last executing test programs: 5.564882534s ago: executing program 1 (id=3992): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000002010740824700000000000000000004000380300002802c00018014000300fe80000000000000000000000000002c1400040000000000000040"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYRES64=r0], 0x48}}, 0x20004800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001840)=ANY=[@ANYBLOB="500000001000010429bd70000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c00028006000200300000001400350065727370616e30000000000000000000"], 0x50}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x240, 0xffffffff, 0x240, 0x240, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x7e, 0x2, {0x3}}}, @common=@unspec=@time={{0x38}, {0xa, 0xa, 0x800a18f, 0xfd25, 0x81, 0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @dev={0xac, 0x14, 0x14, 0xe}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0xc7995fa2be0944df}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xc, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private=0xa010100, @icmp_id=0x68, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'veth0_vlan\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "a334", 0xfd}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100), 0x4) 5.411261431s ago: executing program 1 (id=3994): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x4, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002200)=@delchain={0x12e8, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x12a4, 0x2, [@TCA_BPF_ACT={0x120c, 0x1, [@m_gact={0xb8, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x0, 0xd, 0x6d4c}}]}, {0x71, 0x6, "3532565adeea82a6d355b04e82cf0d976e9e3d561f7832a2553c4393a1a4d9d755a3ca015b8308cae8430cb3ee720daf513b7d09d45af79089af4ca0f7ae568b98646f301384cfe6ba628a461810b458401b48d92b11c4b84c4fc318de1f6827de4e78cdbcf73ddf84c9950303"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0xf8, 0x1c, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xd6, 0xfffffffc, 0xf, 0x5, 0xfff}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x28d, 0x5, 0x7f, 0x80000001}, 0x3a}}]}, {0x94, 0x6, "87291e242773af674dde3b73945f3f393c34c647e3d2cd3578fe53ba7ccf3e1bd2a35bc582e3bce130f16b8683d6f9ec38c16d48541b6555a62e28b6fa75b58d4496fbfad01b050b3228c3999e7f905e36fa104c9032cc569748ca3f8709481eb42a37a49c75c0444dd2ee685c53ab374c3f829badcac098a94fb10b97844e07ac1fee7e235b272422fcc491dc7462ad"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x1058, 0x1b, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0xb}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x3, 0x10000000, 0x7fff, 0x5}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x1004, 0x6, "b66b573c4877af7c2ab51b2b7f28d578d8f2dc793b8f5a252005f931404034192b169532ab048d00eccdb2476b5318d58cd62ba0b491937fa928f4f5f01636a33a58dbb859cad2b9a13741c46bea4165f9e77772207d85aea8e40b34226721c89481bd36a678415a5c07e667d3a4066f4e0005f775709764e4f602620610dacea322a0819cfeb947b57714498360101780ef489c9e0a1ddec90c8d0b64b56f72415574026c64d804826272072a95d9b4b19580bcd30a70f1f36917fab1af7e499520d8b7bd60ce745221c8b927afad964989d9601a156926bc2fc84593755fabc26ad05223ae6093c5936e15919e0f9dd40c9c7456e7144017f3dad4c8837dca361826eb096266d9b6f093aac22171fd8f982727442410283af26128e9a860db4c9e04156baaed5385f78e7db0e281fc38d42944398e48ba9767cb328a819713f0519cc624c99651ef47265fac481040a2e800c0a8d33a248dba5314c8bf5d030050bf07f9499ba9d61c93728200a2945cf4c1f672db3e893e2fd41cdfd2f7c1ec1e3f21c918cc5de7c8b2e493f87b61517a1b8cba5e6c029cd0dd69efb289c711f6a4d6e1350517aee512993d8c790811c1e6d23866742595b52ec89f7360183cbadd9e70fe42158d69295c47839ee6a5e8cb1004fde369211ce260637661b92dcdd7e00c3903e74a1756ed68903af08736cd7d744984e50f7011df8e1b10770a3a0e250da0f1f8a58252d4e78dd862b110b908be3a0441567ef86aa4c5481e1197d12407a490d7b6dc747f6e340b18e86177a9c582769b510cc3686480d2aaa0cc88450ad8eea2e1068ba822af4858e9de577261c48a5fc265c747591ed6c6acf9254837575065d9a9e5d33d9e3836f5dcc9fb96536ebcaecf4dd4b3b619ceaaf1276cfb00db2b57f076406ff8a7849717bef4b25d987585dbbda3fbc99cb6b92d3275568d170e3ade954854311882ae8969c55366e4aefcba1a35005e540d8acef78c4b7ac1d12c7b1d026da5e2ae1942b2530f0763270b8fcb306c22524108466a680fbe4498e1356665c1738de1a8766a76ea2918cdf4d722baa3d7027b45fb3939e24c4e074782773b7567d0c20c8af6e2307d91e461bc7c038465d76e828ac877698dae57631e381f1a525b91a8eaf7eb3970cb4c077e2108f5cddfce83b9b39b5826153b2fbf215507731da6b73d40df2c1e180696bcda542b9f7a7e700fca60d5c79e415056108969ca1b655ed321696d47808a583bd1cf7c9e7a84d4f9f234a584a7f4b33c4cfeb634b351a2d33660fb44bb7392222301c1060c97d633dee3bd48ae88bcac3a6aeb0b093e9ebaedda4991b2a5c88ef25d08b23418d26e90620fef0fbaca8f2c9c35a3f3b1024bc46a688904ff000197fdd46466cecc59637c6cdb654aefbe735f28e783a3bb24d225c67bc0e069be9f55174a3b9fd84d4c4cacf041c6b2077160471cdf133c2ccd729f5672e3bc764a17afd5800d7cea2966e073921f4d8b18c487224c7d574d9acc744cf6cf73457e9b967b0b885f80ca04243d5815635d6b8a982fbd6705503628e4dd0b24ab409eaf7117eb27e1c6624d7f1d17bd88e890c1e203022b8e2a18899ad909f4bf48c0b54eb1e92cfd2ff8280efd1f3667ccba400488b663e54ca3b8b61b1ff80077a5b17e88df541e2a194038e9e69c791dca45b00a5ef5762da63fa748a870ee83f49488c1d1b538c303253199f68b4ead612ffc40e829f59c6927b67eacbe891864e0534f719da329b8c06b44b45cef764107f67be8fde68a4d15d90450eb25ad616f28c49d3dd0ed9928b2de89fbbefe07f48630cde9284112a0b2909e3d81cd3c72bf9c2a6ae234b818ed61289f5eda78b7bd91839a4f2f3d386e449a9eaf19bb84e6d96455c3c2b6a98ab8e5d805d9ab400f245db4fec9f7b52d3d0a4ded86180e619baa03623e89187532e452a7237c141741daf7b1d7a892cb1102787a04eb1427b97284b557a2811648306c13f868da07aa439216f51b3199da4926b589d5af0de456391c99e8fbdecb574eb821ccac259b2f96915e09465e51ef7c585372f5e52a88cf05418d7b07468af8c6fe0d5d5fa3263089592d706cb2244ec71f7ddece77c5bd23e7d00fab5e7260fbd6171a1406a11471d98ab30426b7477e1378030d0212bf31c56e0b5e878d0d9760174d7a31033cf7bec8e3ba6483528ab15c0fa6bb489f57b9a42190c24a69cdad697215b24d2cb5a79e20a2f16028a0f6d74c1c23604ff3b2aba913d48e895c2378e46c6a7d1f7995e77d254b994e96a52fc38a4ac435014b15a3a56f03bd545ee6602b41afe62f30b1296fe716a1c9f13a2be9974e57e2da3e89055e31500493c973367336c9d24f2316ce0d18a4b29193ff561332a212e1f93f6ef1f0ac8320136edecb4b5b8953c2cdd8e9f0028f57d03dc410c3105df3ac8964760f7765e91554f9e75517fa1dca2855113a4a4187b45c0f49d0236081823c6d8be88b1b815f816684daab09c6a0862acb5672d7a18795a3f35abf3f8b19c39cebc330654958280d6cf789ecd704155306f77b918bf4a00e4be73cfffae3f97cb0f0d100ebe159508fe43d3cc1e05b9f3c81d482328ebcc18750f0566e670a65574d509fe2fdcdc8052147da40c884ae64bfb337be92a1a909a74e0d13be9a5baf47574d9d9ab6f35734ec7613ecc83344ad858a90d0a6fc56ab911ae8489e8a9786757b42a9f7bd6c319d861f13adcda0fce06abf18b04c9bc8f98b89f9aecfb4e51e7e5dd1a223b3c7316c0a97277c793fdd329c2f750988ceae9a136c3700bd3c97250b6be77f9e0874e80586779b66ef897c51fe3c0d6b6c0b6e9c9fe070867e4d42aa62bb0652dbe7187bb31b17b7b19d15f0306d66bcbdf644f1c17f52811a0f93a44ead31d38aec1e49d178148c671c83d73f3e52963cfcca79520c5cdeffbe799fe95444357c71962d6b4faca1ffb7f17dc9afd0164c07250cd08cb9119c7caa994ca2c3639bc2cae0216c311c9ecc6317e50bcfdbc4530c484b260c3b7256144f0b0cd3ac459e0cd5f678fedf01d109a9ad41713bf78ca61b347c8a7eae7b33f303e6594a826138b909eb90eac0276b538ec61b1ebc255031c926815b295903e2a4841ac9ba428e72061efa68037bc4ae205cede7e9c87d81ad3c968036933c19fd5bb6b96ffede4b3cdb1f165e06896036547fcef5ea4f268f8cd5ccb7f31d46c435b043343e5b91b36eed892a30dfd6a9b8cf39f5eec812bb220d076435be285e0f38b117474907be9a684384a96664e212bdf5e4e7e0cad235ee2404cd06982b3825a8ad361a94a1a81d972840452efbf89d1459dcf2186ad8db942d1b3951ff3033aac156cdc693fb581083741e322ff0961e23da4de4a3be57f44c0415bb3ff378c764b02a115e9f2d04b703e208ef1a58bae84599f0cf7329efb101bdea02fed05679334d8676d3b80c5230adc1b0c56da93bd9d0a0c36e42de3a5f09692057cb3d65976518b6788b400f611795834d8dc118c8554c0c62cd41c050195e6413b421d45fdc694ae1814405c0240dc0f9b1624b8ae627e9c673a58bda483357f4c1b16c7c0a62d45c2cd1ad21b335f610d0793dc0c754408222d2a8a98db179cd6c966b61f85f39389b4de497d2ee9d6898075fb15ab53ebf57a5dbaab4d24c62b1c66acced66426e9cddae801e04d539a391b41bd2b974122e9be56beaa7e9024a79fb7258a63481908d32420c6abe65ecf1a106488f45e57d721f17196cdf61c4210a41231f5cb84abf11d0db54f99289b4c42e2a7d1dbb7d2cc231a2cb5c3350d42b7e7304407b1529a7a27f8799d2141d5d9f401d132fe55588fdcafa637428096b05b9f10cf48ae1aa9e77ee75f032909071dfb13fc2b3fd9723b023a156fad360249e4cc50b42ce13c9f9c69fd64facae7a7a10e5d5602fbf38b427f4194434c48443f01279b134cdf62dd7f972127dd6bcaed48955b8562bb00457b911da8abbcc32ce733aeb254e6c57ae0e66b4555fe8e3a69cd0b9d2e021b0cf49542207063dfd97915dd5b6ac640aeb26cb30a7b0b9f37cf3173b53d1cbc7e239867cd8d00fad8527629c59cbc5419360b93b4067c48413c84288f4c3f06b6a79f7160438ea0d0729ae28011b867bfc7f9c57a808ea0cf6544bdd4f8c1769078d1f3b36ebdec3cc253a52a66c075f9ec4fa48a9b11e97dddd1b104244e1f47eb7cd7dd5732a65d3186b3f69caa72ffaeafa924be4b9ea5db063e9d7e6c059b6e2edb79640ba823e516cc66a01792ca03df911e219fa156dc0eefbf3d0d0b4fcc46f2cc9dffb01f1e49ee1b25f6cfa65ec61c27f0d9424075e5557ec93d6604d2ec5af77143cd5644c1595c8b7434587a447d3f35311183f30407cac7667cabbc2c28889b53b522d881d14bf93052f70c9fbb66e91ec65e65d05036090f49761e0e87d9d23bb1cc7d91fe9e8748400bdf309ffba999864ed08493444025976ba60cc50a7a16024bd4c648f6d8b95df08d311ff76b693a04bc6815303abd058c85e3062c174f6514e65f1298bd0aa1c3f4031b1ef52bd9738df53d6371157af49a00f73441b09c4cc5f6da94285504bb3e3a3be1edbbbbaabb896dd5f80e3130e5caf1b9d8d07d84716fb22fba8c11553496ba27bc56b38a0f9cf98899ba44589d48dce3d618cff55e9d517a3964f584ecfd98d896820191420caf46aaf2a665ed9156b2e85c78631fbe937028a0bc5d53e60553fe9f4ed1527ff132cec6866e7de9e1a3418f15dde4b730f8f75702e6a92116e3604304c3802e84cd3f8482d238a0d2f7bf2d5dc77600f39d057bdcb91d4f265535ad18fa61c9275149978dbb9cfce94ba86cb67d728f36f82b1590785211521af908406c08d0536708f3c65295cf61905b4b32a32a99b37ff68b6bc7f938fd7137b67734466a144fa56978c55c5bd0a82feff43be9a7bada2fc52eb0f02dc4fda08a01d8d0ee8616c33f0bbc4aafaa7f709e9c3e459e197f9e5fce092aab35724889afe2d92f34aae1211c8a27384a28d5a88375ddb4b750591fa420a831c377f5cf86adc70f9185b848ace0f1b4dae00b4cef332805f33be11de2551586c614fe76f253694e5c11dc3e4c1a7c3f5f796fa6c333f81ee6a14a61909a4e1f081332e2d5e1ecc4666df602a6cf3dabedb4e32062131d6e39aac40f2ad1a844c8d3c1017dc3bcdb8fccda7b70bfa56846a7a8f2f36dbbbb25b2d58df008000a2c1e7cc9f0b9817a49fe5ea7c15ca47a99fd6ebe2b18edda2c4c975bead2e241364abf219998837acfcc7f400189c67112cface972f4c63508ab97f5755805fc477a31a63ed4c08cfc0affc730d4cdc5284f13a2c5d69f19d55ed0212f88ed6aa715d8baa358965ade543ca3ec43ec30d75cb1bd9e9641ebc7f1a592e5008d42473f44bf1c117b1b183875d4043e319f661538920c5c94a1a3b9daccf3eb2b3da6b8abc6f79acc85ebeb4a224ed8100740aee57c0b63b31b7e069dfd8370b136571bd01320c2c0e1a7806b8eca2dd32af2de3bf2d8248f3e3e9fd2fb8783ccc6748436e4b1b41fbcb4d4ad7a750872ff07b12049648d82405ba86d86c8d495babc4546f7d445edbcedf4796bec7df1f1bd7d9d92a7d560b2733155519e6a7dbb6e0a406371ab3762a76bd11a3e1373c538e5680cf91fa98717d5485c091ec8fcd6486cc5e3e4bdfd96523315a10244ef37ffd6e813a15407852710804f82e61fd02147541eceb6f280ee529683c5585efaf2511b5dcde259cad4ef986bd58ce9a20f0338e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x7c, 0x1, [@m_tunnel_key={0x78, 0x5, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x80}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x11, 0x6, "67a638128ad3f52f2e793588c6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0xcd, 0xe4}}]}, 0x12e8}, 0x1, 0x0, 0x0, 0x91}, 0x20000080) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000000009000000731181000000000095000000000000001bafd07675c1dc4d627111343505b1cfd158e160de9af833efeda805959a37d1307dfc6bef4018ade93a181c5b"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r7, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @mcast2, 0xfffffffe}, 0x1c, 0x0}, 0x440e0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001fc0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010001d7a6010000fedbdf2503000000400001802c0004001400010002004e21ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a310000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0xc810) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r10, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000000380)="ee", 0x1, 0x4091, 0x0, 0x0) sendto$inet6(r10, &(0x7f0000000180)='|', 0x1, 0x4010, 0x0, 0x0) shutdown(r10, 0x1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000001540)={'filter\x00', 0x0, 0x3, 0x1000, [0x7, 0x1, 0x7, 0x4, 0x6, 0x7], 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f0000000540)=""/4096}, &(0x7f00000015c0)=0x78) 4.23753321s ago: executing program 0 (id=4005): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) 4.233442906s ago: executing program 0 (id=4006): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'lo\x00', 0xfb79}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) write$cgroup_int(r1, &(0x7f0000000000), 0x12) sendfile(r0, r1, 0x0, 0xffffffff000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000084000000000000001fc7"], 0x18, 0x48060}], 0x1, 0x200000d0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0xa808, 0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r4, 0x301, 0x70bd2b, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44891}, 0x44) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000780)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x9, 'dummy0\x00'}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000000e00)={{r6}, r9, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid=r10}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000680)={"cecc7fa794eed468de728acf3c47eb94", r9, r11, {0x2, 0x8001}, {0x4, 0x64841e22}, 0x4, [0xc09, 0xfffffffffffff001, 0x624, 0xffff, 0x9, 0xffffffffffffffff, 0xe00, 0x10000, 0x3, 0xd083, 0x3, 0x2, 0x21, 0x4, 0x1, 0x6]}) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r12, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r12, 0x89f5, &(0x7f0000000000)) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) 4.109186117s ago: executing program 3 (id=4007): pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xd, 0xa) 2.308246997s ago: executing program 0 (id=4010): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xa, 0x0, &(0x7f00000008c0)) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x22, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x6) listen(r0, 0x0) close(r0) 2.227887169s ago: executing program 1 (id=4012): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e23, 0x9ec, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, @in={0x2, 0x4e23, @loopback}], 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x44, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000810400"/20, @ANYRES32=0x0, @ANYBLOB="2084040000000000240012800b0001006d6163736563000014000280050003000800000005000a"], 0x44}}, 0x0) 2.121272536s ago: executing program 0 (id=4013): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x8031, r0, 0x3ac18000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080001000100000080"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x3e}, 0x408d3) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 2.051816932s ago: executing program 4 (id=4014): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000010000000100000004000000000000001c000000000000000401000008"], 0x68}, 0x0) 2.048900181s ago: executing program 1 (id=4015): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x6, 0x3, 0x2) getsockname$packet(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'lblcr\x00', 0x0, 0x5, 0x70}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB]) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.909517313s ago: executing program 4 (id=4016): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xd, 0x3}, {}, {0xfff3, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x84, 0x2, [@TCA_BASIC_EMATCHES={0x80, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x6, 0x7fffffff, 0x8d46, 0x0, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x58, 0x2, 0x0, 0x0, {{0x2, 0x0, 0xa}, "34571d7d89a1d95053ea341eef8c8d7baf72dc6b3c511aec77ed464dad66abe0de3572d7466e5f7fd1d240b99c2510f417afed0c28c9078806f642103bd57049a1e58df2eed3cfa7882a0b"}}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc4}, 0x20004000) 1.658886863s ago: executing program 4 (id=4017): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000a00)="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", 0x113) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1, 0x0, 0x5a}}], 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000040000000800000012d4570000e2e77d89c0b1bffeae9ea981bb000000", @ANYRES32=0x1, @ANYBLOB="00000f0000000000000700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) writev(r3, &(0x7f0000000680)=[{&(0x7f0000000440)="77cf8f7b806e20484eef094a5b98c1aa1636f35157f0e07c737ba0cc5965851519", 0x21}, {&(0x7f0000001780)="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", 0xde8}, {&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000000480)="85346766377cfa16f82139e50ca33efd1553b53d97a147da3c7b47708084e608e7e812eaea677daa0115ed88fe6da8c251ea513ba0b3c9c0db4a550b5d62c320d09dfbf595a04f0da0ce823259f2417f937b319f2ce01bb8d5ac979bd996744a1d6ad9767613dab90e177a7b6b35c565c9b08a5eee7f4cdf145ddd713b676d3c3e5a0848fbabab13823d69ed07b39702bf", 0x91}, {&(0x7f0000000540)="f87ea2e60359ed0126c42379d86d2a1c8f7cdd5290a6c6d0a06754810038d61158f76b3327ebe36581e7e28f1d9e76d93b1dd59bf73417b09756def9745587e14269df849ddd463bbfcf99a0f38efc9c572e49edc9688653f8861a296859f324ecd6d1f913dd1d21dcd239f434251bbc1aabd61ba543182c0f2da8aaf9484e4b3aeddb2d4d2f5f1ae737e5b61c9cd087b8b8fec3f8ac4d71612e93d9be26bf5476fbb20ad10089354845f5068fa767f9bf6aa4b730647a13dbf83b71f5b9f1dd4c91b72920cc8233cf225df67000efd8", 0xd0}, {&(0x7f0000000640)}], 0x6) unshare(0x8040480) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r6, 0x0, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) getpid() r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000340)={0x2, 'gretap0\x00', {0x6}, 0x80}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x3, 0xfffffff7, 0x40, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x40, 0x6, 0xfffffff9}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB="28100008", @ANYRES16=r9, @ANYBLOB="000326bd7000fddbdf25060000001400018008000100", @ANYRES32=r10, @ANYBLOB="0800030001000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20040804) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000190001000000000000000000802000000011000500000000080001007f00000108000400", @ANYRES32=0x0, @ANYBLOB="c094e09b54ff3881d4fbf7f4cb1c5ae2c3ea83050202693a750b31e54724d4a803926b9f084aa5a8126685ca629828ba6ecbec722c900fb4f6a8536ce48eaf6febd0559bc353eabbb85e914575ccf97e783132e79f94aa9afc6601b0997fe8a87d52728c2adf3b42a828f110b38b9735da9ff40b036c0d8dd40ead2a6fd4c599da48c172f42b5c1fa76e6760a09c43e4adfd081d75c055a3"], 0x2c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010026bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b06", @ANYRES16=r5, @ANYBLOB="41c6e601a0057bc053dc5aedcc31879885bdf4078133909b6df4e138ec78cb056f70940a58da0784ce75206a356de206594d5ce4835a7bad753dc364c4b95a0e833d603008487eaf9af0d99646ac64baa9248a471cbe23528c2354ef5d43e3e30b456e0fbd5b289fcf7e534d173f051c90bd822e1fef200d5254a7eed4451039d6c41ea74cc6f6484b1e93fe0d31966f415bee6bf635f5fba928e4f3327fb87df07aed01f2ada2dbbbe2422b0b0bf8f1016666c4888ce00e565f5359210b19358e6ab2e94d74957e90268c721d821cdbf7e82b442f6a2fd2b8bd6fe15f5a6671d11a2a7f4d33a3423aae5a405f8a0df4335b3f4b1126acf5d2cde3d84f54"], 0x3c}, 0x1, 0x0, 0x0, 0x30044084}, 0x30) 1.506098313s ago: executing program 2 (id=4019): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000480)={r1, 0x7, 0x2, "0e0e"}, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000597656b6850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r7, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) shutdown(r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000810}, 0x4010) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r11, 0x6, 0x21, &(0x7f00000003c0)="6fc0bb23d9fb9d8bce71a514599cd692", 0x10) r12 = socket(0x25, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r12, 0x84, 0x19, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_MTU={0x0, 0x4, 0x6}]}, 0x48}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) 1.363494847s ago: executing program 4 (id=4020): r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000020303000000000000000011000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x14, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000054}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r1, 0x8, 0x1, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0]}, 0x40) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r4}, 0x8) write$cgroup_int(r6, &(0x7f00000001c0), 0xfffffdef) write$cgroup_subtree(r4, 0x0, 0xffffffc6) recvmsg$qrtr(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x38, 0x10000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff970001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) splice(r10, &(0x7f0000000040)=0x7ffffffffffffffe, r9, 0x0, 0x800000000ff, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000180)=0x8) 1.244772837s ago: executing program 0 (id=4021): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000007, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff8800000066c1", 0x19}, {&(0x7f0000001300)="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", 0xcde}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a26954143da754b6b15", 0xb4}, {&(0x7f0000000640)="a5ca8683d601768d303ca112b53e7aa9b7692478467c2525cc9ceb426e1c40e3b29380122d838019715ede6740900e4a5b9097b6713ba207b45f64e07e8d44f24c842b84e2c5c3d4175f2c59ef949b2cfb2b1722cf08388fed3e7ff321bda9f2a0744407b6a38593ab8ff05b41a7bc10f7424c9da00d3b2dea193936dbae3b28e7f3ab2ec79d512847fce7d00e40c1e127d871123a121c8c684d714b81314f94d74e8dd61d5bff0f7a86dc7452ce6fcdb767dc9953058022e5f082d4024350a9e1d65f80844770359a06b0554bd065b79ede8b2138a0eda7a68ba7fd4240630196a25d1f5f1e15a09f29d7eb0203d30f03d926b6d87dd44a55d4794bcc7f6157b9376d046f30af1ac7464b32a655976a27d8baebcb440d211d60baa353b30fc2a967c9827f4fe99c20abfdbff7b2c090ece74acb8e286dc583d0b86fe35e8871164b76e5f17461533959cb2e8516c119112bbf8e7262c0c832593c0f8b75d0bccf88b73433c4a3236455b3941e18378bc11a236b8f82a546e8eaaa6b9f9cbf743e11859eca79a9930c748551db30c8197ff8fdc17da89b97ef13d91daa0c4fb542341af6efb8ee4b44fb6d7601cbb5639b8954cabc5758973f5a66d5403d5944de6bca1498cf6f9ea1850d6423895684bb4a229b14e0801ac4d9fa018e9544c5003f066b4df45a7b01f00eaa6a1e77586209b0ccb9700c2a0eef8cca34f58808e58b", 0x202}, {&(0x7f00000008c0)="f60f27117e4a8ca5f38ea69db4650925c916adc0dd9095173532452d876e9f077dddbfab219f37cc4d529aff0800000000000000a8", 0x35}], 0x5}, 0x4005) 1.01940268s ago: executing program 3 (id=4022): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000dd4d0000000000000040007400000020009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfb3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast1}}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r14 = socket(0x1, 0x803, 0x0) (rerun: 32) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x4c}}, 0x884) splice(r5, 0x0, r6, 0x0, 0x100000000, 0x4) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7, 0x700, 0xffff8001, 0x7, {{0x44, 0x4, 0x0, 0x2, 0x110, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast2, @local, {[@ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x4c, 0xed, 0x3, 0x2, [{@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xffffffcb}, {@remote, 0x9}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010100, 0x1}, {@rand_addr=0x64010101, 0x10001}, {@remote, 0x7}]}, @end, @ssrr={0x89, 0x1b, 0x88, [@remote, @broadcast, @loopback, @remote, @broadcast, @multicast1]}, @ssrr={0x89, 0x7, 0x6, [@empty]}, @cipso={0x86, 0x2f, 0x3, [{0x2, 0xe, "0a172a70fec5222b94ae7249"}, {0x7, 0x11, "4487bfdd05f26a6483f11401eb619b"}, {0x7, 0xa, "4eeccc1cff405dd9"}]}, @end, @timestamp_prespec={0x44, 0x1c, 0x1f, 0x3, 0xe, [{@multicast1, 0x3}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x4}]}, @timestamp_prespec={0x44, 0x3c, 0xd9, 0x3, 0x2, [{@local, 0x1}, {@remote, 0x9}, {@multicast2, 0xde}, {@broadcast, 0x9c}, {@empty, 0x65}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@multicast2, 0x81}]}]}}}}}) (rerun: 64) pipe(&(0x7f0000000000)) 1.012643654s ago: executing program 1 (id=4023): r0 = socket(0x26, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x3c00, 0x10000000, 0x7b3, 0x7, 0x2, 0x10000, 0x400}, 0x1c) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x80800) connect$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) 885.475391ms ago: executing program 2 (id=4024): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_sset_info={0x37, 0xfffffffa, 0xfffffffffffffff8}}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6720000000000036000b000fff52004507000015300000d60600000ee6ff80bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab5312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d5157c897f1dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b34eb5b8e8b05994969267b5cd548e8fad9ae86038887b2b6a0b5a3aefe2ce10c2645e89f5a79c7bcd1339fd75e663caaf520a8a6de4f52a948f42"], &(0x7f0000000100)='GPL\x00'}, 0x94) 835.155839ms ago: executing program 1 (id=4025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000c40)="63eced8e4601000000c35b09f2c5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0xf0) sendmsg$netlink(r3, &(0x7f0000000940)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc, &(0x7f00000008c0)=[{&(0x7f0000000600)={0x2ac, 0x1f, 0x4, 0x70bd2d, 0x25dfdbfe, "", [@nested={0xff, 0x99, 0x0, 0x1, [@typed={0x95, 0x4c, 0x0, 0x0, @binary="88fefbecd64f3ef8039896ce65b28adc26ecff264fae4319f2579cb1237605dc77ba940dbf30b32fde25f8549badef9f0ffd91d208f315f082d2b8644e843ce49d9851bd09d1a4f8f45dbd0412e3da2f17041af673c1f7ddd1afd1bebc6aec5717569fcd6866c8e908f101a73bbd4297269fb406e86f960c22da77586e3da9f8d23dfd251c331c3a7b0ff29b480dc0931c"}, @nested={0x4, 0xb8}, @nested={0x4, 0xf8}, @generic="4390f6d0cfa1288352ae2df1ce1730e3678ae81b6d572b", @generic="5a93e1a74af5ec911d6d9901c4f3b59aad2f4e1b52fa35b369227b8d1817d5148419ede0087a746c92923eca551572a4642612d2fdd7d079", @nested={0x4, 0x28}, @nested={0x4, 0x8f}, @nested={0x4, 0x8d}]}, @nested={0x18b, 0xc1, 0x0, 0x1, [@nested={0x4, 0x14d}, @generic="8b4554d3bb7d2cc9ed9190ac3e686e3c2613b4d89f174be26ee3e445ba83bb3440d04cae9e4223bfeaaf349486962a59e6dbf5eb6338ad29e2ee4502267687932eb92a0996114a9be81147284c688b4c28abffcb05be2772c6a8c5853507bd4d88c20608254b31d3990ae10ebaed31c9ec699463d206dc59288c01e79b527f3c972bf2b0f40916532a0d57721f1629830a481a977121a7aa809e22a0", @typed={0x8, 0x113, 0x0, 0x0, @fd=r2}, @generic="2376ecc1b97af057440ef26d35352ac282c001a020dae22bfd06c92f90fadda58574c69de62e2ad44e869102d2deefe207ed699955dbea1810dc73595fb2425e91d9e49d90ce493ff16b68f5d6c2e69b792dec72353476f9d5d747f9f04a3cbd2281aebadf1fe26716e2978752776273ecd0481ba5cc2a309f4add5ab93383b38753ca0e36ff397b690fbf11ffe3d89f8881f598ff6cf140b067bef0ae75b65555ac8c8255d8f93520482cba1a3b3e3cea5d048dfa8307e95bbfc483b197292efb1a0b8dd5eae2556335ed907ea20698bee19bab26fe4f2a1e33f9", @nested={0x4, 0xd2}]}, @typed={0x4, 0x12c}, @typed={0x4, 0x63}, @typed={0x8, 0x41, 0x0, 0x0, @fd=r3}]}, 0x2ac}], 0x1, &(0x7f0000000900)=[@rights={{0x24, 0x1, 0x1, [r2, r3, r3, r3, r3]}}], 0x28, 0x8055}, 0x4000810) 763.624749ms ago: executing program 0 (id=4026): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x312) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1400000016000b63d2b947468b041c031193e473", 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x17}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffff9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x56}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r5 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101f3ffffffffffffff010000030900010073797a310000000040000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000050900010073797a310000000014000000110001"], 0x88}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000280008"], 0x160}}, 0x0) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r5, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 561.414616ms ago: executing program 2 (id=4027): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xd, 0x3}, {}, {0xfff3, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x84, 0x2, [@TCA_BASIC_EMATCHES={0x80, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x6, 0x7fffffff, 0x8d46, 0x0, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x58, 0x2, 0x0, 0x0, {{0x2, 0x0, 0xa}, "34571d7d89a1d95053ea341eef8c8d7baf72dc6b3c511aec77ed464dad66abe0de3572d7466e5f7fd1d240b99c2510f417afed0c28c9078806f642103bd57049a1e58df2eed3cfa7882a0b"}}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc4}, 0x20004000) 560.715656ms ago: executing program 3 (id=4028): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x1409, 0x1, 0x70bd25, 0x25dfdbf9}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8066) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000001c0)=""/93, &(0x7f0000000300)=0x5d) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000002880)={&(0x7f0000001f40)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8c2}, 0x1c, 0x0, 0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="18000000000000002900000036000000080000000000000024000000000000000009000032000000ff0200000000000000000000f644e06f", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x4, 0x1, 0x5, 0x5, {0xfd, 0x1, 0x0, 0xd, 0x2}, {0x4, 0x0, 0xdef8, 0xfe4a, 0x40}, 0x8, 0x3, 0x3}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) pipe(&(0x7f0000000400)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x1402, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}]}, 0x20}, 0x1, 0x0, 0x0, 0x40044}, 0x20000000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000100)={r9, @in6={{0xa, 0x4e23, 0xdcf5, @empty, 0x9}}, 0x3, 0x6}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r9, 0xffffffff}, &(0x7f0000000080)=0x8) ioctl$XFS_IOC_FSGEOMETRY(r7, 0x8100587e, &(0x7f0000000500)) 434.112562ms ago: executing program 4 (id=4029): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x8810) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000140)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000580), 0x0, 0x14}], 0x1, 0x4040c91) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001900)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000001a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a40)={&(0x7f0000000580)=ANY=[@ANYRES64, @ANYRESOCT=r1, @ANYBLOB="12112cbd7000fedbdf2525000063610011000200303031302e00000889873ab0e7393d506578eb98cb4897051c008a0000000a00"/61, @ANYRESOCT=r2, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES64=r4, @ANYRES32, @ANYRES32=r3, @ANYBLOB="dfac2cffb4ecce13b0ddd98dccf5b1177b", @ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) recvmmsg(r3, &(0x7f0000015b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/122, 0x7a}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x160, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) write$tun(r5, &(0x7f0000002c80)=ANY=[@ANYBLOB="690e452c11892f01ff02000000000000000000000000000120010000000000000000000000000000040b000000000000050207ff01020000c910fe8000000000000000000000000000bb0001000001009b25186d66e5d04d5f289ef5ecc0834517462acb47c4179837f46e4c2622a1954c61fc7f070d68c9102001000000000000000000000000000200000000000000d3000921640000000420880b10000000000a000674f2050f20c0ebc2ccf354092bdbcd5d35e20c4434f1804eff8a6d69ec69b11550b931a70586903b24b6e9e0ccf14b6ac53c1ca692080e2467bbd2bd13fdc3de8b89cf4d5899c59a1d084855174d533d9f3e4c9bd5acfa828ee24960951adc44613ac00a1ea5fa39be8c62857eaf96ea4eea5cc16085c972b04e29b57357871ab4bf741b486a261b881dc3178c5aaf65fe37e23025ccd99846a631b11ce1b807a3c52344c470624c01c1bfc60371e9d2315cca1aec4650344cdf1ab52404cee4919d473e215c093296bf5ccd12668ec1af870a38f1fda55eb46890f9344345686ad6fee444ff6652909cf7716a96f58cefa79d0db4ffbbd203056cd300ce3095598d768d5050aafa9d7f1f1b30032a647a330d3ab8344710de585c1d8579f26aa8dd702cd0a7d42b9e554e3b5d22a3769db711fe60ac63bbc612a4b44910218f567ab4e782386a037ec39269afa12ae13eb3f9fd70786e9390f0a6f16de7095d600ff1865d05711ba8b82a00b72d8f6a92ed23d993afae64f7ffb179efeb20356468e1e8d7d8fb5f742b4f9100d0994199085508df2e1c6f9510575356124bfa3e7d6dd92ddcdc7316ccb3a8597dafe33e19323bda0a6db08c2d204462700e956d431fe17dfa8c7d31da653a78676aebd8117329989bf6a93d0a3523945322c86c15c74b99bbd6071459df1dfef907408d824364c9144cc57a2e92e331eddc0cd31973e4d2cb97f3c6715193f5a2647df7560d7e9bb95f82c8880feacd48017d75037a14c84887efb0727f095d6d17c8f1276ac127158caef3cfaf973a35afadb486503b7828a008148e38dd744063670ebb7fd367c40123670358270d9d389ed443c219bd5c3a3b86e4f9d2cc3a443f3f6c532678dd5370a61521176a6843e023c395296024ead21ae0e07d6a3b55e572810f73f1e6fd621b47e8628ec3ae25ca6855aea2a5c93a78de666ea0a950eb398b184286285f6b56602d49c235c2101eff2450e0d5432b3cefb39ff3f95a5d7fca058066466d3ccc5a90d992ff811eaa4c2dbb93beb67ec70121c17d44b920ff4e46ed1872531cad450afcfeb601aa05b1c708d42b604e8639f595551bc00e689e345f2b2300e3d3e0277698c486f61a3e952fdaa5ebf541255522505c0ab105803b6c126da63b58416cb34ca2d5819eef0caec08d681c4aea41192e2fc29e555294043a34faa30e816139aca5d6bdf48548d02412bf9fa2861f882b3702b3d2e27d7a4d056c1893e2027e4cbfa5ed1db09924ce4c09f1c6f4517e390ddfe09734c2f6d5c4e0b0e4bf94298d8bcbac60276992ac5be97b26aeb09804b9a5edd8c366c6261038592a1fcfd456aa07b0fa2a117647f74407238160e47752a055fe41d9b8ff8f393a2aee68a28a132fbfc660b3dd5962a6e1671bec90a92c411a27ff550de9b02e4b8f1f5578d40000000000000400f5e66ae961ee6479ae9a40c438eca21242dced7ba77d570663b02e518880b15ab7a031be391b9fdd02af5e078d682dcad14e29007648ea76732476c7cdccd428e875ba94385e6aac54e36204e254d5c30d53e24adcce72070a3b95b7c83766d0d227c1155f1457dc1022cd130203e48983948727b170ecd12db577b64df646c3d5f51d8b12ec5fec638796148871c13a5afafdc1758c8bb4e9bb9466e8703b1f76cdf53f1d9c086af1f3da67dffbd057ad7e507f7fd5bd363d5879309add2423614cbf3d24f19b0f9bea471d4e518a539a68ea1d4498ca4dba32c319946a39dcea62531b0b6bd3dee0f9a141d6d4a4c356c5c129507e7a5458510b837cadf8b3b2eaa729f58df62124b47882b6afad9c29603cca16aab09a3bbfb83fe888cd77566d19dc2f46705161c12ff95609e6f8c7f46c8c4e12ad9f5e2159ab3549fbec804f162a2237c62e2f9424c40dbae4477c0523009f345d20aeffe913ccea2901245bda1c4072238dc718a333eb276389d1b6fba23cd5ac1b62063d0ca831de897479d6ac7dd4c148dbdebbf8f1b908b369104e5ef7c53902c1e525862136314ea27745e8028fbaba768710e6fbecaa6f1a19db76a05748ad40aee85fafaf1fe3164c21d79e0801f538f02a5cae152b2a8f7adfa23fa33d5bb48807f7b7721fd65d8c2fde6ec3d2d82c9ac9f8db8a40febd9b4613af34f95fa98c5ac8aa688000acd2eb70d9e98234f94529cfea43d309ec0c15c6f9c9e4a029d5afa3942cf7a5e03183bd2afb22023a91bdf919a0885cb191980745d2d08480218790ac3362499ea95c8878debcd9e0794859014232ac1accde357f9a0c906d273291eb8084d92de6ee84ee04ae0bbaeec321006efd6bdd11d782999878873ef66a2bb39d821b2a037434bddcb3afcbc10dca74d6fbb0d89d7a4cf5674a356d51a589c4c6e1f12924a586bd62728de524ea07daf6fa3fa284c222b67596c5f50c3fd91d38457961bd7d97db2f3b8bf73358d00dc1ea639439a3779d74d3488bd92eabb0a67752f4d80020ad05f18e9f8fa1e24b9d8f6878ac7ad15a4ea56bfa77bb93c101b26817a9b6cbb2da64afb89eea5283f33ac37abf2e7efd526b45971fc08c7376c4ad0e663555ab4939b795d87f8b70f2fdf41e80920dca4fc856f549dc35feaa5164537d72be04aca37218b0b17e22625e6451f7b90e60d2ad06f333142becfdc507f9f5e597c2f6d4c375bc3045e6a9e940991cae3a6ab1052f9f9eeacb732dacaacde553d9f6ee06c80ae9da486df0c0359a95490f968fc3466a7c11d0256d431370c27cffeec89c84bc9679c99115b243a90e5df64c2544bb1a82208ccf38b6f103f81f9a7ca00294d9035ede99402b0181eb8e33927d6c103813965e0d196a1c421dae1d4d4af1a709d3b40c67a898315ba842106e0bfdb7c7a1508707d1bec69ac64ff11642513426b4ee43a3a7fc9e1386c3d0a6297abbf766de983be3a3eae35dd67ba0d4f073478d58b0b7d024d9d838f6af344d89dcf5f08d079267a97013f5dd1f3da9bd8b29cd7676fef786dca5513b0d05185cd86c775a3dd9ea0cc6e551a38bfad0ab9689282d5a55bbe708db02e2f2ac88ef9da716e505f4893e15383efddfbd28dc0152a2d97b896c474c332a96e571fe33d8998f6afbd0fd9cf497e434f36c1f08a203445c8a197f6e85461cdc48de244836914c04a0fc220133c8833c44e5d1144969263d0e50f03824ee6ed53172fe3a9a0d60415548c5f4c8839c1591a8c63a49c4e7df586cd88d4017f2f54c979a4059f13e4105b2f06d5f134cd167b5f5c95f2a558774710facb5c1d969d3b338f8c6cbebaafb837cc55d5c901d9f00e1b472ef5036ec5a2547372386d574ef731d7b4c753808572e2219b2d859a3b526db286c96d2d8a422cf221d8ec6376de214b803e5603777b1609d865c1cede86ac7157756cadd3013ae878614d0a1dd651643b649b4a1d01968f56e10588d3be640847627a255f8f27e5d95cb4cc72e867fd14a2ed7d825dbd19acaa5e99b9215704c894a0d8c5d2e62edeb50f295c51926fcd517704987de86687b2cb39f3eb2e8bef2c192ea4ae5639b5076bda6f5eb01b3e753f1b03cfc9b060a4247cc1f78c74583e7a8ae4509fa8f5ecdacac216c0da5c5d5b804c5afecfd0393f2e414331ffcef6a08d21b6534166d71421e8cfab0e3e24ae256ac2801afade073e574b5cdd2c929c9443baf7d4649eac4b01c6cf2ec8586ae4405c4418a54d1a323bee11a264f00829fb1f0607dc1f4e9c7afb2dea3cabc1ddaaa63e86ae86c7fdd7abe173a6cf12904de744f7423492dc3166226bf7b56ef05c1d3fd91e55d8f7076ced85dd00efa6b71f5f3412e64bf8cdbc5c23574042e34bda263925372ea8970ec12a89ec0a5d6cfabb776eb05b3eeb3eeeeddc4e387e67769f5483f8fdbec6571b0b0240272c5056fe7616b5d1e60272d5090d5d7c7877489fb9cda4d567bcfd1ec5355c1ce7b1d8349ce30a027b9ca525161d4ede379ace2fd927393c018cb2a0e11ea2260d1833435321adfdcd0095d69b049f40b05f51d99fd9aa9b528efa0431a0a20593247e54cf01e8311e5e4af4fdb330a7e1209307801e25e7c6c7757b5b6d465de1b1c9205597c4a1e3abdfe3a0c65900634901f4f73c9935b9fbc781208f851318fea5618a943524032167385e22617edac81a4d2ac0441e82da4cbd5150fb242492b090a2118bad17fe4934924d30817519a930ea51a870874b3b6ee2ecb47ddd3578dc4802019aa576c84a4158dfff71d8730483dd308f39b587a0365338ec1b8fa25f17c5c0f31b9527cb466fad9a342de6e655571c3eb5a4668b2c7b7772dbf79f2e69067261585014ea336822c99f456ef1d14741a3cb9cf3b9fdaace27a40a70fd0e9e266288632f226e4285a6be8b00a9db05fcd7f1a82f11b5c72dbde55ea59b9e9735750ab13f0532b6dfcd1952fe2eb56326650305eacf4d3c3dcb9c41b04bfd6ce8f0b9dd885fd7b8c8d69a4ca089008ed6f2f326dddfb2a776e63229ac436bde40cb1e8996d5cf453dba8deb7eb06c68ab737b4e7e4454f0bef5b285cffea1b97c8f1059a97b85b9cbdf6470e6d935ff3bbdd8f60ffba992555a8c942fa11d09a034fb727915ab8ebe92287363ff7aded9ff7251683bf1107b703d691d7a46b8700cb0afe7e3a7fbb2294828bf8b7d6d9ec80a7872ada8474f4451437d1af93ba3150c620099d27cbe6acea61dd84390351b0857213f641f72703699f0e66091a2708efa8bd1863bd34c9f1aa9d580f79be538ef7e2a24be79a1f7057976b080e7e2ea648d382f133396253dfe5f69337cad21f7dff44a9ec3c77ee1979b01cf75a1f1a83b00dc8c1a65566a6199633698ea8d7c7e796e79eec5fedd9003baae8c93f3890d78e451e8273594033c1d0679a34a189dd876615ac0eefc303db24499b9d1c6337bf78598a026559d400cd791335685d4f4e8dc07ad912da14c710a911f69b8e9b0b1f2a2b8a39e8916edb64f6a20c2f399a530a1d780cde4fe93aff2dd10d989b65e529f463847a6383a8ac702d70d6d4944931fd6cc08b9619cf91aa6b643ad14ead8d8b46dfa84677c91bc3a5037d0e38696fa9b90377265da453aea91c0a17298441ee458a99e84b39110dc3616aac234cf27eecc3179c19b41faa77a50aac489c258addfedebcedddcbf9d9740ffa9a396860f8dc45c5765dba4c50d46d2036c6d68631cddd368d24363313ee56228ab9ab3be7fd76760278999214dac9eecbbf4209d40ff876b09a7867e3c22aac330020fdd85eb3f91d3527b7464792dd08f562e6423dd1af5a0e8a99cbfbc8580a8254134f1e6a18abce5d85b00eed5acbda1a2a1fa41a6a1cb47fd84464788ac6838e8d4e24fd1f4f53e716de3c798b2eed2eb2fb2ff8e51573f137e2b9f1deea71d5841dc084657e1a719e76c7088e2f300727457a2e1ff50c8b6f3acc63f46a7402365588daba1711cd6b7acc95d7c623539131f0436ed34b444bd3bfa0c928303b44c4d6613d54d339dd18c2e0a42bde6f870178bbce72f3a19f51ffcfe431bd916a9f15d08e50a80f1bbff97dad21661f154b5abacaff7aaf6ad2c2e864622deed9efd0db4440a74c3f23bcac6e8648ed742d929ace867c37ec200cbd6c39b25a617a2ca7647ebf19a60e2b96ac9d67398350b744a98c5400fad6c446d686f532dad55bb681cb5168aab44fabd521cc29aa7af537004c145d055c78f5834269c67a17f8a45515057dbf11d43c07cfe50502e68e57bfefb6ed1cb7671901f243993ca1be33d4095f0f8f5346f1b15744fcd7ea769484040008000401000148957b076f77aa062f2bd141cb9e0f402da9d27815586c5b05ae090086dd00040ed49d049d0d048cd01e92be49d749485c47576c6bb41f3c07b617900fd919c280186e53285887dcda11e9a41b336389b8277d52b510a18e68cfbb78c7d937442eb483a526af912bb906095f3d376059e895414ab8f21a1e2630e506c83160967dbb0646a150ce44e47c9c5c7c63a7b39244a602857c990a72368fcc0810a7f16c3a79e5a772df2566c0428573080088be00000000190362810100000000000006080022eb000000042240690202000000000000800268e80f0800655800000003d7e681b414ceda6a2241c95d315463b29efc1827a6024125e9e00ac5c60cfab73035a241bff2b6b1d2c77f9c92a0739ce6eec73173ee1309337c8c18e71fd740733496a64213c9f51244f8aa1fcb18282fff3731f439e04b3fae2a36f1bfc85d55d3412d55db54b094da57aa77"], 0x11b1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a874ffb4531d620000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000004c000000060a010400000000000000000100000008000b40000000000900010073797a30000000002400048020000180070001006374000014000280080001400000000f0800024000000012140000001100010000000000000000000000000a"], 0xc0}}, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f00000008c0)=ANY=[@ANYBLOB="cc130e1d47b2efbd326a7f7258d583f4cf0cc991a708cf24d326fa75125083321222e6fa6a9b4de6c91388174b68bf78757152cf6baac3d026890ca87bdd780ffb9e7559abe02d4a27a91f162351d10a2879770ab05d10de80088262c57170065b32df", @ANYRESDEC=r9, @ANYBLOB="3683043ec3bc171018c5b3709b2ed7e81759dda2446e4213e0927208ae4084dac9bd01a832f715ee04b66c266391136f1d1e10e4becc4c1001d3732e20f585e87b324731f94edcd86391a7189ad9796edbe543e8c7dcd18bdd8e6aa2a2e9902384da557de5770670456ce75947", @ANYRES16=r0, @ANYRES8=r7, @ANYRES16], 0x3a) unshare(0x2c020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0x1, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x7, 0xa4, 0x0, 0x7, 0xb69, 0x8041, 0x4, 0x1, 0x6, 0x5, 0x101, 0x10000, 0x9, 0x3, 0x3, 0x3, 0xfffffffa, 0x0, 0x6, 0x209, 0x1, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x0, 0x8001, 0x2b12, 0xff, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x80000000, 0x67dc, 0x8, 0x11000, 0x8, 0x5, 0x80079b, 0xfffffffe, 0x2000001, 0x7f, 0x4, 0x9, 0x7, 0xac, 0x4, 0xd7, 0x1fa0860a, 0x7, 0x800000aa, 0x81, 0x2, 0x5, 0x4007, 0x8, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x1, 0x7, 0x4009, 0x800000, 0x4, 0x100002, 0x5, 0x2000752, 0x0, 0x3, 0x5, 0x10001, 0x4e7b3717, 0xffffffff, 0x10000, 0x6, 0x9, 0x1, 0x3, 0x2, 0xfffffffe, 0x2, 0x100, 0x5, 0x105b, 0x3, 0x33b, 0x5, 0x20006, 0x5, 0x10003, 0x16, 0x4002, 0xd9a, 0xd, 0x29f, 0xfffffff5, 0x5, 0x2, 0x7, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x0, 0x8, 0x5, 0x20000001, 0x1fc, 0xc5c, 0xffffffff]}}) socket$rxrpc(0x21, 0x2, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$igmp(0x2, 0x3, 0x2) 298.053401ms ago: executing program 2 (id=4030): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x48024) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 199.885381ms ago: executing program 3 (id=4031): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 152.837333ms ago: executing program 3 (id=4032): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000280)="db759469e36512be2770717f865d", 0x0, 0x8, 0x0, 0x0, 0x21, 0x0, &(0x7f0000000900)="ffffdd014376ea94fe6f22446ab33726e5de05640000000000006929a72cd24065"}, 0x3a) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x61}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x30, 0x61, 0x5f, 0x0, 0x5f, 0x30]}}, &(0x7f0000000480)=""/60, 0x3c, 0x3c, 0x0, 0x20b, 0x10000}, 0x28) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pK \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca200000000caca494776f82ce53746006c080000a6020000f8fffdffb70300000800000090b49f1fb46ca53004ec83c0f0e0f1d5c07c640bad77b0910b94b312451881063f2a789e913e17782ca2ebeb6ac051476a4991497d0cec422ba88b5b1bc04eec53f709d55aa41bba5972be00"/149], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x3, &(0x7f00000002c0)=@raw=[@alu={0x7, 0x0, 0x2, 0x0, 0x4ff785b317935fab, 0x4, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xda, &(0x7f0000000340)=""/218, 0x41100, 0x41, '\x00', r5, @fallback=0x2f, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x10, 0x81, 0x4}, 0x10, 0x0, r0, 0x6, &(0x7f0000000700)=[r7, 0x1, r8, r9, r10], &(0x7f00000007c0)=[{0x0, 0x4, 0x1}, {0x3, 0x5, 0x5, 0x6}, {0x5, 0x2, 0xc}, {0x4, 0x3, 0x3, 0x5}, {0x2, 0x5, 0xa}, {0x0, 0x3, 0x10, 0x4}], 0x10, 0xff}, 0x94) (async) socket$inet_udp(0x2, 0x2, 0x0) r11 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0x6e) connect$unix(r11, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async) pipe(&(0x7f0000000000)) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r12, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r12, @ANYBLOB="4b76f3b6"], 0x40c}}, 0x0) 105.542988ms ago: executing program 4 (id=4033): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x400, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x0) recvmsg(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 77.260912ms ago: executing program 2 (id=4034): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x8894}, 0x0) 840.426µs ago: executing program 3 (id=4035): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) close(r1) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000380)=@bcast) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@enum={0x4, 0x4, 0x0, 0x6, 0x4, [{0x4, 0x7}, {0x2, 0x4}, {0x4, 0xfffffffc}, {0x8, 0x7}]}]}, {0x0, [0x2e, 0x71, 0x30, 0x61, 0x30, 0x2e, 0x5f]}}, &(0x7f0000000280)=""/95, 0x4d, 0x5f, 0x1, 0x80000001}, 0x28) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=@newtaction={0x102c, 0x30, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{0x1018, 0x1, [@m_ipt={0x1014, 0x16, 0x0, 0x0, {{0x8}, {0xf68, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x44, 0x6, {0x6, 'mangle\x00', 0x5, 0x10, "ab17ed12f3660dd87465df13dd1366b9eb763990bd3f1c0149ac"}}, @TCA_IPT_TARG={0xf1d, 0x6, {0x4, 'mangle\x00', 0x7, 0x400, "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"}}]}, {0x85, 0x6, "5a2d0e869135a294681ef6728f70a65a4ea0d645f71a0d1a9a99c024664f4e73dede9d72b43ee6f5534424a60fccbf0cff8dc2529390cafe31ae5e8e55770458f47742a28dc9de14a5353494a516788dde5f40b2d2c8250994240fd3480d4fa9b3074e615a9102ede5ec3696a39921db8b2af38d59d8dd9bc64c7ed82b6ea0101d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x102c}}, 0x4000000) recvmmsg$unix(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2c0, 0x398, 0x398, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x0, 0x5, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bind$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 0s ago: executing program 2 (id=4036): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000007, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff8800000066c1532cc10200000003125ce882", 0x25}, {&(0x7f0000001300)="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", 0xcde}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a26954143da754b6b15", 0xb4}, {&(0x7f0000000640)="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", 0x202}, {&(0x7f00000008c0)="f60f27117e4a8ca5f38ea69db4650925c916adc0dd9095173532452d876e9f077dddbfab219f37cc4d529aff0800000000000000a8", 0x35}], 0x5}, 0x4005) kernel console output (not intermixed with test programs): bute type 1 has an invalid length. [ 375.666676][T16747] bond11: (slave geneve3): making interface the new active one [ 375.677401][T16747] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 375.688713][ T49] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 375.702643][ T49] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 375.720585][T16743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2802'. [ 375.736904][ T49] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 375.765854][T16743] 8021q: adding VLAN 0 to HW filter on device bond11 [ 375.788597][ T49] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 376.184540][T16777] gre0 speed is unknown, defaulting to 1000 [ 376.632478][T16802] netlink: 'syz.4.2819': attribute type 3 has an invalid length. [ 376.733259][T16803] gre0 speed is unknown, defaulting to 1000 [ 376.883790][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 376.891856][ C0] lec:lec_tx_timeout: lec0 [ 376.896955][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 377.032341][T16824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2825'. [ 377.143475][T16828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2824'. [ 377.220273][T16832] netlink: 'syz.3.2826': attribute type 8 has an invalid length. [ 377.710068][T16848] netlink: 'syz.1.2830': attribute type 1 has an invalid length. [ 377.789188][T16848] 8021q: adding VLAN 0 to HW filter on device bond12 [ 377.833160][T16852] bond12: (slave gretap3): making interface the new active one [ 377.845133][T16852] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 378.088922][T16866] gre0 speed is unknown, defaulting to 1000 [ 378.446111][T16886] syz.3.2839 uses old SIOCAX25GETINFO [ 378.537008][T16894] __nla_validate_parse: 2 callbacks suppressed [ 378.537029][T16894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2841'. [ 378.559301][T16888] nbd4: detected capacity change from 0 to 63 [ 378.568619][T16897] block nbd4: NBD_DISCONNECT [ 378.585685][T16897] block nbd4: Disconnected due to user request. [ 378.607848][T16897] block nbd4: shutting down sockets [ 378.647511][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.657259][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 378.668177][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.677714][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 378.685550][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.695054][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 378.702835][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.712351][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 378.724188][T11676] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.735032][T11676] Buffer I/O error on dev nbd4, logical block 0, async page read [ 378.742880][T11676] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.768139][T11676] Buffer I/O error on dev nbd4, logical block 1, async page read [ 378.777620][T11676] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.804200][T11676] Buffer I/O error on dev nbd4, logical block 2, async page read [ 378.812094][T11676] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.822054][T11676] Buffer I/O error on dev nbd4, logical block 3, async page read [ 378.855591][T11676] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.865963][T16904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2843'. [ 378.875491][T11676] Buffer I/O error on dev nbd4, logical block 0, async page read [ 378.885649][T11676] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.927098][T11676] Buffer I/O error on dev nbd4, logical block 1, async page read [ 378.948375][T11676] ldm_validate_partition_table(): Disk read failed. [ 378.957580][T11676] Dev nbd4: unable to read RDB block 0 [ 379.014835][T11676] nbd4: unable to read partition table [ 379.057607][T11676] ldm_validate_partition_table(): Disk read failed. [ 379.119782][T11676] Dev nbd4: unable to read RDB block 0 [ 379.165344][T11676] nbd4: unable to read partition table [ 379.543889][T16930] netlink: 'syz.2.2847': attribute type 4 has an invalid length. [ 379.726112][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.739715][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.749771][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.759066][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.767068][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.806308][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.809992][T16936] netlink: 'syz.2.2848': attribute type 9 has an invalid length. [ 379.823123][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.831006][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.839629][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.847592][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.865171][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2848'. [ 380.075441][T16931] gre0 speed is unknown, defaulting to 1000 [ 380.626346][T16979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2858'. [ 380.693566][T16987] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2860'. [ 380.719834][T16987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2860'. [ 380.746607][T16931] chnl_net:caif_netlink_parms(): no params data found [ 380.982595][T16931] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.004248][T16931] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.018239][T16931] bridge_slave_0: entered allmulticast mode [ 381.035215][T16931] bridge_slave_0: entered promiscuous mode [ 381.071306][T16931] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.091952][T16931] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.108171][T16931] bridge_slave_1: entered allmulticast mode [ 381.125724][T16931] bridge_slave_1: entered promiscuous mode [ 381.182124][T17004] gre0 speed is unknown, defaulting to 1000 [ 381.263559][T16931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.288347][T16931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.300402][T17006] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2862'. [ 381.314070][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2862'. [ 381.328256][T16931] team0: Port device team_slave_0 added [ 381.342162][T16931] team0: Port device team_slave_1 added [ 381.419236][T16931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.430887][T16931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.457780][T16931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.477337][T16931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.484622][T16931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.518608][T16931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.544025][T17008] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2863'. [ 381.580896][T17008] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2863'. [ 381.746223][T16931] hsr_slave_0: entered promiscuous mode [ 381.755073][T16931] hsr_slave_1: entered promiscuous mode [ 381.768596][T16931] debugfs: 'hsr0' already exists in 'hsr' [ 381.780047][T16931] Cannot create hsr debugfs directory [ 381.913767][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 381.921796][ C0] lec:lec_tx_timeout: lec0 [ 381.926783][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 381.936494][ T51] Bluetooth: hci5: command tx timeout [ 382.032182][T17031] gre0 speed is unknown, defaulting to 1000 [ 383.993935][ T51] Bluetooth: hci5: command tx timeout [ 384.849083][T17023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.868710][T16931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.928054][T16931] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.961970][T16931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.998143][T16931] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.011611][T16931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 385.031818][T16931] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.059879][T16931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 385.126922][T16931] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.148232][T17075] __nla_validate_parse: 3 callbacks suppressed [ 385.148250][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2879'. [ 385.243667][T17075] macvtap0: entered promiscuous mode [ 385.250406][T17075] virtio_net virtio1 eth0: entered promiscuous mode [ 385.299432][T17075] macvtap0: entered allmulticast mode [ 385.337425][T17075] virtio_net virtio1 eth0: entered allmulticast mode [ 385.562525][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2879'. [ 385.599090][T16931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.627545][T16931] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.839208][T17075] virtio_net virtio1 eth0: left allmulticast mode [ 385.850590][T17075] virtio_net virtio1 eth0: left promiscuous mode [ 385.913409][T13913] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.920620][T13913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.007404][T13913] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.014589][T13913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.059639][T17127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2888'. [ 386.075333][ T51] Bluetooth: hci5: command tx timeout [ 386.297661][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'. [ 386.332115][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'. [ 386.428503][T17137] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2889'. [ 386.672384][T16931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.831265][T16931] veth0_vlan: entered promiscuous mode [ 386.839461][T17166] netlink: 'syz.4.2894': attribute type 49 has an invalid length. [ 386.863595][T16931] veth1_vlan: entered promiscuous mode [ 386.933759][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 386.941836][ C0] lec:lec_tx_timeout: lec0 [ 386.946493][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 386.955734][T16931] veth0_macvtap: entered promiscuous mode [ 386.967162][T17176] net_ratelimit: 45 callbacks suppressed [ 386.967187][T17176] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 386.993350][T16931] veth1_macvtap: entered promiscuous mode [ 387.061734][T16931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.098834][T16931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.151333][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.171787][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.200743][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.210254][T17187] netlink: 'syz.2.2900': attribute type 1 has an invalid length. [ 387.218234][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.227614][T17187] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2900'. [ 387.367204][T17188] gre0 speed is unknown, defaulting to 1000 [ 387.394629][T17192] netlink: 'syz.1.2897': attribute type 1 has an invalid length. [ 387.447741][T17192] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2897'. [ 387.458776][T13913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.584473][T13913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.656742][T17192] IPVS: Error connecting to the multicast addr [ 387.815294][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.823149][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.938232][T17210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2904'. [ 387.976632][T17210] xfrm0: entered promiscuous mode [ 387.999089][T17210] xfrm0: entered allmulticast mode [ 388.019368][T17210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2904'. [ 388.154828][ T51] Bluetooth: hci5: command tx timeout [ 389.661109][T17282] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 389.812244][T17291] netlink: 'syz.0.2920': attribute type 6 has an invalid length. [ 389.865175][T17291] IPv6: NLM_F_CREATE should be specified when creating new route [ 390.062476][T17297] gre0 speed is unknown, defaulting to 1000 [ 390.218722][T17307] netlink: 'syz.0.2923': attribute type 3 has an invalid length. [ 390.304707][T17307] __nla_validate_parse: 4 callbacks suppressed [ 390.304726][T17307] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2923'. [ 390.404416][T17313] IPVS: set_ctl: invalid protocol: 81 0.0.0.0:20001 [ 390.421737][T17313] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2925'. [ 390.527054][T17313] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2925'. [ 390.594315][T17323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.638971][T17322] gretap1: entered promiscuous mode [ 390.674976][T17322] gretap1: entered allmulticast mode [ 390.739452][T17331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2929'. [ 390.835261][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2931'. [ 391.058323][T17351] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 391.164498][T17353] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2936'. [ 391.202592][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2936'. [ 391.221797][T17353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2936'. [ 391.271029][T17354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2936'. [ 391.295496][ T148] tipc: Subscription rejected, illegal request [ 391.682732][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 391.694083][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 391.702530][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 391.713132][T17364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.734396][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 391.748673][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 391.801559][T17367] gre0 speed is unknown, defaulting to 1000 [ 391.953802][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 391.961932][ C0] lec:lec_tx_timeout: lec0 [ 391.966526][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 392.113121][T17371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.215123][T17371] netlink: 'syz.4.2942': attribute type 1 has an invalid length. [ 392.350183][ T132] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 50081 - 0 [ 392.369995][ T132] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 392.478041][ T132] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 50081 - 0 [ 392.488118][ T132] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 392.608590][ T132] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 50081 - 0 [ 392.624547][ T132] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 392.701462][ T132] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 50081 - 0 [ 392.717236][ T132] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 392.880767][T17407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2951'. [ 392.882832][T17410] netlink: 'syz.1.2952': attribute type 10 has an invalid length. [ 392.982781][T17407] veth0_macvtap: left promiscuous mode [ 392.996729][T17410] netlink: 'syz.1.2952': attribute type 10 has an invalid length. [ 393.103238][T17367] chnl_net:caif_netlink_parms(): no params data found [ 393.330548][T17439] syz.1.2960: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 393.348640][T17439] CPU: 1 UID: 0 PID: 17439 Comm: syz.1.2960 Not tainted syzkaller #0 PREEMPT(full) [ 393.348667][T17439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 393.348681][T17439] Call Trace: [ 393.348688][T17439] [ 393.348697][T17439] dump_stack_lvl+0xe8/0x150 [ 393.348729][T17439] warn_alloc+0x249/0x340 [ 393.348752][T17439] ? stack_trace_save+0xa9/0x100 [ 393.348775][T17439] ? __pfx_warn_alloc+0x10/0x10 [ 393.348803][T17439] ? kasan_save_track+0x4f/0x80 [ 393.348823][T17439] ? kasan_save_track+0x3e/0x80 [ 393.348841][T17439] ? __kasan_kmalloc+0x93/0xb0 [ 393.348861][T17439] ? __kmalloc_cache_noprof+0x31c/0x660 [ 393.348881][T17439] ? xskq_create+0x56/0x170 [ 393.348900][T17439] ? xsk_setsockopt+0x54c/0x990 [ 393.348914][T17439] ? do_sock_setsockopt+0x17c/0x1b0 [ 393.348938][T17439] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 393.348962][T17439] ? do_syscall_64+0x14d/0xf80 [ 393.348988][T17439] __vmalloc_node_range_noprof+0x132/0x1730 [ 393.349039][T17439] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 393.349067][T17439] ? __kasan_kmalloc+0x93/0xb0 [ 393.349096][T17439] vmalloc_user_noprof+0xad/0xe0 [ 393.349121][T17439] ? xskq_create+0xbf/0x170 [ 393.349144][T17439] xskq_create+0xbf/0x170 [ 393.349169][T17439] xsk_init_queue+0x8a/0xe0 [ 393.349191][T17439] xsk_setsockopt+0x54c/0x990 [ 393.349212][T17439] ? __pfx_xsk_setsockopt+0x10/0x10 [ 393.349230][T17439] ? __pfx_aa_sk_perm+0x10/0x10 [ 393.349264][T17439] ? aa_sock_opt_perm+0xff/0x1a0 [ 393.349284][T17439] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 393.349305][T17439] ? __pfx_xsk_setsockopt+0x10/0x10 [ 393.349325][T17439] do_sock_setsockopt+0x17c/0x1b0 [ 393.349358][T17439] __x64_sys_setsockopt+0x13d/0x1b0 [ 393.349391][T17439] do_syscall_64+0x14d/0xf80 [ 393.349411][T17439] ? trace_irq_disable+0x3b/0x150 [ 393.349427][T17439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.349447][T17439] ? clear_bhb_loop+0x40/0x90 [ 393.349472][T17439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.349498][T17439] RIP: 0033:0x7f5651d9c819 [ 393.349516][T17439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.349534][T17439] RSP: 002b:00007f5652bc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 393.349554][T17439] RAX: ffffffffffffffda RBX: 00007f5652015fa0 RCX: 00007f5651d9c819 [ 393.349575][T17439] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 393.349586][T17439] RBP: 00007f5651e32c91 R08: 0000000000000004 R09: 0000000000000000 [ 393.349597][T17439] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.349609][T17439] R13: 00007f5652016038 R14: 00007f5652015fa0 R15: 00007ffcde38c8f8 [ 393.349641][T17439] [ 393.349653][T17439] Mem-Info: [ 393.381343][ T132] dvmrp6: left allmulticast mode [ 393.385743][T17439] active_anon:6630 inactive_anon:0 isolated_anon:0 [ 393.385743][T17439] active_file:3567 inactive_file:40063 isolated_file:0 [ 393.385743][T17439] unevictable:768 dirty:189 writeback:0 [ 393.385743][T17439] slab_reclaimable:13353 slab_unreclaimable:157669 [ 393.385743][T17439] mapped:29623 shmem:1374 pagetables:1375 [ 393.385743][T17439] sec_pagetables:0 bounce:0 [ 393.385743][T17439] kernel_misc_reclaimable:0 [ 393.385743][T17439] free:1251579 free_pcp:21084 free_cma:0 [ 393.679383][T17439] Node 0 active_anon:26720kB inactive_anon:0kB active_file:14268kB inactive_file:160052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122592kB dirty:756kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15044kB pagetables:5656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 393.714513][T17439] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 393.749932][T17439] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 393.783591][T17439] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 393.789903][T17439] Node 0 DMA32 free:1048644kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26720kB inactive_anon:0kB active_file:14268kB inactive_file:160052kB unevictable:1536kB writepending:756kB zspages:0kB present:3129332kB managed:2552060kB mlocked:0kB bounce:0kB free_pcp:84200kB local_pcp:58684kB free_cma:0kB [ 393.824757][T17439] lowmem_reserve[]: 0 0 0 0 0 [ 393.829578][T17439] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:868kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 393.860134][T17439] lowmem_reserve[]: 0 0 0 0 0 [ 393.865037][T17439] Node 1 Normal free:3941928kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 393.869135][ T5829] Bluetooth: hci0: command tx timeout [ 393.903344][T17439] lowmem_reserve[]: 0 0 0 0 0 [ 393.908338][T17439] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 393.921571][T17439] Node 0 DMA32: 6366*4kB (UME) 4112*8kB (UME) 2107*16kB (UM) 281*32kB (UME) 185*64kB (UME) 405*128kB (UME) 339*256kB (UME) 267*512kB (UM) 175*1024kB (UM) 111*2048kB (UME) 64*4096kB (UM) = 1056904kB [ 393.942379][T17439] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 393.955364][T17439] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 3*16kB (UM) 5*32kB (UM) 5*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941928kB [ 393.972990][T17439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 393.983242][T17439] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 393.992870][T17439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 394.012486][T17439] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 394.022646][T17439] 45005 total pagecache pages [ 394.027791][T17439] 0 pages in swap cache [ 394.032071][T17439] Free swap = 124996kB [ 394.037517][T17439] Total swap = 124996kB [ 394.041798][T17439] 2097051 pages RAM [ 394.046797][T17439] 0 pages HighMem/MovableOnly [ 394.051693][T17439] 427204 pages reserved [ 394.056445][T17439] 0 pages cma reserved [ 394.093413][ T132] bond4 (unregistering): (slave gretap2): Releasing active interface [ 394.140140][ T132] bond11 (unregistering): (slave geneve3): Releasing active interface [ 394.318114][ T132] bond3 (unregistering): (slave bridge4): Releasing active interface [ 394.427675][ T132] team0: Port device bridge6 removed [ 394.497000][ T132] bond7 (unregistering): (slave bridge7): Releasing backup interface [ 394.648714][ T132] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 394.658165][ T132] bond0 (unregistering): Released all slaves [ 394.668177][ T132] bond1 (unregistering): Released all slaves [ 394.680884][ T132] bond2 (unregistering): Released all slaves [ 394.693083][ T132] bond3 (unregistering): Released all slaves [ 394.705946][ T132] bond4 (unregistering): Released all slaves [ 394.728862][ T132] bond5 (unregistering): Released all slaves [ 394.741790][ T132] bond6 (unregistering): Released all slaves [ 394.754210][ T132] bond7 (unregistering): Released all slaves [ 394.767738][ T132] bond8 (unregistering): (slave lo): Releasing backup interface [ 394.776321][ T132] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 394.787995][ T132] bond8 (unregistering): Released all slaves [ 394.801216][ T132] bond9 (unregistering): Released all slaves [ 394.813620][ T132] bond10 (unregistering): Released all slaves [ 394.828581][ T132] bond11 (unregistering): Released all slaves [ 394.881449][T17446] ip6gre2: entered promiscuous mode [ 394.904892][T17446] ip6gre2: entered allmulticast mode [ 394.930473][T17448] netlink: 'syz.2.2963': attribute type 6 has an invalid length. [ 395.041102][T17367] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.051221][T17367] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.069284][T17367] bridge_slave_0: entered allmulticast mode [ 395.094313][T17367] bridge_slave_0: entered promiscuous mode [ 395.121811][ T132] tipc: Disabling bearer [ 395.156172][ T132] tipc: Left network mode [ 395.156312][T17367] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.187571][T17367] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.197942][T17367] bridge_slave_1: entered allmulticast mode [ 395.228603][T17367] bridge_slave_1: entered promiscuous mode [ 395.468611][T17367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.486960][T17367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.646611][T17493] gtp8: entered promiscuous mode [ 395.664683][T17493] gtp8: entered allmulticast mode [ 395.686692][T17367] team0: Port device team_slave_0 added [ 395.717798][T17367] team0: Port device team_slave_1 added [ 395.900240][T17367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.917525][ T5829] Bluetooth: hci0: command tx timeout [ 395.932901][T17367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.961924][T17367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.996906][T17367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.004487][T17367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.046279][T17367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.159116][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 396.293865][T17513] __nla_validate_parse: 5 callbacks suppressed [ 396.294201][T17513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2974'. [ 396.342928][T17367] hsr_slave_0: entered promiscuous mode [ 396.359702][T17367] hsr_slave_1: entered promiscuous mode [ 396.367384][T17367] debugfs: 'hsr0' already exists in 'hsr' [ 396.373137][T17367] Cannot create hsr debugfs directory [ 396.390147][ T132] hsr_slave_0: left promiscuous mode [ 396.396603][ T132] hsr_slave_1: left promiscuous mode [ 396.407407][ T132] veth1_vlan: left allmulticast mode [ 396.697035][T17522] netlink: 'syz.1.2976': attribute type 83 has an invalid length. [ 396.697070][T17521] netlink: 'syz.1.2976': attribute type 83 has an invalid length. [ 396.983773][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 396.991826][ C0] lec:lec_tx_timeout: lec0 [ 396.998249][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 397.298378][T17539] veth1_macvtap: left promiscuous mode [ 397.313937][T17539] macsec0: entered promiscuous mode [ 397.375478][T17544] veth1_macvtap: entered promiscuous mode [ 397.383013][T17544] macsec0: left promiscuous mode [ 398.001092][ T5829] Bluetooth: hci0: command tx timeout [ 399.229427][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 399.261587][ T132] IPVS: stop unused estimator thread 0... [ 399.434409][T17599] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2995'. [ 399.446748][T17596] macsec0: entered promiscuous mode [ 399.455986][T17596] macsec0: left promiscuous mode [ 399.482861][T17596] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 399.629818][T17609] ip6tnl2: entered promiscuous mode [ 399.684160][T17605] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2996'. [ 399.697306][T17605] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2996'. [ 400.071206][T17629] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.078968][T17629] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.089721][ T5829] Bluetooth: hci0: command tx timeout [ 400.231734][T17629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.256199][T17629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.467881][T13910] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.495042][T13910] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.529460][T13910] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.543082][T13910] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.593272][T17657] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.632970][T17367] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 400.649232][T17367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.667375][T17657] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.700082][T17367] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 400.727847][T17367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.757861][T17657] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.777139][T17367] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 400.795229][T17367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.858903][T17367] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 400.881273][T17367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.891546][T17657] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.985701][T17667] gre0 speed is unknown, defaulting to 1000 [ 401.159035][ T132] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.209641][T17689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'. [ 401.275858][ T132] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.304378][T17687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'. [ 401.380664][T17367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.401531][T13910] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.447394][ T132] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.529239][T17367] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.557162][T17696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3011'. [ 401.582708][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.589989][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.641698][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.648909][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.729477][T17699] team0: Port device bridge0 removed [ 401.792308][T17699] bond8: (slave geneve2): Releasing active interface [ 402.023756][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 402.031869][ C0] lec:lec_tx_timeout: lec0 [ 402.036635][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 402.043488][ T132] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.062764][ T132] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.125970][T17367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.167528][T17367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.279567][ T132] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.323143][ T132] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.561963][T17743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3019'. [ 402.602153][T17743] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3019'. [ 402.653688][T17747] syzkaller0: entered promiscuous mode [ 402.674443][T17747] syzkaller0: entered allmulticast mode [ 402.722289][T17751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3021'. [ 402.976111][T17367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.062689][T17367] veth0_vlan: entered promiscuous mode [ 403.090479][T17771] netlink: 'syz.0.3025': attribute type 3 has an invalid length. [ 403.107294][T17771] netlink: 'syz.0.3025': attribute type 1 has an invalid length. [ 403.130678][T17775] tap0: tun_chr_ioctl cmd 1074025676 [ 403.134885][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3025'. [ 403.146617][T17775] tap0: owner set to 0 [ 403.151448][T17367] veth1_vlan: entered promiscuous mode [ 403.227176][T17367] veth0_macvtap: entered promiscuous mode [ 403.261582][T17367] veth1_macvtap: entered promiscuous mode [ 403.309360][T17367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.350699][T17367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.371275][ T132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.392420][T17785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3029'. [ 403.402512][ T132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.415464][ T132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.438060][ T132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.578607][T17801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3031'. [ 403.891487][T17823] syzkaller0: entered promiscuous mode [ 403.903450][T17823] syzkaller0: entered allmulticast mode [ 404.180199][T17786] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 404.195349][T17786] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 404.502572][T17852] netlink: 'syz.2.3039': attribute type 1 has an invalid length. [ 404.510452][T17852] netlink: 936 bytes leftover after parsing attributes in process `syz.2.3039'. [ 404.520884][T17852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3039'. [ 404.615792][T17857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.632506][T10907] gre0 speed is unknown, defaulting to 1000 [ 404.638978][T10907] syz1: Port: 1 Link ACTIVE [ 404.645167][ T10] gre0 speed is unknown, defaulting to 1000 [ 406.324157][T17782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.431829][T17868] netlink: 'syz.2.3045': attribute type 1 has an invalid length. [ 406.449876][T17868] __nla_validate_parse: 4 callbacks suppressed [ 406.449895][T17868] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3045'. [ 406.477047][T13910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.489789][T17876] netlink: 'syz.4.3047': attribute type 3 has an invalid length. [ 406.512728][T13910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.608771][T17881] x_tables: duplicate entry at hook 3 [ 406.614975][T17881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3047'. [ 406.645282][T13915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.653130][T13915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.053750][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 407.061795][ C0] lec:lec_tx_timeout: lec0 [ 407.365991][T17904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2939'. [ 407.407266][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2939'. [ 407.447754][T17907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3051'. [ 407.449600][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3052'. [ 407.462252][T17907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3051'. [ 407.481622][T17907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3051'. [ 407.621325][T17912] syzkaller0: entered promiscuous mode [ 407.643881][T17912] syzkaller0: entered allmulticast mode [ 407.677069][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.687281][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.702174][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.717710][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.726458][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.778192][T17923] netlink: 'syz.2.3056': attribute type 1 has an invalid length. [ 407.790278][T17919] gre0 speed is unknown, defaulting to 1000 [ 407.821999][T17922] netlink: 'syz.2.3056': attribute type 1 has an invalid length. [ 408.169662][T17944] sctp: [Deprecated]: syz.0.3061 (pid 17944) Use of int in max_burst socket option. [ 408.169662][T17944] Use struct sctp_assoc_value instead [ 408.423410][T17935] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 408.455560][T17954] openvswitch: netlink: Flow key attr not present in new flow. [ 408.651500][T17954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3064'. [ 408.697732][T17919] chnl_net:caif_netlink_parms(): no params data found [ 408.771758][T17961] netlink: 'syz.1.3066': attribute type 12 has an invalid length. [ 409.071080][T17978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3069'. [ 409.381782][T17993] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 409.381782][T17993] Please contact the netfilter-devel mailing list or update your nftables rules. [ 409.747774][T13910] bond0 (unregistering): Released all slaves [ 409.754089][ T5829] Bluetooth: hci2: command tx timeout [ 409.761968][T13910] bond1 (unregistering): Released all slaves [ 409.772502][T13910] bond2 (unregistering): Released all slaves [ 409.787046][T13910] bond3 (unregistering): Released all slaves [ 409.803613][T13910] bond4 (unregistering): Released all slaves [ 409.816638][T13910] bond5 (unregistering): Released all slaves [ 409.829950][T13910] bond6 (unregistering): Released all slaves [ 409.848276][T13910] bond7 (unregistering): Released all slaves [ 409.864039][T13910] bond8 (unregistering): Released all slaves [ 409.876817][T13910] bond9 (unregistering): Released all slaves [ 409.889436][T13910] bond10 (unregistering): Released all slaves [ 410.065186][T17919] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.089818][T17919] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.105358][T17919] bridge_slave_0: entered allmulticast mode [ 410.113227][T17919] bridge_slave_0: entered promiscuous mode [ 410.127923][T13910] l2: left promiscuous mode [ 410.195605][T17919] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.213124][T17919] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.226926][T17919] bridge_slave_1: entered allmulticast mode [ 410.245359][T17919] bridge_slave_1: entered promiscuous mode [ 410.265478][T13910] tipc: Left network mode [ 410.348091][T17919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.387006][T17919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.396151][ T29] audit: type=1800 audit(1776233466.203:10): pid=18013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3077" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3020 res=0 errno=0 [ 410.580695][T17914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.592351][T18020] xt_hashlimit: max too large, truncated to 1048576 [ 410.672254][T17919] team0: Port device team_slave_0 added [ 410.712470][T17919] team0: Port device team_slave_1 added [ 410.836154][T18025] FAULT_INJECTION: forcing a failure. [ 410.836154][T18025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.895061][T18025] CPU: 0 UID: 0 PID: 18025 Comm: syz.3.3079 Not tainted syzkaller #0 PREEMPT(full) [ 410.895087][T18025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 410.895098][T18025] Call Trace: [ 410.895105][T18025] [ 410.895113][T18025] dump_stack_lvl+0xe8/0x150 [ 410.895144][T18025] should_fail_ex+0x412/0x560 [ 410.895175][T18025] _copy_from_user+0x2d/0xb0 [ 410.895198][T18025] ___sys_sendmsg+0x1c6/0x360 [ 410.895233][T18025] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.895293][T18025] ? __fget_files+0x2a/0x420 [ 410.895309][T18025] ? __fget_files+0x3a0/0x420 [ 410.895336][T18025] __x64_sys_sendmsg+0x1bd/0x2a0 [ 410.895364][T18025] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.895400][T18025] ? __pfx_ksys_write+0x10/0x10 [ 410.895431][T18025] do_syscall_64+0x14d/0xf80 [ 410.895452][T18025] ? trace_irq_disable+0x3b/0x150 [ 410.895468][T18025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.895493][T18025] ? clear_bhb_loop+0x40/0x90 [ 410.895515][T18025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.895533][T18025] RIP: 0033:0x7fc498b9c819 [ 410.895549][T18025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.895565][T18025] RSP: 002b:00007fc499a20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.895584][T18025] RAX: ffffffffffffffda RBX: 00007fc498e15fa0 RCX: 00007fc498b9c819 [ 410.895597][T18025] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 410.895609][T18025] RBP: 00007fc499a20090 R08: 0000000000000000 R09: 0000000000000000 [ 410.895620][T18025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.895631][T18025] R13: 00007fc498e16038 R14: 00007fc498e15fa0 R15: 00007fff2540ced8 [ 410.895661][T18025] [ 410.945449][T18038] netlink: 'syz.3.3079': attribute type 30 has an invalid length. [ 410.960791][T17919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.034386][T18039] netlink: 'syz.1.3080': attribute type 30 has an invalid length. [ 411.042718][T17919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.123814][T17919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.220805][T17919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.230725][T17919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.264527][T17919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.613196][T17919] hsr_slave_0: entered promiscuous mode [ 411.625104][T17919] hsr_slave_1: entered promiscuous mode [ 411.637120][T18064] gre0 speed is unknown, defaulting to 1000 [ 411.678475][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 411.836472][ T51] Bluetooth: hci2: command tx timeout [ 411.846221][T18081] __nla_validate_parse: 3 callbacks suppressed [ 411.846238][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3088'. [ 411.934911][T18069] gre0 speed is unknown, defaulting to 1000 [ 413.161958][T13910] IPVS: stop unused estimator thread 0... [ 413.233484][T18085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.472143][T18103] netlink: 'syz.0.3094': attribute type 30 has an invalid length. [ 413.914074][ T51] Bluetooth: hci2: command tx timeout [ 414.353565][T18067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.366577][T17919] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 414.398298][T17919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.466122][T17919] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 414.494142][T17919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.496018][T18110] netlink: 'syz.0.3095': attribute type 9 has an invalid length. [ 414.510157][T17919] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 414.536671][T18110] netlink: 147224 bytes leftover after parsing attributes in process `syz.0.3095'. [ 414.553305][T17919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.572987][T17919] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 414.609456][T17919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.699537][T18129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3101'. [ 414.761665][T17919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.817446][T17919] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.862708][T13908] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.869896][T13908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.907857][T13910] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.915090][T13910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.300260][T17919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.661065][T18179] dvmrp1: entered allmulticast mode [ 415.666954][T18179] dvmrp1: left allmulticast mode [ 415.775157][T18188] openvswitch: netlink: Duplicate or invalid key (type 0). [ 415.796018][T18188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.827397][T17919] veth0_vlan: entered promiscuous mode [ 415.859620][T17919] veth1_vlan: entered promiscuous mode [ 415.958493][T17919] veth0_macvtap: entered promiscuous mode [ 415.987599][T17919] veth1_macvtap: entered promiscuous mode [ 415.994436][ T51] Bluetooth: hci2: command tx timeout [ 416.052449][T17919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.088270][T18206] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3112'. [ 416.107770][T18206] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3112'. [ 416.141252][T17919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.154755][T18206] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3112'. [ 416.184011][T18206] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3112'. [ 416.214406][ T132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.227600][T18206] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3112'. [ 416.248240][ T132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.257926][T18206] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3112'. [ 416.272396][T18206] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3112'. [ 416.293180][ T132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.304710][ T132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.486534][T18226] Bluetooth: MGMT ver 1.23 [ 416.498717][T18226] tap0: tun_chr_ioctl cmd 2148553947 [ 418.243205][T18157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.364231][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.372095][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.475365][T13910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.487146][T13910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.528606][T18264] netlink: 'syz.1.3118': attribute type 2 has an invalid length. [ 418.708691][T18276] FAULT_INJECTION: forcing a failure. [ 418.708691][T18276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.723924][T18276] CPU: 1 UID: 0 PID: 18276 Comm: syz.4.3053 Not tainted syzkaller #0 PREEMPT(full) [ 418.723950][T18276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 418.723961][T18276] Call Trace: [ 418.723969][T18276] [ 418.723976][T18276] dump_stack_lvl+0xe8/0x150 [ 418.724006][T18276] should_fail_ex+0x412/0x560 [ 418.724037][T18276] _copy_from_user+0x2d/0xb0 [ 418.724060][T18276] alg_setkey+0xb8/0x190 [ 418.724083][T18276] alg_setsockopt+0x3da/0x4a0 [ 418.724102][T18276] ? __pfx_alg_setsockopt+0x10/0x10 [ 418.724122][T18276] do_sock_setsockopt+0x17c/0x1b0 [ 418.724152][T18276] __x64_sys_setsockopt+0x13d/0x1b0 [ 418.724183][T18276] do_syscall_64+0x14d/0xf80 [ 418.724206][T18276] ? trace_irq_disable+0x3b/0x150 [ 418.724222][T18276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.724240][T18276] ? clear_bhb_loop+0x40/0x90 [ 418.724262][T18276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.724280][T18276] RIP: 0033:0x7fdb17f9c819 [ 418.724298][T18276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.724313][T18276] RSP: 002b:00007fdb18d78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 418.724333][T18276] RAX: ffffffffffffffda RBX: 00007fdb18215fa0 RCX: 00007fdb17f9c819 [ 418.724346][T18276] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 418.724357][T18276] RBP: 00007fdb18d78090 R08: 0000000000000030 R09: 0000000000000000 [ 418.724368][T18276] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.724380][T18276] R13: 00007fdb18216038 R14: 00007fdb18215fa0 R15: 00007fffd879f168 [ 418.724411][T18276] [ 419.028073][T18280] syzkaller0: entered promiscuous mode [ 419.033652][T18280] syzkaller0: entered allmulticast mode [ 419.109827][T18285] __nla_validate_parse: 26 callbacks suppressed [ 419.109849][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3127'. [ 419.162116][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 419.177904][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 419.186900][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 419.196602][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 419.204240][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.430639][T18293] gre0 speed is unknown, defaulting to 1000 [ 419.547708][T18312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3134'. [ 419.598188][T18312] netlink: 'syz.1.3134': attribute type 1 has an invalid length. [ 419.625118][T18314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3136'. [ 419.637653][T18316] macvtap0: entered promiscuous mode [ 419.653374][T18316] macvtap0: entered allmulticast mode [ 419.673460][T18316] veth1_vlan: entered allmulticast mode [ 419.745497][T18322] xt_policy: output policy not valid in PREROUTING and INPUT [ 419.774850][T18317] bond13: entered promiscuous mode [ 419.780022][T18317] bond13: entered allmulticast mode [ 419.820443][T18317] 8021q: adding VLAN 0 to HW filter on device bond13 [ 419.889087][T18334] FAULT_INJECTION: forcing a failure. [ 419.889087][T18334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.902790][T18334] CPU: 1 UID: 0 PID: 18334 Comm: syz.3.3140 Not tainted syzkaller #0 PREEMPT(full) [ 419.902814][T18334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 419.902824][T18334] Call Trace: [ 419.902831][T18334] [ 419.902838][T18334] dump_stack_lvl+0xe8/0x150 [ 419.902869][T18334] should_fail_ex+0x412/0x560 [ 419.902899][T18334] _copy_to_user+0x31/0xb0 [ 419.902922][T18334] simple_read_from_buffer+0xe1/0x170 [ 419.902959][T18334] proc_fail_nth_read+0x1bb/0x230 [ 419.902986][T18334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.903009][T18334] ? rw_verify_area+0x2a6/0x4d0 [ 419.903026][T18334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.903050][T18334] vfs_read+0x20c/0xa70 [ 419.903066][T18334] ? fdget_pos+0x246/0x320 [ 419.903086][T18334] ? __pfx___mutex_lock+0x10/0x10 [ 419.903108][T18334] ? __pfx_vfs_read+0x10/0x10 [ 419.903130][T18334] ? __fget_files+0x2a/0x420 [ 419.903151][T18334] ? __fget_files+0x3a0/0x420 [ 419.903166][T18334] ? __fget_files+0x2a/0x420 [ 419.903191][T18334] ksys_read+0x150/0x270 [ 419.903214][T18334] ? __pfx_ksys_read+0x10/0x10 [ 419.903245][T18334] do_syscall_64+0x14d/0xf80 [ 419.903265][T18334] ? trace_irq_disable+0x3b/0x150 [ 419.903279][T18334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.903297][T18334] ? clear_bhb_loop+0x40/0x90 [ 419.903317][T18334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.903333][T18334] RIP: 0033:0x7fc498b5d04e [ 419.903349][T18334] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 419.903364][T18334] RSP: 002b:00007fc499a1ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 419.903383][T18334] RAX: ffffffffffffffda RBX: 00007fc499a206c0 RCX: 00007fc498b5d04e [ 419.903396][T18334] RDX: 000000000000000f RSI: 00007fc499a200a0 RDI: 0000000000000004 [ 419.903407][T18334] RBP: 00007fc499a20090 R08: 0000000000000000 R09: 0000000000000000 [ 419.903417][T18334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.903426][T18334] R13: 00007fc498e16038 R14: 00007fc498e15fa0 R15: 00007fff2540ced8 [ 419.903455][T18334] [ 420.158103][T18321] veth9: entered promiscuous mode [ 420.163348][T18321] veth9: entered allmulticast mode [ 420.173450][T18321] bond13: (slave veth9): Enslaving as a backup interface with a down link [ 420.522600][T18364] netlink: 'syz.4.3146': attribute type 30 has an invalid length. [ 420.660684][T18371] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3148'. [ 420.673974][T18371] netlink: 680 bytes leftover after parsing attributes in process `syz.4.3148'. [ 420.688217][T18371] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3148'. [ 420.704190][T18293] chnl_net:caif_netlink_parms(): no params data found [ 420.734104][T18373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3150'. [ 420.829268][T18378] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3151'. [ 420.839585][T18378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3151'. [ 420.938238][T18385] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3152'. [ 420.951108][T18293] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.963928][T18293] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.979000][T18293] bridge_slave_0: entered allmulticast mode [ 420.989970][T18293] bridge_slave_0: entered promiscuous mode [ 420.998893][T18293] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.007637][T18293] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.016011][T18293] bridge_slave_1: entered allmulticast mode [ 421.024089][T18293] bridge_slave_1: entered promiscuous mode [ 421.061940][T18293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.077267][T18293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.123509][T18293] team0: Port device team_slave_0 added [ 421.131937][T18293] team0: Port device team_slave_1 added [ 421.187061][T18293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.213924][T18293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.264219][T18293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.275622][ T51] Bluetooth: hci1: command tx timeout [ 421.285314][T18293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.292283][T18293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.327977][T18293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.475431][T18390] netlink: 'syz.3.3154': attribute type 30 has an invalid length. [ 421.631572][T18293] hsr_slave_0: entered promiscuous mode [ 421.638937][T18293] hsr_slave_1: entered promiscuous mode [ 421.650138][T18293] debugfs: 'hsr0' already exists in 'hsr' [ 421.656469][T18293] Cannot create hsr debugfs directory [ 422.052239][T18417] xt_TCPMSS: Only works on TCP SYN packets [ 422.372022][ T5890] IPVS: starting estimator thread 0... [ 422.457106][T18293] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 422.474379][T18424] IPVS: using max 37 ests per chain, 88800 per kthread [ 422.555017][T18293] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 422.687196][T18293] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 422.781059][T18293] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 422.877137][T18451] netlink: 'syz.3.3168': attribute type 8 has an invalid length. [ 423.354016][ T51] Bluetooth: hci1: command tx timeout [ 424.007970][T18493] netlink: 'syz.3.3177': attribute type 4 has an invalid length. [ 425.434072][ T51] Bluetooth: hci1: command tx timeout [ 425.765421][T18446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.778033][T18293] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 425.828208][T18293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.871213][T18293] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 425.909184][T18293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.934113][T18293] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 425.941976][T18506] __nla_validate_parse: 7 callbacks suppressed [ 425.941993][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3179'. [ 425.963306][T18293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.970877][T18509] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3182'. [ 425.971463][T18293] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 426.137275][T18293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.231108][T18523] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3185'. [ 426.280262][T18525] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3184'. [ 426.402121][T18293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.460972][T18293] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.508959][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.516160][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.591710][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.598949][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.837145][T18547] openvswitch: netlink: EtherType 50a is less than min 600 [ 427.109410][T18552] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3190'. [ 427.177606][T18293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.255370][T18552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.267479][T18552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.279303][T18552] bond0 (unregistering): Released all slaves [ 427.513933][ T51] Bluetooth: hci1: command tx timeout [ 427.529919][T18565] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3192'. [ 427.591814][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3192'. [ 427.621157][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3192'. [ 427.859107][T18575] netlink: 'syz.1.3196': attribute type 30 has an invalid length. [ 427.895952][T18293] veth0_vlan: entered promiscuous mode [ 427.924235][T18293] veth1_vlan: entered promiscuous mode [ 427.987001][T18582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3200'. [ 428.002609][T18293] veth0_macvtap: entered promiscuous mode [ 428.014339][T18293] veth1_macvtap: entered promiscuous mode [ 428.062527][T18293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.096111][T18293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.267561][T18586] bond13: left promiscuous mode [ 428.284017][T18586] veth9: left promiscuous mode [ 428.289258][T18586] bond13: left allmulticast mode [ 428.303997][T18586] veth9: left allmulticast mode [ 428.362557][ T3549] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.380109][ T3549] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.424321][ T3549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.463404][T13910] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.553266][T18597] sctp: [Deprecated]: syz.1.3203 (pid 18597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.553266][T18597] Use struct sctp_sack_info instead [ 428.693198][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.694525][ T8858] lec:lec_start_xmit: lec0:No lecd attached [ 428.738216][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.805719][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.831323][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.275299][T18613] bond1: option tlb_dynamic_lb: invalid value (5) [ 429.363465][T18613] bond1 (unregistering): Released all slaves [ 429.428208][T18628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3210'. [ 429.477194][T18611] netlink: 'syz.1.3206': attribute type 3 has an invalid length. [ 429.485250][T18611] netlink: 'syz.1.3206': attribute type 3 has an invalid length. [ 429.529284][T18632] netlink: 'syz.3.3209': attribute type 30 has an invalid length. [ 430.456599][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 430.467153][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 430.467159][T18666] netlink: 'syz.2.3214': attribute type 1 has an invalid length. [ 430.482190][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 430.504078][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 430.513286][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 430.573451][T18666] netlink: 'syz.2.3214': attribute type 3 has an invalid length. [ 430.665189][T18665] gre0 speed is unknown, defaulting to 1000 [ 430.808325][T18652] netlink: 'syz.3.3211': attribute type 4 has an invalid length. [ 430.839380][T18639] netlink: 'syz.3.3211': attribute type 4 has an invalid length. [ 431.305344][T18684] __nla_validate_parse: 3 callbacks suppressed [ 431.305365][T18684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3218'. [ 431.448980][T18686] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3219'. [ 431.823152][T18665] chnl_net:caif_netlink_parms(): no params data found [ 432.081331][T18665] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.089539][T18665] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.100852][T18665] bridge_slave_0: entered allmulticast mode [ 432.108677][T18665] bridge_slave_0: entered promiscuous mode [ 432.117291][T18665] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.124794][T18665] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.132053][T18665] bridge_slave_1: entered allmulticast mode [ 432.139812][T18665] bridge_slave_1: entered promiscuous mode [ 432.181363][T18665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.207636][T18665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.281106][T18665] team0: Port device team_slave_0 added [ 432.305497][T18665] team0: Port device team_slave_1 added [ 432.409745][T18665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.422000][T18665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.450342][T18665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.489863][T18665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.492753][T18729] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3228'. [ 432.540532][T18665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.575776][ T5829] Bluetooth: hci3: command tx timeout [ 432.603271][T18665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.745607][T18743] atomic_op ffff888025f84198 conn xmit_atomic 0000000000000000 [ 432.745765][T18741] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3232'. [ 432.785489][T18741] netlink: 'syz.0.3232': attribute type 1 has an invalid length. [ 432.848141][T18665] hsr_slave_0: entered promiscuous mode [ 432.864106][T18665] hsr_slave_1: entered promiscuous mode [ 432.885840][T18665] debugfs: 'hsr0' already exists in 'hsr' [ 432.900506][T18665] Cannot create hsr debugfs directory [ 432.941392][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3233'. [ 433.076651][T18749] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.084320][T18749] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.188378][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.210178][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.414553][ T148] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.471206][ T148] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.493968][ T148] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.562836][ T148] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.736689][T18784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3243'. [ 433.763994][T18784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3243'. [ 433.833849][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5130 ms [ 433.841919][ C0] lec:lec_tx_timeout: lec0 [ 433.846861][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 433.849572][T18784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3243'. [ 433.878822][T18784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3243'. [ 433.986047][T18798] netlink: 'syz.2.3251': attribute type 1 has an invalid length. [ 434.022608][T18784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3243'. [ 434.049799][T18801] sctp: [Deprecated]: syz.2.3251 (pid 18801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.049799][T18801] Use struct sctp_sack_info instead [ 434.405243][T18665] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 434.426275][T18665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.464678][T18665] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.506069][T18665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.610124][T18817] nl80: option downdelay: invalid value (18446744073709547007) [ 434.617907][T18817] nl80: option downdelay: allowed values 0 - 2147483647 [ 434.632857][T18817] nl80 (unregistering): Released all slaves [ 434.639024][ T51] Bluetooth: hci3: command tx timeout [ 434.677091][T18816] workqueue: Failed to create a rescuer kthread for wq "nl80": -EINTR [ 434.678570][T18665] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 434.712415][T18665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 434.732113][T18665] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 434.766585][T18665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.042863][T18665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.081372][T18665] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.097472][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.104640][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.129748][T13921] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.136997][T13921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.186020][T18861] netlink: 'syz.2.3267': attribute type 19 has an invalid length. [ 435.499830][T18665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.559841][T18665] veth0_vlan: entered promiscuous mode [ 435.578711][T18665] veth1_vlan: entered promiscuous mode [ 435.633477][T18665] veth0_macvtap: entered promiscuous mode [ 435.647119][T18665] veth1_macvtap: entered promiscuous mode [ 435.686242][T18665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.708786][T18665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.740935][T18896] netlink: 'syz.4.3275': attribute type 30 has an invalid length. [ 435.750210][T13921] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.783462][T13921] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.823020][T13921] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.850089][T13921] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.987785][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.019100][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.105553][T13907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.113405][T13907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.122684][T18902] tipc: Started in network mode [ 436.129796][T18902] tipc: Node identity 9ec02ae2fcec, cluster identity 4711 [ 436.139598][T18902] tipc: Enabled bearer , priority 0 [ 436.167219][T18902] syzkaller0: entered promiscuous mode [ 436.181704][T18902] syzkaller0: entered allmulticast mode [ 436.289565][T18902] tipc: Resetting bearer [ 436.376567][T18901] tipc: Resetting bearer [ 436.378917][T18909] netlink: 'syz.1.3279': attribute type 1 has an invalid length. [ 436.404498][T18901] tipc: Disabling bearer [ 436.428456][T18911] __nla_validate_parse: 7 callbacks suppressed [ 436.428473][T18911] netlink: 924 bytes leftover after parsing attributes in process `syz.2.3280'. [ 436.480327][T18912] netlink: 'syz.2.3280': attribute type 3 has an invalid length. [ 436.498828][T18912] netlink: 'syz.2.3280': attribute type 1 has an invalid length. [ 436.530469][T18912] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3280'. [ 436.597540][T18919] netlink: 'syz.3.3282': attribute type 10 has an invalid length. [ 436.640681][T18919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3282'. [ 436.717115][ T51] Bluetooth: hci3: command tx timeout [ 436.747804][T18919] dummy0: entered promiscuous mode [ 436.787163][T18919] bridge0: port 3(dummy0) entered blocking state [ 436.814989][T18919] bridge0: port 3(dummy0) entered disabled state [ 436.821573][T18919] dummy0: entered allmulticast mode [ 436.880863][T18940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3287'. [ 436.969002][T18940] bond1: entered promiscuous mode [ 436.974721][T18940] bond1: entered allmulticast mode [ 436.980429][T18940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.146327][T18960] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3291'. [ 437.294968][T18967] netlink: 'syz.1.3296': attribute type 21 has an invalid length. [ 437.307045][T18967] netlink: 'syz.1.3296': attribute type 22 has an invalid length. [ 437.316087][T18967] netlink: 'syz.1.3296': attribute type 23 has an invalid length. [ 437.324556][T18967] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3296'. [ 437.814419][T18984] gre0 speed is unknown, defaulting to 1000 [ 438.281107][T18995] gre0 speed is unknown, defaulting to 1000 [ 438.804081][ T51] Bluetooth: hci3: command tx timeout [ 438.884217][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 438.892443][ C0] lec:lec_tx_timeout: lec0 [ 438.897396][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 438.938911][T19046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3319'. [ 439.915104][T19085] validate_nla: 1 callbacks suppressed [ 439.915124][T19085] netlink: 'syz.0.3327': attribute type 1 has an invalid length. [ 439.958141][T19090] ip6t_srh: unknown srh match flags 4000 [ 439.968351][T19085] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3327'. [ 440.031867][T19094] netlink: 'syz.3.3331': attribute type 1 has an invalid length. [ 440.192178][T19101] gre0 speed is unknown, defaulting to 1000 [ 440.305227][T19110] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3335'. [ 440.345024][T19110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.366262][T19110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.385888][T19110] bond0 (unregistering): Released all slaves [ 440.482038][T19106] gre0 speed is unknown, defaulting to 1000 [ 441.091390][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3341'. [ 441.530746][ T51] Bluetooth: hci3: command tx timeout [ 441.737224][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3345'. [ 441.746228][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3345'. [ 441.870442][T19150] gtp1: entered promiscuous mode [ 441.883915][T19150] gtp1: entered allmulticast mode [ 442.017731][T19155] netlink: 'syz.4.3347': attribute type 13 has an invalid length. [ 442.054875][T19155] gretap0: refused to change device tx_queue_len [ 442.087536][T19155] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 442.160793][T19150] gre0 speed is unknown, defaulting to 1000 [ 442.496777][T19169] wg2: entered allmulticast mode [ 442.511185][T19169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3351'. [ 442.572482][T19169] 8021q: adding VLAN 0 to HW filter on device bond2 [ 442.619898][T19174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3352'. [ 442.631361][T19174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3352'. [ 442.803530][T19180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3355'. [ 442.843460][T19162] gre0 speed is unknown, defaulting to 1000 [ 442.903847][T19180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3355'. [ 443.226071][T19195] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.3358'. [ 443.380962][T19197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3358'. [ 443.390063][T19197] openvswitch: netlink: Flow key attr not present in new flow. [ 443.603969][ T51] Bluetooth: hci3: command tx timeout [ 443.903774][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 443.911849][ C0] lec:lec_tx_timeout: lec0 [ 443.916716][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 444.139439][T19213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3361'. [ 445.884510][T19186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.211526][T13908] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.240886][T19236] gre0 speed is unknown, defaulting to 1000 [ 446.240908][T13908] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.273506][T13908] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.282518][T13908] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.563495][T19253] netlink: 'syz.0.3373': attribute type 30 has an invalid length. [ 447.215776][T19272] __nla_validate_parse: 2 callbacks suppressed [ 447.215793][T19272] netlink: 296 bytes leftover after parsing attributes in process `syz.4.3378'. [ 447.331627][T19275] veth0_to_batadv: entered promiscuous mode [ 447.337757][T19275] veth0_to_batadv: entered allmulticast mode [ 447.992238][T19282] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.000011][T19282] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.535490][T19282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.588868][T19282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.923749][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 448.931831][ C0] lec:lec_tx_timeout: lec0 [ 448.936440][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 449.087499][T19283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3380'. [ 449.112075][T13907] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.162805][T13907] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.187736][T13907] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.219430][T13907] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.250898][T19308] gtp0: entered promiscuous mode [ 449.274343][T19308] gtp0: entered allmulticast mode [ 449.299617][T13908] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.319596][T19308] FAULT_INJECTION: forcing a failure. [ 449.319596][T19308] name failslab, interval 1, probability 0, space 0, times 0 [ 449.332282][T19308] CPU: 1 UID: 0 PID: 19308 Comm: syz.3.3385 Not tainted syzkaller #0 PREEMPT(full) [ 449.332308][T19308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 449.332319][T19308] Call Trace: [ 449.332327][T19308] [ 449.332334][T19308] dump_stack_lvl+0xe8/0x150 [ 449.332365][T19308] should_fail_ex+0x412/0x560 [ 449.332397][T19308] should_failslab+0xa8/0x100 [ 449.332420][T19308] ? skb_clone+0x212/0x3a0 [ 449.332438][T19308] kmem_cache_alloc_noprof+0x87/0x650 [ 449.332466][T19308] skb_clone+0x212/0x3a0 [ 449.332487][T19308] bpf_clone_redirect+0x16a/0x4b0 [ 449.332525][T19308] ? bpf_test_run+0x1d1/0x830 [ 449.332549][T19308] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 449.332569][T19308] ? __lock_acquire+0x6b5/0x2cf0 [ 449.332613][T19308] ? ktime_get+0x45/0x200 [ 449.332634][T19308] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 449.332654][T19308] ? lockdep_hardirqs_on+0x7a/0x110 [ 449.332674][T19308] ? ktime_get+0x45/0x200 [ 449.332690][T19308] ? seqcount_lockdep_reader_access+0xea/0x100 [ 449.332709][T19308] ? read_tsc+0x9/0x20 [ 449.332726][T19308] ? ktime_get+0x1d2/0x200 [ 449.332750][T19308] bpf_test_run+0x354/0x830 [ 449.332791][T19308] ? __pfx_bpf_test_run+0x10/0x10 [ 449.332829][T19308] ? eth_type_trans+0x348/0x7e0 [ 449.332854][T19308] ? convert___skb_to_skb+0x3d/0x5b0 [ 449.332880][T19308] bpf_prog_test_run_skb+0xd64/0x21f0 [ 449.332921][T19308] ? __fget_files+0x2a/0x420 [ 449.332937][T19308] ? __fget_files+0x3a0/0x420 [ 449.332953][T19308] ? __fget_files+0x2a/0x420 [ 449.332974][T19308] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 449.332998][T19308] bpf_prog_test_run+0x2c7/0x340 [ 449.333020][T19308] __sys_bpf+0x643/0x950 [ 449.333039][T19308] ? __pfx___sys_bpf+0x10/0x10 [ 449.333071][T19308] ? ksys_write+0x242/0x270 [ 449.333094][T19308] ? __pfx_ksys_write+0x10/0x10 [ 449.333120][T19308] __x64_sys_bpf+0x7c/0x90 [ 449.333145][T19308] do_syscall_64+0x14d/0xf80 [ 449.333165][T19308] ? trace_irq_disable+0x3b/0x150 [ 449.333181][T19308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.333199][T19308] ? clear_bhb_loop+0x40/0x90 [ 449.333220][T19308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.333237][T19308] RIP: 0033:0x7fc498b9c819 [ 449.333253][T19308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.333267][T19308] RSP: 002b:00007fc499a20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 449.333285][T19308] RAX: ffffffffffffffda RBX: 00007fc498e15fa0 RCX: 00007fc498b9c819 [ 449.333297][T19308] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 449.333307][T19308] RBP: 00007fc499a20090 R08: 0000000000000000 R09: 0000000000000000 [ 449.333317][T19308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.333327][T19308] R13: 00007fc498e16038 R14: 00007fc498e15fa0 R15: 00007fff2540ced8 [ 449.333355][T19308] [ 449.333481][T13908] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.613329][T19331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3389'. [ 449.616367][T13908] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.633817][T19331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3389'. [ 449.636711][T13908] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.673184][T19311] : renamed from veth0_to_bond [ 449.763673][T19331] batman_adv: batadv0: Adding interface: macvtap1 [ 449.783782][T19331] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.827625][T19331] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 449.828654][T19335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3390'. [ 449.881018][T19315] gre0 speed is unknown, defaulting to 1000 [ 450.110324][T19346] gtp0: entered promiscuous mode [ 450.115995][T19346] gtp0: entered allmulticast mode [ 450.166578][T19348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3391'. [ 451.140585][T19349] gre0 speed is unknown, defaulting to 1000 [ 451.500946][T19360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3396'. [ 451.549355][T19361] openvswitch: netlink: Duplicate or invalid key (type 0). [ 451.560069][T19363] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3397'. [ 451.560278][T19361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.569521][T19363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3397'. [ 451.681040][T19363] gtp1: entered promiscuous mode [ 451.693887][T19363] gtp1: entered allmulticast mode [ 451.903410][T19363] gre0 speed is unknown, defaulting to 1000 [ 452.244207][T19401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.699348][T19404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3409'. [ 452.711316][T19404] netlink: 'syz.2.3409': attribute type 2 has an invalid length. [ 453.025003][T19422] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3413'. [ 453.103585][T19423] IPv6: Can't replace route, no match found [ 453.691403][T19439] gtp1: entered promiscuous mode [ 453.704015][T19439] gtp1: entered allmulticast mode [ 453.766497][T19439] gre0 speed is unknown, defaulting to 1000 [ 453.943753][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 453.951808][ C0] lec:lec_tx_timeout: lec0 [ 453.956380][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 454.154176][ T51] Bluetooth: hci3: command tx timeout [ 455.119622][T19393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.253751][T19450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3423'. [ 455.537424][T19481] veth1_vlan (unregistering): left allmulticast mode [ 455.624861][T19496] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3434'. [ 455.981788][T19502] syzkaller0: entered promiscuous mode [ 456.251342][T19523] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3440'. [ 456.335472][T19527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3438'. [ 456.400975][T19526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3440'. [ 457.597467][T19525] lec:lec_atm_close: lec0: Shut down! [ 457.616125][T19528] vlan2: entered allmulticast mode [ 457.621292][T19528] bond0: entered allmulticast mode [ 457.684217][T19528] bond_slave_0: entered allmulticast mode [ 457.690002][T19528] bond_slave_1: entered allmulticast mode [ 457.916168][T19555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3447'. [ 457.970704][T19555] xfrm1: entered promiscuous mode [ 457.979745][T19555] xfrm1: entered allmulticast mode [ 457.985552][T19555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3447'. [ 457.996124][T19560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.032378][T19563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3449'. [ 458.050002][T19558] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3448'. [ 458.114832][T19558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.126709][T19558] bond_slave_0: left allmulticast mode [ 458.146054][T19558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.174782][T19558] bond_slave_1: left allmulticast mode [ 458.185948][T19558] bond0 (unregistering): Released all slaves [ 458.415820][T19574] netlink: 'syz.4.3453': attribute type 30 has an invalid length. [ 458.425567][T19577] netlink: 'syz.1.3452': attribute type 30 has an invalid length. [ 458.530139][T19586] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 458.584139][T19591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3457'. [ 458.649553][T19592] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3457'. [ 458.658844][T19592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3457'. [ 458.792558][T19594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.805770][T19594] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.821880][T19594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.834342][T19601] Cannot find set identified by id 1 to match [ 458.855841][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3460'. [ 458.977277][T19608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3462'. [ 460.802554][T19547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.023071][T19628] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3467'. [ 461.043919][ T42] IPVS: starting estimator thread 0... [ 461.135500][T19637] IPVS: using max 31 ests per chain, 74400 per kthread [ 462.128305][T19692] x_tables: duplicate underflow at hook 1 [ 462.161275][T19690] sit0: entered promiscuous mode [ 462.167600][T19690] netlink: 'syz.0.3483': attribute type 1 has an invalid length. [ 462.873851][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5280 ms [ 462.881927][ C0] lec:lec_tx_timeout: lec0 [ 462.886572][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 462.985357][T19715] __nla_validate_parse: 5 callbacks suppressed [ 462.985369][T19715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3490'. [ 463.002524][T19715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3490'. [ 464.705041][T19666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.921615][T19722] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3492'. [ 465.174259][T19741] netlink: 'syz.2.3499': attribute type 1 has an invalid length. [ 465.186337][T19739] netlink: 'syz.4.3498': attribute type 1 has an invalid length. [ 465.271102][T19739] bond3: entered promiscuous mode [ 465.278066][T19739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.319958][T19750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3500'. [ 466.217725][T19792] syzkaller1: entered promiscuous mode [ 466.223234][T19792] syzkaller1: entered allmulticast mode [ 466.377152][ T29] audit: type=1107 audit(1776233522.193:11): pid=19794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 466.392114][ T29] audit: type=1107 audit(1776233522.193:12): pid=19794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 466.456026][T19800] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3514'. [ 467.893776][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 467.901878][ C0] lec:lec_tx_timeout: lec0 [ 467.906529][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 468.470587][T19777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.604215][T19807] nbd: nbd1 already in use [ 468.725089][T19815] syzkaller0: entered promiscuous mode [ 468.730614][T19815] syzkaller0: entered allmulticast mode [ 468.808748][T19823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3525'. [ 469.018380][T19835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.048815][T19831] gre0 speed is unknown, defaulting to 1000 [ 469.069752][T19842] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 469.267651][T19851] wireguard0: entered promiscuous mode [ 469.778865][T19875] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3537'. [ 469.905321][T19884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3539'. [ 469.925638][T19884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3539'. [ 472.093213][T19844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.358059][T19904] sctp: [Deprecated]: syz.3.3542 (pid 19904) Use of int in max_burst socket option deprecated. [ 472.358059][T19904] Use struct sctp_assoc_value instead [ 472.546559][T19914] netlink: 'syz.0.3547': attribute type 21 has an invalid length. [ 472.707584][T19923] netlink: 'syz.1.3548': attribute type 13 has an invalid length. [ 472.740227][T19923] netlink: 'syz.1.3548': attribute type 17 has an invalid length. [ 472.804779][T19936] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3551'. [ 472.814038][T19936] netlink: 'syz.0.3551': attribute type 1 has an invalid length. [ 472.913811][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 472.921899][ C0] lec:lec_tx_timeout: lec0 [ 472.926846][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 472.933278][T19923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.074007][T19943] netlink: 'syz.0.3555': attribute type 7 has an invalid length. [ 473.093877][T19943] netlink: 'syz.0.3555': attribute type 8 has an invalid length. [ 473.122682][T19945] netlink: 'syz.2.3557': attribute type 4 has an invalid length. [ 473.191803][T19954] netlink: 'syz.2.3557': attribute type 4 has an invalid length. [ 473.394624][T19972] gre2: entered promiscuous mode [ 473.441551][T19966] syzkaller0: entered promiscuous mode [ 473.459589][T19966] syzkaller0: entered allmulticast mode [ 473.572197][T19984] netlink: 'syz.2.3567': attribute type 32 has an invalid length. [ 473.634426][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3568'. [ 473.699799][T19991] dummy0: left allmulticast mode [ 473.707756][T19991] bridge0: port 3(dummy0) entered disabled state [ 473.868760][T20011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3571'. [ 473.900426][T20012] netlink: 'syz.4.3566': attribute type 13 has an invalid length. [ 473.918181][T19991] bridge_slave_0: left allmulticast mode [ 473.934062][T19991] bridge_slave_0: left promiscuous mode [ 473.950962][T19991] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.020471][T19991] bridge_slave_1: left allmulticast mode [ 474.030113][T19991] bridge_slave_1: left promiscuous mode [ 474.036306][T19991] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.051237][T19991] team0: Port device team_slave_0 removed [ 474.060091][T19991] team0: Port device team_slave_1 removed [ 474.078244][T19991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.087267][T19991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.095933][T19991] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 474.210669][T20012] gretap0: refused to change device tx_queue_len [ 474.229521][T20012] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 474.253924][T20010] gre0 speed is unknown, defaulting to 1000 [ 474.427230][T20018] SET target dimension over the limit! [ 474.443682][T20019] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3574'. [ 474.466853][T20019] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3574'. [ 474.483401][T20020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3572'. [ 474.493892][T20019] x_tables: duplicate entry at hook 2 [ 474.676738][T20024] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.885954][T20024] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.056203][T20024] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.151247][T20045] gre0 speed is unknown, defaulting to 1000 [ 475.186526][T20052] IPv6: NLM_F_CREATE should be specified when creating new route [ 475.208183][T20052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 475.215467][T20052] IPv6: NLM_F_CREATE should be set when creating new route [ 475.222944][T20052] IPv6: NLM_F_CREATE should be set when creating new route [ 475.230245][T20052] IPv6: NLM_F_CREATE should be set when creating new route [ 475.256902][T20024] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.402361][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3582'. [ 475.487586][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3584'. [ 475.497522][T20062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3584'. [ 475.508340][T20059] openvswitch: netlink: IP tunnel dst address not specified [ 475.569220][T13908] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.620163][T13908] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.669747][T20070] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3585'. [ 475.681078][T13908] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.708099][T20070] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3585'. [ 475.717520][T20039] gre0 speed is unknown, defaulting to 1000 [ 475.727120][T13908] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.847383][T20074] syzkaller0: entered promiscuous mode [ 475.852906][T20074] syzkaller0: entered allmulticast mode [ 475.933006][T20087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3591'. [ 476.000093][T20092] xt_TPROXY: Can be used only with -p tcp or -p udp [ 476.516210][T20115] FAULT_INJECTION: forcing a failure. [ 476.516210][T20115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.543879][T20115] CPU: 0 UID: 0 PID: 20115 Comm: syz.2.3600 Not tainted syzkaller #0 PREEMPT(full) [ 476.543904][T20115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 476.543915][T20115] Call Trace: [ 476.543922][T20115] [ 476.543930][T20115] dump_stack_lvl+0xe8/0x150 [ 476.543960][T20115] should_fail_ex+0x412/0x560 [ 476.543991][T20115] _copy_from_user+0x2d/0xb0 [ 476.544014][T20115] ___sys_sendmsg+0x1c6/0x360 [ 476.544045][T20115] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.544099][T20115] ? __fget_files+0x2a/0x420 [ 476.544115][T20115] ? __fget_files+0x3a0/0x420 [ 476.544141][T20115] __x64_sys_sendmsg+0x1bd/0x2a0 [ 476.544169][T20115] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.544204][T20115] ? __pfx_ksys_write+0x10/0x10 [ 476.544235][T20115] do_syscall_64+0x14d/0xf80 [ 476.544256][T20115] ? trace_irq_disable+0x3b/0x150 [ 476.544271][T20115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.544287][T20115] ? clear_bhb_loop+0x40/0x90 [ 476.544308][T20115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.544323][T20115] RIP: 0033:0x7efe25b9c819 [ 476.544340][T20115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.544355][T20115] RSP: 002b:00007efe23dee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.544373][T20115] RAX: ffffffffffffffda RBX: 00007efe25e15fa0 RCX: 00007efe25b9c819 [ 476.544385][T20115] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 476.544396][T20115] RBP: 00007efe23dee090 R08: 0000000000000000 R09: 0000000000000000 [ 476.544407][T20115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.544417][T20115] R13: 00007efe25e16038 R14: 00007efe25e15fa0 R15: 00007fff01eb9f78 [ 476.544445][T20115] [ 477.372836][T20139] syzkaller0: entered promiscuous mode [ 477.387371][T20139] syzkaller0: entered allmulticast mode [ 477.567791][T20147] validate_nla: 7 callbacks suppressed [ 477.567811][T20147] netlink: 'syz.0.3612': attribute type 30 has an invalid length. [ 477.652124][T20149] tipc: Invalid UDP bearer configuration [ 477.652174][T20149] tipc: Enabling of bearer rejected, failed to enable media [ 477.850311][T20155] macvtap0: entered promiscuous mode [ 477.933798][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 477.941887][ C0] lec:lec_tx_timeout: lec0 [ 477.946501][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 477.957053][T20155] macvtap0 (unregistering): left promiscuous mode [ 478.119622][T20174] netlink: 'syz.2.3624': attribute type 30 has an invalid length. [ 478.215253][T20182] tipc: Started in network mode [ 478.223097][T20182] tipc: Node identity 1ec5b4aaf443, cluster identity 4711 [ 478.246011][T20182] tipc: Enabled bearer , priority 0 [ 478.260078][T20182] tipc: Disabling bearer [ 478.427095][T20204] IPv6: NLM_F_REPLACE set, but no existing node found! [ 479.078047][T20240] __nla_validate_parse: 15 callbacks suppressed [ 479.078067][T20240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3644'. [ 479.126037][T20240] gre0 speed is unknown, defaulting to 1000 [ 479.424264][T20247] syzkaller1: entered allmulticast mode [ 479.545208][T20250] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 479.829996][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3654'. [ 479.864900][T20269] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3655'. [ 479.976209][T20277] syzkaller1: entered allmulticast mode [ 480.066933][T20283] gre0 speed is unknown, defaulting to 1000 [ 480.370259][T20301] netlink: 'syz.3.3664': attribute type 1 has an invalid length. [ 480.536218][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3665'. [ 480.545535][T20303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3665'. [ 480.575742][T20303] bridge_slave_1: left allmulticast mode [ 480.598158][T20303] bridge_slave_1: left promiscuous mode [ 480.608634][T20303] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.630845][T20303] bridge_slave_0: left allmulticast mode [ 480.637445][T20303] bridge_slave_0: left promiscuous mode [ 480.643304][T20303] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.759820][T20311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3667'. [ 480.945197][T20321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3669'. [ 481.004005][T20320] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 481.029729][T20329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3673'. [ 481.216081][T20336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3675'. [ 481.316903][T20338] syzkaller0: entered promiscuous mode [ 481.322480][T20338] syzkaller0: entered allmulticast mode [ 481.527402][T20347] netlink: 'syz.0.3679': attribute type 12 has an invalid length. [ 481.618572][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3681'. [ 481.761755][T20358] ip6tnl2: entered allmulticast mode [ 481.922117][T20367] xt_connbytes: Forcing CT accounting to be enabled [ 481.953949][T20372] xt_connbytes: Forcing CT accounting to be enabled [ 481.964526][T20375] netlink: 'syz.1.3690': attribute type 15 has an invalid length. [ 482.050128][T20378] ip6tnl2: entered allmulticast mode [ 482.091242][ T49] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 482.125344][T10907] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 482.133290][ T49] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 482.242633][T20385] gre0 speed is unknown, defaulting to 1000 [ 482.318411][T20397] macsec1: entered promiscuous mode [ 482.323667][T20397] virt_wifi0: entered promiscuous mode [ 482.375861][T20399] tipc: Started in network mode [ 482.394138][T20399] tipc: Node identity ff, cluster identity 4711 [ 482.414356][T20399] tipc: Enabling of bearer rejected, failed to enable media [ 482.438348][T20402] openvswitch: netlink: Key type 310 is out of range max 32 [ 482.460177][T20400] syzkaller1: entered promiscuous mode [ 482.465791][T20400] syzkaller1: entered allmulticast mode [ 482.756806][T20419] ±ÿ: renamed from lo [ 482.874544][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 482.953748][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 482.961785][ C0] lec:lec_tx_timeout: lec0 [ 482.966552][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 483.040738][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 483.095731][T20448] syzkaller0: entered promiscuous mode [ 483.120996][T20448] syzkaller0: entered allmulticast mode [ 485.479197][T20433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 485.700903][T20479] __nla_validate_parse: 4 callbacks suppressed [ 485.700924][T20479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3713'. [ 485.750354][T20479] bond5: Invalid ad_actor_system MAC address. [ 485.757668][T20479] bond5: option ad_actor_system: invalid value (7) [ 485.768783][T20479] bond5 (unregistering): Released all slaves [ 485.948170][T20497] syzkaller0: entered promiscuous mode [ 485.974198][T20497] syzkaller0: entered allmulticast mode [ 486.416353][T20517] netlink: 'syz.1.3724': attribute type 2 has an invalid length. [ 486.438485][T20508] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.446356][T20508] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.492998][T20517] netlink: 1696 bytes leftover after parsing attributes in process `syz.1.3724'. [ 486.553954][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 486.769025][T20536] sctp: [Deprecated]: syz.0.3726 (pid 20536) Use of int in max_burst socket option. [ 486.769025][T20536] Use struct sctp_assoc_value instead [ 487.086099][T20508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.126830][T20508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.495377][T20529] bridge1: entered promiscuous mode [ 487.513928][T20529] bridge1: entered allmulticast mode [ 487.526724][T20529] team0: Port device bridge1 added [ 487.591992][T20535] syzkaller0: entered promiscuous mode [ 487.603628][T20535] syzkaller0: entered allmulticast mode [ 487.612625][T13909] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.621606][T20555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3728'. [ 487.800754][T20572] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3729'. [ 487.811428][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3729'. [ 487.973874][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 487.981908][ C0] lec:lec_tx_timeout: lec0 [ 487.986707][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 489.137048][T13909] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.145640][T13909] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.167124][T13909] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.258495][T20575] syzkaller0: entered promiscuous mode [ 489.265466][T20575] syzkaller0: entered allmulticast mode [ 489.271135][T20580] xt_cluster: node mask cannot exceed total number of nodes [ 489.295627][T20584] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3733'. [ 489.841189][T20617] netlink: 'syz.1.3744': attribute type 11 has an invalid length. [ 489.869414][T20616] netlink: 296 bytes leftover after parsing attributes in process `syz.2.3745'. [ 489.914709][T20608] gre0 speed is unknown, defaulting to 1000 [ 489.928139][T20621] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3746'. [ 490.389686][T20638] gre0 speed is unknown, defaulting to 1000 [ 490.438733][T20649] syzkaller0: entered promiscuous mode [ 490.453931][T20649] syzkaller0: entered allmulticast mode [ 490.530925][T10912] IPVS: starting estimator thread 0... [ 490.643927][T20650] IPVS: using max 33 ests per chain, 79200 per kthread [ 490.975390][T20668] ip6tnl2: entered promiscuous mode [ 490.990616][T20668] ip6tnl2: entered allmulticast mode [ 491.228358][T20655] syzkaller0: entered promiscuous mode [ 491.234048][T20655] syzkaller0: entered allmulticast mode [ 492.993766][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 493.001864][ C0] lec:lec_tx_timeout: lec0 [ 493.006521][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 493.159239][T20695] syzkaller0: entered promiscuous mode [ 493.166299][T20695] syzkaller0: entered allmulticast mode [ 493.396013][T20713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3766'. [ 494.559294][T20707] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3768'. [ 494.600931][T20710] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.746830][T20710] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.034364][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 495.196607][T20710] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.325909][T20710] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.658407][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.683800][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.736617][T13907] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.755034][T13907] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.165790][T20767] xt_l2tp: unknown flags: 51 [ 496.416623][T20772] syzkaller1: entered promiscuous mode [ 496.422180][T20772] syzkaller1: entered allmulticast mode [ 496.522057][T20772] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3785'. [ 496.632192][T20783] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3788'. [ 496.639108][T20774] gre0 speed is unknown, defaulting to 1000 [ 497.174291][T20800] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3792'. [ 497.535096][T20811] gre0 speed is unknown, defaulting to 1000 [ 497.809347][T20829] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 497.917526][T20829] bond2: (slave lo): Enslaving as an active interface with an up link [ 497.958395][T20829] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 497.966581][T20833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3800'. [ 498.013772][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 498.021838][ C0] lec:lec_tx_timeout: lec0 [ 498.026491][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 498.037221][T20833] netlink: 'syz.1.3800': attribute type 1 has an invalid length. [ 498.054407][T20833] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3800'. [ 498.076295][T20833] team0: No ports can be present during mode change [ 498.106327][T20835] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3801'. [ 498.342733][T20847] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3805'. [ 498.384181][T20847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3805'. [ 498.824630][T20873] xt_CT: No such helper "snmp_trap" [ 499.084774][T20887] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3815'. [ 499.133522][T20887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.291839][T20900] netlink: 'syz.4.3820': attribute type 1 has an invalid length. [ 499.301845][T20900] netlink: 'syz.4.3820': attribute type 11 has an invalid length. [ 499.439757][T20905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3822'. [ 499.566699][T20905] bridge2: port 1(bond2) entered blocking state [ 499.616390][T20905] bridge2: port 1(bond2) entered disabled state [ 499.626551][T20905] bond2: entered allmulticast mode [ 499.642752][T20905] bond2: entered promiscuous mode [ 499.663470][T20919] bond0: entered promiscuous mode [ 499.705170][T20930] netlink: 'syz.0.3830': attribute type 2 has an invalid length. [ 499.711091][T20919] bond_slave_0: entered promiscuous mode [ 499.759722][T20919] bond_slave_1: entered promiscuous mode [ 499.787626][T20919] batadv0: entered promiscuous mode [ 499.797711][T20919] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 499.808826][T20919] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 499.825141][T20919] bond0: left promiscuous mode [ 499.835671][T20919] bond_slave_0: left promiscuous mode [ 499.850328][T20919] bond_slave_1: left promiscuous mode [ 499.863852][T20919] batadv0: left promiscuous mode [ 499.895096][T20930] hmac(sha224): entered promiscuous mode [ 499.918525][T20941] syzkaller1: entered promiscuous mode [ 499.924212][T20941] syzkaller1: entered allmulticast mode [ 499.938835][T20940] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3832'. [ 500.036105][T20950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3835'. [ 500.196693][ T10] IPVS: starting estimator thread 0... [ 500.216418][T20958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3837'. [ 500.225560][T20958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3837'. [ 500.237933][T20956] netlink: set zone limit has 4 unknown bytes [ 500.266013][T20962] dvmrp6: entered allmulticast mode [ 500.283996][T20961] IPVS: using max 32 ests per chain, 76800 per kthread [ 500.396578][T20964] syzkaller0: entered promiscuous mode [ 500.402085][T20964] syzkaller0: entered allmulticast mode [ 500.545091][T20973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3841'. [ 500.559882][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3841'. [ 500.572022][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3841'. [ 500.581022][T20973] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3841'. [ 501.156291][T21009] netlink: 'syz.1.3852': attribute type 4 has an invalid length. [ 501.277680][T20972] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 501.296648][T21017] netem: change failed [ 501.441513][T21029] syzkaller1: entered promiscuous mode [ 501.457791][T21029] syzkaller1: entered allmulticast mode [ 501.488841][T21031] netlink: 'syz.2.3861': attribute type 1 has an invalid length. [ 501.531479][T21031] 8021q: adding VLAN 0 to HW filter on device bond3 [ 501.560182][T21031] vlan2: entered allmulticast mode [ 501.565812][T21031] bond3: entered allmulticast mode [ 501.586642][T21031] bond3: (slave geneve2): making interface the new active one [ 501.599526][T21031] geneve2: entered allmulticast mode [ 501.645818][T21031] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 501.681826][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 501.730580][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 501.759658][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 501.846844][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 502.088902][T21062] netlink: 'syz.2.3866': attribute type 1 has an invalid length. [ 502.102220][T21061] gre0 speed is unknown, defaulting to 1000 [ 502.431515][T21083] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 502.505010][T21080] netlink: 'syz.1.3870': attribute type 1 has an invalid length. [ 502.522705][T21085] ipvlan0: entered allmulticast mode [ 502.533297][T21085] syz_tun: entered allmulticast mode [ 503.033925][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 503.041967][ C0] lec:lec_tx_timeout: lec0 [ 503.048831][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 503.164365][T21095] syzkaller0: entered promiscuous mode [ 503.178930][T21095] syzkaller0: entered allmulticast mode [ 503.312733][T21117] ip6gretap1: entered allmulticast mode [ 503.431581][T21126] netlink: 'syz.2.3885': attribute type 1 has an invalid length. [ 503.462675][T21126] sctp: [Deprecated]: syz.2.3885 (pid 21126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.462675][T21126] Use struct sctp_sack_info instead [ 503.515694][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 504.913109][T21123] veth1_to_team: entered promiscuous mode [ 504.919839][T21123] gretap0: entered promiscuous mode [ 504.929651][T21123] hsr1: entered promiscuous mode [ 505.226103][T21135] gtp0: left promiscuous mode [ 505.231088][T21135] gtp0: left allmulticast mode [ 505.244295][T21135] gtp1: left promiscuous mode [ 505.251337][T21135] gtp1: left allmulticast mode [ 505.294163][T21135] ip6tnl2: left allmulticast mode [ 505.306963][T21135] virt_wifi0: left promiscuous mode [ 505.312406][T21135] macsec1: left promiscuous mode [ 505.325700][T21135] vlan2: left allmulticast mode [ 505.330609][T21135] bond3: left allmulticast mode [ 505.335912][T21135] geneve2: left allmulticast mode [ 505.383815][T21153] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 505.462998][T13908] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 505.485548][T13908] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 505.526947][T13908] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 505.545833][T13908] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 505.701666][T21177] syzkaller0: entered promiscuous mode [ 505.707365][T21177] syzkaller0: entered allmulticast mode [ 505.739087][T21187] __nla_validate_parse: 14 callbacks suppressed [ 505.739110][T21187] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3904'. [ 505.850601][T21194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3907'. [ 505.930902][T21199] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3909'. [ 505.939790][T21200] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3907'. [ 505.940556][T21199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3909'. [ 506.182147][T21217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3911'. [ 506.495686][T21239] syzkaller0: entered promiscuous mode [ 506.501305][T21239] syzkaller0: entered allmulticast mode [ 506.789578][T13913] TC_ACT_REPEAT abuse ? [ 506.943654][T21259] gre0 speed is unknown, defaulting to 1000 [ 506.954303][T20551] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 507.044700][T20551] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 507.281854][T21276] netlink: 'syz.3.3929': attribute type 4 has an invalid length. [ 507.376535][T21279] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3930'. [ 507.377400][T21280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3930'. [ 507.415647][T21279] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3930'. [ 507.430990][T21280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3930'. [ 507.443233][T21283] syzkaller0: entered promiscuous mode [ 507.448878][T21283] syzkaller0: entered allmulticast mode [ 507.740599][T21290] gre0 speed is unknown, defaulting to 1000 [ 507.757603][T13921] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 507.757751][T21302] netlink: 'syz.1.3935': attribute type 2 has an invalid length. [ 507.789984][T21302] !¼Þ: entered promiscuous mode [ 507.833499][T21302] netlink: 'syz.1.3935': attribute type 2 has an invalid length. [ 507.854706][T21302] !¼Þ: left promiscuous mode [ 508.209197][T21312] syzkaller0: entered promiscuous mode [ 508.235039][T21312] syzkaller0: entered allmulticast mode [ 508.873759][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 508.881849][ C0] lec:lec_tx_timeout: lec0 [ 508.886492][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 509.823493][T13913] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 509.832403][T13913] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 510.096918][T21331] syzkaller0: entered promiscuous mode [ 510.102614][T21331] syzkaller0: entered allmulticast mode [ 510.205835][T10914] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 511.659340][T21346] pimreg68: entered allmulticast mode [ 512.868173][T21341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 513.046605][T21384] __nla_validate_parse: 8 callbacks suppressed [ 513.046623][T21384] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3959'. [ 513.249808][T21398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3962'. [ 513.281660][T21398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3962'. [ 513.300423][T21398] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3962'. [ 513.485663][T21414] netlink: 'syz.2.3968': attribute type 21 has an invalid length. [ 513.493139][T21400] gre0 speed is unknown, defaulting to 1000 [ 513.523454][T21415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3967'. [ 513.523898][T21414] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3968'. [ 513.588488][T21417] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3968'. [ 513.603924][T21417] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3968'. [ 513.753951][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 513.775177][T21426] batadv_slave_1: entered promiscuous mode [ 513.829469][T21432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3971'. [ 513.870608][T21425] batadv_slave_1: left promiscuous mode [ 513.893775][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 513.901872][ C0] lec:lec_tx_timeout: lec0 [ 513.906469][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 513.976578][T21440] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 514.413955][T21459] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3979'. [ 514.479860][T21460] netem: incorrect ge model size [ 514.490774][T21460] netem: change failed [ 516.682974][T21473] gre0 speed is unknown, defaulting to 1000 [ 516.727749][T21479] netlink: 'syz.3.3985': attribute type 5 has an invalid length. [ 517.371215][T21502] gre0 speed is unknown, defaulting to 1000 [ 517.386908][T21504] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 517.694893][T21521] netlink: 'syz.4.3997': attribute type 14 has an invalid length. [ 517.713889][T21521] netlink: 'syz.4.3997': attribute type 11 has an invalid length. [ 517.748487][T21521] netlink: 'syz.4.3997': attribute type 14 has an invalid length. [ 517.762556][T21525] netlink: 'syz.4.3997': attribute type 14 has an invalid length. [ 517.805558][T21521] netlink: 'syz.4.3997': attribute type 11 has an invalid length. [ 517.823631][T21525] netlink: 'syz.4.3997': attribute type 11 has an invalid length. [ 518.082666][T21542] __nla_validate_parse: 12 callbacks suppressed [ 518.082686][T21542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4002'. [ 518.139143][T21542] erspan1: entered promiscuous mode [ 518.158014][T21542] erspan1: entered allmulticast mode [ 518.484596][T21549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.913762][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 518.921789][ C0] lec:lec_tx_timeout: lec0 [ 518.926369][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 518.996349][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4008'. [ 519.005784][T21564] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4008'. [ 519.015316][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4008'. [ 519.026192][T21564] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4008'. [ 519.035378][T21564] netlink: 'syz.4.4008': attribute type 6 has an invalid length. [ 520.441541][T21569] gre0 speed is unknown, defaulting to 1000 [ 520.454851][T21570] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4009'. [ 520.511071][T21509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.522031][T21568] netlink: 'syz.2.4009': attribute type 2 has an invalid length. [ 520.660457][T21576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4011'. [ 521.065188][T21590] gre0 speed is unknown, defaulting to 1000 [ 521.313579][T21603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4018'. [ 521.522126][T21606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4019'. [ 521.787536][T21612] syzkaller0: entered promiscuous mode [ 521.818772][T21612] syzkaller0: entered allmulticast mode [ 521.913934][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 522.327606][T21633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4026'. [ 522.500066][T21632] gre0 speed is unknown, defaulting to 1000 [ 522.646027][T21651] netlink: 'syz.2.4030': attribute type 13 has an invalid length. [ 522.666215][T21651] netlink: 'syz.2.4030': attribute type 17 has an invalid length. [ 522.735863][T21651] gretap0: refused to change device tx_queue_len [ 522.742621][T21651] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 522.932467][T21669] ================================================================== [ 522.940580][T21669] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 522.948340][T21669] Read of size 8 at addr ffff8880794fe720 by task syz.3.4035/21669 [ 522.956242][T21669] [ 522.958575][T21669] CPU: 1 UID: 0 PID: 21669 Comm: syz.3.4035 Not tainted syzkaller #0 PREEMPT(full) [ 522.958602][T21669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 522.958614][T21669] Call Trace: [ 522.958620][T21669] [ 522.958628][T21669] dump_stack_lvl+0xe8/0x150 [ 522.958659][T21669] print_report+0xba/0x230 [ 522.958683][T21669] ? af_alg_pull_tsgl+0x1c6/0x740 [ 522.958712][T21669] kasan_report+0x117/0x150 [ 522.958737][T21669] ? af_alg_pull_tsgl+0x1c6/0x740 [ 522.958770][T21669] af_alg_pull_tsgl+0x1c6/0x740 [ 522.958806][T21669] skcipher_recvmsg+0x5df/0x1140 [ 522.958837][T21669] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 522.958857][T21669] ? aa_sock_msg_perm+0xf1/0x1b0 [ 522.958875][T21669] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 522.958897][T21669] ? security_socket_recvmsg+0x7e/0x2c0 [ 522.958921][T21669] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 522.958943][T21669] sock_recvmsg+0x172/0x1b0 [ 522.958967][T21669] ____sys_recvmsg+0x1e6/0x4a0 [ 522.958988][T21669] ? __pfx_____sys_recvmsg+0x10/0x10 [ 522.959015][T21669] ? import_iovec+0x73/0xa0 [ 522.959038][T21669] ___sys_recvmsg+0x215/0x590 [ 522.959059][T21669] ? __pfx____sys_recvmsg+0x10/0x10 [ 522.959088][T21669] ? __fget_files+0x3a0/0x420 [ 522.959111][T21669] do_recvmmsg+0x334/0x800 [ 522.959139][T21669] ? __pfx_do_recvmmsg+0x10/0x10 [ 522.959161][T21669] ? __pfx_do_futex+0x10/0x10 [ 522.959189][T21669] __x64_sys_recvmmsg+0x198/0x250 [ 522.959208][T21669] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 522.959230][T21669] do_syscall_64+0x14d/0xf80 [ 522.959250][T21669] ? trace_irq_disable+0x3b/0x150 [ 522.959268][T21669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.959289][T21669] ? clear_bhb_loop+0x40/0x90 [ 522.959311][T21669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.959328][T21669] RIP: 0033:0x7fc498b9c819 [ 522.959344][T21669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.959360][T21669] RSP: 002b:00007fc4999ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 522.959381][T21669] RAX: ffffffffffffffda RBX: 00007fc498e16090 RCX: 00007fc498b9c819 [ 522.959396][T21669] RDX: 0000000000000001 RSI: 0000200000000c00 RDI: 0000000000000009 [ 522.959409][T21669] RBP: 00007fc498c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 522.959422][T21669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.959435][T21669] R13: 00007fc498e16128 R14: 00007fc498e16090 R15: 00007fff2540ced8 [ 522.959458][T21669] [ 522.959465][T21669] [ 523.205747][T21669] Allocated by task 21669: [ 523.210146][T21669] kasan_save_track+0x3e/0x80 [ 523.214814][T21669] __kasan_kmalloc+0x93/0xb0 [ 523.219393][T21669] __kmalloc_noprof+0x35c/0x760 [ 523.224230][T21669] sock_kmalloc+0xd6/0x160 [ 523.228634][T21669] skcipher_recvmsg+0x54d/0x1140 [ 523.233558][T21669] sock_recvmsg+0x172/0x1b0 [ 523.238137][T21669] ____sys_recvmsg+0x1e6/0x4a0 [ 523.242887][T21669] ___sys_recvmsg+0x215/0x590 [ 523.247554][T21669] do_recvmmsg+0x334/0x800 [ 523.251959][T21669] __x64_sys_recvmmsg+0x198/0x250 [ 523.256966][T21669] do_syscall_64+0x14d/0xf80 [ 523.261548][T21669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.267425][T21669] [ 523.269735][T21669] The buggy address belongs to the object at ffff8880794fe700 [ 523.269735][T21669] which belongs to the cache kmalloc-32 of size 32 [ 523.283598][T21669] The buggy address is located 0 bytes to the right of [ 523.283598][T21669] allocated 32-byte region [ffff8880794fe700, ffff8880794fe720) [ 523.297982][T21669] [ 523.300291][T21669] The buggy address belongs to the physical page: [ 523.306682][T21669] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x794fe [ 523.315435][T21669] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 523.322528][T21669] page_type: f5(slab) [ 523.326492][T21669] raw: 00fff00000000000 ffff88813feac780 dead000000000100 dead000000000122 [ 523.335057][T21669] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 523.343631][T21669] page dumped because: kasan: bad access detected [ 523.350047][T21669] page_owner tracks the page as allocated [ 523.355752][T21669] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17684, tgid 17684 (rm), ts 401179153059, free_ts 401174338485 [ 523.374851][T21669] post_alloc_hook+0x231/0x280 [ 523.379623][T21669] get_page_from_freelist+0x24dc/0x2580 [ 523.385159][T21669] __alloc_frozen_pages_noprof+0x18d/0x380 [ 523.390953][T21669] allocate_slab+0x77/0x660 [ 523.395445][T21669] refill_objects+0x331/0x3c0 [ 523.400111][T21669] __pcs_replace_empty_main+0x2e6/0x730 [ 523.405649][T21669] __kmalloc_cache_noprof+0x392/0x660 [ 523.411017][T21669] kmem_cache_free+0x15b/0x630 [ 523.415767][T21669] tear_down_vmas+0x312/0x520 [ 523.420429][T21669] exit_mmap+0x4b6/0xa10 [ 523.424653][T21669] __mmput+0x118/0x430 [ 523.428708][T21669] exit_mm+0x168/0x220 [ 523.432762][T21669] do_exit+0x6a2/0x23c0 [ 523.436911][T21669] do_group_exit+0x21b/0x2d0 [ 523.441487][T21669] __x64_sys_exit_group+0x3f/0x40 [ 523.446496][T21669] x64_sys_call+0x221a/0x2240 [ 523.451163][T21669] page last free pid 17684 tgid 17684 stack trace: [ 523.457644][T21669] __free_frozen_pages+0xc2b/0xdb0 [ 523.462743][T21669] tlb_finish_mmu+0x144/0x230 [ 523.467404][T21669] exit_mmap+0x498/0xa10 [ 523.471633][T21669] __mmput+0x118/0x430 [ 523.475695][T21669] exit_mm+0x168/0x220 [ 523.479745][T21669] do_exit+0x6a2/0x23c0 [ 523.483882][T21669] do_group_exit+0x21b/0x2d0 [ 523.488459][T21669] __x64_sys_exit_group+0x3f/0x40 [ 523.493468][T21669] x64_sys_call+0x221a/0x2240 [ 523.498133][T21669] do_syscall_64+0x14d/0xf80 [ 523.502711][T21669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.508586][T21669] [ 523.510896][T21669] Memory state around the buggy address: [ 523.516524][T21669] ffff8880794fe600: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 523.524576][T21669] ffff8880794fe680: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 523.532621][T21669] >ffff8880794fe700: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 523.540749][T21669] ^ [ 523.545843][T21669] ffff8880794fe780: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 523.553892][T21669] ffff8880794fe800: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 523.561934][T21669] ================================================================== [ 523.605145][T21667] syzkaller0: entered promiscuous mode [ 523.610664][T21667] syzkaller0: entered allmulticast mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 523.649941][T21669] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 523.657199][T21669] CPU: 0 UID: 0 PID: 21669 Comm: syz.3.4035 Not tainted syzkaller #0 PREEMPT(full) [ 523.667012][T21669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 523.677080][T21669] Call Trace: [ 523.680368][T21669] [ 523.683304][T21669] vpanic+0x56c/0xa60 [ 523.687393][T21669] ? __pfx_vpanic+0x10/0x10 [ 523.691913][T21669] ? __pfx___schedule+0x10/0x10 [ 523.696775][T21669] panic+0xc5/0xd0 [ 523.700515][T21669] ? __pfx_panic+0x10/0x10 [ 523.704949][T21669] ? preempt_schedule_common+0x82/0xd0 [ 523.710418][T21669] ? af_alg_pull_tsgl+0x1c6/0x740 [ 523.715459][T21669] check_panic_on_warn+0x89/0xb0 [ 523.720414][T21669] ? af_alg_pull_tsgl+0x1c6/0x740 [ 523.725457][T21669] end_report+0x73/0x180 [ 523.729713][T21669] ? af_alg_pull_tsgl+0x1c6/0x740 [ 523.734753][T21669] kasan_report+0x128/0x150 [ 523.739280][T21669] ? af_alg_pull_tsgl+0x1c6/0x740 [ 523.744323][T21669] af_alg_pull_tsgl+0x1c6/0x740 [ 523.749199][T21669] skcipher_recvmsg+0x5df/0x1140 [ 523.754154][T21669] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 523.759536][T21669] ? aa_sock_msg_perm+0xf1/0x1b0 [ 523.764478][T21669] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 523.769770][T21669] ? security_socket_recvmsg+0x7e/0x2c0 [ 523.775335][T21669] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 523.780718][T21669] sock_recvmsg+0x172/0x1b0 [ 523.785242][T21669] ____sys_recvmsg+0x1e6/0x4a0 [ 523.790022][T21669] ? __pfx_____sys_recvmsg+0x10/0x10 [ 523.795318][T21669] ? import_iovec+0x73/0xa0 [ 523.799839][T21669] ___sys_recvmsg+0x215/0x590 [ 523.804522][T21669] ? __pfx____sys_recvmsg+0x10/0x10 [ 523.809739][T21669] ? __fget_files+0x3a0/0x420 [ 523.814416][T21669] do_recvmmsg+0x334/0x800 [ 523.818832][T21669] ? __pfx_do_recvmmsg+0x10/0x10 [ 523.823764][T21669] ? __pfx_do_futex+0x10/0x10 [ 523.828446][T21669] __x64_sys_recvmmsg+0x198/0x250 [ 523.833465][T21669] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 523.839033][T21669] do_syscall_64+0x14d/0xf80 [ 523.843641][T21669] ? trace_irq_disable+0x3b/0x150 [ 523.848662][T21669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.854737][T21669] ? clear_bhb_loop+0x40/0x90 [ 523.859427][T21669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.865308][T21669] RIP: 0033:0x7fc498b9c819 [ 523.869715][T21669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.889311][T21669] RSP: 002b:00007fc4999ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 523.897717][T21669] RAX: ffffffffffffffda RBX: 00007fc498e16090 RCX: 00007fc498b9c819 [ 523.905678][T21669] RDX: 0000000000000001 RSI: 0000200000000c00 RDI: 0000000000000009 [ 523.913636][T21669] RBP: 00007fc498c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 523.921591][T21669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.929547][T21669] R13: 00007fc498e16128 R14: 00007fc498e16090 R15: 00007fff2540ced8 [ 523.937513][T21669] [ 523.940875][T21669] Kernel Offset: disabled [ 523.945187][T21669] Rebooting in 86400 seconds..