found [ 715.597159][T28309] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.604406][T28309] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.613704][T28309] bridge_slave_0: entered allmulticast mode [ 715.632383][T28309] bridge_slave_0: entered promiscuous mode [ 715.676503][T28309] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.685493][T28309] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.696587][T28309] bridge_slave_1: entered allmulticast mode [ 715.714828][T28309] bridge_slave_1: entered promiscuous mode [ 715.800143][T28309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.829492][T28309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.970686][T28309] team0: Port device team_slave_0 added [ 716.022304][T28309] team0: Port device team_slave_1 added [ 716.046577][T28412] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5910'. [ 716.094632][T28412] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5910'. [ 716.133755][T28412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5910'. [ 716.134092][T28309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.152116][T28412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5910'. [ 716.177261][T28309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.217499][T28309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.282882][T28422] openvswitch: netlink: Flow actions attr not present in new flow. [ 716.297497][T28309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.304462][T28309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.335780][T28422] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.355293][T28309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.389734][T28428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5910'. [ 716.492432][T28432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5910'. [ 716.548451][T21442] Bluetooth: hci1: command tx timeout [ 716.601804][T28309] hsr_slave_0: entered promiscuous mode [ 716.629427][T28309] hsr_slave_1: entered promiscuous mode [ 716.636565][T28309] debugfs: 'hsr0' already exists in 'hsr' [ 716.642432][T28309] Cannot create hsr debugfs directory [ 716.837682][T28445] xt_hashlimit: size too large, truncated to 1048576 [ 716.875763][T28425] ±÷ speed is unknown, defaulting to 1000 [ 716.925526][T28449] IPVS: set_ctl: invalid protocol: 8 10.1.1.0:20003 [ 716.957257][T28450] x_tables: duplicate underflow at hook 2 [ 717.392397][T28464] netlink: 'syz.0.5920': attribute type 4 has an invalid length. [ 717.407398][T28464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5920'. [ 717.542878][T28470] netlink: 772 bytes leftover after parsing attributes in process `syz.2.5922'. [ 717.589166][T28470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5922'. [ 717.862830][T28475] Unknown options in mask 6 [ 717.927611][T28475] netlink: 'syz.2.5923': attribute type 8 has an invalid length. [ 717.972030][T28479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5924'. [ 717.991912][T21442] block nbd0: Receive control failed (result -1) [ 718.029394][T28309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 718.077866][T28309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 718.104895][T28309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 718.129246][T28309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 718.432882][T28489] bond9: option miimon: invalid value (18446744073709551607) [ 718.464941][T28489] bond9: option miimon: allowed values 0 - 2147483647 [ 718.607545][T28489] bond9 (unregistering): Released all slaves [ 718.625329][T21442] Bluetooth: hci1: command tx timeout [ 718.781582][T28309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.823302][T28309] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.853352][T12707] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.860576][T12707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.903018][T11370] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.910265][T11370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.405825][T28507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5927'. [ 719.515203][T28309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.258234][T28309] veth0_vlan: entered promiscuous mode [ 720.301167][T28309] veth1_vlan: entered promiscuous mode [ 720.432915][T28309] veth0_macvtap: entered promiscuous mode [ 720.516868][T28309] veth1_macvtap: entered promiscuous mode [ 720.566440][T28309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.590648][T28309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.636670][T12690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.655344][T12690] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.705571][T21442] Bluetooth: hci1: command tx timeout [ 720.718820][T12690] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.746656][T12690] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.776987][T28538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5936'. [ 721.049128][T28546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5937'. [ 721.076753][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.115462][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.249244][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.263360][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.306449][T28557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5938'. [ 721.323488][T28557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5938'. [ 721.373495][T28559] netlink: 'syz.3.5939': attribute type 1 has an invalid length. [ 721.385537][T28559] netlink: 'syz.3.5939': attribute type 2 has an invalid length. [ 721.582968][T28574] tipc: Enabled bearer , priority 0 [ 721.619911][T28574] syzkaller0: entered promiscuous mode [ 721.651652][T28574] syzkaller0: entered allmulticast mode [ 721.779615][T28574] tipc: Resetting bearer [ 721.797801][T28581] 8021q: VLANs not supported on ipvlan1 [ 721.818691][T28568] tipc: Resetting bearer [ 721.933366][T28568] tipc: Disabling bearer [ 722.440412][T28600] netlink: 'syz.4.5950': attribute type 1 has an invalid length. [ 722.762123][T28611] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5953'. [ 722.788074][T28611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5953'. [ 722.801807][T28614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5954'. [ 722.858313][T28616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5955'. [ 722.914849][T28620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5956'. [ 722.990036][T28620] 8021q: adding VLAN 0 to HW filter on device bond9 [ 723.118654][T28623] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5956'. [ 723.137284][T28625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5959'. [ 723.606052][T28630] ±÷ speed is unknown, defaulting to 1000 [ 723.986260][T28648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5963'. [ 724.336434][T28658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5966'. [ 724.442036][T21442] block nbd1: Receive control failed (result -1) [ 724.493561][T28664] netlink: 'syz.3.5968': attribute type 1 has an invalid length. [ 724.572206][T28664] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 724.697270][T28671] bridge_slave_1: entered promiscuous mode [ 724.939243][T28677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5970'. [ 725.933827][T28694] ±÷ speed is unknown, defaulting to 1000 [ 725.968120][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 725.978663][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 725.989292][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 725.998946][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 726.006834][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 726.564456][T28705] ±÷ speed is unknown, defaulting to 1000 [ 726.776533][T28712] netlink: 'syz.1.5983': attribute type 1 has an invalid length. [ 727.235361][T28709] openvswitch: netlink: Flow key attr not present in new flow. [ 727.704714][T28739] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 727.794325][T28705] chnl_net:caif_netlink_parms(): no params data found [ 727.972961][T28746] syzkaller0: entered promiscuous mode [ 727.990453][T28746] syzkaller0: entered allmulticast mode [ 728.052688][T28705] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.063099][T28705] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.073764][T28705] bridge_slave_0: entered allmulticast mode [ 728.079840][ T5834] Bluetooth: hci5: command tx timeout [ 728.108730][T28705] bridge_slave_0: entered promiscuous mode [ 728.132908][T28705] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.149113][T28705] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.162284][T28705] bridge_slave_1: entered allmulticast mode [ 728.198842][T28705] bridge_slave_1: entered promiscuous mode [ 728.233499][T28759] __nla_validate_parse: 39 callbacks suppressed [ 728.233518][T28759] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5995'. [ 728.303717][T28705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.323598][T28705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.376899][T28705] team0: Port device team_slave_0 added [ 728.391820][T28764] netlink: 'syz.2.5996': attribute type 1 has an invalid length. [ 728.402860][T28705] team0: Port device team_slave_1 added [ 728.510018][T28705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.528411][T28705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.594680][T28705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.621801][T28705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.653875][T28705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.698577][T28705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.742947][T28776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6000'. [ 728.797190][T28782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6002'. [ 728.840230][T28784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6003'. [ 728.856364][T28705] hsr_slave_0: entered promiscuous mode [ 728.863381][T28705] hsr_slave_1: entered promiscuous mode [ 728.879094][T28705] debugfs: 'hsr0' already exists in 'hsr' [ 728.885096][T28705] Cannot create hsr debugfs directory [ 728.892559][T28777] IPVS: Unknown mcast interface: netpci0 [ 728.966035][T28786] bridge8: entered promiscuous mode [ 729.238028][T28805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6007'. [ 729.658835][T28802] ±÷ speed is unknown, defaulting to 1000 [ 729.800634][T28825] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 729.936139][T28831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6015'. [ 730.147980][ T5834] Bluetooth: hci5: command tx timeout [ 730.547999][T28705] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 730.569473][T28705] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 730.590397][T28705] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 730.611675][T28841] ±÷ speed is unknown, defaulting to 1000 [ 730.618423][T28705] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 730.767290][T28705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.794731][T28705] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.818736][T11370] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.825976][T11370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.854227][T12714] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.861465][T12714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.017354][T28874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6023'. [ 731.046442][T28873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6024'. [ 731.078493][T28873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6024'. [ 731.562523][T28705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.622806][T28896] netlink: 'syz.3.6028': attribute type 21 has an invalid length. [ 731.776570][T28896] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6028'. [ 732.228153][ T5834] Bluetooth: hci5: command tx timeout [ 732.451495][T28705] veth0_vlan: entered promiscuous mode [ 732.500490][T28705] veth1_vlan: entered promiscuous mode [ 732.594976][T28705] veth0_macvtap: entered promiscuous mode [ 732.677236][T28705] veth1_macvtap: entered promiscuous mode [ 732.790365][T28705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.812390][T28935] tipc: Enabled bearer , priority 26 [ 732.836643][T28705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.873451][T12690] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.903470][T12690] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.935657][T12690] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.972724][T12690] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.225176][T12690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.234164][T12690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.303516][T28953] __nla_validate_parse: 3 callbacks suppressed [ 733.303535][T28953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6042'. [ 733.323478][T28955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6043'. [ 733.328491][T11370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.366687][T11370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.516897][T28962] syzkaller0: entered promiscuous mode [ 733.529141][T28962] syzkaller0: entered allmulticast mode [ 733.546028][T28962] 0: reclassify loop, rule prio 0, protocol 800 [ 733.723670][T28942] ±÷ speed is unknown, defaulting to 1000 [ 733.833524][T28976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6049'. [ 733.930428][T28979] netlink: 'syz.0.6050': attribute type 21 has an invalid length. [ 733.938613][T28979] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6050'. [ 734.308642][ T5834] Bluetooth: hci5: command tx timeout [ 734.383551][T28996] netlink: 'syz.2.6053': attribute type 1 has an invalid length. [ 734.448401][T28996] bond10: entered promiscuous mode [ 734.454075][T28996] 8021q: adding VLAN 0 to HW filter on device bond10 [ 734.514008][T28996] 8021q: adding VLAN 0 to HW filter on device bond10 [ 734.523012][T28996] bond10: (slave vcan0): The slave device specified does not support setting the MAC address [ 734.535467][T28996] bond10: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 734.556866][T29009] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20003 [ 734.569648][T28996] bond10: (slave vcan0): making interface the new active one [ 734.577497][T28996] vcan0: entered promiscuous mode [ 734.584603][T28996] bond10: (slave vcan0): Enslaving as an active interface with an up link [ 735.072127][T29033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6063'. [ 735.232746][T29021] delete_channel: no stack [ 735.455414][T29039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6064'. [ 735.514792][T29035] bond1: entered promiscuous mode [ 735.532436][T29035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.553102][T21442] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 735.564769][T21442] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 735.573066][T21442] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 735.582062][T21442] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 735.590706][T21442] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 735.835398][T29047] netlink: 'syz.0.6068': attribute type 10 has an invalid length. [ 736.076114][T29058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6067'. [ 736.243032][T29041] ±÷ speed is unknown, defaulting to 1000 [ 736.333918][T29068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6074'. [ 736.346352][T29068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6074'. [ 736.915817][T29101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6083'. [ 737.170697][T29041] chnl_net:caif_netlink_parms(): no params data found [ 737.189031][T29092] ±÷ speed is unknown, defaulting to 1000 [ 737.328788][T29041] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.338330][T29041] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.355558][T29041] bridge_slave_0: entered allmulticast mode [ 737.367414][T29041] bridge_slave_0: entered promiscuous mode [ 737.442541][T29121] netlink: 'syz.1.6085': attribute type 1 has an invalid length. [ 737.450880][T29121] netlink: 'syz.1.6085': attribute type 1 has an invalid length. [ 737.478005][T29041] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.485561][T29041] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.492838][T29041] bridge_slave_1: entered allmulticast mode [ 737.508659][T29041] bridge_slave_1: entered promiscuous mode [ 737.571566][T29041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.588579][T29041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.636681][T29097] ±÷ speed is unknown, defaulting to 1000 [ 737.665476][ T5834] Bluetooth: hci2: command tx timeout [ 737.690906][T29041] team0: Port device team_slave_0 added [ 737.746251][T29041] team0: Port device team_slave_1 added [ 737.924882][T29041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.932011][T29041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.960737][T29041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.976146][T29041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.983342][T29041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.020263][T29041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.199977][T29100] ±÷ speed is unknown, defaulting to 1000 [ 738.239190][T29041] hsr_slave_0: entered promiscuous mode [ 738.252430][T29041] hsr_slave_1: entered promiscuous mode [ 738.266168][T29041] debugfs: 'hsr0' already exists in 'hsr' [ 738.272004][T29041] Cannot create hsr debugfs directory [ 739.483226][T29041] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 739.556872][T29041] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 739.572566][T29041] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 739.626332][T29041] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 739.674651][T29145] __nla_validate_parse: 4 callbacks suppressed [ 739.674670][T29145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6093'. [ 739.697219][T29145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6093'. [ 739.745675][ T5834] Bluetooth: hci2: command tx timeout [ 739.854195][T29041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.894952][T29041] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.934759][T12707] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.941975][T12707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.994994][T12690] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.002273][T12690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.129900][T29041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 740.321486][T29158] netlink: 'syz.0.6095': attribute type 1 has an invalid length. [ 740.338986][T29160] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6096'. [ 740.396839][T29163] netlink: 'syz.0.6095': attribute type 1 has an invalid length. [ 740.573563][T29168] nbd: must specify at least one socket [ 740.587442][T29168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6098'. [ 740.704386][T29173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6099'. [ 740.715734][T29041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.767663][T29177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.795801][T29178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6100'. [ 740.849324][T29178] netlink: 'syz.4.6100': attribute type 1 has an invalid length. [ 740.888271][T29178] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6100'. [ 740.909720][T29041] veth0_vlan: entered promiscuous mode [ 740.939195][T29041] veth1_vlan: entered promiscuous mode [ 741.046493][T29041] veth0_macvtap: entered promiscuous mode [ 741.071363][T29041] veth1_macvtap: entered promiscuous mode [ 741.143867][T29041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.174547][T29187] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6104'. [ 741.191382][T29041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.211205][T29187] netlink: 'syz.1.6104': attribute type 2 has an invalid length. [ 741.229617][T29190] Cannot find set identified by id 0 to match [ 741.241289][T11370] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.270869][T29190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6103'. [ 741.285387][T11370] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.339904][T11370] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.349563][T29190] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6103'. [ 741.409848][T11370] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.467767][T29198] netlink: 'syz.1.6106': attribute type 1 has an invalid length. [ 741.594441][T29198] bond1: entered promiscuous mode [ 741.601779][T29198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 741.672269][T29198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 741.683180][T29198] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 741.693732][T29198] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 741.710202][T29198] bond1: (slave vcan1): making interface the new active one [ 741.718052][T29198] vcan1: entered promiscuous mode [ 741.725076][T29198] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 741.749853][T29203] netlink: 'syz.2.6102': attribute type 4 has an invalid length. [ 741.812855][T12714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.826058][ T5834] Bluetooth: hci2: command tx timeout [ 741.855373][T12714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.960749][T29210] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.076662][T29210] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.141709][T29224] erspan0: entered promiscuous mode [ 742.150024][T29224] gretap0: entered promiscuous mode [ 742.160990][T29224] debugfs: 'hsr1' already exists in 'hsr' [ 742.166815][T12714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.166836][T12714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.183033][T29224] Cannot create hsr debugfs directory [ 742.246521][T29229] netlink: 'syz.2.6116': attribute type 4 has an invalid length. [ 742.271538][T29210] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.439613][T29210] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.536890][T12163] lec:lec_start_xmit: lec0:No lecd attached [ 742.559837][T11018] IPVS: starting estimator thread 0... [ 742.665458][T29244] IPVS: using max 28 ests per chain, 67200 per kthread [ 742.784724][T12696] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.807650][T12696] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.861028][T12707] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.879448][T29236] ±÷ speed is unknown, defaulting to 1000 [ 742.935402][T12707] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.006390][T29257] netlink: 'syz.1.6125': attribute type 3 has an invalid length. [ 743.040337][T29257] netlink: 'syz.1.6125': attribute type 1 has an invalid length. [ 743.060009][T29257] NCSI netlink: No device for ifindex 813332851 [ 743.132205][T29259] netlink: 'syz.0.6126': attribute type 21 has an invalid length. [ 743.166994][T29259] IPv6: NLM_F_CREATE should be specified when creating new route [ 743.195583][T29269] IPv6: NLM_F_CREATE should be specified when creating new route [ 743.216408][T29259] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 743.223655][T29259] IPv6: NLM_F_CREATE should be set when creating new route [ 743.231007][T29259] IPv6: NLM_F_CREATE should be set when creating new route [ 743.238280][T29259] IPv6: NLM_F_CREATE should be set when creating new route [ 743.274124][T29269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 743.473839][T29287] xt_cluster: node mask cannot exceed total number of nodes [ 743.911375][T21442] Bluetooth: hci2: command tx timeout [ 745.074035][T29350] __nla_validate_parse: 17 callbacks suppressed [ 745.074056][T29350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6154'. [ 745.090886][T29350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6154'. [ 745.183696][T29355] ip6tnl1: entered allmulticast mode [ 745.715987][T11370] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 745.740467][T11370] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 745.756437][T22332] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 745.795688][T29381] block nbd2: server does not support multiple connections per device. [ 745.804990][T29381] block nbd2: shutting down sockets [ 745.854550][T29393] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6164'. [ 745.989030][T29396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.006105][T22329] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 746.039980][T29396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.073451][T29396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.101713][T29396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.185681][T11020] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 746.637212][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6171'. [ 746.671683][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6171'. [ 747.094565][T29441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6176'. [ 747.113264][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.122627][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.134296][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 747.282496][T29441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6176'. [ 747.310575][T29441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6176'. [ 747.745802][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5210 ms [ 747.753883][ C0] lec:lec_tx_timeout: lec0 [ 747.758788][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 747.958942][T29461] bond11 (unregistering): Released all slaves [ 748.013401][T29435] ±÷ speed is unknown, defaulting to 1000 [ 748.203174][T29473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6186'. [ 748.217193][T29473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6186'. [ 749.008238][T29502] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 749.034571][T29509] ip6gre1: entered promiscuous mode [ 749.076606][T29509] ip6gre1: entered allmulticast mode [ 749.083578][T29505] A link change request failed with some changes committed already. Interface 26±÷ may have been left with an inconsistent configuration, please check. [ 749.117256][T29510] A link change request failed with some changes committed already. Interface 26±÷ may have been left with an inconsistent configuration, please check. [ 749.164230][ T1111] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 749.206082][ T1111] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 749.213866][T11018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 749.585633][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 749.701943][T11018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 750.056221][T29543] bond11: option tlb_dynamic_lb: invalid value (5) [ 750.067943][T29543] bond11 (unregistering): Released all slaves [ 750.115450][T29544] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 750.194447][T29551] __nla_validate_parse: 4 callbacks suppressed [ 750.194473][T29551] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6206'. [ 750.224854][T29551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6206'. [ 750.299018][T29553] batadv0: entered allmulticast mode [ 750.310422][T29553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.452450][T29559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6208'. [ 750.542062][T29564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6211'. [ 750.882315][T29578] validate_nla: 1 callbacks suppressed [ 750.882335][T29578] netlink: 'syz.0.6214': attribute type 1 has an invalid length. [ 750.943971][T29578] bond9: (slave geneve5): making interface the new active one [ 750.953267][T29578] bond9: (slave geneve5): Enslaving as an active interface with an up link [ 750.979705][ T1111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 751.006512][ T1111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 751.028618][ T1111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 751.134944][ T1111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 751.204241][T29555] ±÷ speed is unknown, defaulting to 1000 [ 751.469079][T29591] can: request_module (can-proto-5) failed. [ 751.549065][T29596] syzkaller0: entered promiscuous mode [ 751.554587][T29596] syzkaller0: entered allmulticast mode [ 751.581415][T29596] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6221'. [ 751.994278][T29604] netlink: 'syz.3.6223': attribute type 1 has an invalid length. [ 752.013027][T29604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 752.115465][T29610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6222'. [ 752.211289][T29612] netlink: 'syz.3.6223': attribute type 1 has an invalid length. [ 752.249023][T29612] macvlan2: entered promiscuous mode [ 752.254375][T29612] macvlan2: entered allmulticast mode [ 752.785384][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 752.793463][ C0] lec:lec_tx_timeout: lec0 [ 753.037612][T29631] mac80211_hwsim hwsim91 syzkaller0: entered allmulticast mode [ 753.077964][T29631] tipc: Resetting bearer [ 753.236430][T29635] netlink: 'syz.2.6230': attribute type 10 has an invalid length. [ 753.258123][T29635] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6230'. [ 753.296726][T29635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6230'. [ 753.308545][T29638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6231'. [ 753.506168][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 753.506187][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 753.569887][T29642] IPv6: sit3: Disabled Multicast RS [ 754.835480][T29681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6243'. [ 755.164167][T29692] tipc: Enabled bearer , priority 0 [ 755.176260][T29693] syzkaller0: entered promiscuous mode [ 755.181774][T29693] syzkaller0: entered allmulticast mode [ 755.280680][T29692] tipc: Resetting bearer [ 755.761432][T29699] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6242'. [ 757.576035][T29706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6246'. [ 757.644760][T29707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6246'. [ 757.987428][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 758.265995][T29691] tipc: Resetting bearer [ 758.290476][T29691] tipc: Disabling bearer [ 758.355135][T29704] veth0: entered promiscuous mode [ 758.370009][T29705] veth0: left promiscuous mode [ 758.747722][T29733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6255'. [ 758.815937][T29739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6256'. [ 758.877379][T29742] netlink: 'syz.1.6257': attribute type 27 has an invalid length. [ 758.959369][T29742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.069915][T29753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6260'. [ 759.192955][T29762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6261'. [ 759.339244][T29762] veth3: entered promiscuous mode [ 759.358025][T29766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6263'. [ 759.373866][T29766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6263'. [ 759.415859][T29774] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6265'. [ 759.689198][T29745] ±÷ speed is unknown, defaulting to 1000 [ 760.201340][T29769] ±÷ speed is unknown, defaulting to 1000 [ 760.862539][T29799] ±÷ speed is unknown, defaulting to 1000 [ 761.355772][T29818] __nla_validate_parse: 4 callbacks suppressed [ 761.355793][T29818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6278'. [ 761.873015][T29832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.899653][T29829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6282'. [ 762.465499][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 762.556092][T29840] syzkaller0: entered promiscuous mode [ 762.561629][T29840] syzkaller0: entered allmulticast mode [ 762.691750][T29848] netlink: 'syz.4.6287': attribute type 4 has an invalid length. [ 762.730734][T29843] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 762.773008][T22329] IPVS: starting estimator thread 0... [ 762.875585][T29853] IPVS: using max 27 ests per chain, 64800 per kthread [ 763.323459][T29862] bridge_slave_0: left allmulticast mode [ 763.356841][T29862] bridge_slave_0: left promiscuous mode [ 763.386304][T29862] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.439166][T29862] bridge_slave_1: left allmulticast mode [ 763.444941][T29862] bridge_slave_1: left promiscuous mode [ 763.502250][T29862] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.608465][T29862] bond0: (slave bond_slave_0): Releasing backup interface [ 763.706131][T29862] bond0: (slave bond_slave_1): Releasing backup interface [ 763.766321][T29862] team0: Port device team_slave_0 removed [ 763.791395][T29862] team0: Port device team_slave_1 removed [ 763.819473][T29862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.831652][T29862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.842125][T29862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.850273][T29862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.859413][T29862] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 763.887884][T29874] bond0: Error: Cannot enslave bond to itself. [ 764.028380][T29890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6296'. [ 764.181266][T29898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6298'. [ 764.693542][T29918] netlink: 'syz.1.6304': attribute type 13 has an invalid length. [ 764.709912][T29918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6304'. [ 765.197122][T29941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6311'. [ 765.341009][T29953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6314'. [ 765.349186][T29927] ±÷ speed is unknown, defaulting to 1000 [ 765.361935][T29953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6314'. [ 765.378175][T29945] netlink: 'syz.3.6312': attribute type 21 has an invalid length. [ 765.386278][T29945] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6312'. [ 765.402908][T29945] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6312'. [ 765.686996][T29961] bridge5: entered promiscuous mode [ 765.693499][T29961] bridge5: entered allmulticast mode [ 765.750895][T29961] team0: Port device bridge5 added [ 765.779251][T29963] bridge0: port 4(team0) entered blocking state [ 765.791031][T29963] bridge0: port 4(team0) entered disabled state [ 765.798464][T29963] team0: entered allmulticast mode [ 765.804058][T29963] team_slave_0: entered allmulticast mode [ 765.811520][T29963] team_slave_1: entered allmulticast mode [ 765.824485][T29963] team0: entered promiscuous mode [ 765.832117][T29963] team_slave_0: entered promiscuous mode [ 765.870811][T29963] team_slave_1: entered promiscuous mode [ 766.048158][T29978] bond_slave_0: entered promiscuous mode [ 766.053899][T29978] bond_slave_1: entered promiscuous mode [ 766.072149][T29978] vlan2: entered promiscuous mode [ 766.078300][T29978] bond0: entered promiscuous mode [ 766.199699][T29939] ±÷ speed is unknown, defaulting to 1000 [ 766.361566][T29994] xt_TCPMSS: Only works on TCP SYN packets [ 766.524443][T29997] syzkaller0: entered promiscuous mode [ 766.530109][T29997] syzkaller0: entered allmulticast mode [ 766.998724][T30009] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 767.132060][T30014] netlink: 'syz.2.6332': attribute type 10 has an invalid length. [ 767.141936][T30014] netlink: 'syz.2.6332': attribute type 10 has an invalid length. [ 767.383032][T30022] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 767.551306][T30016] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.640331][T30026] __nla_validate_parse: 4 callbacks suppressed [ 767.640350][T30026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6336'. [ 767.750616][T30016] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.811620][T30037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6340'. [ 767.841972][T30038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6339'. [ 767.909141][T30016] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.949710][T30040] veth19: entered allmulticast mode [ 768.024859][T30016] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.112255][T30049] bridge0: port 3(ip6gretap0) entered blocking state [ 768.142305][T30049] bridge0: port 3(ip6gretap0) entered disabled state [ 768.155581][T30049] ip6gretap0: entered allmulticast mode [ 768.166803][T30049] ip6gretap0: entered promiscuous mode [ 768.172838][T30049] bridge0: port 3(ip6gretap0) entered blocking state [ 768.179714][T30049] bridge0: port 3(ip6gretap0) entered forwarding state [ 768.200961][T30058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6346'. [ 768.347360][ T1111] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.382095][T30066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.503986][T12707] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.547337][T12707] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.592248][T12707] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.699815][T30086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6352'. [ 768.727261][T30086] netlink: 261 bytes leftover after parsing attributes in process `syz.4.6352'. [ 768.779076][T30087] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 768.823425][ T796] hid-generic 0005:15C2:0006.0002: item fetching failed at offset 0/1 [ 768.836092][ T796] hid-generic 0005:15C2:0006.0002: probe with driver hid-generic failed with error -22 [ 769.378169][T30129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6366'. [ 769.585180][T30134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6368'. [ 769.670435][T30138] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 769.682515][T12707] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 769.695814][T12707] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 769.708576][ T796] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 769.751734][T30141] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6370'. [ 769.835604][T11004] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 770.275799][T30169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6376'. [ 770.386673][T11004] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 771.974499][T30110] Set syz1 is full, maxelem 65536 reached [ 772.107933][T30179] bond2: entered promiscuous mode [ 772.114816][T30179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 772.694712][T30141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 772.934523][T30196] __nla_validate_parse: 2 callbacks suppressed [ 772.934543][T30196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6385'. [ 772.970470][T30197] block nbd1: NBD_DISCONNECT [ 772.975143][T30197] block nbd1: Send disconnect failed -32 [ 772.990639][T30197] block nbd1: shutting down sockets [ 773.108543][T12690] vlan3: left promiscuous mode [ 773.120493][T12690] bridge0: port 3(vlan3) entered disabled state [ 773.137643][T12690] bridge_slave_1: left allmulticast mode [ 773.146707][T12690] bridge_slave_1: left promiscuous mode [ 773.162737][T12690] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.184578][T12690] bridge_slave_0: left promiscuous mode [ 773.196709][T12690] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.244815][T12690] pimreg: left allmulticast mode [ 773.306604][T30213] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 773.558001][T12690] bond6 (unregistering): (slave gretap2): Releasing backup interface [ 773.605887][T12690] bond3 (unregistering): (slave geneve3): Releasing active interface [ 773.624798][T12690] bond1 (unregistering): (slave geneve2): Releasing active interface [ 773.985407][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 774.145455][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 774.252213][T12690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.264842][T12690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.274611][T12690] bond0 (unregistering): Released all slaves [ 774.288126][T12690] bond1 (unregistering): Released all slaves [ 774.302939][T12690] bond2 (unregistering): Released all slaves [ 774.317971][T12690] bond3 (unregistering): Released all slaves [ 774.335097][T12690] bond4 (unregistering): Released all slaves [ 774.352729][T12690] bond5 (unregistering): Released all slaves [ 774.372788][T12690] bond6 (unregistering): (slave bond7): Releasing backup interface [ 774.398654][T12690] bond6 (unregistering): Released all slaves [ 774.413296][T12690] bond7 (unregistering): Released all slaves [ 774.428269][T30207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6388'. [ 774.437640][T30207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6388'. [ 774.437985][T30210] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 774.487953][T30230] syzkaller0: entered promiscuous mode [ 774.506264][T30230] syzkaller0: entered allmulticast mode [ 774.597091][T12690] : left promiscuous mode [ 774.815361][T12690] tipc: Left network mode [ 774.976965][T30273] netlink: 'syz.2.6401': attribute type 1 has an invalid length. [ 775.116563][T30277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6402'. [ 775.137773][T30273] bond11 (unregistering): Released all slaves [ 775.535400][T30245] ±÷ speed is unknown, defaulting to 1000 [ 775.648714][T30298] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6407'. [ 775.716589][T30298] bond0 (unregistering): left promiscuous mode [ 775.739423][T30298] bond_slave_0: left promiscuous mode [ 775.753600][T30298] bond_slave_1: left promiscuous mode [ 775.773788][T30298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.826637][T30298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.844752][T30298] bond0 (unregistering): Released all slaves [ 775.903249][T30299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6407'. [ 776.057029][T12707] smc: removing ib device syz1 [ 776.086301][T30311] x_tables: duplicate entry at hook 2 [ 776.097588][T30311] netlink: 'syz.4.6412': attribute type 3 has an invalid length. [ 776.106676][T30311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6412'. [ 776.199440][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.222120][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.253690][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.334971][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.349380][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.361793][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.368632][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.397225][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.403801][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.411011][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.442990][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.459364][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.529003][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.543810][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.595478][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.609672][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.619446][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.629501][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.636243][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.642716][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.649246][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.655809][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.662192][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.668975][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.675469][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.681939][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.688374][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.694831][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.702535][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.709354][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.715920][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.724139][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.730874][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.737529][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.743911][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.750420][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.789381][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.814441][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.835395][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.853697][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.871804][T30335] netlink: 'syz.3.6419': attribute type 1 has an invalid length. [ 776.880572][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.887998][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.898265][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.904684][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.919045][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.927574][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.948412][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.954884][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.961512][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.968343][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.974820][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.981875][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.992796][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.002057][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.009033][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.015562][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.022082][T30315] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.137398][T30335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 777.220399][T30340] bond1: (slave geneve2): making interface the new active one [ 777.267662][T30340] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 777.383900][T11370] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 777.404621][T11370] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 777.490393][T11370] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 777.502095][T11370] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 777.755623][T30356] IPv6: sit2: Disabled Multicast RS [ 777.765707][T30358] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6425'. [ 778.052828][T30370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6426'. [ 778.112667][T30372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6429'. [ 778.228772][T30376] netlink: 'syz.0.6430': attribute type 1 has an invalid length. [ 778.304112][T30376] bond10: entered promiscuous mode [ 778.310592][T30376] 8021q: adding VLAN 0 to HW filter on device bond10 [ 778.463566][T30379] 8021q: adding VLAN 0 to HW filter on device bond10 [ 778.494591][T30379] bond10: (slave wireguard10): The slave device specified does not support setting the MAC address [ 778.525050][T30379] bond10: (slave wireguard10): Setting fail_over_mac to active for active-backup mode [ 778.583282][T30379] bond10: (slave wireguard10): making interface the new active one [ 778.597862][T30379] wireguard10: entered promiscuous mode [ 778.611030][T30379] bond10: (slave wireguard10): Enslaving as an active interface with an up link [ 779.003143][T30404] netlink: 'syz.0.6433': attribute type 1 has an invalid length. [ 779.040105][T30404] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6433'. [ 779.086375][T30407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6435'. [ 779.147003][T30404] tipc: Resetting bearer [ 779.587945][T30430] erspan1: entered allmulticast mode [ 779.648104][T30437] netlink: 'syz.0.6442': attribute type 2 has an invalid length. [ 779.659191][T30437] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6442'. [ 779.745435][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 779.939345][T30444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6446'. [ 779.948448][T30444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6446'. [ 780.282750][T30458] netlink: 'syz.4.6449': attribute type 2 has an invalid length. [ 780.337897][T30460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6450'. [ 780.368979][T30461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6450'. [ 780.414641][T30460] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6450'. [ 780.427199][T21442] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 780.448626][T21442] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 780.505346][T21442] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 780.525664][T21442] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 780.533415][T21442] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 780.840677][T30462] ±÷ speed is unknown, defaulting to 1000 [ 781.084937][T30478] netlink: 'syz.0.6453': attribute type 10 has an invalid length. [ 781.101069][T30480] netlink: 'syz.4.6454': attribute type 1 has an invalid length. [ 781.132550][T30480] netlink: 'syz.4.6454': attribute type 2 has an invalid length. [ 781.142473][T30480] netlink: 'syz.4.6454': attribute type 1 has an invalid length. [ 781.161394][T30480] netlink: 'syz.4.6454': attribute type 3 has an invalid length. [ 781.479601][T30483] netlink: 'syz.4.6455': attribute type 4 has an invalid length. [ 781.530563][T30485] IPv6: NLM_F_REPLACE set, but no existing node found! [ 781.599582][T12690] team0 (unregistering): Port device team_slave_1 removed [ 781.614787][T12690] team0 (unregistering): Port device team_slave_0 removed [ 781.727528][T30478] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 782.000756][T30501] netlink: 'syz.0.6457': attribute type 2 has an invalid length. [ 782.094230][T30462] chnl_net:caif_netlink_parms(): no params data found [ 782.134058][T30509] netlink: 'syz.1.6461': attribute type 1 has an invalid length. [ 782.203009][T30509] 8021q: adding VLAN 0 to HW filter on device bond3 [ 782.318074][T30462] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.325695][T30462] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.332926][T30462] bridge_slave_0: entered allmulticast mode [ 782.343829][T30462] bridge_slave_0: entered promiscuous mode [ 782.354287][T30462] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.361779][T30462] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.369290][T30462] bridge_slave_1: entered allmulticast mode [ 782.382824][T30462] bridge_slave_1: entered promiscuous mode [ 782.420404][T30462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.433188][T30462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.474827][T30462] team0: Port device team_slave_0 added [ 782.484048][T30462] team0: Port device team_slave_1 added [ 782.518170][T30462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.525394][T30462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.552084][T30462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.568058][T30462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.578575][T30462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.611977][T30462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.706261][T21442] Bluetooth: hci4: command tx timeout [ 782.721167][T30462] hsr_slave_0: entered promiscuous mode [ 782.728325][T30462] hsr_slave_1: entered promiscuous mode [ 782.734773][T30462] debugfs: 'hsr0' already exists in 'hsr' [ 782.744558][T30462] Cannot create hsr debugfs directory [ 782.887655][T12690] IPVS: stop unused estimator thread 0... [ 782.945454][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 783.169907][T12690] team0: left allmulticast mode [ 783.178033][T12690] team_slave_0: left allmulticast mode [ 783.186281][T12690] team_slave_1: left allmulticast mode [ 783.198868][T12690] team0: left promiscuous mode [ 783.203679][T12690] team_slave_0: left promiscuous mode [ 783.210204][T12690] team_slave_1: left promiscuous mode [ 783.217996][T12690] bridge0: port 4(team0) entered disabled state [ 783.229072][T12690] vlan2: left promiscuous mode [ 783.234086][T12690] bridge0: port 3(vlan2) entered disabled state [ 783.242456][T12690] bridge_slave_1: left allmulticast mode [ 783.248275][T12690] bridge_slave_1: left promiscuous mode [ 783.254071][T12690] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.263841][T12690] bridge_slave_0: left promiscuous mode [ 783.269760][T12690] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.289733][T12690] dvmrp6: left allmulticast mode [ 783.323702][T12690] tipc: Disabling bearer [ 783.455513][T12690] bond8 (unregistering): (slave geneve2): Releasing active interface [ 783.660355][T12690] team0: Port device bridge5 removed [ 783.719915][T12690] bond1 (unregistering): Released all slaves [ 783.738946][T12690] bond2 (unregistering): Released all slaves [ 783.754274][T12690] bond3 (unregistering): Released all slaves [ 783.770050][T12690] bond4 (unregistering): Released all slaves [ 783.790227][T12690] bond5 (unregistering): Released all slaves [ 783.811894][T12690] bond6 (unregistering): (slave veth7): Releasing active interface [ 783.821740][T12690] bond6 (unregistering): Released all slaves [ 783.841678][T12690] bond7 (unregistering): Released all slaves [ 783.857165][T12690] bond8 (unregistering): Released all slaves [ 783.871314][T12690] bond9 (unregistering): Released all slaves [ 783.888806][T12690] bond10 (unregistering): (slave vcan0): Releasing backup interface [ 783.896973][T12690] vcan0: left promiscuous mode [ 783.902993][T12690] bond10 (unregistering): Released all slaves [ 784.055467][T12690] !: left promiscuous mode [ 784.084443][ T29] audit: type=1107 audit(1775784505.318:24): pid=30525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Äœ©sñH– g' [ 784.149679][T30531] sctp: [Deprecated]: syz.1.6465 (pid 30531) Use of int in max_burst socket option. [ 784.149679][T30531] Use struct sctp_assoc_value instead [ 784.165791][T12690] tipc: Disabling bearer [ 784.173559][T12690] tipc: Left network mode [ 784.289646][T30532] netlink: 'syz.1.6465': attribute type 2 has an invalid length. [ 784.786151][T21442] Bluetooth: hci4: command tx timeout [ 784.830788][T30492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 784.890888][T30462] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 784.919916][T30462] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 784.990960][T30462] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 785.027902][T30462] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 785.490533][T30462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.560241][T30462] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.733708][T30462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 785.813703][T30462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 785.867667][T12696] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.874846][T12696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.885093][T12696] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.892302][T12696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.963717][T12690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.089058][T30555] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 786.391386][T30582] xt_TCPMSS: Only works on TCP SYN packets [ 786.519813][T12690] team0 (unregistering): Port device team_slave_1 removed [ 786.544524][T12690] team0 (unregistering): Port device team_slave_0 removed [ 786.721503][T12701] smc: removing ib device syz0 [ 786.873664][T21442] Bluetooth: hci4: command tx timeout [ 787.105369][T30591] __nla_validate_parse: 2 callbacks suppressed [ 787.105386][T30591] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6478'. [ 787.124061][T30591] syzkaller0: entered promiscuous mode [ 787.131279][T30591] syzkaller0: entered allmulticast mode [ 787.174834][T30591] 0: reclassify loop, rule prio 0, protocol 700 [ 787.273912][T30599] netlink: 656 bytes leftover after parsing attributes in process `syz.3.6480'. [ 787.348095][T21442] Bluetooth: hci1: command 0x0401 tx timeout [ 787.799073][T30462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.077720][T30462] veth0_vlan: entered promiscuous mode [ 788.090556][T30462] veth1_vlan: entered promiscuous mode [ 788.314414][T30462] veth0_macvtap: entered promiscuous mode [ 788.381788][T30462] veth1_macvtap: entered promiscuous mode [ 788.478871][T30462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.524197][T30462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.733940][T11370] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.766292][ T1111] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.775073][ T1111] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.845888][T30641] tipc: Enabling of bearer rejected, already enabled [ 788.946194][T21442] Bluetooth: hci4: command tx timeout [ 788.975657][ T1111] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.203316][T30658] veth7: entered allmulticast mode [ 789.221597][T30662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6496'. [ 789.271527][T30662] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6496'. [ 789.338272][T30663] xt_TPROXY: Can be used only with -p tcp or -p udp [ 789.356312][T30662] macvlan0: entered promiscuous mode [ 789.438929][T30665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6497'. [ 789.467595][T30665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6497'. [ 789.715063][T12703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.743818][T12703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.897722][T12714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.908464][T12714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.529446][T12690] IPVS: stop unused estimator thread 0... [ 790.848724][T30708] netlink: 'syz.4.6511': attribute type 1 has an invalid length. [ 790.982439][T30708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 791.100202][T30718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6511'. [ 791.153695][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 791.166545][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 791.174594][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 791.182958][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 791.196337][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 791.206669][T30714] bond2: (slave veth5): Enslaving as an active interface with a down link [ 791.330004][T30708] bond2: (slave veth7): Enslaving as an active interface with a down link [ 791.396472][T30718] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 791.557026][T30730] syzkaller0: entered promiscuous mode [ 791.562768][T30730] syzkaller0: entered allmulticast mode [ 791.602421][T30740] netlink: 'syz.3.6518': attribute type 10 has an invalid length. [ 791.623759][T30740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6518'. [ 791.637027][T30741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6518'. [ 791.647870][T30741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6518'. [ 793.268724][T21442] Bluetooth: hci0: command tx timeout [ 793.599390][T30743] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 794.082058][T30723] chnl_net:caif_netlink_parms(): no params data found [ 794.278440][T30723] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.295681][T30723] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.324876][T30723] bridge_slave_0: entered allmulticast mode [ 794.338457][T30723] bridge_slave_0: entered promiscuous mode [ 794.349664][T30723] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.358003][T30723] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.377047][T30723] bridge_slave_1: entered allmulticast mode [ 794.385038][T30723] bridge_slave_1: entered promiscuous mode [ 794.473463][T30793] netlink: 'syz.4.6530': attribute type 2 has an invalid length. [ 794.522749][T30723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.556649][T30723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.659267][T30723] team0: Port device team_slave_0 added [ 794.677658][T30723] team0: Port device team_slave_1 added [ 794.758147][T30723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.794418][T30723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.852229][T30723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.912114][T30723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.926236][T30723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.994986][T30723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.149687][T30723] hsr_slave_0: entered promiscuous mode [ 795.167633][T30723] hsr_slave_1: entered promiscuous mode [ 795.183596][T30723] debugfs: 'hsr0' already exists in 'hsr' [ 795.196417][T30723] Cannot create hsr debugfs directory [ 795.335482][T30828] __nla_validate_parse: 128 callbacks suppressed [ 795.335501][T30828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6539'. [ 795.351213][T21442] Bluetooth: hci0: command tx timeout [ 795.379255][T30828] netlink: 'syz.1.6539': attribute type 2 has an invalid length. [ 795.393273][T30828] netlink: 'syz.1.6539': attribute type 1 has an invalid length. [ 795.418470][T30823] netlink: 'syz.4.6537': attribute type 2 has an invalid length. [ 795.450558][T30828] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6539'. [ 795.592559][T30841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6541'. [ 795.723470][T30723] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 795.771882][T30847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.819102][T30723] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 795.916497][T30723] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 796.143313][T30723] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 796.529091][T30723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 796.548509][T30723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 796.561968][T30723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 796.574855][T30723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 796.812703][T30723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.872731][T30723] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.901317][T30889] TCP: TCP_TX_DELAY enabled [ 796.909829][T12690] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.917081][T12690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.948803][T12690] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.956018][T12690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.981154][T30889] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6551'. [ 797.080670][T30723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 797.107465][T30894] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 797.113498][T30894] syzkaller1: linktype set to 805 [ 797.425354][T21442] Bluetooth: hci0: command tx timeout [ 797.698367][T30723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.840308][T30723] veth0_vlan: entered promiscuous mode [ 797.871214][T30723] veth1_vlan: entered promiscuous mode [ 797.967904][T30723] veth0_macvtap: entered promiscuous mode [ 798.008815][T30723] veth1_macvtap: entered promiscuous mode [ 798.115363][T30723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.169148][T30723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.218972][T30936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6562'. [ 798.235359][T12690] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.249553][T12690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.272750][T30936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6562'. [ 798.283460][T12690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.321717][T12690] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.607525][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.638376][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.726298][T30950] netlink: 'syz.3.6566': attribute type 21 has an invalid length. [ 798.761563][T30950] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6566'. [ 798.771644][T30950] netlink: 'syz.3.6566': attribute type 1 has an invalid length. [ 798.833655][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.854473][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.976575][T30957] veth3: entered allmulticast mode [ 799.463588][T30982] tipc: Started in network mode [ 799.497861][T30982] tipc: Node identity 2eb37d9d392, cluster identity 4711 [ 799.508957][T21442] Bluetooth: hci0: command tx timeout [ 799.525041][T30982] tipc: Enabled bearer , priority 0 [ 799.563624][T30992] vxcan2: entered allmulticast mode [ 799.620839][T30987] syzkaller0: entered promiscuous mode [ 799.633274][T30987] syzkaller0: entered allmulticast mode [ 799.753051][T30982] tipc: Resetting bearer [ 799.810627][T30980] tipc: Resetting bearer [ 799.833995][T30998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6578'. [ 799.846407][T31003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6579'. [ 799.938490][T30980] tipc: Disabling bearer [ 799.986581][T31004] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6580'. [ 799.996204][T31004] netlink: 'syz.2.6580': attribute type 1 has an invalid length. [ 800.195706][T31013] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 800.329853][T30984] lec:lec_atm_close: lec0: Shut down! [ 800.379061][T31020] __nla_validate_parse: 2 callbacks suppressed [ 800.379082][T31020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6585'. [ 800.421844][T31020] ip6t_srh: unknown srh invflags BA61 [ 801.000296][T31056] netlink: 'syz.3.6597': attribute type 3 has an invalid length. [ 801.061256][T31055] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 801.124586][T31064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6593'. [ 801.213174][T31067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6598'. [ 801.234816][T31074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6600'. [ 801.244638][T31067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6598'. [ 801.430061][T31081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6603'. [ 801.462593][T31081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6603'. [ 801.487922][T31086] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6604'. [ 801.501894][T31089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6605'. [ 801.512829][T31082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6603'. [ 801.554912][T31086] ieee802154 phy1 wpan1: encryption failed: -22 [ 801.744458][T31100] Bluetooth: MGMT ver 1.23 [ 802.020915][T31116] bond2: option ad_user_port_key: invalid value (65535) [ 802.028360][T31116] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 802.059416][T31116] bond2 (unregistering): Released all slaves [ 802.543125][T31154] pim6reg: entered allmulticast mode [ 802.581011][T31154] pim6reg: left allmulticast mode [ 802.846651][T31193] xfrm1: entered allmulticast mode [ 803.774270][T31285] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.782034][T31285] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.323115][T31378] Bluetooth: MGMT ver 1.23 [ 804.401123][ T150] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.416962][ T150] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.426169][ T150] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.434573][ T150] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.546332][T31388] macvlan0: entered promiscuous mode [ 804.551987][T31388] macvlan0: entered allmulticast mode [ 804.557621][T31388] veth1_vlan: entered allmulticast mode [ 804.622634][T31388] veth1_vlan: left allmulticast mode [ 804.669957][T31398] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 804.684476][T31400] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 805.291536][T31424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.450964][T31431] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 805.477070][T11004] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 805.490571][T31434] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 805.623673][T31443] __nla_validate_parse: 20 callbacks suppressed [ 805.623694][T31443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6659'. [ 805.639713][T31439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6659'. [ 805.660553][T31439] vlan2: entered promiscuous mode [ 805.679344][T31439] veth0_to_bridge: entered promiscuous mode [ 805.704545][T31445] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6660'. [ 805.716609][T31439] team0: Device vlan2 is up. Set it down before adding it as a team port [ 805.745344][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 805.753396][ C0] lec:lec_tx_timeout: lec0 [ 805.792104][ T796] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 805.809486][T31443] vlan2: entered promiscuous mode [ 805.816584][T31443] team0: Device vlan2 is up. Set it down before adding it as a team port [ 805.920798][T31454] xt_cgroup: xt_cgroup: no path or classid specified [ 805.931335][T31447] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6661'. [ 805.947832][T31447] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6661'. [ 805.977851][T31455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6662'. [ 806.013123][T31455] vlan2: entered promiscuous mode [ 806.020073][T31455] geneve1: entered promiscuous mode [ 806.025723][T31455] vlan2: entered allmulticast mode [ 806.041692][T31455] geneve1: entered allmulticast mode [ 806.187403][T31457] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6664'. [ 806.208950][T31459] tipc: Enabling of bearer rejected, failed to enable media [ 806.385638][ T5834] Bluetooth: hci2: command 0x0401 tx timeout [ 806.386639][T21442] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 806.455822][T31471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6669'. [ 806.506231][T31471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6669'. [ 806.580487][T31471] vlan3: entered promiscuous mode [ 806.625380][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 806.653934][T31475] veth3: entered allmulticast mode [ 806.750640][T31454] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 806.772337][T31479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6673'. [ 807.041225][T31470] vxcan1: entered promiscuous mode [ 807.212389][T31502] FAULT_INJECTION: forcing a failure. [ 807.212389][T31502] name failslab, interval 1, probability 0, space 0, times 0 [ 807.244888][T31502] CPU: 1 UID: 0 PID: 31502 Comm: syz.2.6680 Not tainted syzkaller #0 PREEMPT(full) [ 807.244916][T31502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 807.244930][T31502] Call Trace: [ 807.244938][T31502] [ 807.244947][T31502] dump_stack_lvl+0xe8/0x150 [ 807.244981][T31502] should_fail_ex+0x412/0x560 [ 807.245019][T31502] should_failslab+0xa8/0x100 [ 807.245048][T31502] __kmalloc_cache_noprof+0x88/0x660 [ 807.245074][T31502] ? __hw_addr_add_ex+0x1dc/0x650 [ 807.245111][T31502] __hw_addr_add_ex+0x1dc/0x650 [ 807.245142][T31502] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 807.245182][T31502] dev_addr_init+0x15e/0x240 [ 807.245215][T31502] ? __pfx_dev_addr_init+0x10/0x10 [ 807.245246][T31502] ? alloc_netdev_mqs+0xa6/0x11b0 [ 807.245274][T31502] alloc_netdev_mqs+0x2b1/0x11b0 [ 807.245292][T31502] ? __pfx_veth_setup+0x10/0x10 [ 807.245318][T31502] rtnl_create_link+0x31f/0xd70 [ 807.245344][T31502] veth_newlink+0x2d0/0xb70 [ 807.245371][T31502] ? __pfx_veth_newlink+0x10/0x10 [ 807.245388][T31502] ? alloc_netdev_mqs+0xc89/0x11b0 [ 807.245405][T31502] ? rtnl_create_link+0x31f/0xd70 [ 807.245420][T31502] ? rtnl_newlink_create+0x277/0xb70 [ 807.245459][T31502] ? rtnl_newlink+0x1666/0x1be0 [ 807.245480][T31502] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 807.245503][T31502] ? netlink_rcv_skb+0x232/0x4b0 [ 807.245524][T31502] ? netlink_unicast+0x80f/0x9b0 [ 807.245543][T31502] ? netlink_sendmsg+0x813/0xb40 [ 807.245564][T31502] ? ____sys_sendmsg+0x972/0x9f0 [ 807.245600][T31502] ? do_syscall_64+0x14d/0xf80 [ 807.245627][T31502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.245714][T31502] ? validate_linkmsg+0x765/0x950 [ 807.245745][T31502] ? __pfx_veth_newlink+0x10/0x10 [ 807.245767][T31502] rtnl_newlink_create+0x329/0xb70 [ 807.245800][T31502] ? __mutex_lock+0x5ac/0x1300 [ 807.245835][T31502] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 807.245874][T31502] ? __pfx___mutex_lock+0x10/0x10 [ 807.245916][T31502] ? ns_capable+0x89/0xe0 [ 807.245948][T31502] rtnl_newlink+0x1666/0x1be0 [ 807.245991][T31502] ? __pfx_rtnl_newlink+0x10/0x10 [ 807.246014][T31502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.246116][T31502] ? __local_bh_enable_ip+0xd0/0x130 [ 807.246144][T31502] ? lockdep_hardirqs_on+0x7a/0x110 [ 807.246171][T31502] ? __dev_queue_xmit+0x2b6/0x3920 [ 807.246200][T31502] ? __local_bh_enable_ip+0xd0/0x130 [ 807.246225][T31502] ? __dev_queue_xmit+0x2b6/0x3920 [ 807.246284][T31502] ? __pfx_rtnl_newlink+0x10/0x10 [ 807.246309][T31502] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 807.246338][T31502] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 807.246362][T31502] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 807.246385][T31502] ? ref_tracker_free+0x693/0x840 [ 807.246404][T31502] ? __copy_skb_header+0xa3/0x4a0 [ 807.246436][T31502] ? __pfx_ref_tracker_free+0x10/0x10 [ 807.246469][T31502] netlink_rcv_skb+0x232/0x4b0 [ 807.246495][T31502] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 807.246522][T31502] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 807.246559][T31502] ? netlink_deliver_tap+0x2e/0x1b0 [ 807.246592][T31502] netlink_unicast+0x80f/0x9b0 [ 807.246625][T31502] ? __pfx_netlink_unicast+0x10/0x10 [ 807.246649][T31502] ? netlink_sendmsg+0x650/0xb40 [ 807.246672][T31502] ? skb_put+0x11b/0x210 [ 807.246703][T31502] netlink_sendmsg+0x813/0xb40 [ 807.246756][T31502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.246787][T31502] ? aa_sock_msg_perm+0xf1/0x1b0 [ 807.246822][T31502] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 807.246851][T31502] ____sys_sendmsg+0x972/0x9f0 [ 807.246899][T31502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.246942][T31502] ? import_iovec+0x73/0xa0 [ 807.246972][T31502] ___sys_sendmsg+0x2a5/0x360 [ 807.247008][T31502] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.247080][T31502] ? __fget_files+0x2a/0x420 [ 807.247100][T31502] ? __fget_files+0x3a0/0x420 [ 807.247132][T31502] __x64_sys_sendmsg+0x1bd/0x2a0 [ 807.247167][T31502] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 807.247210][T31502] ? __pfx_ksys_write+0x10/0x10 [ 807.247249][T31502] do_syscall_64+0x14d/0xf80 [ 807.247278][T31502] ? trace_irq_disable+0x3b/0x150 [ 807.247297][T31502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.247319][T31502] ? clear_bhb_loop+0x40/0x90 [ 807.247347][T31502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.247369][T31502] RIP: 0033:0x7f105319c819 [ 807.247391][T31502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.247409][T31502] RSP: 002b:00007f1053fd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.247433][T31502] RAX: ffffffffffffffda RBX: 00007f1053415fa0 RCX: 00007f105319c819 [ 807.247448][T31502] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 807.247462][T31502] RBP: 00007f1053fd3090 R08: 0000000000000000 R09: 0000000000000000 [ 807.247476][T31502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 807.247488][T31502] R13: 00007f1053416038 R14: 00007f1053415fa0 R15: 00007ffe16742b68 [ 807.247523][T31502] [ 808.025544][T12163] lec:lec_start_xmit: lec0:No lecd attached [ 808.465367][T21442] Bluetooth: hci2: command 0x0401 tx timeout [ 808.553914][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.569481][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.578694][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 808.865685][T31554] netlink: 'syz.4.6694': attribute type 4 has an invalid length. [ 809.181930][T31566] gre0: entered promiscuous mode [ 809.219265][T31566] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 810.042269][T31568] vlan2: entered promiscuous mode [ 810.049151][T31568] bridge0: entered promiscuous mode [ 810.067876][T31570] team0: Device ipvlan2 failed to register rx_handler [ 811.131526][T31524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 811.141617][T31531] netlink: 'syz.1.6688': attribute type 1 has an invalid length. [ 811.153906][T31531] __nla_validate_parse: 6 callbacks suppressed [ 811.153922][T31531] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6688'. [ 811.310868][T31579] netlink: 'syz.2.6706': attribute type 10 has an invalid length. [ 811.361342][T31580] netlink: 'syz.2.6706': attribute type 10 has an invalid length. [ 811.379806][T31579] team0: Port device dummy0 added [ 811.422035][T31580] team0: Port device dummy0 removed [ 811.556112][T31594] syzkaller1: entered promiscuous mode [ 811.564898][T31594] syzkaller1: entered allmulticast mode [ 811.594135][T31594] netlink: 'syz.0.6708': attribute type 1 has an invalid length. [ 811.612689][T31594] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 811.693909][T31608] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.6713'. [ 811.797301][T31615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.837952][T31615] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6716'. [ 811.942338][T31619] batadv_slave_1: entered promiscuous mode [ 812.034536][T31630] batadv_slave_1: left promiscuous mode [ 812.346787][T31636] netlink: 'syz.1.6722': attribute type 1 has an invalid length. [ 812.383722][T31636] 8021q: adding VLAN 0 to HW filter on device bond4 [ 812.400513][T31636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6722'. [ 812.428765][T31636] vlan4: entered allmulticast mode [ 812.434203][T31636] veth0_to_bond: entered allmulticast mode [ 812.446269][T31636] bond4: (slave vlan4): making interface the new active one [ 812.455622][T31636] bond4: (slave vlan4): Enslaving as an active interface with an up link [ 812.672212][T31651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6726'. [ 812.682964][T31651] netlink: 'syz.4.6726': attribute type 5 has an invalid length. [ 812.691507][T31651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6726'. [ 812.709813][T31651] geneve2: entered promiscuous mode [ 812.715314][T31651] geneve2: entered allmulticast mode [ 812.722648][T11370] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 812.734267][T11370] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 812.775493][T11370] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 812.783672][T11370] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 812.996670][T31664] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6728'. [ 813.222051][T31661] syzkaller0: entered promiscuous mode [ 813.247203][T31661] syzkaller0: entered allmulticast mode [ 813.485922][T31683] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6736'. [ 813.503921][T31683] netlink: 'syz.3.6736': attribute type 3 has an invalid length. [ 813.745300][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms [ 813.753398][ C0] lec:lec_tx_timeout: lec0 [ 813.759627][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 814.305863][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 815.614245][T31712] netlink: 'syz.3.6746': attribute type 4 has an invalid length. [ 815.630296][T31713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6744'. [ 815.680584][T31712] netlink: 'syz.3.6746': attribute type 4 has an invalid length. [ 815.739190][T31716] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 816.073650][T31746] netlink: 'syz.3.6758': attribute type 8 has an invalid length. [ 816.166775][T31747] bond0: entered promiscuous mode [ 816.171928][T31747] bond_slave_0: entered promiscuous mode [ 816.209122][T31747] bond_slave_1: entered promiscuous mode [ 816.248575][T31747] batadv0: entered promiscuous mode [ 816.254985][T31751] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6761'. [ 816.276277][T31747] debugfs: 'hsr1' already exists in 'hsr' [ 816.288157][T31751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6761'. [ 816.306559][T31747] Cannot create hsr debugfs directory [ 816.324283][T31747] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 816.339258][T31743] netlink: 'syz.4.6757': attribute type 3 has an invalid length. [ 816.355638][T31743] netlink: 'syz.4.6757': attribute type 3 has an invalid length. [ 816.415109][T31749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6760'. [ 816.634791][T31768] atomic_op ffff8880ad752198 conn xmit_atomic 0000000000000000 [ 816.759812][T31773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 816.834203][T31781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6770'. [ 816.934406][T31785] syzkaller0: entered promiscuous mode [ 816.948755][T31785] syzkaller0: entered allmulticast mode [ 817.294690][T31806] bridge_slave_0: left allmulticast mode [ 817.311573][T31806] bridge_slave_0: left promiscuous mode [ 817.326345][T31806] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.341273][T31806] bridge_slave_1: left allmulticast mode [ 817.350379][T31806] bridge_slave_1: left promiscuous mode [ 817.357058][T31806] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.376468][T31806] bond0: (slave bond_slave_0): Releasing backup interface [ 817.398907][T31806] bond0: (slave bond_slave_1): Releasing backup interface [ 817.440411][T31806] team0: Failed to send options change via netlink (err -105) [ 817.451958][T31806] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 817.481465][T31806] team0: Port device team_slave_0 removed [ 817.514778][T31806] team0: Failed to send options change via netlink (err -105) [ 817.587704][T31806] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 817.597954][T31806] team0: Port device team_slave_1 removed [ 817.606303][T31806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.638272][T31806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.662102][T31806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.714521][T31806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.761500][T31806] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 817.814298][T31808] team0: Mode changed to "broadcast" [ 818.169251][T31828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6782'. [ 818.179557][T31830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6778'. [ 818.230698][T31834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6785'. [ 818.243275][T31837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6785'. [ 818.401208][T31848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6787'. [ 818.593233][T31862] syzkaller0: entered promiscuous mode [ 818.612895][T31862] syzkaller0: entered allmulticast mode [ 818.623976][T31862] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 818.785790][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 818.793902][ C0] lec:lec_tx_timeout: lec0 [ 818.941401][T31893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6800'. [ 819.725874][T31951] netlink: 'syz.1.6817': attribute type 13 has an invalid length. [ 820.905713][T32010] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 821.023410][T32012] bond1: option ad_actor_sys_prio: invalid value (0) [ 821.031113][T32012] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 821.051190][T32012] bond1 (unregistering): Released all slaves [ 821.101240][T32024] netlink: zone id is out of range [ 821.116324][T32024] netlink: del zone limit has 8 unknown bytes [ 821.457302][T32035] openvswitch: netlink: Flow key attr not present in new flow. [ 821.696710][T32045] __nla_validate_parse: 45 callbacks suppressed [ 821.696740][T32045] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6845'. [ 821.733627][T32049] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6847'. [ 821.756968][T32050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6848'. [ 821.769455][T32050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6848'. [ 821.782507][T32050] netlink: 580 bytes leftover after parsing attributes in process `syz.1.6848'. [ 836.228816][ T5834] Bluetooth: hci1: command 0x0401 tx timeout [ 841.081609][T12696] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 841.082047][T32086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6856'. [ 841.102929][T12696] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 841.160629][ T150] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 841.177941][T12696] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 841.258151][T11370] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.290053][T11370] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.301358][T11370] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.311086][T32096] syzkaller1: entered promiscuous mode [ 841.318285][T32096] syzkaller1: entered allmulticast mode [ 841.352194][T11370] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.397329][T32099] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6859'. [ 841.678494][T32118] netlink: 'syz.3.6863': attribute type 1 has an invalid length. [ 841.999561][T32139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6869'. [ 842.025480][T32139] openvswitch: netlink: Invalid VLAN frame [ 842.048994][T32124] pim6reg1: entered allmulticast mode [ 842.068017][T32141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6870'. [ 842.283976][T32152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6873'. [ 842.380437][T32162] netlink: 13 bytes leftover after parsing attributes in process `syz.2.6873'. [ 842.552972][T32167] netlink: 'syz.4.6876': attribute type 20 has an invalid length. [ 842.623066][T32167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6876'. [ 842.677665][T12696] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.677779][T32167] netlink: 'syz.4.6876': attribute type 20 has an invalid length. [ 842.698952][T32175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6878'. [ 842.708281][T32167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6876'. [ 842.725292][T32175] hsr_slave_0: left promiscuous mode [ 842.734217][T32175] hsr_slave_1: left promiscuous mode [ 842.772407][T12696] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.800273][T32177] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004 [ 842.806251][T12696] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.826730][T12696] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.936218][T32185] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 842.968573][T32187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6881'. [ 843.108222][T32193] macsec1: entered allmulticast mode [ 843.131551][T32193] macsec0: entered allmulticast mode [ 843.137568][T32193] veth1_macvtap: entered allmulticast mode [ 843.801163][T32236] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 843.827408][T32237] netlink: 'syz.3.6892': attribute type 1 has an invalid length. [ 844.994976][T32285] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.048727][T32285] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 845.124894][T32285] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.163283][T32285] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 845.257741][T32285] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.283574][T32285] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 845.419975][T32285] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.465665][T32285] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 845.769986][T12714] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 845.811051][T12714] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 845.914288][T12696] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 845.931408][T12696] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 845.973760][T12696] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 845.988324][T12696] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 846.000679][T32322] veth0_macvtap: left promiscuous mode [ 846.015404][T32322] veth0_macvtap: entered promiscuous mode [ 846.021240][T32322] veth0_macvtap: entered allmulticast mode [ 846.065017][T12696] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 846.074037][T12696] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 846.181246][T32324] __nla_validate_parse: 7 callbacks suppressed [ 846.181266][T32324] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6914'. [ 846.198369][T32324] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6914'. [ 846.210195][T32324] A link change request failed with some changes committed already. Interface ifb1 may have been left with an inconsistent configuration, please check. [ 846.375569][T32338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6916'. [ 846.420649][T32338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6916'. [ 846.491702][T32349] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6919'. [ 846.504334][T32351] netlink: 'syz.2.6916': attribute type 89 has an invalid length. [ 846.534299][T32338] netlink: 'syz.2.6916': attribute type 12 has an invalid length. [ 846.577759][T32338] netlink: 'syz.2.6916': attribute type 11 has an invalid length. [ 846.769157][T32363] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6924'. [ 846.804455][T32367] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6922'. [ 846.805935][T32363] openvswitch: netlink: Key type 30 is not supported [ 846.837758][T32368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6922'. [ 846.857833][T32363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6924'. [ 846.860867][T32357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6921'. [ 846.892440][T32371] syz_tun: entered promiscuous mode [ 846.910513][T32371] syz_tun: entered allmulticast mode [ 847.254014][T32395] netlink: 'syz.3.6928': attribute type 3 has an invalid length. [ 847.269536][T32393] netlink: 'syz.0.6930': attribute type 7 has an invalid length. [ 847.413763][T32400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.571080][T32400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.808217][T32419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 848.137252][T32433] SET target dimension over the limit! [ 848.752148][T32464] tc_dump_action: action bad kind [ 848.961603][T32480] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 849.068172][T32486] netlink: 'syz.3.6945': attribute type 1 has an invalid length. [ 849.079212][T32487] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 849.112344][T32487] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 849.360696][T32494] netlink: 'syz.1.6947': attribute type 1 has an invalid length. [ 849.631949][T32504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 850.385824][T11004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.499203][T32538] tipc: Started in network mode [ 850.504572][T32538] tipc: Node identity ac14140f, cluster identity 4711 [ 850.561883][T32538] tipc: New replicast peer: 255.255.255.255 [ 850.577475][T32538] tipc: Enabled bearer , priority 26 [ 850.590325][T12714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.944753][T32582] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 851.125125][T32587] netlink: 'syz.3.6965': attribute type 10 has an invalid length. [ 851.221746][T32603] __nla_validate_parse: 14 callbacks suppressed [ 851.221766][T32603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6967'. [ 851.238361][T32590] netlink: 'syz.3.6965': attribute type 10 has an invalid length. [ 851.319036][T32587] team0: Failed to send options change via netlink (err -105) [ 851.347274][T11020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.349569][T32587] team0: Port device dummy0 added [ 851.392274][T32590] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 851.427725][T32590] team0: Failed to send options change via netlink (err -105) [ 851.451697][T32590] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 851.475607][T32590] team0: Port device dummy0 removed [ 851.575897][T11010] tipc: Node number set to 2886997007 [ 851.585697][T21442] Bluetooth: hci5: command 0x0406 tx timeout [ 851.653645][ T5490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.737753][T11370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.848414][T32633] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.6974'. [ 851.950103][T32640] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6976'. [ 851.964456][T32640] IPv6: sit1: Disabled Multicast RS [ 851.979986][T32640] sit1: entered allmulticast mode [ 852.035065][T32643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.106141][T32645] bond3: option xmit_hash_policy: invalid value (10) [ 852.122781][T32645] bond3 (unregistering): Released all slaves [ 852.552059][T32680] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6988'. [ 852.627128][T22329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.728681][ T5490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.752928][T32690] sctp: [Deprecated]: syz.4.6991 (pid 32690) Use of int in max_burst socket option. [ 852.752928][T32690] Use struct sctp_assoc_value instead [ 853.034311][T32709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6996'. [ 853.883850][ T303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7014'. [ 853.901511][ T301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7013'. [ 853.977730][ T311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7013'. [ 854.096340][ T301] team1: entered promiscuous mode [ 854.101653][ T301] team1: entered allmulticast mode [ 854.122880][ T301] 8021q: adding VLAN 0 to HW filter on device team1 [ 854.235127][ T303] bridge0: port 4(syz_tun) entered blocking state [ 854.249874][ T303] bridge0: port 4(syz_tun) entered disabled state [ 854.270024][ T303] syz_tun: entered allmulticast mode [ 854.299595][ T303] syz_tun: entered promiscuous mode [ 854.315979][ T303] bridge0: port 4(syz_tun) entered blocking state [ 854.322596][ T303] bridge0: port 4(syz_tun) entered forwarding state [ 854.392835][ T311] team2: entered promiscuous mode [ 854.410863][ T311] team2: entered allmulticast mode [ 854.424821][ T311] 8021q: adding VLAN 0 to HW filter on device team2 [ 854.677461][T32759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.709034][T32759] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.740354][T32759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 854.853374][ T329] netlink: 'syz.0.7018': attribute type 1 has an invalid length. [ 855.118378][ T346] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7022'. [ 855.127763][ T346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7022'. [ 855.177163][ T329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 855.236526][ T334] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 855.262326][ T348] xt_hashlimit: size too large, truncated to 1048576 [ 855.300148][T32643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.406540][ T335] bond1: (slave veth3): Enslaving as an active interface with a down link [ 855.516243][ T329] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 855.532168][ T329] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 855.750133][ T364] netlink: 'syz.2.7025': attribute type 22 has an invalid length. [ 855.819002][ T364] bond2: option resend_igmp: invalid value (2878) [ 855.828366][ T364] bond2: option resend_igmp: allowed values 0 - 255 [ 855.843380][ T364] bond2 (unregistering): Released all slaves [ 856.013884][ T381] syzkaller1: entered promiscuous mode [ 856.027852][ T381] syzkaller1: entered allmulticast mode [ 856.038428][ T382] netlink: 'syz.0.7030': attribute type 1 has an invalid length. [ 856.054756][ T384] gre0: left promiscuous mode [ 856.711677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.729421][ T5490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.008674][ T402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.263369][ T402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.464272][ T353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 858.849819][ T419] __nla_validate_parse: 3 callbacks suppressed [ 858.849839][ T419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7036'. [ 859.327289][ T419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7036'. [ 859.339973][ T419] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7036'. [ 859.357843][ T419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7036'. [ 859.375682][ T419] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7036'. [ 859.898167][ T402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.729731][ T5490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.745467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.899759][ T402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.833000][T32643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.900038][ T402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.731032][ T5490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.785747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.988439][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.000006][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 870.006889][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 870.013186][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.825492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.123756][ T474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7043'. [ 872.215577][ T479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7046'. [ 872.266305][ T477] netlink: 'syz.2.7045': attribute type 1 has an invalid length. [ 872.291139][ T477] netlink: 'syz.2.7045': attribute type 3 has an invalid length. [ 872.327614][ T477] netlink: 'syz.2.7045': attribute type 1 has an invalid length. [ 872.335917][ T477] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7045'. [ 872.345057][ T477] NCSI netlink: No device for ifindex 33554432 [ 872.404218][ T479] 8021q: adding VLAN 0 to HW filter on device bond3 [ 872.447765][ T487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7047'. [ 872.505454][ T482] netlink: 320 bytes leftover after parsing attributes in process `syz.3.7047'. [ 872.516431][ T482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7047'. [ 872.525982][ T482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7047'. [ 872.527428][ T487] nbd: socks must be embedded in a SOCK_ITEM attr [ 872.537556][ T482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7047'. [ 872.556428][ T484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7047'. [ 872.587085][ T484] nbd: device at index 64 is going down [ 872.632759][ T486] macsec1: entered allmulticast mode [ 872.685967][ T486] bond3: entered allmulticast mode [ 872.692943][ T490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7048'. [ 872.771726][ T486] bond3: left allmulticast mode [ 872.802981][ T491] udevd[491]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 872.901864][ T499] netlink: 'syz.1.7049': attribute type 1 has an invalid length. [ 873.420916][ T520] bond6: (slave bridge3): making interface the new active one [ 873.433810][ T520] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 874.119613][ T540] netlink: 'syz.4.7059': attribute type 13 has an invalid length. [ 874.176274][ T540] gretap0: refused to change device tx_queue_len [ 874.183960][ T540] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 874.253822][ C1] ================================================================== [ 874.261973][ C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 874.270019][ C1] Read of size 2 at addr ffff88814ffe5a74 by task syz.1.7062/546 [ 874.277792][ C1] [ 874.280144][ C1] CPU: 1 UID: 0 PID: 546 Comm: syz.1.7062 Not tainted syzkaller #0 PREEMPT(full) [ 874.280168][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 874.280182][ C1] Call Trace: [ 874.280190][ C1] [ 874.280199][ C1] dump_stack_lvl+0xe8/0x150 [ 874.280229][ C1] print_report+0xba/0x230 [ 874.280252][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 874.280282][ C1] kasan_report+0x117/0x150 [ 874.280306][ C1] ? __pskb_pull_tail+0x1058/0x1690 [ 874.280328][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 874.280363][ C1] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 874.280406][ C1] __dev_queue_xmit+0x29a/0x3920 [ 874.280442][ C1] ? ebt_do_table+0x2665/0x2830 [ 874.280467][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 874.280492][ C1] ? ebt_do_table+0x2665/0x2830 [ 874.280519][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 874.280560][ C1] ? br_nf_post_routing+0x219/0xfe0 [ 874.280589][ C1] br_dev_queue_push_xmit+0x370/0x4b0 [ 874.280611][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 874.280632][ C1] NF_HOOK+0x360/0x3f0 [ 874.280652][ C1] ? NF_HOOK+0xa2/0x3f0 [ 874.280671][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 874.280691][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 874.280717][ C1] br_forward_finish+0xd3/0x130 [ 874.280736][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 874.280758][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 874.280779][ C1] NF_HOOK+0x360/0x3f0 [ 874.280800][ C1] ? NF_HOOK+0xa2/0x3f0 [ 874.280818][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 874.280839][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 874.280862][ C1] ? __skb_clone+0x483/0x7a0 [ 874.280886][ C1] ? br_handle_vlan+0x61/0x530 [ 874.280916][ C1] __br_forward+0x397/0x540 [ 874.280935][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 874.280958][ C1] br_flood+0x6ee/0xb80 [ 874.280987][ C1] br_handle_frame_finish+0x1521/0x1c80 [ 874.281017][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 874.281040][ C1] ? net_generic+0x1e/0x240 [ 874.281061][ C1] ? net_generic+0x1e/0x240 [ 874.281080][ C1] ? net_generic+0x1e/0x240 [ 874.281101][ C1] ? br_cfm_parse+0xf00/0x1790 [ 874.281122][ C1] ? br_nf_pre_routing+0xc4e/0x14c0 [ 874.281149][ C1] br_handle_frame+0x80f/0x1510 [ 874.281178][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 874.281202][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 874.281225][ C1] ? packet_rcv+0x175/0x1730 [ 874.281253][ C1] ? deliver_skb+0x137/0x230 [ 874.281277][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 874.281300][ C1] __netif_receive_skb_core+0x98f/0x31a0 [ 874.281336][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 874.281369][ C1] ? kernel_text_address+0xa5/0xe0 [ 874.281397][ C1] ? __kernel_text_address+0xd/0x30 [ 874.281417][ C1] ? unwind_get_return_address+0x4d/0x90 [ 874.281452][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 874.281482][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 874.281524][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 874.281558][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 874.281585][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 874.281608][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 874.281635][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 874.281665][ C1] napi_complete_done+0x299/0x730 [ 874.281691][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 874.281715][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 874.281739][ C1] gro_cell_poll+0x5a9/0x5d0 [ 874.281765][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 874.281788][ C1] __napi_poll+0xae/0x340 [ 874.281809][ C1] ? skb_defer_free_flush+0x233/0x260 [ 874.281834][ C1] net_rx_action+0x627/0xf70 [ 874.281869][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 874.281902][ C1] ? sched_clock+0x3f/0x60 [ 874.281933][ C1] handle_softirqs+0x22a/0x870 [ 874.281962][ C1] ? do_softirq+0x76/0xd0 [ 874.281991][ C1] ? tun_rx_batched+0x185/0x790 [ 874.282017][ C1] do_softirq+0x76/0xd0 [ 874.282043][ C1] [ 874.282051][ C1] [ 874.282060][ C1] __local_bh_enable_ip+0xf8/0x130 [ 874.282088][ C1] ? tun_rx_batched+0x185/0x790 [ 874.282113][ C1] tun_rx_batched+0x617/0x790 [ 874.282143][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 874.282175][ C1] ? tun_get_user+0x23c7/0x3ed0 [ 874.282201][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 874.282230][ C1] ? tun_get_user+0x26dc/0x3ed0 [ 874.282254][ C1] tun_get_user+0x2aeb/0x3ed0 [ 874.282292][ C1] ? aa_file_perm+0x50e/0x15e0 [ 874.282316][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 874.282340][ C1] ? aa_file_perm+0x192/0x15e0 [ 874.282366][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 874.282405][ C1] ? preempt_schedule_common+0x82/0xd0 [ 874.282435][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 874.282459][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 874.282484][ C1] ? tun_get+0x1c/0x2f0 [ 874.282511][ C1] ? tun_get+0x1c/0x2f0 [ 874.282535][ C1] ? tun_get+0x1c/0x2f0 [ 874.282560][ C1] tun_chr_write_iter+0x113/0x200 [ 874.282586][ C1] vfs_write+0x61d/0xb90 [ 874.282612][ C1] ? __pfx_vfs_write+0x10/0x10 [ 874.282641][ C1] ? __fget_files+0x2a/0x420 [ 874.282665][ C1] ksys_write+0x150/0x270 [ 874.282690][ C1] ? __pfx_ksys_write+0x10/0x10 [ 874.282720][ C1] do_syscall_64+0x14d/0xf80 [ 874.282748][ C1] ? trace_irq_disable+0x3b/0x150 [ 874.282777][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.282797][ C1] ? clear_bhb_loop+0x40/0x90 [ 874.282818][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.282837][ C1] RIP: 0033:0x7f08d399c819 [ 874.282854][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.282889][ C1] RSP: 002b:00007f08d48de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 874.282911][ C1] RAX: ffffffffffffffda RBX: 00007f08d3c15fa0 RCX: 00007f08d399c819 [ 874.282926][ C1] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000008 [ 874.282939][ C1] RBP: 00007f08d3a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 874.282953][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.282965][ C1] R13: 00007f08d3c16038 R14: 00007f08d3c15fa0 R15: 00007ffdaaad39e8 [ 874.282990][ C1] [ 874.282997][ C1] [ 874.888759][ C1] The buggy address belongs to the physical page: [ 874.895196][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14ffe5 [ 874.904074][ C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 874.911296][ C1] raw: 057ff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 874.919897][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 874.928495][ C1] page dumped because: kasan: bad access detected [ 874.934925][ C1] page_owner tracks the page as freed [ 874.940298][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x4069c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO|__GFP_RETRY_MAYFAIL|__GFP_ACCOUNT), pid 29339, tgid 29338 (syz.3.6151), ts 744893675883, free_ts 746847051097 [ 874.963231][ C1] post_alloc_hook+0x231/0x280 [ 874.968017][ C1] get_page_from_freelist+0x24dc/0x2580 [ 874.973586][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 874.979436][ C1] alloc_pages_mpol+0x232/0x4a0 [ 874.984307][ C1] alloc_pages_noprof+0xa8/0x1a0 [ 874.989263][ C1] __vmalloc_node_range_noprof+0x79b/0x1730 [ 874.995172][ C1] bpf_map_area_alloc+0x12d/0x170 [ 875.000219][ C1] bloom_map_alloc+0x22f/0x470 [ 875.005026][ C1] map_create+0xafd/0x16a0 [ 875.009460][ C1] __sys_bpf+0x6e1/0x950 [ 875.013715][ C1] __x64_sys_bpf+0x7c/0x90 [ 875.018163][ C1] do_syscall_64+0x14d/0xf80 [ 875.022776][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.028685][ C1] page last free pid 22330 tgid 22330 stack trace: [ 875.035204][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 875.040370][ C1] vfree+0x25a/0x400 [ 875.044292][ C1] cleanup_vm_area_work+0xa2/0x100 [ 875.049439][ C1] process_scheduled_works+0xb6e/0x18c0 [ 875.055018][ C1] worker_thread+0xa53/0xfc0 [ 875.059628][ C1] kthread+0x388/0x470 [ 875.063728][ C1] ret_from_fork+0x51e/0xb90 [ 875.068352][ C1] ret_from_fork_asm+0x1a/0x30 [ 875.073158][ C1] [ 875.075498][ C1] Memory state around the buggy address: [ 875.081142][ C1] ffff88814ffe5900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 875.089224][ C1] ffff88814ffe5980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 875.097303][ C1] >ffff88814ffe5a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 875.105384][ C1] ^ [ 875.106306][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 875.113117][ C1] ffff88814ffe5a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 875.128656][ C1] ffff88814ffe5b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 875.136739][ C1] ================================================================== [ 875.144918][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 875.152149][ C1] CPU: 1 UID: 0 PID: 546 Comm: syz.1.7062 Not tainted syzkaller #0 PREEMPT(full) [ 875.161377][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 875.171462][ C1] Call Trace: [ 875.174774][ C1] [ 875.177649][ C1] vpanic+0x56c/0xa60 [ 875.181687][ C1] ? __pfx_vpanic+0x10/0x10 [ 875.186243][ C1] ? irqentry_exit+0x59e/0x620 [ 875.191068][ C1] panic+0xc5/0xd0 [ 875.194840][ C1] ? __pfx_panic+0x10/0x10 [ 875.199305][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 875.205006][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 875.210678][ C1] check_panic_on_warn+0x89/0xb0 [ 875.215649][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 875.221331][ C1] end_report+0x73/0x180 [ 875.225601][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 875.231265][ C1] kasan_report+0x128/0x150 [ 875.235821][ C1] ? __pskb_pull_tail+0x1058/0x1690 [ 875.241059][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 875.246728][ C1] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 875.252249][ C1] __dev_queue_xmit+0x29a/0x3920 [ 875.257251][ C1] ? ebt_do_table+0x2665/0x2830 [ 875.262133][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 875.267443][ C1] ? ebt_do_table+0x2665/0x2830 [ 875.272318][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 875.277738][ C1] ? br_nf_post_routing+0x219/0xfe0 [ 875.282968][ C1] br_dev_queue_push_xmit+0x370/0x4b0 [ 875.288359][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 875.294282][ C1] NF_HOOK+0x360/0x3f0 [ 875.298402][ C1] ? NF_HOOK+0xa2/0x3f0 [ 875.302575][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 875.307192][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 875.313108][ C1] br_forward_finish+0xd3/0x130 [ 875.317982][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 875.323897][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 875.329372][ C1] NF_HOOK+0x360/0x3f0 [ 875.333459][ C1] ? NF_HOOK+0xa2/0x3f0 [ 875.337638][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 875.342248][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 875.347722][ C1] ? __skb_clone+0x483/0x7a0 [ 875.352342][ C1] ? br_handle_vlan+0x61/0x530 [ 875.357139][ C1] __br_forward+0x397/0x540 [ 875.361660][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 875.367149][ C1] br_flood+0x6ee/0xb80 [ 875.371331][ C1] br_handle_frame_finish+0x1521/0x1c80 [ 875.376918][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 875.382844][ C1] ? net_generic+0x1e/0x240 [ 875.387370][ C1] ? net_generic+0x1e/0x240 [ 875.391887][ C1] ? net_generic+0x1e/0x240 [ 875.396411][ C1] ? br_cfm_parse+0xf00/0x1790 [ 875.401192][ C1] ? br_nf_pre_routing+0xc4e/0x14c0 [ 875.406413][ C1] br_handle_frame+0x80f/0x1510 [ 875.411291][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 875.416596][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 875.422521][ C1] ? packet_rcv+0x175/0x1730 [ 875.427134][ C1] ? deliver_skb+0x137/0x230 [ 875.431752][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 875.437057][ C1] __netif_receive_skb_core+0x98f/0x31a0 [ 875.442725][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 875.448828][ C1] ? kernel_text_address+0xa5/0xe0 [ 875.453960][ C1] ? __kernel_text_address+0xd/0x30 [ 875.459203][ C1] ? unwind_get_return_address+0x4d/0x90 [ 875.464869][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 875.470883][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 875.477399][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 875.482363][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 875.488537][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 875.494877][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 875.501575][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 875.506712][ C1] napi_complete_done+0x299/0x730 [ 875.511751][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 875.517312][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 875.522096][ C1] gro_cell_poll+0x5a9/0x5d0 [ 875.526700][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 875.531469][ C1] __napi_poll+0xae/0x340 [ 875.535833][ C1] ? skb_defer_free_flush+0x233/0x260 [ 875.541266][ C1] net_rx_action+0x627/0xf70 [ 875.545911][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 875.551065][ C1] ? sched_clock+0x3f/0x60 [ 875.555506][ C1] handle_softirqs+0x22a/0x870 [ 875.560314][ C1] ? do_softirq+0x76/0xd0 [ 875.564670][ C1] ? tun_rx_batched+0x185/0x790 [ 875.569571][ C1] do_softirq+0x76/0xd0 [ 875.573768][ C1] [ 875.576720][ C1] [ 875.579672][ C1] __local_bh_enable_ip+0xf8/0x130 [ 875.584801][ C1] ? tun_rx_batched+0x185/0x790 [ 875.589668][ C1] tun_rx_batched+0x617/0x790 [ 875.594384][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 875.599607][ C1] ? tun_get_user+0x23c7/0x3ed0 [ 875.604471][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 875.609783][ C1] ? tun_get_user+0x26dc/0x3ed0 [ 875.614660][ C1] tun_get_user+0x2aeb/0x3ed0 [ 875.619367][ C1] ? aa_file_perm+0x50e/0x15e0 [ 875.624146][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 875.629193][ C1] ? aa_file_perm+0x192/0x15e0 [ 875.633973][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 875.638936][ C1] ? preempt_schedule_common+0x82/0xd0 [ 875.644418][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 875.649551][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 875.655032][ C1] ? tun_get+0x1c/0x2f0 [ 875.659206][ C1] ? tun_get+0x1c/0x2f0 [ 875.663380][ C1] ? tun_get+0x1c/0x2f0 [ 875.667557][ C1] tun_chr_write_iter+0x113/0x200 [ 875.672623][ C1] vfs_write+0x61d/0xb90 [ 875.676909][ C1] ? __pfx_vfs_write+0x10/0x10 [ 875.681731][ C1] ? __fget_files+0x2a/0x420 [ 875.686355][ C1] ksys_write+0x150/0x270 [ 875.690730][ C1] ? __pfx_ksys_write+0x10/0x10 [ 875.695625][ C1] do_syscall_64+0x14d/0xf80 [ 875.700262][ C1] ? trace_irq_disable+0x3b/0x150 [ 875.705322][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.711453][ C1] ? clear_bhb_loop+0x40/0x90 [ 875.716187][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.722110][ C1] RIP: 0033:0x7f08d399c819 [ 875.726544][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.746175][ C1] RSP: 002b:00007f08d48de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 875.754633][ C1] RAX: ffffffffffffffda RBX: 00007f08d3c15fa0 RCX: 00007f08d399c819 [ 875.762647][ C1] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000008 [ 875.770645][ C1] RBP: 00007f08d3a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 875.778653][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.786638][ C1] R13: 00007f08d3c16038 R14: 00007f08d3c15fa0 R15: 00007ffdaaad39e8 [ 875.794638][ C1] [ 875.798187][ C1] Kernel Offset: disabled [ 875.802520][ C1] Rebooting in 86400 seconds..