last executing test programs: 7.130008438s ago: executing program 4 (id=4442): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{{0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x2}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x1}}], 0x28) (async) close(0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={@mcast1, 0x10000012, r3}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)='1', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYRESHEX=r1], 0x280}}, {{&(0x7f0000000280)={0xa, 0x4e22, 0x6ee, @local, 0x5}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000300)="836610", 0x3}], 0x1}}], 0x2, 0x240048d1) setsockopt(r5, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pK \x00'}, 0x20) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000440)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, @in6={0xa, 0x4e22, 0x1, @mcast1, 0x6}, @in6={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}], 0x68) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.908164661s ago: executing program 4 (id=4447): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x80401}]}}}]}, 0x4c}}, 0x80) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/143, 0x8f}], 0x1}}], 0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000040), 0x10) sendmsg$netlink(r3, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f00000000c0)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44811}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x0, 0x9, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8, 0x8000, 0x3800, 0x9f0c}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000000100000000fbdbdf257a000000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) 6.657536683s ago: executing program 4 (id=4453): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, 0x0, 0x0) unshare(0x6a040000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) socket(0x8, 0x3, 0x0) socket(0x8, 0x0, 0x8000) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x73, 0x4, 0x7}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'macvtap0\x00', {0x8}, 0xe}) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) 3.809052747s ago: executing program 3 (id=4476): ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 3.420343825s ago: executing program 3 (id=4477): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) socket$isdn(0x22, 0x3, 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x404c800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.084874945s ago: executing program 3 (id=4478): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0xa, 0x3, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001500192340834b80040d8c560a06ffffff7f070000000001000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r6, 0x303, 0x70bd28, 0x25dfdbfd, {0xa}}, 0xffffffffffffffc4}}, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x45, '\x00', r5, 0xf, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) ioctl$EXT4_IOC_GETSTATE(r8, 0x40046629, &(0x7f0000000680)) sendto(r1, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7, 0x6, 0x3, 0x200000000000, 0x1, 0xa2, 0x1}, &(0x7f0000000200)={0x1f, 0x0, 0x5, 0x2128, 0x1, 0x0, 0x7, 0x4}, 0x0, 0x0, 0x0) 2.902985932s ago: executing program 4 (id=4479): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380"], 0x44}}, 0x20008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990080ffffff5700000008009f2600800900000800a1000700000008009f00070000"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r7, 0x8920, &(0x7f00000014c0)="94b58e89013a") r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080d1}, 0x4009) 2.594943944s ago: executing program 4 (id=4480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000000)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x110}, 0x2000c084) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff19000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff19000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2a, 0x2, 0x0) (async) r2 = socket$kcm(0x2a, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf25030000000c0006000200000000000000080001"], 0xc0}}, 0xc0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20023) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = socket$kcm(0x2a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x1b0, 0x24, 0xd0f, 0x70bd2a, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff}, {0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000000}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf5, 0x81, 0x1, 0x80000001, 0x2, 0x89a, 0x1, 0x8}}, {0x14, 0x2, [0x6, 0x8, 0x6, 0x8001, 0x4, 0x10, 0x3c, 0x51a0]}}, {{0x1c, 0x1, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3, 0x9, 0x6}}, {0x10, 0x2, [0x6, 0x7fff, 0x8, 0x8, 0x2e23, 0x520]}}, {{0x1c, 0x1, {0xe, 0x5, 0xba9e, 0x7, 0x2, 0x0, 0x8, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x10, 0x8, 0x9, 0x2, 0x2, 0x9, 0x10000, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x7f, 0xc, 0x3, 0x4, 0x0, 0xe0000, 0x3, 0x1}}, {0x6, 0x2, [0x1095]}}, {{0x1c, 0x1, {0xb0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x6, 0x3, 0x1, 0x2f, 0x0]}}, {{0x1c, 0x1, {0x6, 0xe2, 0xfff, 0x1, 0x0, 0x6, 0x9, 0x5}}, {0xe, 0x2, [0xfff, 0x4, 0xfffa, 0x8001, 0x5]}}, {{0x1c, 0x1, {0x5, 0x8, 0x7, 0x8, 0x282283004c569618, 0x8, 0x2, 0x4}}, {0xc, 0x2, [0x800, 0x0, 0x2, 0x2]}}, {{0x1c, 0x1, {0x2, 0x6, 0x35b, 0xf, 0x1, 0x3, 0x1, 0x3}}, {0xa, 0x2, [0x1000, 0xfffe, 0x2]}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a3200000000400003800800024000000006050001"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000a2a7101000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000a2a7101000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r9}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r9}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r10}, 0x38) r11 = accept(r6, &(0x7f0000000380)=@ieee802154={0x24, @long}, &(0x7f00000000c0)=0x80) ioctl$sock_rose_SIOCDELRT(r11, 0x890c, &(0x7f0000000540)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8, @null, @bpq0, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) ioctl$sock_rose_SIOCDELRT(r11, 0x890c, &(0x7f0000000540)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8, @null, @bpq0, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 2.303592516s ago: executing program 4 (id=4483): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r3, 0x0, 0x80, 0x4) read(r1, &(0x7f0000000240)=""/233, 0xe9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x2006, 0x0, 0x40, 0x4000, r0, 0xf89, '\x00', 0x0, r1, 0x4, 0x3, 0x2, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x19, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x68}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) 2.035804226s ago: executing program 2 (id=4485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 1.915536741s ago: executing program 2 (id=4486): socket$netlink(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000100)=0x7d06, 0x4) recvfrom$inet6(r1, 0x0, 0x0, 0x40010001, 0x0, 0x49) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xc095) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x2000}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x1, 0x6361, 0x7, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r14, {0x0, 0xf}, {0xc, 0xb}, {0xc, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008804) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25070000000a0004007770616e330000000c001700000200000000000008000300", @ANYRES32=r2, @ANYBLOB="0200000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) unshare(0x22020600) 1.528384151s ago: executing program 2 (id=4487): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x40046}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000040)=0x1, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r7, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/220, 0xdc}], 0x1}, 0x3}], 0x1, 0x0, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r8, &(0x7f0000000a00)=ANY=[@ANYBLOB="5001000000100000e04c52289c3c965d4e0458e27829acf190bc95c765bd64574f1b91d8481cd58b9474fa7df210497291ceb4b63d0d6316a89d1db9ad49858eb841e7db092542ad058112f876614f9400c4fe82344867bf48ee2d01f967a9da1aa87c7101883aa3b81007ff6cba787f4ef596d3128f0dbd5ebfc22c191391ddd71de6ede1c916439a68f528c854512ac1bb6ba7a31960eb47c874990671aac579f3370bb51038bc2b14d0b3c52a754f4efe592b0a40898458fae3238058a16a87b1f522a419bd06b0277b4aa0d9b1cea78bba1e0aba0ce6aa1f5bceb296ef558348000000000000007d0000030600bc06000000"], 0xf4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000100)=@ethtool_wolinfo={0x6, 0x9, 0x3, "746478bdff01"}}) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x300, 0x250, 0x250, 0x300, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x1a}, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, @private0, @private2, @empty, @local, @private1, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 1.168531741s ago: executing program 1 (id=4489): r0 = socket$unix(0x1, 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000180)=[{0x20, 0x0, 0x3, 0xfffff038}, {0x1d}, {0x6, 0x0, 0xa, 0xfffffffc}, {0x7, 0x3, 0x2, 0x5}]}, 0x10) (async) socketpair(0x3, 0x6, 0xffff, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100514e5a9dcd902ab2e1ee8a6479bc4dd58812cd5a86a48b00b027ef3e2264ebbe5d70ab8c06e46432e7e69e952a8c232fe6384102ce387b056c9da8afc0c4eec25f12d8780240e2c5f514ac8d95ae50652d561a080bcea9286a29b388d280e5a7f0cb23274d0ef294a65eb9bf1bb67395ec18d3bf0bc20b9b380ca75f7691558e976a84a0ad192bc0a30cf1a6c55b0c", @ANYRES16=r3, @ANYBLOB="00082cbd7000fddbdf2503000000140009000000000000000000000000000000000008000600ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x24000001) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000001c0)={0x0, 'veth0_to_bridge\x00', {0x4}, 0x8}) 1.038614916s ago: executing program 0 (id=4491): r0 = socket(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="6ec595b4a5d76ac4e3b19bfb4e26735f1e5d1fd693fc0e137c3656bce79e1a39", 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1100000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f0000000100)=""/7}, 0x20) accept4$alg(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003780)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000000)="415827fde3", 0x5}, {&(0x7f0000000040)="881b54cb0000b13348ab6a618cd65954b3296588ef69bc361d68551657cc4a3d8e062e215b8349dce1e46e23a24a9076088509a347b42c53e813c39ae3bc35e1946d094d03d21cba7f", 0x4}], 0x4b, 0x0, 0x0, 0x1}], 0x1, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', r4, 0x29, 0xfb, 0x53, 0xffffffff, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, @mcast2={0xff, 0x5}, 0x8, 0x7, 0x8001, 0x10008003}}) 848.820049ms ago: executing program 0 (id=4492): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x5, 0x0, @void}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r2, 0x5, 0x0, 0xb, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'rose0\x00', 0x112}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettaction={0x90, 0x32, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd2d}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) 716.839656ms ago: executing program 0 (id=4493): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970008, 0x2244}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x640100ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@remote, 0x4d2, 0x33}, 0x1, @in6=@remote, 0x0, 0x5, 0x0, 0x3}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x14}], 0x1}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$BTRFS_IOC_TREE_SEARCH(r11, 0xd0009411, &(0x7f0000000900)={{0x0, 0x80, 0x0, 0x401, 0xffffffffffffff01, 0x7, 0x2, 0xdd, 0x9, 0xffff, 0x4, 0x0, 0x1, 0x4, 0x1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000001900)={{r12, 0x0, 0x1, 0x5, 0x28c000000000000, 0xace3, 0xfff, 0xe701, 0xce70, 0x107f0c95, 0x0, 0x4, 0x6, 0x10, 0x8000}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001007df00000140000001100010000000000000000000100000a9579206cd6b0b36cf8ebb2172dfb99627d583f56a4230272342a68e18f553b5e7c68ab6ebd9722fdf53db5d10e84eccfafe087807bc6b3b28b795456654275112be5605f51996e4c9d1038994dd89a7663c494688a3e94f205c731dbc3bd4dea697ae00b1d64c7c5cd56b72114b4d8dba349cac1371bd158a1ba"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000791028000000000069003e00000000009500740000000000", @ANYRESDEC=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @fallback=0x20}, 0x94) 559.097573ms ago: executing program 2 (id=4494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a3100000000d62560512e07000000000000008b01c75e8396b9f1626dfe2b5b21a4ab232c6b0365acb21d9d6ec366b829bfbef207b5c13276fb22d6842f1d17188b4b61d476fb385b5d84a1ce522607"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvfrom(r0, 0x0, 0x0, 0x40002062, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 481.237139ms ago: executing program 1 (id=4495): r0 = socket$qrtr(0x2a, 0x2, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000740)="6f45f80ec6fcd4dc420a53abba9d9ac6746d6d21c76e21ffcefc10d618e3a327a3050f4774fd68fe4505c350d0209754253ac499394bb2a24943a8cbe302ad701d2fdfe2191b6c3c8cdadd6ffd7018be03bf4fd8a7ca280011d52a341230ab81dc722c4f808ee464a6b9f098673e60970ed0651b110d1c6bd83538", 0x7b}, {&(0x7f00000007c0)="f8ad29e4b0cf11fb01", 0x9}, {&(0x7f0000000940)="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", 0x270}, {&(0x7f0000000880)="00a5c642eac20ed88c36d16898c17a230b5d0d1dd668d9bce4486fd542ddb5dbd47bca0beadf42134421f57c150f88254310cf55094a3987a9bff7fd6b8d8b67e74b4b96494d", 0x46}], 0x4) sendmsg$qrtr(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x2a, 0x1, 0x8000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000bc0)="8961315d2d4a4588a6d20c855065be4ede85aa9ce6357ad8c9e127b1139bdbb0d4587cc6d0c6cbb24681c8c3dff2800d1c59cd52d239e3b9e31b9d130bf4150b1e24e3d7fa79ffa33b3e38cc3abd04ccc4431989e15ac704c89eb525b9300ece2798848f52274b59067b8f264f519387fcb4bf73a1fb6df0e4182a1ef4340baae5", 0x81}, {&(0x7f0000000100)="9f2de3f1eed3050ae88ece7341dcfa5dca8b7cf734e20cea517021b30313e3", 0x1f}], 0x2, &(0x7f0000000180)=[{0x90, 0x119, 0x8, "c18cd490c69d8b9d07fbdae1e8ae908edb376d7350ab83ebcf33e90cc0c50c1d0f1a138dd91237d2f334cd9523e531af983bd5e4b20646d9a3a60378d76c1ae77048e33cb8c9fd385ed8e0a4603cd2cc4f9024c126668ff204681c175e80759cf04873580a21282bc596e46bbdd1c8e015ec498805d924b53f260251"}, {0x110, 0x112, 0x38, "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"}, {0xb8, 0x112, 0xffffff00, "5935229b33d50e40e3368031acff3ca14501917b0aafdb6ee1a23a8e37734ef7388ab8a69acc2fda38da8d423dd1cfc706959ce5bc80f618a440ce9b2a18fc0f2d7353cb06f597d65f744e1dfc86c3ef3a78834f2e22d995d5b9dcecd86b462c4fef5669f0a1e738c2abff3c6a4b4daaed29a05d3ba5715d2ad282d5d44821d02ced405058ff684bb15d68a291360bfae89d43e298208ef3b80cd11510be024055ffa648"}, {0xa0, 0x109, 0x5a8, "45b24f0af849fb377d48d32f617d957e962d4fd07a5fde69f71c2bbeb57f7deebbabe426bbce0ad4a2db0ea089c8910bf1039df1849e1f7194025fb3591bd624e84e3b9d076028792d0c896f8dc08e0b99fa32bc2ff32fc396a278059817ab14a1195f54fdd3479ebc172491e8d108f1d62653a1713ecd734abe52ecb7e8eae781fd11b0bcf55a9fcfbff9ff0e99"}, {0xb8, 0x0, 0x5, "ab57cb421fb26a625480176ed40b500a91a596f6ddab66c062f01c1768659f25ba643ae160a44d1a6fb3985cd8534133eeb97f986a4ee2735d9c3600ebd87a81d00314e9fff634a03ca731246f1c7c185bd10b7afbe473542ab0e5f82cd874122b3190d8484631eecdb4e6f5ce2f1d063093ddb1855a7c2ca794629efef9635a7ec8e79960e6306cd251409c056bc22441b7e53801a331a168015db2d0052a8fc1b1ccbe"}, {0x90, 0x108, 0x5, "cc034c11794a77514ea7848e1729ba08a1fdfb64620b04e5510844d73d1989441981e2dd321d408b06c54681680237a2c1ca7a47cb74f15c94198c9f1b77ff6ed6139fe7c63c5261a4ccb7249544e63a0641ee99931b6789de81f7d62bfc07d340b6954a57f86e1c760ebb8aa3b2a2aa1a90eec825c7a2dce70706648297"}, {0x58, 0x108, 0x4000000f, "53f96c3ef6a5821c6cc946c1d53c1eaa7af2391bbc6bcf932610d2af1318f243ceb0fbfd2b64b35277d01f297682a8628ea33435274eb209e7e50d7cb1b38d5d3ebc0a50e5"}, {0xe0, 0x10b, 0x814, "34bfd9a36ac085504bbc6da8070199bf9290f404d30ed69f1f87c937af2c8905443f4af1931d47ce82e2cf2208764d1d627c63d6419971ce098ae87a125c35c9406634b3529c3478ac363a6b63e687da048dea04a3f8ead9fa5ddcf50b83b3022d4c29f370cb9e1c23da147a2425257ea2b969840df58534ea25f0ab7d7bf09f72d0e2e19a2ebb1ca61d8bf4496c8d90d15db836c770792cedd0fd073321235da302079f7d622eaadf49598baef0f9dc8ad53993560e81511bf0b5d0bcdd2dd4f77defb29adcbb3c883fc1e4d6cf876d"}], 0x578, 0x10000}, 0x38) socket$qrtr(0x2a, 0x2, 0x0) (async) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000740)="6f45f80ec6fcd4dc420a53abba9d9ac6746d6d21c76e21ffcefc10d618e3a327a3050f4774fd68fe4505c350d0209754253ac499394bb2a24943a8cbe302ad701d2fdfe2191b6c3c8cdadd6ffd7018be03bf4fd8a7ca280011d52a341230ab81dc722c4f808ee464a6b9f098673e60970ed0651b110d1c6bd83538", 0x7b}, {&(0x7f00000007c0)="f8ad29e4b0cf11fb01", 0x9}, {&(0x7f0000000940)="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", 0x270}, {&(0x7f0000000880)="00a5c642eac20ed88c36d16898c17a230b5d0d1dd668d9bce4486fd542ddb5dbd47bca0beadf42134421f57c150f88254310cf55094a3987a9bff7fd6b8d8b67e74b4b96494d", 0x46}], 0x4) (async) sendmsg$qrtr(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x2a, 0x1, 0x8000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000bc0)="8961315d2d4a4588a6d20c855065be4ede85aa9ce6357ad8c9e127b1139bdbb0d4587cc6d0c6cbb24681c8c3dff2800d1c59cd52d239e3b9e31b9d130bf4150b1e24e3d7fa79ffa33b3e38cc3abd04ccc4431989e15ac704c89eb525b9300ece2798848f52274b59067b8f264f519387fcb4bf73a1fb6df0e4182a1ef4340baae5", 0x81}, {&(0x7f0000000100)="9f2de3f1eed3050ae88ece7341dcfa5dca8b7cf734e20cea517021b30313e3", 0x1f}], 0x2, &(0x7f0000000180)=[{0x90, 0x119, 0x8, "c18cd490c69d8b9d07fbdae1e8ae908edb376d7350ab83ebcf33e90cc0c50c1d0f1a138dd91237d2f334cd9523e531af983bd5e4b20646d9a3a60378d76c1ae77048e33cb8c9fd385ed8e0a4603cd2cc4f9024c126668ff204681c175e80759cf04873580a21282bc596e46bbdd1c8e015ec498805d924b53f260251"}, {0x110, 0x112, 0x38, "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"}, {0xb8, 0x112, 0xffffff00, "5935229b33d50e40e3368031acff3ca14501917b0aafdb6ee1a23a8e37734ef7388ab8a69acc2fda38da8d423dd1cfc706959ce5bc80f618a440ce9b2a18fc0f2d7353cb06f597d65f744e1dfc86c3ef3a78834f2e22d995d5b9dcecd86b462c4fef5669f0a1e738c2abff3c6a4b4daaed29a05d3ba5715d2ad282d5d44821d02ced405058ff684bb15d68a291360bfae89d43e298208ef3b80cd11510be024055ffa648"}, {0xa0, 0x109, 0x5a8, "45b24f0af849fb377d48d32f617d957e962d4fd07a5fde69f71c2bbeb57f7deebbabe426bbce0ad4a2db0ea089c8910bf1039df1849e1f7194025fb3591bd624e84e3b9d076028792d0c896f8dc08e0b99fa32bc2ff32fc396a278059817ab14a1195f54fdd3479ebc172491e8d108f1d62653a1713ecd734abe52ecb7e8eae781fd11b0bcf55a9fcfbff9ff0e99"}, {0xb8, 0x0, 0x5, "ab57cb421fb26a625480176ed40b500a91a596f6ddab66c062f01c1768659f25ba643ae160a44d1a6fb3985cd8534133eeb97f986a4ee2735d9c3600ebd87a81d00314e9fff634a03ca731246f1c7c185bd10b7afbe473542ab0e5f82cd874122b3190d8484631eecdb4e6f5ce2f1d063093ddb1855a7c2ca794629efef9635a7ec8e79960e6306cd251409c056bc22441b7e53801a331a168015db2d0052a8fc1b1ccbe"}, {0x90, 0x108, 0x5, "cc034c11794a77514ea7848e1729ba08a1fdfb64620b04e5510844d73d1989441981e2dd321d408b06c54681680237a2c1ca7a47cb74f15c94198c9f1b77ff6ed6139fe7c63c5261a4ccb7249544e63a0641ee99931b6789de81f7d62bfc07d340b6954a57f86e1c760ebb8aa3b2a2aa1a90eec825c7a2dce70706648297"}, {0x58, 0x108, 0x4000000f, "53f96c3ef6a5821c6cc946c1d53c1eaa7af2391bbc6bcf932610d2af1318f243ceb0fbfd2b64b35277d01f297682a8628ea33435274eb209e7e50d7cb1b38d5d3ebc0a50e5"}, {0xe0, 0x10b, 0x814, "34bfd9a36ac085504bbc6da8070199bf9290f404d30ed69f1f87c937af2c8905443f4af1931d47ce82e2cf2208764d1d627c63d6419971ce098ae87a125c35c9406634b3529c3478ac363a6b63e687da048dea04a3f8ead9fa5ddcf50b83b3022d4c29f370cb9e1c23da147a2425257ea2b969840df58534ea25f0ab7d7bf09f72d0e2e19a2ebb1ca61d8bf4496c8d90d15db836c770792cedd0fd073321235da302079f7d622eaadf49598baef0f9dc8ad53993560e81511bf0b5d0bcdd2dd4f77defb29adcbb3c883fc1e4d6cf876d"}], 0x578, 0x10000}, 0x38) (async) 448.503936ms ago: executing program 2 (id=4496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES8=0x0, @ANYRESDEC], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYRESDEC=r2], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b70800001cda00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x1, @remote}, 0xa}}, 0x26) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r4, r9, 0x25, 0x0, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001380), 0x400, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x404c094) syz_emit_ethernet(0x14a, &(0x7f00000007c0)=ANY=[], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081000e0008004c78005a0067000008069078ac1414bbac14142e441c0c31ffffffff000000057f00000100000001e0000001000000d14e214e2355a917e2674ad4c897b9c3c0d2cfc6dcdc4fa91b02cc8d4765a23d1b8ef1bb843ac1920ec9d2a4edad27d0ed6a3e2244806dc5a245c8c8fce6486a9dcdeb3588", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500180009078fffe1d0e3a971753e7e76fa0e6aa06b460ce7587982d9dbe058c1f2d02484697c3da32e6e4b8d39f5d7822204beb495b80faaddb3dba552371bc4c0f455583d2786a9ae8015be0ef57e3e527b4085ac6de11b23db53a1d3bf853a8981ea9b85066f32e989a62d595fe83cdec9424083caf9f066c526ebb76fbac69d51ba3b53e3da3fa1d4dede3c672a8900bfdf86b15c429f9c263832e2f68ac703247c9648401f882210bb5260b2e708b84dc68cecbac"], 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r13 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r13, 0x6a, 0x2, 0x0, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r9, @ANYBLOB="01002301f8e8861bd47bb607f6cb00000000", @ANYRES32=r12, @ANYRESOCT=r3], 0x1c}}, 0x4000) write$nci(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000f03f3e59786aa7d463c2e9ba3f7f7859c08acfc2956d91cd5268b43abd8580d46db0447072b81ee88bd9bc32547fee84e9d2e93ee1707da3a04a94e370f33fea98fd33403953159c84d79eafcfc7eb4a9ea475f292a77bee76893fa"], 0x4) socket$kcm(0x29, 0xe901ab683cc8ea5e, 0x0) 381.873219ms ago: executing program 1 (id=4497): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES16=r1, @ANYRES16=r0, @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x4090) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x6, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 380.846482ms ago: executing program 0 (id=4498): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) getsockopt$inet_mreqn(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)=0xf) 351.733119ms ago: executing program 3 (id=4499): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x9, 0xa, 0x61, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x40, 0x5, 0x2fb83bd6}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x4e21, 0x0, 0x4e24, 0x6, 0x2, 0xa0, 0x20, 0x1d, r2, r4}, {0x8, 0xf7, 0x5, 0x2, 0x8, 0x6, 0x18000, 0x200}, {0x0, 0x5, 0x7, 0xee5f}, 0x7, 0x6e6bba, 0x2, 0x0, 0x2, 0x3}, {{@in6=@local, 0x4d4, 0x33}, 0xa, @in=@private=0xa010100, 0x3506, 0x1, 0x3, 0x7, 0x79, 0x95f6, 0x6}}, 0xe8) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x3, [@union={0x6, 0x9, 0x0, 0x5, 0x1, 0x1, [{0x9, 0x1, 0x5}, {0xf, 0x0, 0x8}, {0x7, 0x4, 0xf}, {0x5, 0x0, 0x4}, {0xf, 0x2, 0x464}, {0x2, 0x4, 0x10000}, {0x8, 0x5, 0x1}, {0xd, 0x0, 0x11}, {0xd, 0x0, 0xb15b}]}, @float={0xd, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x3}, {0x10, 0x1}]}, @typedef={0xc, 0x0, 0x0, 0x8, 0x3}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}, @restrict={0x9, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x30]}}, &(0x7f0000000740)=""/170, 0xe3, 0xaa, 0x0, 0xde7}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x17, 0x3, 0x2b, 0x7, 0x4, 0x1, 0xc79, '\x00', 0x0, r7, 0x5, 0x3}, 0x50) (async) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0xa, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x4000000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r9, &(0x7f0000000d40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)={0x2c0, r10, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "1a653b310a2223100c3dd306da124d97a96e6e5f9ce2ccd2aa75945319a9771ec96af7b04566c50e24410418b5242512f79c1977a0bb8afb911c366e9a898bb2db626e4538b36e98a62a1a6df9fd81f9d2d6d87f29b23435ec7a0d7e9ff70cb1f4ac56b7453e3916e8112cd6fff805df7c9a3a085e713814397787b1eefeae3c490c31e78a6d72c141377a5b713d3efc248b8170d469b77a918e163aa392a365327f011f0a"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x88, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'tls'}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6588669f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '#[&#/!_!\x9a@^{[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x15c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "4505d466ffdfe4f2c26230979c6cbed1a95051d35613e59df2a1e200c6a74004791f2b28cbca0d48f8fcc894743e927baf2bfc70e2da3ab57effff09d621810e89c74a6b5756219d9bf40ef9f9aa487ae76c6ad860694ddd49e4feee6f78ccd6bb8e98eeb8fe2c49968cbdc456030c05614948f010a8e0ec23432eef925ee3c8f7449cd51f95104bf2005761e848c010f8c8524fd3c80c2ea6a801df6f577f"}, @ETHTOOL_A_BITSET_VALUE={0xb, 0x4, "67c78f7bfa70f2"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x40}, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), r9) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r9, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xa4, r11, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c005}, 0x6044000) socket$l2tp6(0xa, 0x2, 0x73) r12 = accept(r1, &(0x7f0000000f40)=@caif=@util, &(0x7f0000000fc0)=0x80) bind$bt_hci(r12, &(0x7f0000001000)={0x1f, 0x1, 0x4}, 0x6) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000001040), r9) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001180)={0x7, 0x8, 0x3, 0x9, 0x3}, 0x14) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r13, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, r14, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000017c0)={r7, 0x20, &(0x7f0000001780)={&(0x7f0000001600)=""/89, 0x59, 0x0, &(0x7f0000001680)=""/223, 0xdf}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x7, 0x28, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1e35, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x392}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001480)='syzkaller\x00', 0xc, 0x9c, &(0x7f00000014c0)=""/156, 0x41100, 0x31, '\x00', r3, @fallback=0xf, r7, 0x8, &(0x7f0000001580)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000015c0)={0x0, 0xe, 0xe6, 0x4}, 0x10, r16, 0xffffffffffffffff, 0x9, &(0x7f0000001880)=[r8, r8, r9], &(0x7f00000018c0)=[{0x0, 0x2, 0xf, 0x7}, {0x5, 0x4, 0x10, 0xa}, {0x0, 0x1, 0xa}, {0x4, 0x1, 0x9, 0x4}, {0x2, 0x1, 0x10}, {0x0, 0x4, 0x0, 0x3}, {0x0, 0x2, 0x8, 0x4}, {0x1, 0x1, 0x5, 0x9}, {0x2, 0x2, 0x7, 0x1}]}, 0x94) 269.020306ms ago: executing program 0 (id=4500): r0 = socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}]}, 0x48}}, 0x4008050) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xc8, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x48}}, 0x400c0c0) unshare(0x22020400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000001220f50004"], 0x20) 268.099967ms ago: executing program 1 (id=4501): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 32) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x104, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8001, 0x0, 0x20}, {@in=@dev, 0x0, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0xfffffffffffffffe}, {}, {}, 0x70bd29, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@local}]}, 0x104}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, 0x0, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r8, 0x4) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRESOCT=r3], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x2}, 0x8) (async, rerun: 64) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000003800128009000100766c616e000000002800028006000100040000001c0003800c00010400000000010000000c000100f7ffffff0300000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) 159.771996ms ago: executing program 3 (id=4502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = socket(0x4, 0x1, 0x1000) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r3}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x24000800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40011}, 0x4004040) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/117, 0x4000, 0x1000, 0x2, 0x2}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000027c0)={0xdc, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xa}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x26b}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xd8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4040040}, 0x4040010) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000380)=""/239, &(0x7f0000000480)=0xef) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0xe, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x44) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0x6, 0xc, 0xfffffff8, 0x9, 0x0}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000640)={0x8, 0x6, 0x8, 0x3, r7}, &(0x7f0000000680)=0x10) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000d00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)={0x5bc, 0x13, 0x200, 0x70bd27, 0x25dfdbff, {0x3, 0x2, 0x86, 0x7, {0x4e22, 0x4e23, [0x2, 0x0, 0x3], [0xfffffffd, 0x3, 0x8, 0x80000001], 0x0, [0x4, 0x3c]}, 0xfffffff8, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "66fbdf5cf4cbe4d9b712d2dcf364d07003a3d03c071e5f23ddf875376b042be5b61ae87ea788071850f31268a3f1f77b641b00225e17360569486ed90aa202156fad21f6e9d5013a6ae0f8bc119adf6e3fa063c88f0871607e14a02df9b40827bbe761e10296dc52ca12c8ba3e00aaa22df4ff20eb681a0ac799c000394c347e8c6502b27b4fefbea236f68a56275aac5d0578517b0778652ed7ad7e2cce2668a497112ce543813f08b45d60b6fc9ef853c64e66c7052c5630c82a258c393b760cb6cb19781468813accdcf72c498b06121857351c7db7543eba8aa275c1a00ce16183490b91258e3cbba199eda8f6cc955c"}, @INET_DIAG_REQ_BYTECODE={0x6, 0x1, "8873"}, @INET_DIAG_REQ_BYTECODE={0x98, 0x1, "de84361f2bc07534001d040cfe1e40259eafd90e9ab024670d724d19bd2a4c51282e6bfaf6bb15bed2279f6ec924fa531c1cecbdf83aa1f94dca227b1084e0b44e0af9c9d8cbd41db186ae20129c65700caedfdb543b8c99f6c2f8bd98556e0511bed3c65393c3f4eb63fad1040952f5ef3e1c7b50374b8b547176dc3d2db08c627888ce85a36616c92b4d7a701e6a664a426ced"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "3a61bb9a432d9ed69e40f2136999a85f56719d94eee6f1cc91ecdd1529fc25b4cc4ca4b096ddb8e03aa7a1570a5661a4a9ca199fa4c85cfef9e1b33b76890227f4badd23dad570dfd3259635"}, @INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "0662f5a68f9e31840250728ff1e268639cb403163b7a7d51c18ba18831c85198a2f0d112f027a92376abad04d1c31bdc755fb9390505caa2833459516943a12679d52e1485548f4ebff52cbdbbcf46ba869e99b3c65ccf10bd906814ec8022c80f7a447ca4fe687e766ca17e85541859c2a88ecc6ceb0ad3a7391444abc89fec2268c571a9e1fadbe4b2b7a1ed609b66d530ef0910d7bcc403574f9c7e66da19cd34a814a7629ae7e5bba9d05e3704571c73"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "c37f38569acb084cfc9b0982cd029f2d496373e8ae488c5026a6bcaace52ad9383ba68f40eee6f0a4c4f53c4d2b700250fbc62d2ef21a5e3164e1e302e5eb07431a3fa18c0f9b14be238d037dae9304f2c0e9b6b48"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "993ea0cb16c884907a444e421f5f3aad57dd89e14556ede2d1515beeded2de67ddc9bc402237df2ce8d0aebb47250165cc515c3be7203b89970bf3e617e81ae21076089d9be0e48368795c6934627c6b2e108c3eb64cea93f188fc36cd19bd0e2301db1e933eeca0a19b8a61167702cd2d7c45faa583cca022b7f9e15c166eb9eda014dbf197fa7089c88ccf658acf840b25fc95b5ffa5509d66a1e2ea9eaee9f71fa12b73b3bad95b560c5817f482e34088f2478d904f182e189289a0a26ba01a41a1c8f2c10c575f4c"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "abe8ebcdfdcbcf45bc6684caac38fddbb53d5a8686c976d22bfd3c9b150281b568729a4c2e721d5dcd64fb5b6de525656e0e7929236395a743cb9ea772006f14bb66cf8da92cf280b52f119be7d0f61866371730829c61444376fa26077e76a6c3dbc29df45ead682e10c568986a00d6d6ab2581d11d5dac12ed4ba6ec79ddc172aea78da0eb5274754be1c006e86593a6a88eddff42ed73c4b9da"}, @INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x10800}, 0x20000001) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002000)={&(0x7f0000000d40)="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", &(0x7f0000000e40)=""/4096, &(0x7f00000020c0)="a35c58802ce3dd9ae58688b9688caeb3a8b2b13f4b6665756274a437e9e6368704a1d57fb895f5df771248c82c0f6615fa22b4a6ed47b09d121cce2e146d7f7251d667aa5a4b7ef25b8b50e7fd0f5861e3127ea41126d8722da3de3346db9d0197adc17313d660415c8619e450bd4190bd9bb66aa11730e2d65ccef68f1f715aceb944e52b4a5f7b7d0da4d5db0b89bda4778109ff26f28ad14309cd17519ff3052551e746e12d24f5b20c93ab92c861eca87eac67494d6c728db2072d35f795f1d187100179fd428e3304b8ba151ad4d9c45e7d68545fedbe986cdb38e5196a1af4d05b86afc1dd87", &(0x7f0000001f40)="4d75af100df331b3877f3034d59be747acf5d2431a2dc6a04b6ec865cc519c8305d385340b3093271984a906c2a797d48aa3c45f7284275f1f042f59be242ccb502c5e359b7e5f2ba43362aea405146809c2ccd74584f5e894110674bdbad535e73934182cdda49d1fc61f40127c89ddc0d90ce5915241875d749b01707813e6a85b319749767a05f47d0391c91fcac2b6bf0fd667644610a77b70721b2bb252a502269dc3e4d4a374ac4033658e9382f269bc5553cbafcbc467ee3d48aa", 0x10000, r8, 0x4}, 0x38) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000002040)=""/5, &(0x7f0000002080)=0x5) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000002380)={&(0x7f00000021c0), 0xc, &(0x7f0000002340)={&(0x7f0000002200)=ANY=[@ANYBLOB="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"/312], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000885) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002500)={'erspan0\x00', &(0x7f0000002440)={'ip_vti0\x00', 0x0, 0x80, 0x7, 0x7, 0x7, {{0x1e, 0x4, 0x0, 0x3, 0x78, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast2, @empty, {[@ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x3c, 0x73, 0x1, 0x8, [{@loopback}, {@broadcast, 0x6}, {@rand_addr=0x64010101, 0x4}, {@multicast1, 0x7}, {@loopback, 0x401}, {@initdev={0xac, 0x1e, 0x7, 0x0}}, {@multicast1, 0x5}]}, @noop, @end, @timestamp={0x44, 0x14, 0x8b, 0x0, 0x5, [0xfff, 0x7fffffff, 0x81, 0x7]}, @lsrr={0x83, 0xb, 0x59, [@loopback, @broadcast]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f00000023c0)=""/106, 0x6a, 0x2020, &(0x7f0000002540)={0x11, 0x1d, r10, 0x1, 0x5, 0x6, @broadcast}, 0x14) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r11, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4051}, 0x4840) sendmsg$nl_route(r9, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r10, 0x4488, 0x20020}}, 0x20}, 0x1, 0x0, 0x0, 0x400}, 0x24000101) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002780)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 153.41019ms ago: executing program 1 (id=4503): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000040)={@random="bdf01734c0d9", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x968, 0x4062d13c}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ff}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000002010300000000000000000000000003140005800f0001006e657462696f732d6e73000008000c4000000004480001801400018008000100e0000001080002000a0101000600034000010000140001800800010000000000080002007f000001140001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) (rerun: 64) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) sendmsg$nl_crypto(r6, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=@getstat={0xe0, 0x15, 0x1, 0x70bd26, 0x25dfdbfe, {{'drbg_pr_sha384\x00'}, '\x00', '\x00', 0x1400, 0x2000}, ["", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) (async) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)=@newtaction={0x2bc0, 0x30, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{0x2668, 0x1, [@m_xt={0x20a4, 0x2, 0x0, 0x0, {{0x7}, {0x107c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0x102a, 0x6, {0x2a, 'nat\x00', 0x7, 0xffff, "a306618793575494df5ccea01161949a055138ea6e9cfd079878d9fdcf38eb25a53ed9dd659287d01301f44668a2d4c35468eae6daa3c84b454e0d0a149646f46d46ed19ff89f34c5bf8a70c79984298735886c009240361eb67c9705a8998f4b1320664ff6585e6447fdaca287bb5c11d55929c7720e55ca54b69de412b388a9149dd65aacf22cac93e38901d7ebd2be33ecd93af2e3d80c5a151edf705d79eb3e441920a74be5a8dc5ac7496505b3e875edabb989769750731c1d371ff53e9ec292b7b4b24227c4ec4f7f173c7db409895e02204cf9e1be5261b2dce3be88ff73d6482c2664f144211bfbfe0d34448c693224b4a6e049cb63f250e3bfba20467507458598f0322511b9dd070d60701abc5627b3db7bec6971c898584e9c8314408f94d3de40580d07f055dc1746507dca6684d3c814e621afc3ef4dd07ae3e916546538dbad58c586a7a8506158e4e387e5a1f6283de48ff7ae1e692dcf1d1d9eb692d6dde163404ce3a716015c98e249c391e5f766a59764de71720dc7c08a6fb694feca977ee03f7cf4cd7eb0f03f68525ddb14eb3f4593d0885321f416131c4ca7a0b99d7aee360f9999f0f028727b4b06ce1cc75ad827aeab21ddb0bee96e5ed4e30bffc571da3312da14cc915c1b7594e0d2ecdc1504a453c6cf37722f5ca7e66801320688302f52d0a8f3b8fa857a12b30abead51dd38353007fd7b4f696c96587e54992dd6abd1ad401e45a9d8514a2240c172ecee37fa95b9d35dd558384774d468baeac1c83037a77fd6e4dc1b84933f08cb2c85fb4262c079954357d135c77eda325d5fe8673e89ce74639942332db3133b78dcd169e35760732549a05ed77b717bea4ce1af3482776f62212d5d7ca6be5aeacdecb09aa4b3b6fcdfd7a9eb1e7467d5a6b9350baf59fd17190e243f3b5f4bd3c1101e4e31edf7c4ae49f2566a59a0fed0049821e75b7b4bab784d39e0ffbc215acd153223803b3ba2e18afd167b3ba2c5d44122dd29d29432981646e161ca2a387817359d9d75a5f9e1d031d2ff9970088db62bb291e5b60c25d2e94be93e50ad5f0ed32e12eee74e9e9aba0ee06789bca4719a45cbe5f13d05262fcf15b50c39f3d2e1927ead184c9005fc6478965f2c5d5f27137dece7335a58947ec6270d4c84a523e6206f4abb2447aaf8204cfc3881e94fa714f5fe857c85eca7c8a5a65fa0cc26e8aa04f96aeec7cc1df5384d32b9d87743c77b2f8b71542a4357dafda2d539fdd1059baff1c5f12bbcfebb52eb23b8d7e0f531716364bb720ff4a617a9960715769333036b8e46ffdc8414d28b79608f9726c17fba40401a845ed9a89cee7dc5e0f47909f23e5f1b2b543ff90501e3169ecc62750f34d78263cc02a07137465eea9db4324ac786e0de604209973d3595e68dccde0857cce52d12453d4080e0d81fc8b501f2b3c69c86b6c7745036e90fc356956a22455cb78159c88f3857c65f4af4a5544001e8322f94879f4f5cdde7be23dab88dd170e8e9408d9b0380241e6e959d398f29b259c6755e572c9f554e279f2af4b4cde74269a5821a246db1e13d22646f6b1bd5043130e68c42314e0c353e53ed4ab501089d80d216853d5f924aa1acc367d2e63892fe32acc5e31cd17da7fa77cb76592024881b415e2d96894186489942992c2a5c3251f5f000c480e3eaf6dc459eac0a03180cf1b3e55cc7e01a4c1b200917bb8c0039168a4c12f04d40569a274faaf5c9864f0dd5c59c87ca45c9425ca92fe606db91b959b642e5a8d7a4dd406f06c2302a441329b57b6773ee527b17faae274ece012531e8a2c8339b14608a4ffdb78c32e8224165791c8ffe82484bbd427322bd0c8e53897aa3892d88d7ec5658d993e9beb00756826b8523d9c4aa5e1353e872b08628b9bbd6b0444ba96f62030e3304c5fba63b628361067669835f77e632c13f3ecea60807ad13139164913b9419f64d10701522e08ad246907d50b1758133e00e63e45463003788d02db067550eb9fb8f216b16f301dce2a59c03215140617453c3376d3dae4784ce15d885d3e2f1d8a1a6cc27bd3af8d461bb1d6ac9ff4b653fbb8c5ca09f5b49d78c74336b0366fdebfbb449f405d8f04860286b67e484d93a219e9d8d8d0bc72ca7082b2feaace33b4f50dbb978dbeb105b876ed356550cdf8c8a35129e456e0cbb6805328618669e13bfbe83ccaca5069ed95b191bcc2bfd24248c07d8f273817d134fb63f355d8dc5a9d855314d6fd39f73473749d5f345ed4cfc78e95201e22c674330663db001170991cbaf65564e6d35fe99c50a7926329f3b35da0660a8bee017093ffb50778694f552fc427753a35cc36b28a1959c7d4e0cd114659ad461fe499ab60edee38e97f2b3089d611809e01a2dca5d11282e86b93e822cc1a77383558af6d28ba8c18528aa5002a6efe9eadcc714d97e2ae2f4d86cfb8ed62f16cc26085ac161fa6d0b1ea7423c1ea1aa72bcc6694603b3df0895b79bf050bbceb9489ff00fc62767b827ef03c59509c5d33277623ca2e34c13e1bfa47fa830bf078171fb5356b0b4e952152cda508e15d3139142bf3ef0da26b00bd41346cc5649df249f5ac9f1b2b0bc465d9234d03aacf94681c0eeb744089f813ce61aa042963577619df91cfb68b460573bcd29ecca9e920e7752e1e9b9d1c566b3c5d08e5aed8accad2cba9bababbb246c4ebc66015349b64c89a3f0f1388e70852a53b9fc365744d751ace2ffb99204fe3a45327552221d7694f79d3a6eb3074446d07a1cee5d229058c763910a2a3508965506fb69885c36015a4ec98cc5cd73a41b81257ef6bd61e9fe4005d5533f321f537fc831a74c3adfc5dec17e2ededb1c4c6211c7bb8064d5352ee5fb97948ea5eccee00a99016453996ed4f5c6268893aae24bb725694aee49af73d11cb878e1634e19d180bd6093024d1189e16076b1ed02494e26f830ab2aa5141ab5e4d46ba6f4c1b1b3b97894fb90503e395214ceebe855cce3f3750c3e181fc2186d17f67637a1798bdc6e6d85a7207b42b5c5388881f20d14aa750566a1a84d9e720bca64b9e9640946e8aa40ef17b384ada7edcbcfa5b7827f13ca4f5dd95679cbd058c9c6f123803d482d4ee9df7892e416d056ac75a5c85fcd77bc012f061e285d82a40678a6b367abb68b56aec6e430a5a145352df4a973acad97ef441c891834d747784480a79852fe573c5ce6f9c8ca068151b962f7b61b2e5e6dd18476cc4fe3162c8c3f9208919cf3bbe8248dc456361960146b016b9d0d151e877f55c8dd787d85cf02cbfed765d13e77d0ccab9ea7f82f74222c421f5b001d6bc8cc1d8f185c5fbf1fa76cfbf48a334adbb6a635802a603d51a1c38faffcb3b83f420ee71e84cf1add3f1096585841f9df66881548b57dc91374ef332f226ef935a82d06435e5b95835fd3d965ef9d51a421a1b8d810be891e035410ea6d019b6e0116e2782868c8fc49536dcb0e57ed6a835fd680ab600c78852e365518a7ae4fdfdeb130cd214b07a43fa2bf6175d2f47cc1fe3e010ef3f3635084565236f259fb408f5207568877bae60d50ae8917c29d0e42988133aeabd58ef9ffd156f5eeebe7f30f38f6b3eb706e5b12bb98cc849bcb03106d331ad962226158f094b60269865abb4d14d9acc7377ce75beeab5d4cc97ce8f9a304b5c02de8c5b5d713db100ecaf227c0611b6e6711e539d18b8aa7a739cb8a6e277a900c422123602ed260354c125f0a7ad6531627190ec1a97e65ca928200c07630368a0ee007cc231687ef697886df4f49d0d572456c43f8eaa61edef34597a9bc7b808f040b03b81788f61d6fccd2604cc77bf90c7abd3fd4b015d5de508e35acefbe5fabe32e29f5c7ab564cb84ce98854f39bbc0c4922f0f5951739b2bf3e5fb22945195109b36166788c52e7fa72fd3a5c0ac54569ea8707932e5b21bd0e0af6ceb04cae77ef819e6d670c5f82673ee91dac38e9b0df88c2f2c849bbbeac7c3b3de60713eaaedaacf94db726e5d9ce310dd8ecaf9f6b9a430f37afe06b09732063e504c6affb247571a0b4514e23ac5e132c400202be0d93ea054c43e13368d1899570430b660246f79a4ff806adb983219935dd0b84bc96c67b658263757c41e0234c3796310f4733331007cfc3422f1dffd01e8facefc2169761a80af17b8be0308252c81cb50825373b5304b741297785093755df6ebdbe8647d00a241200472be5b032fc71d397346a9d6b5b74cd8616a7fdecfd908ddce41bca71605e778812be1b058ecb1e0be8659558328e339b8f34a6b2ade5132f40ad01610876515b4667c6e0d7eb9dfa0b56b3eaa9475e5499bea49bd262e164fe027c5c0afc5d1f72c4e08800af677433857b06c650bbeded477cf6df1bac9b275eb61ad94d2ec5643b23a1f956dac2614ef678d2b4692dc4839dde628832b80a21e80ffa092b58030d96f7e1a9f596f94e42f7cca3d72c9c51191f9ff1cd5a07f78302d01fdbe48a99da931dee42f171b87a6c104cb3cec77f2ad2e38dd8b41c2cb30c85837017e3a5b7325accee8d08bf3219166fe2add56a53ee52b46c31f0b1a97a7f475d6b98a87966284fa409d0d5524ae0872837602aa769a1524c7629352b13ab91fecc662e741103857ff7557aeb19bb3133f9dd7f0203e024e9fd0f2e0d3f14ae0eb29f9a485eca36eb309f1d7f71bdcff24a57c11506b5980173c86be4f9879905be008cdcde91aa1e47b1b65f55e46fefe8cb7f0e0378f6447ebde634a956887a00f74e413058459438fe0f4929081399299ab9950e2900fa091d82fc0483c983197a62fb7d6ff0f5a9c469b45f3ed316c780fcbe7680b4acbdd0b50cff7407e1bd23a03bc7fa4cfb1b112edd5cd1112db4c13a29363d50fd8aa1521383df30a098c39e1f25f7690f79687d7ae6b8d3a69c57f5a8753feea6f3d95c906571e7e9882e1875c9e0a9bbf681e8b85723f278f6a175b40e12cf061f7f6348d7c722674b7397c0e868e8957f8620f4fe55dabfeeac84ae20f0c5ac07690d75dc954721647c20471ec8e85a21285222b4804e1593bbd6e027cd77f561786f17a383ce171e2017f41188992f35de65d7307e451f2c65fe69da6f2f86f2537c37bfb45bf7f2a6e6749cde97022cd4434e67279a13f935adf0ff157b74e4d60f7051af696eef81619a7cf9c6fb056fd16da55be22e2cc81f0edde05165f3bc30c5cf4b8be2998c7184bf15f828d0435bbbd3403ff5def490971ae396d81279d749b699ffe691efe4dc129d18136ec9a7daf648385e751c617c81be3a1119ab507d64ffd42bb999eefd8a1f358590422c546d19491485d9473805cbbe03b3fe04fb9876ffd6f3808c18c1ec65c077c7e9cf59147ae13eca9e6ab46631acb1ac493d7a81c5e2939463b6f8edef52b4c6ab169c4c87f4f6ced01e99d3352a4ad2d1cca20bdda9be4c253d08676181c636cab9f82abbf57748d7819573d50f487b098972d26d11854ada0f6d6fdf16dc6d3e95f2f0e855c571a8fa64c1c884015ae1825315364cb3938e0cbb35f0ac03f245712e1191a3c6a0a66850050b4ac36144daf53e51902ea9a4ed9077fe9927aa0b96ba2f3b74be089a750db56a66e6c687f5125bca30fd2d45d0ff6077cfd621b30041da3329714b84f30523871130e1c5ac5ecfcb41c8d817eedc82a3d3e5735fbfac4806abbca648658e3ecbe356555f1bd8650b063836050f2242b6c914e2db51ccb994b4a82da9b24622e9e061d9eb6dae89c513b4cce9b4621d65ab152f173"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x88, 0x1c, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x101, 0xffffffff, 0x20000000, 0x2, 0x2}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0xe, 0x6, "0c1eda346ad3e1f18f51"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x13c, 0x12, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1ff, 0xffffffffffffffff, 0x8, 0x1994}, 0x3, r1}}]}, {0xee, 0x6, "50138994d472475fe399b6ad21832968dc75d802bea5a7cdd7cfec43ec53f8fbb25cf7c10e294e38048fea3cf3444da355244cabd88e4f714b804a0de73fb499879d27a03d4a915487902e65f268c5b557dc7c34e600c18627c0b6edd1b274c4b142b4b33db63df3c9d748cf3df2274d2c50585de1029e84d1920618556d767c01e4fae56a9c05ef9ac00668e941203af9de305f1585c763cc85a2e91b499480fbec29e2243814520aa337128d8339d6e61ee6b484097c5ce22253be5bd1d12147f6cecd869816c45525bf8d3e5be5804b0e8fdb99066ee267deacf1f9b9e799988b0eb69abfcc44743d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x138, 0x13, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xffff7b6e, 0x2, 0x5, 0xd99}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2520, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1dde, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1bd0, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x9, 0x2, 0x11, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x4, 0x20000000, 0x6, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a7a, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x8, 0x0, 0x9}}]}, {0x7a, 0x6, "252bdb1449e2ff5730e2d8c0046e0587290f9b7ada1199cb9e6d7184afad13e6c9f0bdde20343e277c821ddc61062319def99933023898541c68e7b055deef01e186c207b3c68bb113e67a72347cc2c83b6dfe6d85a38f09d044f535008b41dcd08cb2af4f83d873176d3ce860d518136cebd248fb0a"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x108, 0xc, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0xd3, 0x6, "8d1d429a9fe2674cdaf96a041bcae34318727ea758ed23e90d1264f2ec713f4ca30f4da2d68f0bdb97bd4805d61650e5bca263dcdb4e76b02d6a4a4dab1c8c69694512b8449238bc1e8cd35d6afde9d55133caf145709f075014299beda38f43705cf9db55246edd93a5f736f4bb1f5cc84255d0f509b5967756f4e48a63e609c078c1e15232a8ba929fa2e59f77000d61a098ee777a10972181d4f83ac8bb4712de6c9dcb9dfae1661e77ff552ed03f5c7270f90d92c921b16da2e1b8656089b44d03310e2a61eaca45a22507b1ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x11c, 0x20, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x10001, 0x7, 0xffffffffffffffff, 0x10001, 0x800}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x280000, 0x0, 0x2, 0x6}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xe, 0x3, 'syzkaller\x00'}]}, {0xa0, 0x6, "7fdd8ac144a9df33da75617b40fb2e4f37c2926a09ac68c406378ed3da298714aa7b80c2225349281cbf4cc0cd82dbd567506a8ae4eafc3ec375eaaf3bafc58c3e1a2c8aacea44d2e91c649da6ebac6a64d44f6bab9407174d7124f5ac965b413010caf49c41c30c2083e0d68387ffd1a2e00835e77d651554274aed23fa1ecd7e3b792319d1658833bf694cf5c6862a5de609e81348e2f67fa467a2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xa0, 0x17, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xc00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x101, 0x1, 0xffffffffffffffff, 0x7, 0x1}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x1, 0x8, 0x4, 0x6}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x62b8}]}, {0x11, 0x6, "c270fbed2623136df6f34e2f0f"}, {0xc}, {0xc}}}]}, {0x544, 0x1, [@m_vlan={0xf4, 0x2, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5b0}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbdb}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x8000, 0x20000000, 0xa, 0x4000000}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x1, 0x6, 0x4, 0xffff26d5}, 0x3}}]}, {0x66, 0x6, "f78c085f8c4b56a73532beaf807263731ca50b394ba72e4bc0fc5b53a612ba2c45a32a97d965659cf1b3d1200535909260fc6c3c01617ce17960188b6a716d01400c75dba52492353439de10ef0acc35f35217c9253cfb5bc8282437d99cbb289964"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x174, 0x18, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6007}, @TCA_MPLS_PROTO={0x6, 0x4, 0x892f}, @TCA_MPLS_LABEL={0x8, 0x5, 0x66a6d}, @TCA_MPLS_TTL={0x5, 0x7, 0xdd}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x5, 0x4, 0x3}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x15}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xe4, 0x6, "2adbf1c83937fd540f37727c6345edb3cdb950719c72a39e921955d0543c005b9e858630663bf662f09560b69c790e44f2bbcabadbbbf89eb29eb44ba8e12a6202d2f8146f9f3d1ce20362763aaee2487e4c3c5f811cca19aa6fe6360af40d6a960285e724a40eef80a0985520e36fb9da9c0b2be8aa0f1a0e67875acc69732e48cc47d5ff1a26e3a3296f6661ca8fcf34479298e7ed4655056ff358b317aa77084adec1a304c2f0de062d81f3f5095c8485118aa6dfecd8646586fea652b2774a373118574a132e34325391770520854dff85affdf86b590557ab887783541c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x168, 0xe, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x200, 0x20000000, 0xd0, 0x1}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xff, 0x1, 0x80, 0x1f09}, 0x5}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xf8, 0x1b, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x6, 0x40, 0x6, 0x1}, {0xfe00, 0x2, 0x2, 0x953}, {0x8, 0xf7, 0x6, 0x7b3}, {0x3, 0x7e, 0x5, 0x9}, {0x7, 0x4, 0x4, 0x54e}, {0xa24, 0x4, 0x4, 0xfffffffd}, {0x8bc, 0x42, 0x0, 0x2}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x38, 0x0, 0x4, 0x400}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x48, 0x6, "ed4ac1bddc70c52ebe8dbbf2a31b4048fe827e15a2773b23cd57516c71a005699839b842e1d027e6d2437642f09c3f7fcf4cf5dfa688974aeb7473628178e68769b625ea"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x78, 0x9, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x7}]]}, {0x43, 0x6, "18edd92428346d2c2b4b5a3096bbea11c27226643ed171314d117c51c5d227ed900416b254bc4373c8c5db5a09af033b6537383359ce1fce8c29802bdbc935"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x2bc0}, 0x1, 0x0, 0x0, 0x10}, 0x20048015) 142.679196ms ago: executing program 2 (id=4504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x8a4, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x874, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x800, 0x6, 0xffff8001, 0x80, 0x7a, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x3, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0x2, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x0, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x3, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x8, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x7, 0xffffffff, 0x601, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0xffff, 0x66c, 0x7ff, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x6, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0x3, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x3, 0x1, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xffffffff, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x8001, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x1d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x9, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x1, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38b, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x4, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xc7c5}, @TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x16fa8}]}}]}, 0x8a4}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 139.266091ms ago: executing program 0 (id=4505): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 3.305956ms ago: executing program 3 (id=4506): socket$inet6(0xa, 0x3, 0x7) (async) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r0, 0xff, 0x22, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES16=r0], 0xd0060) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000240)={0x5, {{0xa, 0x4e24, 0x4, @empty, 0x2}}, {{0xa, 0x4e24, 0x81, @empty, 0x7aab}}}, 0x108) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair(0xf, 0x3, 0x7, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000280)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x19}, @void, @val={0xc, 0x99, {0x4, 0x25}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x3c, r6, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004880}, 0x40004) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x3c, r6, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004880}, 0x40004) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@newchain={0x2c, 0x64, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x8}, {0x1, 0xd}, {0xfff1, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0x40000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@newchain={0x2c, 0x64, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x8}, {0x1, 0xd}, {0xfff1, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0x40000) sendmmsg$inet6(r11, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x79b2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00$'], 0x50}}], 0x1, 0x10) unshare(0x28000600) sendmsg$nl_route(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=@newlinkprop={0x68, 0x6c, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, 0x20200, 0x4000}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_TXQLEN={0x8, 0xd, 0xd}, @IFLA_CARRIER={0x5, 0x21, 0xc}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}, @IFLA_PHYS_PORT_ID={0x1c, 0x22, "5d9ef5b7826aba2cc2cb00a6cdeeea1fbf36eeb64c57958c"}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x400}]}, 0x68}, 0x1, 0x0, 0x0, 0x10004080}, 0x20024815) shutdown(r10, 0x0) (async) shutdown(r10, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000200)=0x10) (async) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x10) sendmsg$netlink(r12, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r13}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r9}, @CGW_MOD_UID={0x8, 0xe, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r9}, @CGW_MOD_UID={0x8, 0xe, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 0s ago: executing program 1 (id=4507): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4845}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x134, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x11f, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0xb, 0xbc}}, @prep={0x83, 0x1f, {{}, 0xb, 0x4b, @broadcast, 0x0, @void, 0x1, 0x3, @device_b, 0x1}}, @fast_bss_trans={0x37, 0x77, {0x6, 0x1, "50d2e99512f73379977fcdfbd380de9c", "2cde24cc5dd67ff07874263a480a2c326404e022f3f7ffcfffbb3ee48cddd6fa", "ad9045e4a7bd8dc82256f4861e22f31842e3a526444460eaf8d1548f7e73fe03", [{0x4, 0x23, "ca7dbd69ecac905c3270daf1c6233e0920812d1bd3dfa3dfe3ff873187d69ea642fdca"}]}}, @dsss={0x3, 0x1, 0xd}, @fast_bss_trans={0x37, 0x76, {0x9, 0x2, "20eb8989c12d4aada9d852528afbae7d", "d6de3f246f5f846951a6332d8aa08e504ca6171e382f8f988c3f25804d809a4f", "c0a2d238420c871a0eb4268f7c208e9b6e5a9cfa33da2da4d54283357a162f2d", [{0x1, 0x20, "d647ef2fa8914622fc26eef020fa0c10701dd596e012641412894acaa666ef2a"}, {0x2}]}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x6008810}, 0x800) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x25, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x0, 0x460c6}, 0x1, 0x0, 0x25a1, 0x40}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, 0x0, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) kernel console output (not intermixed with test programs): ntered blocking state [ 527.010343][T19462] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.018582][T19462] bridge_slave_0: entered allmulticast mode [ 527.027399][T19462] bridge_slave_0: entered promiscuous mode [ 527.039677][T19462] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.047445][T19462] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.055668][T19462] bridge_slave_1: entered allmulticast mode [ 527.064317][T19462] bridge_slave_1: entered promiscuous mode [ 527.083809][ T52] Bluetooth: hci3: command tx timeout [ 527.128976][T19531] netlink: 'syz.3.3163': attribute type 66 has an invalid length. [ 527.143947][T19462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.186567][T19462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.206026][T19529] syzkaller0: entered promiscuous mode [ 527.211589][T19529] syzkaller0: entered allmulticast mode [ 527.279200][T19536] netlink: 'syz.3.3164': attribute type 64 has an invalid length. [ 527.287587][T19536] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3164'. [ 527.349274][T19462] team0: Port device team_slave_0 added [ 527.359119][T19462] team0: Port device team_slave_1 added [ 527.427051][T19462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.442267][T19462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.477357][T19462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.492286][T19539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3166'. [ 527.522353][T19462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.535635][T19462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.580497][T19462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.751142][T19462] hsr_slave_0: entered promiscuous mode [ 527.758781][T19462] hsr_slave_1: entered promiscuous mode [ 527.774658][T19462] debugfs: 'hsr0' already exists in 'hsr' [ 527.796879][T19462] Cannot create hsr debugfs directory [ 527.904518][T19562] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 527.934108][T19555] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.000600][T19564] netem: incorrect gi model size [ 528.007369][T19564] netem: change failed [ 528.078059][T19555] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.119820][T19569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.237748][T19555] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.380587][T19578] netlink: 'syz.2.3177': attribute type 10 has an invalid length. [ 528.438578][T19555] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.783684][T14855] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.854454][T14855] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.939376][T14855] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.976675][T14855] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.012202][T19594] __nla_validate_parse: 3 callbacks suppressed [ 529.012222][T19594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3184'. [ 529.088453][T19557] ip6_vti0 speed is unknown, defaulting to 1000 [ 529.092631][T19598] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3184'. [ 529.145714][T19598] netlink: 'syz.2.3184': attribute type 2 has an invalid length. [ 529.147047][T19599] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3183'. [ 529.163767][ T52] Bluetooth: hci3: command tx timeout [ 529.181739][T19598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 529.440094][T19462] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 529.453809][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3188'. [ 529.501005][T19612] netlink: 'syz.1.3186': attribute type 3 has an invalid length. [ 529.509725][T19612] netlink: 'syz.1.3186': attribute type 1 has an invalid length. [ 529.521295][T19462] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 529.530195][T19612] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3186'. [ 529.577009][T19462] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 529.619368][T19462] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 529.665980][T19616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3189'. [ 529.708714][T19616] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3189'. [ 529.772267][T19557] wg1 speed is unknown, defaulting to 1000 [ 529.969168][T19610] ip6_vti0 speed is unknown, defaulting to 1000 [ 529.991155][T19462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.016572][T19462] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.070944][T19462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 530.082203][T19462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 530.295789][T15006] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.303061][T15006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.317893][T15006] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.325159][T15006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.363853][T19610] wg1 speed is unknown, defaulting to 1000 [ 530.588233][T19637] tipc: Enabling of bearer rejected, failed to enable media [ 530.654060][T19639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3194'. [ 530.677247][T19639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3194'. [ 530.745344][T19639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.857316][T19639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.175805][T19462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.243420][ T52] Bluetooth: hci3: command tx timeout [ 531.285119][T19656] netlink: 'syz.2.3197': attribute type 1 has an invalid length. [ 531.395340][T19656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 531.477609][T19660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 531.485161][T19660] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 531.516850][T19660] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 531.569698][T19662] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 531.594625][T19662] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 531.686386][T19656] bridge4: entered allmulticast mode [ 531.808309][T19462] veth0_vlan: entered promiscuous mode [ 531.855631][T19462] veth1_vlan: entered promiscuous mode [ 531.976438][T19462] veth0_macvtap: entered promiscuous mode [ 532.010899][T19672] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 532.040987][T19462] veth1_macvtap: entered promiscuous mode [ 532.105850][T19462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.138679][T19462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.185905][T19681] wg2: entered promiscuous mode [ 532.216315][T15006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.236020][T19685] netlink: 'syz.4.3206': attribute type 1 has an invalid length. [ 532.262655][T15006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.274133][T19685] netlink: 'syz.4.3206': attribute type 2 has an invalid length. [ 532.281933][T19685] netlink: 'syz.4.3206': attribute type 2 has an invalid length. [ 532.293177][ T3422] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.303436][T19685] netlink: 'syz.4.3206': attribute type 2 has an invalid length. [ 532.345973][ T3422] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.614777][T19701] batadv1: entered promiscuous mode [ 532.819094][T15533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.861904][T15533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.953901][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.961786][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.289604][T19714] netlink: 'syz.1.3212': attribute type 3 has an invalid length. [ 533.307307][T19714] netlink: 'syz.1.3212': attribute type 1 has an invalid length. [ 533.329478][ T52] Bluetooth: hci3: command tx timeout [ 533.432181][T19708] ip6_vti0 speed is unknown, defaulting to 1000 [ 533.947484][T19708] wg1 speed is unknown, defaulting to 1000 [ 534.034748][T19701] ip6_vti0 speed is unknown, defaulting to 1000 [ 534.041300][T19733] __nla_validate_parse: 7 callbacks suppressed [ 534.041320][T19733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3216'. [ 534.079606][T19733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3216'. [ 534.089602][ T3422] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.104271][T15006] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.124896][T15006] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.233274][T15006] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.361474][T19739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.589678][T19754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3221'. [ 534.653324][T19716] ip6_vti0 speed is unknown, defaulting to 1000 [ 534.654301][T19701] wg1 speed is unknown, defaulting to 1000 [ 535.139971][T19716] wg1 speed is unknown, defaulting to 1000 [ 535.957709][T19771] lo: Caught tx_queue_len zero misconfig [ 535.997774][T19772] lo: entered allmulticast mode [ 536.021555][T19772] lo: left allmulticast mode [ 536.281296][ T3422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.299182][ T3422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.375197][T19784] syzkaller0: entered promiscuous mode [ 536.401318][T19784] syzkaller0: entered allmulticast mode [ 536.478453][T19796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3233'. [ 536.514723][T19796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3233'. [ 536.623739][T19798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3234'. [ 536.633593][T19796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3233'. [ 536.695100][T19796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3233'. [ 536.963466][T19805] netlink: 'syz.0.3235': attribute type 10 has an invalid length. [ 536.985943][T19796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3233'. [ 537.009131][T19796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3233'. [ 537.017575][T19806] netlink: 'syz.0.3235': attribute type 10 has an invalid length. [ 537.046326][T19805] team0: Port device dummy0 added [ 537.114364][T19806] team0: Port device dummy0 removed [ 537.148733][T19806] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 537.223677][T19795] ip6_vti0 speed is unknown, defaulting to 1000 [ 537.227497][T19816] syzkaller0: entered promiscuous mode [ 537.236144][T19816] syzkaller0: entered allmulticast mode [ 537.389030][T19826] smc: net device hsr0 applied user defined pnetid SYZ2 [ 537.593991][T19839] batadv1: entered promiscuous mode [ 537.665446][T19844] FAULT_INJECTION: forcing a failure. [ 537.665446][T19844] name failslab, interval 1, probability 0, space 0, times 0 [ 537.678398][T19844] CPU: 0 UID: 0 PID: 19844 Comm: syz.2.3244 Not tainted syzkaller #0 PREEMPT(full) [ 537.678427][T19844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 537.678441][T19844] Call Trace: [ 537.678449][T19844] [ 537.678457][T19844] dump_stack_lvl+0xe8/0x150 [ 537.678491][T19844] should_fail_ex+0x412/0x560 [ 537.678528][T19844] should_failslab+0xa8/0x100 [ 537.678555][T19844] __kmalloc_noprof+0xde/0x7e0 [ 537.678575][T19844] ? ethnl_default_set_doit+0x13a/0x8f0 [ 537.678611][T19844] ethnl_default_set_doit+0x13a/0x8f0 [ 537.678639][T19844] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 537.678671][T19844] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 537.678718][T19844] genl_family_rcv_msg_doit+0x22a/0x330 [ 537.678751][T19844] ? __asan_memcpy+0x40/0x70 [ 537.678786][T19844] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 537.678832][T19844] ? bpf_lsm_capable+0x9/0x20 [ 537.678856][T19844] ? security_capable+0x7e/0x2c0 [ 537.678889][T19844] genl_rcv_msg+0x61c/0x7a0 [ 537.678928][T19844] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.678958][T19844] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 537.678998][T19844] ? __pfx_ref_tracker_free+0x10/0x10 [ 537.679038][T19844] netlink_rcv_skb+0x232/0x4b0 [ 537.679064][T19844] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.679097][T19844] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.679119][T19844] ? genl_rcv+0x19/0x40 [ 537.679168][T19844] ? down_read+0x272/0x2e0 [ 537.679188][T19844] ? genl_rcv+0xd/0x40 [ 537.679227][T19844] genl_rcv+0x28/0x40 [ 537.679255][T19844] netlink_unicast+0x80f/0x9b0 [ 537.679288][T19844] ? __pfx_netlink_unicast+0x10/0x10 [ 537.679312][T19844] ? netlink_sendmsg+0x650/0xb40 [ 537.679335][T19844] ? skb_put+0x11b/0x210 [ 537.679359][T19844] netlink_sendmsg+0x813/0xb40 [ 537.679395][T19844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.679424][T19844] ? aa_file_perm+0x12d/0x1630 [ 537.679452][T19844] ? aa_sock_msg_perm+0xf1/0x1b0 [ 537.679483][T19844] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.679502][T19844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.679530][T19844] __sock_sendmsg+0x21c/0x270 [ 537.679561][T19844] ____sys_sendmsg+0x4d7/0x810 [ 537.679583][T19844] ? __might_fault+0xaf/0x130 [ 537.679636][T19844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.679669][T19844] ? import_iovec+0x73/0xa0 [ 537.679703][T19844] ___sys_sendmsg+0x2a5/0x360 [ 537.679723][T19844] ? __lock_acquire+0x6b5/0x2cf0 [ 537.679751][T19844] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.679814][T19844] ? __fget_files+0x2a/0x420 [ 537.679839][T19844] ? __fget_files+0x3a0/0x420 [ 537.679877][T19844] __x64_sys_sendmsg+0x1bd/0x2a0 [ 537.679903][T19844] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.679937][T19844] ? __pfx_ksys_write+0x10/0x10 [ 537.679970][T19844] do_syscall_64+0xe2/0xf80 [ 537.679997][T19844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.680017][T19844] ? trace_irq_disable+0x37/0x100 [ 537.680045][T19844] ? clear_bhb_loop+0x60/0xb0 [ 537.680070][T19844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.680091][T19844] RIP: 0033:0x7f7e3639acb9 [ 537.680111][T19844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.680128][T19844] RSP: 002b:00007f7e3718a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.680151][T19844] RAX: ffffffffffffffda RBX: 00007f7e36615fa0 RCX: 00007f7e3639acb9 [ 537.680165][T19844] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 537.680178][T19844] RBP: 00007f7e3718a090 R08: 0000000000000000 R09: 0000000000000000 [ 537.680191][T19844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.680203][T19844] R13: 00007f7e36616038 R14: 00007f7e36615fa0 R15: 00007ffc32ef2578 [ 537.680239][T19844] [ 538.240553][T19795] wg1 speed is unknown, defaulting to 1000 [ 538.752103][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 538.764626][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 538.773564][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 538.786751][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 538.809897][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 538.888839][T19863] dvmrp0: entered allmulticast mode [ 539.285742][T19878] __nla_validate_parse: 1 callbacks suppressed [ 539.285762][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3252'. [ 539.324074][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3252'. [ 539.339848][T19849] ip6_vti0 speed is unknown, defaulting to 1000 [ 539.552805][T19880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3253'. [ 539.649549][T19880] bridge5: entered promiscuous mode [ 539.654989][T19880] bridge5: entered allmulticast mode [ 539.835249][T19885] netlink: 'syz.2.3255': attribute type 13 has an invalid length. [ 539.854451][T19885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3255'. [ 539.992478][T19849] wg1 speed is unknown, defaulting to 1000 [ 540.233466][T19864] ip6_vti0 speed is unknown, defaulting to 1000 [ 540.384978][T19890] FAULT_INJECTION: forcing a failure. [ 540.384978][T19890] name failslab, interval 1, probability 0, space 0, times 0 [ 540.399204][T19890] CPU: 1 UID: 0 PID: 19890 Comm: syz.2.3257 Not tainted syzkaller #0 PREEMPT(full) [ 540.399234][T19890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 540.399247][T19890] Call Trace: [ 540.399256][T19890] [ 540.399265][T19890] dump_stack_lvl+0xe8/0x150 [ 540.399297][T19890] should_fail_ex+0x412/0x560 [ 540.399334][T19890] should_failslab+0xa8/0x100 [ 540.399362][T19890] kmem_cache_alloc_noprof+0x87/0x6e0 [ 540.399394][T19890] ? skb_clone+0x212/0x3a0 [ 540.399423][T19890] skb_clone+0x212/0x3a0 [ 540.399450][T19890] __netlink_deliver_tap+0x404/0x850 [ 540.399486][T19890] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.399508][T19890] netlink_deliver_tap+0x19c/0x1b0 [ 540.399532][T19890] netlink_sendskb+0x68/0x140 [ 540.399556][T19890] netlink_unicast+0x3a3/0x9b0 [ 540.399586][T19890] ? __pfx_netlink_unicast+0x10/0x10 [ 540.399620][T19890] netlink_rcv_skb+0x2b6/0x4b0 [ 540.399645][T19890] ? __pfx_genl_rcv_msg+0x10/0x10 [ 540.399678][T19890] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 540.399699][T19890] ? genl_rcv+0x19/0x40 [ 540.399747][T19890] ? down_read+0x272/0x2e0 [ 540.399768][T19890] ? genl_rcv+0xd/0x40 [ 540.399805][T19890] genl_rcv+0x28/0x40 [ 540.399832][T19890] netlink_unicast+0x80f/0x9b0 [ 540.399869][T19890] ? __pfx_netlink_unicast+0x10/0x10 [ 540.399893][T19890] ? netlink_sendmsg+0x650/0xb40 [ 540.399915][T19890] ? skb_put+0x11b/0x210 [ 540.399936][T19890] netlink_sendmsg+0x813/0xb40 [ 540.399968][T19890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.399992][T19890] ? aa_file_perm+0x12d/0x1630 [ 540.400017][T19890] ? aa_sock_msg_perm+0xf1/0x1b0 [ 540.400046][T19890] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 540.400066][T19890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.400091][T19890] __sock_sendmsg+0x21c/0x270 [ 540.400120][T19890] ____sys_sendmsg+0x4d7/0x810 [ 540.400141][T19890] ? __might_fault+0xaf/0x130 [ 540.400178][T19890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.400210][T19890] ? import_iovec+0x73/0xa0 [ 540.400235][T19890] ___sys_sendmsg+0x2a5/0x360 [ 540.400255][T19890] ? __lock_acquire+0x6b5/0x2cf0 [ 540.400281][T19890] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.400344][T19890] ? __fget_files+0x2a/0x420 [ 540.400368][T19890] ? __fget_files+0x3a0/0x420 [ 540.400405][T19890] __x64_sys_sendmsg+0x1bd/0x2a0 [ 540.400430][T19890] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 540.400464][T19890] ? __pfx_ksys_write+0x10/0x10 [ 540.400497][T19890] do_syscall_64+0xe2/0xf80 [ 540.400517][T19890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.400545][T19890] ? trace_irq_disable+0x37/0x100 [ 540.400572][T19890] ? clear_bhb_loop+0x60/0xb0 [ 540.400597][T19890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.400618][T19890] RIP: 0033:0x7f7e3639acb9 [ 540.400638][T19890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.400656][T19890] RSP: 002b:00007f7e3718a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.400677][T19890] RAX: ffffffffffffffda RBX: 00007f7e36615fa0 RCX: 00007f7e3639acb9 [ 540.400691][T19890] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 540.400703][T19890] RBP: 00007f7e3718a090 R08: 0000000000000000 R09: 0000000000000000 [ 540.400715][T19890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.400727][T19890] R13: 00007f7e36616038 R14: 00007f7e36615fa0 R15: 00007ffc32ef2578 [ 540.400761][T19890] [ 540.843494][ T5840] Bluetooth: hci1: command tx timeout [ 541.105462][T19864] wg1 speed is unknown, defaulting to 1000 [ 541.563628][ T180] veth17: left allmulticast mode [ 541.579217][ T180] veth17: left promiscuous mode [ 541.597514][ T180] bridge6: port 2(veth17) entered disabled state [ 541.642312][ T180] ip6gretap4: left allmulticast mode [ 541.671564][ T180] ip6gretap4: left promiscuous mode [ 541.681898][ T180] bridge6: port 1(ip6gretap4) entered disabled state [ 542.114349][ T180] batman_adv: batadv0: Removing interface: ip6gretap3 [ 542.279682][ T12] smc: removing ib device syz2 [ 542.749190][ T180] bond4 (unregistering): (slave geneve0): Releasing active interface [ 542.776194][ T180] batman_adv: batadv0: Removing interface: geneve3 [ 542.923719][ T5840] Bluetooth: hci1: command tx timeout [ 543.372334][ T180] bond0 (unregistering): Released all slaves [ 543.546781][ T180] bond1 (unregistering): Released all slaves [ 543.591282][ T180] bond2 (unregistering): Released all slaves [ 543.785215][ T180] bond3 (unregistering): Released all slaves [ 543.981951][ T180] bond4 (unregistering): Released all slaves [ 544.164985][ T180] bond5 (unregistering): Released all slaves [ 544.292041][ T180] bond6 (unregistering): Released all slaves [ 544.397256][ T180] bond7 (unregistering): Released all slaves [ 544.510760][ T180] bond8 (unregistering): Released all slaves [ 544.627203][ T180] bond9 (unregistering): Released all slaves [ 544.731714][ T180] bond10 (unregistering): Released all slaves [ 544.832558][ T180] bond11 (unregistering): Released all slaves [ 544.938205][ T180] bond12 (unregistering): left promiscuous mode [ 544.946179][ T180] team0: Port device bond12 removed [ 544.952628][ T180] bond12 (unregistering): Released all slaves [ 545.013404][ T5840] Bluetooth: hci1: command tx timeout [ 545.065497][ T180] bond13 (unregistering): Released all slaves [ 545.372029][ T180] tipc: Left network mode [ 545.536749][T19956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3263'. [ 545.581986][T19864] chnl_net:caif_netlink_parms(): no params data found [ 545.690318][ T180] IPVS: stopping master sync thread 10312 ... [ 545.786214][T19966] netlink: zone id is out of range [ 545.791649][T19966] netlink: zone id is out of range [ 545.797452][T19966] netlink: zone id is out of range [ 545.823956][T19966] netlink: zone id is out of range [ 545.834981][T19966] netlink: zone id is out of range [ 545.881915][T19966] netlink: zone id is out of range [ 545.976959][T19966] netlink: zone id is out of range [ 545.982350][T19966] netlink: zone id is out of range [ 546.068410][T19966] netlink: zone id is out of range [ 546.090856][T19966] netlink: zone id is out of range [ 546.527373][T19956] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 546.556920][T19951] IPv6: sit1: Disabled Multicast RS [ 546.579403][T19951] sit1: entered promiscuous mode [ 546.584728][T19951] sit1: entered allmulticast mode [ 547.084990][ T5840] Bluetooth: hci1: command tx timeout [ 547.351878][T19990] wg1 speed is unknown, defaulting to 1000 [ 547.352292][T19864] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.415952][T19864] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.446008][T19864] bridge_slave_0: entered allmulticast mode [ 547.468463][T19864] bridge_slave_0: entered promiscuous mode [ 547.689589][T19864] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.710741][T19864] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.740884][T19864] bridge_slave_1: entered allmulticast mode [ 547.757552][T19864] bridge_slave_1: entered promiscuous mode [ 547.942748][T19864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.200191][T19864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.233227][ T180] dummy0: left promiscuous mode [ 548.273658][ T180] team0: left promiscuous mode [ 548.443916][ T180] veth1_vlan: left allmulticast mode [ 548.600257][T20057] netlink: 'syz.2.3277': attribute type 1 has an invalid length. [ 548.625248][T20057] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.3277'. [ 548.766612][T20063] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3278'. [ 549.817023][T20051] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 549.893620][T20061] m1Ie5nè‹: entered promiscuous mode [ 549.974514][T19864] team0: Port device team_slave_0 added [ 550.019307][T19864] team0: Port device team_slave_1 added [ 550.030225][T20070] netlink: 'syz.0.3279': attribute type 3 has an invalid length. [ 550.057288][T20070] netlink: 'syz.0.3279': attribute type 1 has an invalid length. [ 550.074393][T20070] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3279'. [ 550.133989][T19864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.141000][T19864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.185099][T19864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.198666][T19864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.206271][T19864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.235147][T19864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.346710][T20081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3282'. [ 550.360904][T20081] netlink: 'syz.2.3282': attribute type 29 has an invalid length. [ 550.368967][T20081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3282'. [ 550.470818][T19864] hsr_slave_0: entered promiscuous mode [ 550.478575][T19864] hsr_slave_1: entered promiscuous mode [ 550.485577][T19864] debugfs: 'hsr0' already exists in 'hsr' [ 550.491571][T19864] Cannot create hsr debugfs directory [ 550.572317][ T180] IPVS: stop unused estimator thread 0... [ 550.958300][T20097] netlink: 'syz.2.3285': attribute type 16 has an invalid length. [ 550.996148][T20097] netlink: 'syz.2.3285': attribute type 17 has an invalid length. [ 551.053572][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3287'. [ 551.068203][T20106] IPv6: NLM_F_REPLACE set, but no existing node found! [ 551.075448][T20105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.082692][T20105] IPv6: NLM_F_CREATE should be set when creating new route [ 551.134959][T20097] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.142731][T20097] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.255564][T20097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.475451][T20101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3285'. [ 551.544155][ T33] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.571918][ T33] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.590082][ T33] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.600676][ T33] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.610447][ T33] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.621268][ T33] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.673704][ T33] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.682138][ T33] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.752281][T20130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3291'. [ 551.763339][T20130] nbd: must specify at least one socket [ 552.091223][T20145] netlink: 'syz.2.3292': attribute type 1 has an invalid length. [ 552.179260][T20150] netlink: 35120 bytes leftover after parsing attributes in process `syz.2.3292'. [ 552.271853][T20145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 552.439804][T20150] bond2 (unregistering): Released all slaves [ 552.780394][T19864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 552.833667][T19864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 552.869108][T20172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3296'. [ 552.893773][T19864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 552.916948][T20174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3295'. [ 552.951751][T19864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 553.066529][T20190] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3297'. [ 553.082224][T20190] 8021q: VLANs not supported on nlmon0 [ 553.277012][T19864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.351788][T19864] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.399273][T15006] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.406558][T15006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.438323][T15006] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.445558][T15006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.757263][T20209] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3295'. [ 553.937826][T19864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.152327][T19864] veth0_vlan: entered promiscuous mode [ 554.183978][T19864] veth1_vlan: entered promiscuous mode [ 554.281366][T19864] veth0_macvtap: entered promiscuous mode [ 554.315762][T19864] veth1_macvtap: entered promiscuous mode [ 554.409235][T20233] netlink: 'syz.4.3305': attribute type 1 has an invalid length. [ 554.418614][T19864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.443623][T20233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3305'. [ 554.461779][T19864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.500661][T14855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.512556][T14855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.527590][T14855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.568239][T14855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.726821][T20238] syzkaller0: entered promiscuous mode [ 554.732537][T20238] syzkaller0: entered allmulticast mode [ 554.899424][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.947059][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.026506][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.056187][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.259065][T20270] netlink: 'syz.3.3312': attribute type 10 has an invalid length. [ 555.298582][T20270] team0: Port device dummy0 added [ 555.339153][T20270] netlink: 'syz.3.3312': attribute type 10 has an invalid length. [ 558.146810][T20270] team0: Port device dummy0 removed [ 558.156992][T20270] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 558.272878][T20311] batadv1: entered promiscuous mode [ 558.571141][T20343] geneve2: entered promiscuous mode [ 558.793374][T20345] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.818671][T20361] netlink: 'syz.4.3324': attribute type 53 has an invalid length. [ 558.994509][T20345] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.208675][T20345] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.271527][T20374] batadv_slave_0: entered promiscuous mode [ 559.386980][T20380] netlink: 516 bytes leftover after parsing attributes in process `syz.0.3330'. [ 559.397926][T20345] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.448873][T20374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3327'. [ 559.506697][T20372] batadv_slave_0: left promiscuous mode [ 559.928447][T20386] pim6reg1: entered promiscuous mode [ 559.957914][T20386] pim6reg1: entered allmulticast mode [ 560.148965][T15006] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.228196][T15006] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.308531][T15006] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.368410][ T33] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.701618][T20426] tipc: Can't bind to reserved service type 2 [ 560.912312][T20409] lec:lec_atm_close: lec0: Shut down! [ 561.013834][T20441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3340'. [ 561.047269][T20441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3340'. [ 561.100122][T20447] netlink: 'syz.3.3340': attribute type 39 has an invalid length. [ 561.151882][T20441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3340'. [ 561.314035][T20441] bond0: entered promiscuous mode [ 561.353187][T20441] bond_slave_0: entered promiscuous mode [ 561.359103][T20441] bond_slave_1: entered promiscuous mode [ 561.410840][T20441] dummy0: entered promiscuous mode [ 561.442244][T20441] gretap0: entered promiscuous mode [ 561.459618][T20441] hsr1: entered promiscuous mode [ 561.809089][T20475] batadv1: entered promiscuous mode [ 562.268247][ T5840] block nbd3: Receive control failed (result -32) [ 562.346485][ T129] lec:lec_start_xmit: lec0:No lecd attached [ 562.648964][T20506] Can't find ip_set type [ 562.649500][T20509] Can't find ip_set type [ 563.301385][T20542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3358'. [ 563.943858][T20554] netlink: 'syz.3.3361': attribute type 1 has an invalid length. [ 563.959259][T20554] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3361'. [ 563.997889][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20002 [ 564.127418][T20558] netlink: 'syz.0.3360': attribute type 3 has an invalid length. [ 564.135567][T20558] netlink: 'syz.0.3360': attribute type 1 has an invalid length. [ 564.155770][T20558] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3360'. [ 564.458979][T20544] nr2: entered promiscuous mode [ 564.473135][T20544] nr2: entered allmulticast mode [ 564.498644][T20544] netlink: 'syz.2.3359': attribute type 1 has an invalid length. [ 564.581504][T20544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 564.913245][T20585] ipvlan0: entered promiscuous mode [ 564.924886][T20584] ipvlan0: left promiscuous mode [ 565.417735][T20600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3371'. [ 566.134469][T20616] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3377'. [ 566.236020][T20621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'. [ 566.248053][T20621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3376'. [ 566.341678][T20625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3380'. [ 566.403769][T20625] netlink: 'syz.0.3380': attribute type 1 has an invalid length. [ 566.492150][T20629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3380'. [ 566.597921][T20631] netlink: 'syz.3.3382': attribute type 1 has an invalid length. [ 566.617327][T20631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3382'. [ 566.638010][T20635] netlink: 'syz.0.3383': attribute type 2 has an invalid length. [ 566.690951][T20635] !: entered promiscuous mode [ 566.885662][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'. [ 567.108197][T20665] pimreg: entered allmulticast mode [ 567.125834][T20667] pimreg: left allmulticast mode [ 567.162086][T20669] netlink: 'syz.4.3389': attribute type 3 has an invalid length. [ 567.170985][T20669] netlink: 'syz.4.3389': attribute type 1 has an invalid length. [ 567.184905][T20669] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.3389'. [ 567.338375][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3394'. [ 567.440813][T20679] veth5: entered promiscuous mode [ 567.517760][T20687] net_ratelimit: 90 callbacks suppressed [ 567.517779][T20687] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 567.650116][T20691] batadv1: entered promiscuous mode [ 567.893851][T20703] netlink: 'syz.1.3400': attribute type 1 has an invalid length. [ 567.927144][T20705] netlink: 'syz.1.3400': attribute type 1 has an invalid length. [ 568.042945][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5690 ms [ 568.051517][ C0] lec:lec_tx_timeout: lec0 [ 568.056368][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 568.134274][T20703] 8021q: adding VLAN 0 to HW filter on device bond2 [ 568.208822][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.238709][T20708] bond2: (slave ip6gretap1): making interface the new active one [ 568.259323][T20708] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 569.651000][T20772] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 570.243204][T20788] nbd: device at index 0 is going down [ 570.537857][T20437] udevd[20437]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 570.588470][T14855] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 570.739446][T20819] __nla_validate_parse: 2 callbacks suppressed [ 570.739466][T20819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3422'. [ 570.790942][T20821] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 570.802733][T20821] bond1 (unregistering): Released all slaves [ 571.026568][T20836] netlink: 'syz.2.3426': attribute type 1 has an invalid length. [ 571.235985][T20847] netlink: 'syz.2.3428': attribute type 3 has an invalid length. [ 571.245229][T20847] netlink: 'syz.2.3428': attribute type 1 has an invalid length. [ 571.253820][T20847] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3428'. [ 571.432776][T20849] ipip0: entered promiscuous mode [ 571.439354][T20849] ipip0: entered allmulticast mode [ 571.622673][T20859] batadv1: entered promiscuous mode [ 571.687009][T20866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3431'. [ 571.703172][T20866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3431'. [ 571.736429][T20866] netlink: 'syz.3.3431': attribute type 14 has an invalid length. [ 571.871025][T20870] dvmrp6: entered allmulticast mode [ 573.006225][T20923] netlink: 'syz.0.3440': attribute type 21 has an invalid length. [ 573.026899][T20923] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3440'. [ 573.083018][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 573.091140][ C0] lec:lec_tx_timeout: lec0 [ 573.096637][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 573.127859][T20922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.474921][T20940] netlink: 'syz.2.3445': attribute type 3 has an invalid length. [ 573.514202][T20940] netlink: 'syz.2.3445': attribute type 1 has an invalid length. [ 573.532552][T20940] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3445'. [ 573.584639][T20952] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 573.594568][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3448'. [ 573.607683][T20952] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 573.632242][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3448'. [ 573.895039][T20958] bond1: entered promiscuous mode [ 573.902259][T20958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 574.472171][T20976] syzkaller1: entered promiscuous mode [ 574.513025][T20976] syzkaller1: entered allmulticast mode [ 574.794987][T20987] netlink: 'syz.0.3453': attribute type 13 has an invalid length. [ 575.209056][T21004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3457'. [ 575.225043][T21000] x_tables: duplicate underflow at hook 1 [ 575.248071][T21004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3457'. [ 575.553526][T21029] sctp: [Deprecated]: syz.0.3461 (pid 21029) Use of int in maxseg socket option. [ 575.553526][T21029] Use struct sctp_assoc_value instead [ 575.570869][T21026] batadv1: entered promiscuous mode [ 575.860100][T21039] wg1: entered promiscuous mode [ 575.872617][T21039] wg1: entered allmulticast mode [ 576.174553][T21053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.395378][T21060] __nla_validate_parse: 1 callbacks suppressed [ 576.395399][T21060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3472'. [ 576.748442][T21080] netlink: 'syz.0.3475': attribute type 1 has an invalid length. [ 576.847756][T21080] bond3: entered promiscuous mode [ 576.885783][T21080] 8021q: adding VLAN 0 to HW filter on device bond3 [ 577.152448][T21084] 8021q: adding VLAN 0 to HW filter on device bond3 [ 577.185421][T21084] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 577.210112][T21107] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3481'. [ 577.211997][T21084] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 577.307536][T21084] bond3: (slave gre1): Opening slave failed [ 577.478927][T21100] tipc: Started in network mode [ 577.496559][T21100] tipc: Node identity e2677396c964, cluster identity 4711 [ 577.504675][T21100] tipc: Enabled bearer , priority 0 [ 577.540034][T21106] syzkaller0: entered promiscuous mode [ 577.574853][T21106] syzkaller0: entered allmulticast mode [ 577.643564][T21122] tipc: Resetting bearer [ 577.723862][T21079] tipc: Resetting bearer [ 577.773192][T21130] netlink: 'syz.4.3483': attribute type 7 has an invalid length. [ 577.782235][T21079] tipc: Disabling bearer [ 577.793906][T21130] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3483'. [ 577.883486][T21094] syzkaller0: entered promiscuous mode [ 577.900733][T21094] syzkaller0: entered allmulticast mode [ 578.102932][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 578.111037][ C0] lec:lec_tx_timeout: lec0 [ 578.117155][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 578.416443][T21150] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 580.117528][T21141] batadv1: entered promiscuous mode [ 580.325281][T21172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3491'. [ 580.383140][T21174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3491'. [ 580.406192][T21176] netlink: 'syz.2.3493': attribute type 1 has an invalid length. [ 580.441832][T21176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 580.496805][T21176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 580.533560][T21176] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 580.561104][T21176] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 580.972121][T21180] gretap1: entered promiscuous mode [ 581.012150][T21180] bond3: (slave gretap1): making interface the new active one [ 581.036111][T21180] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 581.526614][T21209] tunl0: Caught tx_queue_len zero misconfig [ 581.904112][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3499'. [ 582.307981][T21240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3501'. [ 582.662984][T21256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3507'. [ 582.749397][T21260] batadv1: entered promiscuous mode [ 582.945073][T21265] sctp: [Deprecated]: syz.0.3511 (pid 21265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 582.945073][T21265] Use struct sctp_sack_info instead [ 583.132935][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 583.141402][ C0] lec:lec_tx_timeout: lec0 [ 583.147508][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 583.200130][T21282] netlink: 'syz.3.3513': attribute type 2 has an invalid length. [ 583.361977][T21287] netlink: 'syz.0.3514': attribute type 1 has an invalid length. [ 583.414146][T21296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3514'. [ 583.651003][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'. [ 583.660104][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3516'. [ 583.669586][T21302] netlink: 'syz.1.3516': attribute type 12 has an invalid length. [ 583.680340][T21287] 8021q: adding VLAN 0 to HW filter on device bond4 [ 583.693320][T21302] netlink: 'syz.1.3516': attribute type 11 has an invalid length. [ 584.255177][T21320] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3521'. [ 584.347212][T15533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.360341][T15533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.592133][T21341] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3525'. [ 584.617893][T21330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3524'. [ 584.733833][T21345] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3527'. [ 584.780448][T21345] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 585.223535][T21373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.645031][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 585.913239][T21404] netlink: 'syz.0.3538': attribute type 2 has an invalid length. [ 585.941605][T21406] netlink: 'syz.0.3538': attribute type 2 has an invalid length. [ 585.979062][T21405] batadv1: entered promiscuous mode [ 586.394654][T21427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.055941][T21452] xfrm0: entered promiscuous mode [ 587.061171][T21452] xfrm0: entered allmulticast mode [ 587.091347][T21452] netlink: 'syz.3.3550': attribute type 13 has an invalid length. [ 587.237716][T21464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.263830][T21452] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.271609][T21452] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.376624][T21452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.389978][T21467] __nla_validate_parse: 4 callbacks suppressed [ 587.389997][T21467] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3554'. [ 587.408041][T21452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.507651][T21459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3551'. [ 587.517331][T21459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3551'. [ 587.538268][T21456] veth2: entered allmulticast mode [ 587.587163][T11039] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.596051][T11039] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.609314][T21459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3551'. [ 587.619110][T21459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3551'. [ 587.639207][T11039] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.688858][T11039] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.163164][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 588.171288][ C0] lec:lec_tx_timeout: lec0 [ 588.176381][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 588.237382][T21485] netlink: 'syz.0.3560': attribute type 23 has an invalid length. [ 590.386993][T21487] macsec1: entered promiscuous mode [ 590.392358][T21487] macsec1: entered allmulticast mode [ 590.535931][T21489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3562'. [ 590.697002][T21500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3567'. [ 590.706580][T21500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.734389][T21506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3568'. [ 590.746262][T21506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3568'. [ 590.766177][T21506] netlink: 38 bytes leftover after parsing attributes in process `syz.1.3568'. [ 590.798504][T21500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.838563][T21511] tipc: Started in network mode [ 590.845289][T21511] tipc: Node identity ac14140f, cluster identity 4711 [ 590.854363][T21511] tipc: New replicast peer: 255.255.255.255 [ 590.861647][T21511] tipc: Enabled bearer , priority 10 [ 590.903569][T21515] syzkaller0: entered promiscuous mode [ 590.909103][T21515] syzkaller0: entered allmulticast mode [ 590.957124][T21515] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 591.195037][T21533] ip6tnl2: entered promiscuous mode [ 591.200484][T21533] ip6tnl2: entered allmulticast mode [ 591.223321][T21532] batadv0: entered promiscuous mode [ 591.235754][T21532] macvtap1: entered promiscuous mode [ 591.246091][T21532] macvtap1: entered allmulticast mode [ 591.273841][T21532] batadv0: entered allmulticast mode [ 591.280479][T21532] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 591.296324][T21532] batadv0: left allmulticast mode [ 591.306053][T21532] batadv0: left promiscuous mode [ 591.635523][T21552] syzkaller0: entered promiscuous mode [ 591.641097][T21552] syzkaller0: entered allmulticast mode [ 591.764681][ T30] audit: type=1804 audit(1769284937.494:8): pid=21557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3583" name="/newroot/189/cgroup.controllers" dev="tmpfs" ino=987 res=1 errno=0 [ 591.840751][ T30] audit: type=1800 audit(1769284937.494:9): pid=21557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3583" name="cgroup.controllers" dev="tmpfs" ino=987 res=0 errno=0 [ 591.914004][ T5922] tipc: Node number set to 2886997007 [ 592.772598][T21582] tc_dump_action: action bad kind [ 593.183211][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 593.191452][ C0] lec:lec_tx_timeout: lec0 [ 593.196432][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 593.331183][T21610] ieee802154 phy0 wpan0: encryption failed: -22 [ 594.221422][T21645] __nla_validate_parse: 2 callbacks suppressed [ 594.221442][T21645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3600'. [ 594.601207][T21658] netlink: 'syz.3.3602': attribute type 10 has an invalid length. [ 594.637097][T21658] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3602'. [ 595.294341][T21679] netlink: 'syz.3.3605': attribute type 15 has an invalid length. [ 595.504322][T21691] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3607'. [ 595.531045][T21691] netlink: 'syz.4.3607': attribute type 9 has an invalid length. [ 595.566539][T21691] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3607'. [ 595.603117][T21691] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3607'. [ 595.648260][T21701] netlink: 'syz.3.3609': attribute type 2 has an invalid length. [ 595.688702][T21704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3610'. [ 595.804033][T21704] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3610'. [ 595.884187][T19464] Bluetooth: hci4: command 0x0406 tx timeout [ 596.124040][ T5840] Bluetooth: hci1: command 0x0405 tx timeout [ 596.912673][T21755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3616'. [ 597.582305][T21776] netlink: 'syz.1.3619': attribute type 3 has an invalid length. [ 597.621205][T21776] netlink: 'syz.1.3619': attribute type 1 has an invalid length. [ 597.644453][T21776] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3619'. [ 597.717595][T21777] bond2: entered promiscuous mode [ 597.724733][T21777] bond2: entered allmulticast mode [ 597.730528][T21777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.953607][T21792] netlink: 'syz.2.3623': attribute type 3 has an invalid length. [ 597.961842][T21792] netlink: 'syz.2.3623': attribute type 1 has an invalid length. [ 597.991679][T21792] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3623'. [ 598.203375][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 598.211485][ C0] lec:lec_tx_timeout: lec0 [ 598.216140][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 599.528159][T21814] __nla_validate_parse: 3 callbacks suppressed [ 599.528180][T21814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3630'. [ 599.788997][T21824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 600.165908][T21843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3633'. [ 600.192075][T21838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3635'. [ 600.319527][T21846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3637'. [ 600.349234][T21846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3637'. [ 600.541596][T21856] No such timeout policy "syz1" [ 601.354962][T21878] netlink: 'syz.0.3646': attribute type 41 has an invalid length. [ 601.373284][T21879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3646'. [ 601.500462][T21879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3646'. [ 601.604220][T21887] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3647'. [ 601.784270][T21894] netlink: 'syz.2.3649': attribute type 30 has an invalid length. [ 601.825081][T21890] netlink: 'syz.0.3648': attribute type 3 has an invalid length. [ 601.833956][T21890] netlink: 'syz.0.3648': attribute type 1 has an invalid length. [ 601.841916][T21890] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3648'. [ 601.878599][T21896] openvswitch: netlink: Flow key attr not present in new flow. [ 602.235924][T21903] xt_hashlimit: invalid rate [ 602.350364][T21903] pim6reg: entered allmulticast mode [ 602.370996][T21914] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3653'. [ 603.222986][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 603.231141][ C0] lec:lec_tx_timeout: lec0 [ 603.235929][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 603.395090][T21945] team0 (unregistering): Port device team_slave_0 removed [ 603.433938][T21945] team0 (unregistering): Port device team_slave_1 removed [ 603.475403][T21950] wg0: entered promiscuous mode [ 603.480447][T21950] wg0: entered allmulticast mode [ 603.889952][T21963] netlink: 'syz.1.3665': attribute type 3 has an invalid length. [ 603.898126][T21963] netlink: 'syz.1.3665': attribute type 1 has an invalid length. [ 604.787769][T21992] tipc: Enabled bearer , priority 0 [ 604.846093][T21992] syzkaller0: entered promiscuous mode [ 604.851630][T21992] syzkaller0: entered allmulticast mode [ 605.112694][T21992] tipc: Resetting bearer [ 605.140477][T22014] __nla_validate_parse: 8 callbacks suppressed [ 605.140497][T22014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3677'. [ 605.427438][T21988] tipc: Resetting bearer [ 605.474994][T21997] netlink: 'syz.3.3673': attribute type 2 has an invalid length. [ 605.506295][T21988] tipc: Disabling bearer [ 605.535712][T22020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3679'. [ 605.567566][T22016] netlink: 'syz.2.3678': attribute type 12 has an invalid length. [ 605.582365][T22016] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3678'. [ 605.635539][T22016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3678'. [ 606.111190][T22033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3681'. [ 606.194631][T22033] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3681'. [ 606.210322][T22039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3682'. [ 606.987986][T22061] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3687'. [ 607.222142][T22069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3688'. [ 607.322632][T22068] netlink: 'syz.2.3689': attribute type 29 has an invalid length. [ 607.331796][T22068] netlink: 'syz.2.3689': attribute type 29 has an invalid length. [ 607.362190][T22068] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3689'. [ 607.639837][T22082] tap0: tun_chr_ioctl cmd 1074025677 [ 607.657666][T22082] tap0: linktype set to 769 [ 607.693926][T22087] netlink: 'syz.2.3692': attribute type 13 has an invalid length. [ 608.002482][T22093] netlink: 'syz.0.3693': attribute type 3 has an invalid length. [ 608.021097][T22093] netlink: 'syz.0.3693': attribute type 1 has an invalid length. [ 608.242942][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 608.251037][ C0] lec:lec_tx_timeout: lec0 [ 608.256210][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 608.976765][T22136] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 609.453898][T22152] netlink: 'syz.3.3707': attribute type 10 has an invalid length. [ 610.009216][T22177] netlink: 'syz.4.3715': attribute type 10 has an invalid length. [ 610.087490][T22177] team0: Device veth1_macvtap failed to register rx_handler [ 610.296153][T22194] netlink: 'syz.3.3716': attribute type 1 has an invalid length. [ 610.320230][T22193] netlink: 'syz.1.3718': attribute type 1 has an invalid length. [ 610.350710][T22193] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 611.350466][T22234] No such timeout policy "syz0" [ 611.365096][T22234] __nla_validate_parse: 5 callbacks suppressed [ 611.365115][T22234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3724'. [ 612.340921][T22261] veth0_vlan: left promiscuous mode [ 612.347001][T22268] IPv6: Can't replace route, no match found [ 612.807035][T22292] Bluetooth: MGMT ver 1.23 [ 613.367583][T22300] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3739'. [ 613.701496][T22312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3743'. [ 613.741621][T22317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3744'. [ 613.875856][T22321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3745'. [ 613.929607][T22321] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3745'. [ 613.946539][T22329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3745'. [ 613.957105][T22321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3745'. [ 613.994670][T22329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.002523][T22329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.031968][T22321] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3745'. [ 614.042922][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 614.051086][ C0] lec:lec_tx_timeout: lec0 [ 614.056507][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 614.079167][T22333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.083586][T22321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3745'. [ 614.136394][T22329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.148090][T22329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.318723][T22340] bridge_slave_1: left allmulticast mode [ 614.338686][T22340] bridge_slave_1: left promiscuous mode [ 614.359176][T22340] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.395954][T22340] bridge_slave_0: left allmulticast mode [ 614.403525][T22340] bridge_slave_0: left promiscuous mode [ 614.410058][T22340] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.794088][T22355] netlink: 'syz.2.3756': attribute type 10 has an invalid length. [ 614.948102][T22360] wg1: left promiscuous mode [ 614.993053][T22360] wg2: left promiscuous mode [ 615.019996][T22360] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 615.092466][T22363] netlink: 'syz.0.3758': attribute type 3 has an invalid length. [ 615.109588][T22363] netlink: 'syz.0.3758': attribute type 1 has an invalid length. [ 615.217646][ T30] audit: type=1800 audit(1769284960.944:10): pid=22370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3759" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=642 res=0 errno=0 [ 615.409712][T22375] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥ [ 616.424035][T22402] __nla_validate_parse: 4 callbacks suppressed [ 616.424055][T22402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 616.527552][T22409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3767'. [ 617.095908][T22420] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3769'. [ 617.208930][T22418] batadv_slave_0: entered promiscuous mode [ 617.570299][T22432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3773'. [ 617.899684][T22417] batadv_slave_0: left promiscuous mode [ 618.474879][T22438] syzkaller0: entered promiscuous mode [ 618.487337][T22438] syzkaller0: entered allmulticast mode [ 618.500977][T22452] syzkaller0: left promiscuous mode [ 618.512716][T22452] syzkaller0: left allmulticast mode [ 618.601453][T22468] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 619.082966][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 619.100139][ C0] lec:lec_tx_timeout: lec0 [ 619.105185][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 619.274044][T22492] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3782'. [ 619.494289][T22496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3782'. [ 619.504389][T22496] openvswitch: netlink: Flow key attr not present in new flow. [ 619.794574][T22507] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3783'. [ 619.814569][T22507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3783'. [ 621.174114][T22518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3785'. [ 621.228079][T22523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3787'. [ 621.288761][T22522] IPv6: sit1: Disabled Multicast RS [ 621.444518][T22523] team0 (unregistering): Port device team_slave_0 removed [ 621.467523][T22523] team0 (unregistering): Port device team_slave_1 removed [ 621.519248][T22542] netlink: 'syz.3.3790': attribute type 1 has an invalid length. [ 621.534163][T22542] netlink: 'syz.3.3790': attribute type 2 has an invalid length. [ 621.608018][T22542] : entered promiscuous mode [ 621.635978][T22538] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.659157][T22538] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.691215][T22553] netlink: 'syz.4.3792': attribute type 5 has an invalid length. [ 621.798731][T22542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3790'. [ 621.872324][T22558] netlink: 'syz.0.3793': attribute type 3 has an invalid length. [ 621.903639][T22558] netlink: 'syz.0.3793': attribute type 1 has an invalid length. [ 621.937124][T22558] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3793'. [ 621.978103][T22570] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3796'. [ 622.430820][T22579] netlink: 'syz.2.3797': attribute type 13 has an invalid length. [ 622.457471][T22579] gretap0: refused to change device tx_queue_len [ 622.487157][T22579] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 622.831155][T22591] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.3804'. [ 623.020028][T22595] tipc: Started in network mode [ 623.027883][T22595] tipc: Node identity 8ebeb4d607e7, cluster identity 4711 [ 623.036870][T22595] tipc: Enabled bearer , priority 0 [ 623.086317][T22599] syzkaller0: entered promiscuous mode [ 623.112745][T22599] syzkaller0: entered allmulticast mode [ 623.153644][T22595] tipc: Resetting bearer [ 623.176511][T22593] tipc: Resetting bearer [ 623.211928][T22593] tipc: Disabling bearer [ 623.431026][T22613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3808'. [ 623.463370][T22613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3808'. [ 623.472501][T22613] netlink: 'syz.3.3808': attribute type 14 has an invalid length. [ 623.577837][T22604] delete_channel: no stack [ 623.695122][T22621] syzkaller1: entered promiscuous mode [ 623.701839][T22621] syzkaller1: entered allmulticast mode [ 623.969856][T22630] netlink: 'syz.3.3813': attribute type 3 has an invalid length. [ 624.035828][T22630] netlink: 'syz.3.3813': attribute type 1 has an invalid length. [ 624.088648][T22630] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3813'. [ 624.112925][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 624.121158][ C0] lec:lec_tx_timeout: lec0 [ 624.131719][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 624.204691][T22644] netlink: 'syz.2.3816': attribute type 1 has an invalid length. [ 624.520091][T22663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3821'. [ 624.647378][T22674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3821'. [ 624.932549][T22683] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3824'. [ 625.238580][T22695] ip6gre2: entered promiscuous mode [ 625.948622][T22722] batadv1: entered promiscuous mode [ 626.340371][T22735] tipc: Started in network mode [ 626.350689][T22735] tipc: Node identity 627ffe71f68e, cluster identity 4711 [ 626.369441][T22735] tipc: Enabled bearer , priority 0 [ 626.386528][T22736] syzkaller0: entered promiscuous mode [ 626.396403][T22736] syzkaller0: entered allmulticast mode [ 626.632424][T22748] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 626.643991][T22738] tipc: Resetting bearer [ 626.714818][T22738] tipc: Disabling bearer [ 626.930563][T22755] lo: entered allmulticast mode [ 627.228777][T22755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.363762][T22755] ip6tnl2: left promiscuous mode [ 627.369406][T22755] ip6tnl2: left allmulticast mode [ 627.413537][T15533] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.446882][T14855] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.473353][T14855] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.498699][T14855] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.807035][T22778] __nla_validate_parse: 4 callbacks suppressed [ 627.807055][T22778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3847'. [ 628.031243][T22779] wg1: entered promiscuous mode [ 628.037064][T22779] wg1: entered allmulticast mode [ 628.284708][T22786] batadv1: entered promiscuous mode [ 629.142926][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 629.151045][ C0] lec:lec_tx_timeout: lec0 [ 629.158252][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 629.475434][T22806] validate_nla: 2 callbacks suppressed [ 629.475455][T22806] netlink: 'syz.2.3854': attribute type 16 has an invalid length. [ 629.489969][T22806] netlink: 'syz.2.3854': attribute type 17 has an invalid length. [ 629.506368][T22806] gretap0: left promiscuous mode [ 629.542048][T22806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.559582][T22806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.629464][T22809] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3855'. [ 629.651336][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.690437][T22809] vlan2: entered promiscuous mode [ 629.696202][T22809] bond0: entered promiscuous mode [ 629.701968][T22809] bond_slave_0: entered promiscuous mode [ 629.708178][T22809] bond_slave_1: entered promiscuous mode [ 629.716131][T22809] dummy0: entered promiscuous mode [ 629.903176][T22817] netlink: 'syz.2.3856': attribute type 3 has an invalid length. [ 629.911121][T22817] netlink: 'syz.2.3856': attribute type 1 has an invalid length. [ 629.919884][T22817] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3856'. [ 630.145744][T22819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3858'. [ 630.163524][T22819] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3858'. [ 630.756942][T22833] netlink: 'syz.0.3862': attribute type 10 has an invalid length. [ 630.843171][T22833] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 630.861396][T22833] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 630.879078][T22834] netlink: 'syz.2.3863': attribute type 10 has an invalid length. [ 631.117631][T22850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.158238][T22853] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.3867'. [ 631.179712][T22853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3867'. [ 631.193199][T22853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3867'. [ 631.226679][T22855] syzkaller0: entered promiscuous mode [ 631.235704][T22855] syzkaller0: entered allmulticast mode [ 631.273312][T22855] netlink: 'syz.0.3869': attribute type 13 has an invalid length. [ 631.901005][T22880] syzkaller1: entered promiscuous mode [ 631.916580][T22880] syzkaller1: entered allmulticast mode [ 632.025059][T22887] batadv1: entered promiscuous mode [ 632.044006][T22885] tipc: Enabled bearer , priority 0 [ 632.222316][T22884] tipc: Disabling bearer [ 632.292746][T22899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3881'. [ 632.345480][T22899] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3881'. [ 632.921612][T22924] __nla_validate_parse: 1 callbacks suppressed [ 632.921632][T22924] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3887'. [ 632.964112][T22924] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3887'. [ 633.157113][T22937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3890'. [ 633.647306][T22961] netlink: 'syz.3.3894': attribute type 39 has an invalid length. [ 633.694293][T22964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3896'. [ 633.761285][T22971] netlink: 'syz.3.3894': attribute type 1 has an invalid length. [ 633.794759][T22971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3894'. [ 633.993360][T22979] netlink: 'syz.2.3899': attribute type 11 has an invalid length. [ 634.173008][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 634.181764][ C0] lec:lec_tx_timeout: lec0 [ 634.186643][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 634.411355][T22996] netlink: 'syz.4.3900': attribute type 5 has an invalid length. [ 634.658589][T23002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3903'. [ 634.681946][T23002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3903'. [ 634.790570][T23002] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 634.943499][T23017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.103929][T23019] tipc: Enabled bearer , priority 0 [ 635.129881][T23013] tipc: Resetting bearer [ 635.131098][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.148646][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.851902][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 637.141684][T23013] tipc: Disabling bearer [ 637.175789][ T5965] tipc: Node number set to 3868087126 [ 637.406425][T23038] netlink: 'syz.4.3910': attribute type 3 has an invalid length. [ 637.420269][T23038] netlink: 'syz.4.3910': attribute type 1 has an invalid length. [ 637.438523][T23040] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 637.453711][T23038] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.3910'. [ 637.546580][T23045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3911'. [ 637.634028][T23045] hsr_slave_1 (unregistering): left promiscuous mode [ 637.787746][T23049] bond5: option lacp_rate: invalid value (192) [ 637.831276][T23049] bond5 (unregistering): Released all slaves [ 638.401556][T23062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3916'. [ 638.411930][T23062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3916'. [ 638.496580][T11035] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.516560][T11035] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.537660][T11035] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.577769][T11035] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.764306][T23068] tipc: Enabled bearer , priority 0 [ 638.829493][T23068] syzkaller0: entered promiscuous mode [ 638.860504][T23068] syzkaller0: entered allmulticast mode [ 639.014857][T23078] 8021q: VLANs not supported on lo [ 639.025833][T23080] tipc: Resetting bearer [ 639.062927][T23067] tipc: Resetting bearer [ 639.129548][T23067] tipc: Disabling bearer [ 639.192942][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 639.201140][ C0] lec:lec_tx_timeout: lec0 [ 639.209094][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 639.917149][T23110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3929'. [ 640.008787][T23116] batadv0: entered promiscuous mode [ 640.228700][T23122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3930'. [ 640.303085][T23122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3930'. [ 640.324411][T23131] netlink: 'syz.2.3931': attribute type 3 has an invalid length. [ 640.353628][T23122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3930'. [ 640.362764][T23131] netlink: 'syz.2.3931': attribute type 1 has an invalid length. [ 640.460011][T23131] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3931'. [ 640.645025][T23105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.952646][T23112] netlink: 'syz.3.3927': attribute type 1 has an invalid length. [ 641.046984][T23112] 8021q: adding VLAN 0 to HW filter on device bond4 [ 641.197713][T23120] bond4: (slave gretap1): making interface the new active one [ 641.246253][T23120] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 641.724891][T23165] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 641.939541][T23186] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3942'. [ 642.094938][T23192] batadv0: entered promiscuous mode [ 642.332280][T23207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3946'. [ 643.000905][T23223] ip6gre0: Caught tx_queue_len zero misconfig [ 643.054124][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3951'. [ 643.101591][T23223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 643.515570][T23241] dummy0: entered allmulticast mode [ 643.875481][T23263] __nla_validate_parse: 3 callbacks suppressed [ 643.875502][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3962'. [ 643.916842][T23260] atomic_op ffff888036175198 conn xmit_atomic 0000000000000000 [ 643.941965][T23261] atomic_op ffff88803460d998 conn xmit_atomic 0000000000000000 [ 644.223204][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 644.231357][ C0] lec:lec_tx_timeout: lec0 [ 644.236455][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 644.512396][T23282] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3967'. [ 644.635701][T23282] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3967'. [ 644.878470][T23298] netlink: 'syz.3.3971': attribute type 10 has an invalid length. [ 645.098741][T23302] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3971'. [ 645.111615][T23302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 645.329528][T23304] syzkaller0: entered promiscuous mode [ 645.336501][T23304] syzkaller0: entered allmulticast mode [ 645.457061][T23310] netlink: 'syz.2.3974': attribute type 3 has an invalid length. [ 645.500320][T23310] netlink: 'syz.2.3974': attribute type 1 has an invalid length. [ 645.540230][T23310] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3974'. [ 645.581947][T23315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3975'. [ 645.630504][T23315] netlink: 'syz.1.3975': attribute type 20 has an invalid length. [ 645.665549][T23315] netlink: 'syz.1.3975': attribute type 21 has an invalid length. [ 646.165994][T23320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3976'. [ 646.632026][ T7420] IPVS: starting estimator thread 0... [ 646.633307][T23323] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 646.727424][T23325] IPVS: using max 27 ests per chain, 64800 per kthread [ 647.769215][T23330] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 647.851560][T23333] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3980'. [ 647.870502][T23333] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3980'. [ 647.998384][T23338] macsec2: entered promiscuous mode [ 648.004480][T23338] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode [ 648.148110][T23344] batadv1: entered promiscuous mode [ 648.562004][T23361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3989'. [ 648.571130][T23361] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 648.999581][T23373] bond1 (unregistering): Released all slaves [ 649.243631][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 649.251792][ C0] lec:lec_tx_timeout: lec0 [ 649.256469][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 649.935398][T23389] ip6_vti0 speed is unknown, defaulting to 1000 [ 649.944417][T23396] netlink: 'syz.3.3999': attribute type 2 has an invalid length. [ 649.970881][T23395] __nla_validate_parse: 1 callbacks suppressed [ 649.970901][T23395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4000'. [ 650.086837][T23392] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.114619][T23392] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.214667][T23389] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.434334][T23389] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.817771][T23392] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.862937][T23392] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.919166][T23430] veth0_to_bridge: entered promiscuous mode [ 650.951319][T23429] veth0_to_bridge: left promiscuous mode [ 651.050808][T23436] netlink: 'syz.4.4004': attribute type 3 has an invalid length. [ 651.068776][T23389] infiniband syz2: set down [ 651.074043][T23436] netlink: 'syz.4.4004': attribute type 1 has an invalid length. [ 651.081946][T23436] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.4004'. [ 651.095604][T23392] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.110240][T23389] infiniband syz2: added ip6_vti0 [ 651.117001][T23392] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.130326][T23389] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 651.133519][T23389] infiniband syz2: Couldn't open port 1 [ 651.158419][ T5965] ip6_vti0 speed is unknown, defaulting to 1000 [ 651.242167][T23389] RDS/IB: syz2: added [ 651.247920][T23389] smc: adding ib device syz2 with port count 1 [ 651.267395][T23389] smc: ib device syz2 port 1 has no pnetid [ 651.293174][T23392] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.303740][T23392] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.407074][ T5965] ip6_vti0 speed is unknown, defaulting to 1000 [ 651.423043][T23389] ip6_vti0 speed is unknown, defaulting to 1000 [ 651.590257][T23460] batadv0: entered promiscuous mode [ 651.770515][ T3422] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.801417][ T3422] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.860843][ T3079] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.894294][ T3079] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.008772][T23389] ip6_vti0 speed is unknown, defaulting to 1000 [ 652.099008][ T3079] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.108335][ T3079] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.210216][ T3079] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.226982][ T3079] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.591856][T23389] ip6_vti0 speed is unknown, defaulting to 1000 [ 652.987600][T23389] ip6_vti0 speed is unknown, defaulting to 1000 [ 653.247388][T23389] ip6_vti0 speed is unknown, defaulting to 1000 [ 653.419161][T23389] ip6_vti0 speed is unknown, defaulting to 1000 [ 653.589101][T23389] ip6_vti0 speed is unknown, defaulting to 1000 [ 653.756433][T23389] ip6_vti0 speed is unknown, defaulting to 1000 [ 653.936092][T23389] ip6_vti0 speed is unknown, defaulting to 1000 [ 654.114254][T23496] netlink: 428 bytes leftover after parsing attributes in process `syz.3.4019'. [ 654.125127][T23496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4019'. [ 654.194872][T23389] ip6_vti0 speed is unknown, defaulting to 1000 [ 654.430426][T23389] ip6_vti0 speed is unknown, defaulting to 1000 [ 654.919673][T23516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4025'. [ 655.082976][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 655.091107][ C0] lec:lec_tx_timeout: lec0 [ 655.096520][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 655.575003][T23526] netlink: 'syz.3.4028': attribute type 30 has an invalid length. [ 655.752499][T23532] sctp: [Deprecated]: syz.4.4030 (pid 23532) Use of int in max_burst socket option. [ 655.752499][T23532] Use struct sctp_assoc_value instead [ 656.166452][T23541] netlink: 'syz.3.4032': attribute type 25 has an invalid length. [ 656.183222][T23543] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4033'. [ 656.192494][T23541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4032'. [ 656.710622][T23566] netlink: 'syz.3.4039': attribute type 3 has an invalid length. [ 656.733128][T23568] openvswitch: netlink: IP tunnel dst address not specified [ 656.753791][T23566] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.4039'. [ 656.920918][T23582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4044'. [ 656.985794][T23587] tipc: Enabled bearer , priority 0 [ 657.008692][T23587] syzkaller0: entered promiscuous mode [ 657.020206][T23587] syzkaller0: entered allmulticast mode [ 657.086832][T23587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4046'. [ 657.124726][T23587] tipc: Resetting bearer [ 657.180787][T23586] tipc: Resetting bearer [ 657.228237][T23586] tipc: Disabling bearer [ 657.246267][T23600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4048'. [ 657.321665][T23564] ip6_vti0 speed is unknown, defaulting to 1000 [ 657.460916][T23607] batadv1: entered promiscuous mode [ 657.562445][T23618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4053'. [ 657.593178][T23618] netlink: 'syz.1.4053': attribute type 4 has an invalid length. [ 657.654279][T23621] netlink: 'syz.1.4053': attribute type 4 has an invalid length. [ 658.012107][T23632] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4055'. [ 658.307367][T23644] tipc: Enabled bearer , priority 0 [ 658.334321][T23646] syzkaller0: entered promiscuous mode [ 658.343968][T23646] syzkaller0: entered allmulticast mode [ 658.366191][T23641] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4056'. [ 658.444233][T23636] tipc: Resetting bearer [ 658.483719][T23635] tipc: Resetting bearer [ 658.551981][T23635] tipc: Disabling bearer [ 658.618461][T23622] ip6_vti0 speed is unknown, defaulting to 1000 [ 658.786046][ T5922] IPVS: starting estimator thread 0... [ 658.891565][ T5962] IPVS: starting estimator thread 0... [ 658.901212][T23657] netlink: 'syz.0.4059': attribute type 1 has an invalid length. [ 658.907899][T23654] IPVS: using max 25 ests per chain, 60000 per kthread [ 658.983241][T23658] IPVS: using max 29 ests per chain, 69600 per kthread [ 659.034408][T23660] bond5: (slave gretap1): making interface the new active one [ 659.042713][T23660] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 659.068350][T23663] openvswitch: netlink: Duplicate or invalid key (type 0). [ 659.076506][T23663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.116097][T23662] team_slave_0: entered promiscuous mode [ 659.122499][T23662] team_slave_1: entered promiscuous mode [ 659.151434][T23662] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 659.234014][T23657] vlan3: entered allmulticast mode [ 659.239295][T23657] bond5: entered allmulticast mode [ 659.245403][T23657] gretap1: entered allmulticast mode [ 659.253200][T23657] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 659.850429][T23693] netlink: 'syz.2.4065': attribute type 13 has an invalid length. [ 660.102905][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 660.110998][ C0] lec:lec_tx_timeout: lec0 [ 660.116662][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 660.321912][T23688] veth4: entered allmulticast mode [ 660.395464][T23668] ip6_vti0 speed is unknown, defaulting to 1000 [ 660.410499][T23704] tipc: Enabled bearer , priority 0 [ 660.431217][T23704] syzkaller0: entered promiscuous mode [ 660.454764][T23704] syzkaller0: entered allmulticast mode [ 660.558893][T23703] tipc: Resetting bearer [ 660.624767][T23703] tipc: Disabling bearer [ 660.677499][T23708] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4071'. [ 660.767377][T23712] syzkaller0: entered promiscuous mode [ 660.779959][T23712] syzkaller0: entered allmulticast mode [ 661.188116][T23723] batadv1: entered promiscuous mode [ 661.337290][T23696] ip6_vti0 speed is unknown, defaulting to 1000 [ 661.532442][T23731] __nla_validate_parse: 1 callbacks suppressed [ 661.532472][T23731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4077'. [ 661.630291][T23731] netlink: 'syz.0.4077': attribute type 7 has an invalid length. [ 661.680099][T23731] netlink: 'syz.0.4077': attribute type 8 has an invalid length. [ 661.689364][T23731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4077'. [ 662.084945][T23738] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4079'. [ 662.110524][T23738] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 662.372342][T23741] netlink: 'syz.0.4080': attribute type 3 has an invalid length. [ 662.380368][T23741] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.4080'. [ 662.446369][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 662.817063][T23723] ip6_vti0 speed is unknown, defaulting to 1000 [ 662.973131][T23748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4081'. [ 663.246020][T23752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4082'. [ 663.257042][T23752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4082'. [ 663.497781][T23756] vlan0: entered allmulticast mode [ 663.508315][T23756] bridge_slave_0: entered allmulticast mode [ 663.528947][T23756] bridge0: port 1(vlan0) entered blocking state [ 663.536655][T23756] bridge0: port 1(vlan0) entered disabled state [ 663.545960][T23756] vlan0: entered promiscuous mode [ 663.551605][T23756] bridge_slave_0: entered promiscuous mode [ 663.649587][T23759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4084'. [ 664.074504][T23734] ip6_vti0 speed is unknown, defaulting to 1000 [ 664.179242][T23770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4089'. [ 664.452636][T23735] ip6_vti0 speed is unknown, defaulting to 1000 [ 664.704017][T23743] ip6_vti0 speed is unknown, defaulting to 1000 [ 665.001612][T23750] ip6_vti0 speed is unknown, defaulting to 1000 [ 665.123230][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 665.131450][ C0] lec:lec_tx_timeout: lec0 [ 665.136890][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 665.726706][T23784] geneve2: entered promiscuous mode [ 665.732182][T23784] geneve2: entered allmulticast mode [ 665.959094][ T1097] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 666.163234][ T1097] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 666.171768][ T1097] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 666.322632][ T1097] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 666.923629][T23801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4096'. [ 666.943879][T23802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.956535][T23801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.968158][T23804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4097'. [ 667.526792][T23819] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4101'. [ 667.601073][T23822] netlink: 'syz.0.4102': attribute type 12 has an invalid length. [ 667.636187][T23822] netlink: 'syz.0.4102': attribute type 29 has an invalid length. [ 667.647787][T23822] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4102'. [ 667.673823][T23822] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4102'. [ 667.707820][T23828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4103'. [ 667.717307][T23828] netlink: 'syz.3.4103': attribute type 9 has an invalid length. [ 668.020371][T23847] batadv1: entered promiscuous mode [ 668.266229][T23855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4109'. [ 668.431516][T23857] netlink: 'syz.1.4110': attribute type 3 has an invalid length. [ 668.545488][T23857] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.4110'. [ 668.746780][T23871] netlink: 'syz.0.4113': attribute type 1 has an invalid length. [ 668.774775][T23871] netlink: 'syz.0.4113': attribute type 2 has an invalid length. [ 668.810357][T23871] : entered promiscuous mode [ 668.858690][T23871] ieee802154 phy0 wpan0: encryption failed: -22 [ 668.879025][T23860] ip6_vti0 speed is unknown, defaulting to 1000 [ 668.890007][T23871] ieee802154 phy0 wpan0: encryption failed: -22 [ 668.991721][T23873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4113'. [ 669.319923][T23854] ip6_vti0 speed is unknown, defaulting to 1000 [ 669.595299][T23880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4116'. [ 669.629250][T23876] siw: device registration error -23 [ 669.789340][T23887] netlink: 'syz.4.4117': attribute type 4 has an invalid length. [ 670.061389][T23900] netlink: 'syz.0.4121': attribute type 6 has an invalid length. [ 670.152991][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 670.161207][ C0] lec:lec_tx_timeout: lec0 [ 670.162158][T23903] sock: sock_set_timeout: `syz.2.4120' (pid 23903) tries to set negative timeout [ 670.173781][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 670.338460][T23907] tipc: Enabled bearer , priority 0 [ 670.368302][T23911] tunl0: entered promiscuous mode [ 670.383001][T23911] tunl0: entered allmulticast mode [ 670.482704][ T30] audit: type=1800 audit(1769285016.204:11): pid=23912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4124" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=1046 res=0 errno=0 [ 670.585491][T23911] tipc: Disabling bearer [ 670.854140][T23919] netlink: 'syz.4.4126': attribute type 61 has an invalid length. [ 670.892024][T23919] netlink: 'syz.4.4126': attribute type 64 has an invalid length. [ 671.710108][T23916] ip6_vti0 speed is unknown, defaulting to 1000 [ 671.902543][T23965] vlan1: entered allmulticast mode [ 672.019598][T23967] __nla_validate_parse: 6 callbacks suppressed [ 672.019618][T23967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4137'. [ 672.096643][T23968] dvmrp6: entered allmulticast mode [ 672.263197][T23973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4138'. [ 672.558780][T23964] ip6_vti0 speed is unknown, defaulting to 1000 [ 672.825560][T23990] batadv1: entered promiscuous mode [ 672.878940][T23994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4143'. [ 672.930003][T23994] lo: left allmulticast mode [ 673.414865][T24003] validate_nla: 1 callbacks suppressed [ 673.414886][T24003] netlink: 'syz.4.4144': attribute type 10 has an invalid length. [ 673.554097][T24006] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4145'. [ 673.853103][T23999] ip6_vti0 speed is unknown, defaulting to 1000 [ 675.044307][T24031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4150'. [ 675.163417][T24035] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4151'. [ 675.183165][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 675.192301][ C0] lec:lec_tx_timeout: lec0 [ 675.197272][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 675.207120][T24033] batadv1: entered promiscuous mode [ 675.798248][T24047] batadv1: entered promiscuous mode [ 676.150526][T24029] ip6_vti0 speed is unknown, defaulting to 1000 [ 676.467130][T24038] ip6_vti0 speed is unknown, defaulting to 1000 [ 676.793961][T24047] ip6_vti0 speed is unknown, defaulting to 1000 [ 677.065818][T24062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4158'. [ 677.214380][ T30] audit: type=1800 audit(1769285022.944:12): pid=24065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4157" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=834 res=0 errno=0 [ 677.364751][T24066] netlink: 'syz.0.4159': attribute type 1 has an invalid length. [ 677.374538][T24066] netlink: 'syz.0.4159': attribute type 3 has an invalid length. [ 677.382329][T24066] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4159'. [ 678.145768][T24083] netlink: 'syz.0.4163': attribute type 3 has an invalid length. [ 678.176140][T24083] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.4163'. [ 678.339312][T24088] x_tables: duplicate underflow at hook 3 [ 678.631046][T24095] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4165'. [ 678.743794][T24095] block nbd5: server does not support multiple connections per device. [ 678.766697][T24095] block nbd5: shutting down sockets [ 679.510960][T24082] ip6_vti0 speed is unknown, defaulting to 1000 [ 680.213296][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 680.221522][ C0] lec:lec_tx_timeout: lec0 [ 680.226229][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 680.245352][T24102] ip6_vti0 speed is unknown, defaulting to 1000 [ 680.818748][T24133] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4171'. [ 681.049662][T24106] ip6_vti0 speed is unknown, defaulting to 1000 [ 681.761359][T24154] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4174'. [ 682.006856][T24167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4177'. [ 682.284919][T24172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4179'. [ 682.421370][T24175] bridge0: port 1(ip6gretap1) entered blocking state [ 682.445534][T24175] bridge0: port 1(ip6gretap1) entered disabled state [ 682.452559][T24175] ip6gretap1: entered allmulticast mode [ 682.501637][T24175] ip6gretap1: entered promiscuous mode [ 682.698084][T24172] bridge0: port 2(veth7) entered blocking state [ 682.705488][T24172] bridge0: port 2(veth7) entered disabled state [ 682.712561][T24172] veth7: entered allmulticast mode [ 682.726174][T24172] veth7: entered promiscuous mode [ 682.739403][T24172] bridge0: port 2(veth7) entered blocking state [ 682.746068][T24172] bridge0: port 2(veth7) entered forwarding state [ 683.177668][ T3422] bridge0: port 2(veth7) entered disabled state [ 683.203210][T24202] sctp: [Deprecated]: syz.2.4185 (pid 24202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.203210][T24202] Use struct sctp_sack_info instead [ 683.448516][T24211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4188'. [ 683.599681][T24217] netlink: 'syz.1.4191': attribute type 62 has an invalid length. [ 683.761917][T24204] ip6_vti0 speed is unknown, defaulting to 1000 [ 684.184618][T24252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4200'. [ 684.730247][T24278] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4209'. [ 684.739992][T24278] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4209'. [ 684.751328][T24278] netlink: 'syz.4.4209': attribute type 5 has an invalid length. [ 684.760034][T24278] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4209'. [ 684.799503][T24278] vti0: entered promiscuous mode [ 684.811928][T24278] vti0: entered allmulticast mode [ 684.830111][T24280] bond0: (slave dummy0): Releasing backup interface [ 684.861017][T24280] bond0: (slave bond_slave_0): Releasing backup interface [ 684.918692][T24280] bond0: (slave bond_slave_1): Releasing backup interface [ 684.981182][T24280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.045643][T24280] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 685.127876][T24283] batadv_slave_0: entered promiscuous mode [ 685.148203][T24288] batadv_slave_0: left promiscuous mode [ 685.233097][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 685.241278][ C0] lec:lec_tx_timeout: lec0 [ 685.246025][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 685.302419][T24291] bond7: option lacp_active: invalid value (8) [ 685.348509][T24291] bond7 (unregistering): Released all slaves [ 685.477128][T24296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4213'. [ 685.630411][T24298] netlink: 'syz.4.4214': attribute type 3 has an invalid length. [ 685.680457][T24298] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.4214'. [ 685.881167][T24325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4219'. [ 685.911935][T24326] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4220'. [ 685.957649][T24303] ip6_vti0 speed is unknown, defaulting to 1000 [ 686.521627][T24339] netlink: 'syz.2.4223': attribute type 1 has an invalid length. [ 686.544084][T24339] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 686.916083][T24370] netlink: 'syz.1.4229': attribute type 22 has an invalid length. [ 687.002514][T24370] netlink: 'syz.1.4229': attribute type 22 has an invalid length. [ 687.013273][ T3534] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.053777][ T3534] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.083681][ T3534] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.120702][ T3534] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.667156][T24394] ªªªªªª: renamed from wg2 (while UP) [ 687.691400][T24394] __nla_validate_parse: 6 callbacks suppressed [ 687.691421][T24394] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4236'. [ 687.708376][T24394] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4236'. [ 687.794952][T24400] netlink: 'syz.0.4237': attribute type 83 has an invalid length. [ 687.863897][T24404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4239'. [ 687.988314][T24409] tipc: Enabled bearer , priority 0 [ 688.006802][T24409] syzkaller0: entered promiscuous mode [ 688.022408][T24409] syzkaller0: entered allmulticast mode [ 688.117884][T24415] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.4242'. [ 688.186924][T24405] tipc: Resetting bearer [ 688.237782][T24405] tipc: Disabling bearer [ 688.400266][T24421] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4244'. [ 688.457347][T24419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4243'. [ 688.741330][T24436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4249'. [ 688.759367][T24436] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4249'. [ 688.810594][T24432] netlink: 'syz.3.4248': attribute type 3 has an invalid length. [ 688.829359][T24438] vlan0: entered promiscuous mode [ 688.835100][T24432] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.4248'. [ 688.838589][T24438] geneve1: entered promiscuous mode [ 688.896288][T24442] batadv1: entered promiscuous mode [ 689.209379][T24450] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4254'. [ 689.313923][T24435] ip6_vti0 speed is unknown, defaulting to 1000 [ 690.244549][T24442] ip6_vti0 speed is unknown, defaulting to 1000 [ 690.252926][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 690.261713][ C0] lec:lec_tx_timeout: lec0 [ 690.267745][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 690.473739][T24502] netlink: 'syz.2.4266': attribute type 2 has an invalid length. [ 690.526192][T24502] : entered promiscuous mode [ 690.691651][ T30] audit: type=1800 audit(1769285036.414:13): pid=24509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4268" name="memory.events" dev="tmpfs" ino=1659 res=0 errno=0 [ 691.093663][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.057080][T24543] SET target dimension over the limit! [ 692.110992][T24545] SET target dimension over the limit! [ 692.451803][T24557] vxcan3: entered promiscuous mode [ 692.574499][T24562] netlink: 'syz.1.4283': attribute type 1 has an invalid length. [ 692.582424][T24562] netlink: 'syz.1.4283': attribute type 2 has an invalid length. [ 692.643361][T24562] netlink: 'syz.1.4283': attribute type 3 has an invalid length. [ 692.672512][T24564] batadv1: entered promiscuous mode [ 692.716253][T24562] __nla_validate_parse: 1 callbacks suppressed [ 692.716278][T24562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4283'. [ 692.797352][T24573] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4287'. [ 692.811607][T24573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4287'. [ 692.962402][T24580] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4288'. [ 693.391162][T24586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4289'. [ 693.409904][T24586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4289'. [ 693.423050][T24586] netlink: 'syz.3.4289': attribute type 13 has an invalid length. [ 693.437241][T24586] netlink: 'syz.3.4289': attribute type 12 has an invalid length. [ 693.994225][T24599] syzkaller0: entered promiscuous mode [ 694.026821][T24599] syzkaller0: entered allmulticast mode [ 694.035974][T24570] ip6_vti0 speed is unknown, defaulting to 1000 [ 694.056037][T24602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 694.060569][T24593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4292'. [ 694.162080][T24604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4294'. [ 694.554857][T24613] netlink: 'syz.3.4297': attribute type 1 has an invalid length. [ 694.961197][T24631] netlink: 'syz.4.4302': attribute type 10 has an invalid length. [ 695.047173][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4303'. [ 695.066431][T24633] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 695.082602][T24633] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4303'. [ 695.416043][T24638] syzkaller0: entered promiscuous mode [ 695.421957][T24638] syzkaller0: entered allmulticast mode [ 695.893395][T24650] tipc: Enabled bearer , priority 0 [ 696.204159][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5930 ms [ 696.212367][ C0] lec:lec_tx_timeout: lec0 [ 696.218081][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 698.824527][T24647] tipc: Resetting bearer [ 698.841222][T24652] syzkaller0: entered promiscuous mode [ 698.848105][T24652] syzkaller0: entered allmulticast mode [ 698.873092][T24640] ip6_vti0 speed is unknown, defaulting to 1000 [ 698.914931][ T7427] tipc: Node number set to 2304357590 [ 699.007913][T24652] tipc: Resetting bearer [ 699.088286][T24652] tipc: Disabling bearer [ 699.536157][T24711] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 699.691904][T24720] netlink: 'syz.3.4323': attribute type 1 has an invalid length. [ 699.955905][T24727] __nla_validate_parse: 2 callbacks suppressed [ 699.955928][T24727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4325'. [ 700.072198][T24727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4325'. [ 700.131053][T24733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4325'. [ 700.535870][T24743] m1Ie5nè‹: entered promiscuous mode [ 700.634377][T24746] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4331'. [ 700.669581][T24746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4331'. [ 700.816762][T24752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4333'. [ 700.845001][T24752] dvmrp0: left allmulticast mode [ 701.044072][T24756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.089390][T24762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4335'. [ 701.120937][T24762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4335'. [ 701.232899][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 701.241024][ C0] lec:lec_tx_timeout: lec0 [ 701.245775][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 701.331806][T24774] batadv1: entered promiscuous mode [ 701.955531][T24788] netlink: 'syz.3.4341': attribute type 1 has an invalid length. [ 701.983294][T24788] netlink: 'syz.3.4341': attribute type 2 has an invalid length. [ 702.010066][T24788] netlink: 'syz.3.4341': attribute type 2 has an invalid length. [ 702.044294][T24788] netlink: 'syz.3.4341': attribute type 2 has an invalid length. [ 702.063600][T24788] netlink: 'syz.3.4341': attribute type 1 has an invalid length. [ 702.091523][T24788] netlink: 'syz.3.4341': attribute type 1 has an invalid length. [ 702.354034][T24757] xt_hashlimit: size too large, truncated to 1048576 [ 702.367288][T24757] xt_hashlimit: max too large, truncated to 1048576 [ 702.484276][T24757] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 702.634073][T24795] netlink: 'syz.3.4342': attribute type 12 has an invalid length. [ 702.955045][T24774] ip6_vti0 speed is unknown, defaulting to 1000 [ 703.086347][T24805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4344'. [ 703.991853][ T5493] veth0_macvtap: left promiscuous mode [ 704.357449][T24849] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4352'. [ 704.399515][T24849] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 704.803760][T24861] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 704.827513][T24859] ip6gretap1: entered allmulticast mode [ 705.131148][ T30] audit: type=1804 audit(1769285050.854:14): pid=24872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4356" name="x000000000000000800000000000000000000010" dev="tmpfs" ino=1253 res=1 errno=0 [ 705.192965][ T30] audit: type=1800 audit(1769285050.854:15): pid=24872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4356" name="x000000000000000800000000000000000000010" dev="tmpfs" ino=1253 res=0 errno=0 [ 705.343949][T24873] syzkaller0: entered promiscuous mode [ 705.357375][T24873] syzkaller0: entered allmulticast mode [ 705.409165][T24877] sctp: [Deprecated]: syz.3.4358 (pid 24877) Use of int in max_burst socket option deprecated. [ 705.409165][T24877] Use struct sctp_assoc_value instead [ 705.495816][T24884] sctp: [Deprecated]: syz.3.4358 (pid 24884) Use of int in max_burst socket option deprecated. [ 705.495816][T24884] Use struct sctp_assoc_value instead [ 705.766657][T24894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4360'. [ 705.820992][T24897] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 705.851148][T24897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 705.871346][T24897] hsr0: entered promiscuous mode [ 705.889116][T24897] hsr0: entered allmulticast mode [ 705.918607][T24897] hsr_slave_0: entered allmulticast mode [ 705.938864][T24897] hsr_slave_1: entered allmulticast mode [ 706.007621][T24900] IPVS: Scheduler module ip_vs_ not found [ 706.025546][T24902] IPVS: length: 24 != 6168 [ 706.252953][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 706.261280][ C0] lec:lec_tx_timeout: lec0 [ 706.266836][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 708.426161][T24887] ip6_vti0 speed is unknown, defaulting to 1000 [ 708.658434][T24928] xt_hashlimit: size too large, truncated to 1048576 [ 708.955987][T24941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4371'. [ 708.985332][T24941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4371'. [ 709.171520][T24946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.182730][T24950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4374'. [ 709.198823][T24950] netlink: 'syz.1.4374': attribute type 7 has an invalid length. [ 709.207786][T24946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 709.212690][T24950] netlink: 'syz.1.4374': attribute type 8 has an invalid length. [ 709.243918][T24950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4374'. [ 709.253517][T24953] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4374'. [ 709.844143][T24972] FAULT_INJECTION: forcing a failure. [ 709.844143][T24972] name failslab, interval 1, probability 0, space 0, times 0 [ 709.890405][T24972] CPU: 0 UID: 0 PID: 24972 Comm: syz.3.4379 Not tainted syzkaller #0 PREEMPT(full) [ 709.890436][T24972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 709.890451][T24972] Call Trace: [ 709.890460][T24972] [ 709.890469][T24972] dump_stack_lvl+0xe8/0x150 [ 709.890505][T24972] should_fail_ex+0x412/0x560 [ 709.890542][T24972] should_failslab+0xa8/0x100 [ 709.890570][T24972] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 709.890604][T24972] ? __alloc_skb+0x186/0x7d0 [ 709.890634][T24972] ? __alloc_skb+0x1d0/0x7d0 [ 709.890663][T24972] ? __local_bh_enable_ip+0xd0/0x130 [ 709.890693][T24972] __alloc_skb+0x1d0/0x7d0 [ 709.890743][T24972] pfkey_sendmsg+0xd42/0x1120 [ 709.890784][T24972] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 709.890840][T24972] ? aa_file_perm+0x12d/0x1630 [ 709.890871][T24972] ? aa_sock_msg_perm+0xf1/0x1b0 [ 709.890901][T24972] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 709.890922][T24972] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 709.890947][T24972] __sock_sendmsg+0x21c/0x270 [ 709.890979][T24972] ____sys_sendmsg+0x4d7/0x810 [ 709.891000][T24972] ? __might_fault+0xaf/0x130 [ 709.891038][T24972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.891070][T24972] ? import_iovec+0x73/0xa0 [ 709.891097][T24972] ___sys_sendmsg+0x2a5/0x360 [ 709.891118][T24972] ? __lock_acquire+0x6b5/0x2cf0 [ 709.891145][T24972] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.891205][T24972] ? __fget_files+0x2a/0x420 [ 709.891230][T24972] ? __fget_files+0x3a0/0x420 [ 709.891268][T24972] __x64_sys_sendmsg+0x1bd/0x2a0 [ 709.891293][T24972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 709.891324][T24972] ? __pfx_ksys_write+0x10/0x10 [ 709.891358][T24972] do_syscall_64+0xe2/0xf80 [ 709.891378][T24972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.891398][T24972] ? trace_irq_disable+0x37/0x100 [ 709.891424][T24972] ? clear_bhb_loop+0x60/0xb0 [ 709.891449][T24972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.891470][T24972] RIP: 0033:0x7fbcf5d9acb9 [ 709.891489][T24972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.891508][T24972] RSP: 002b:00007fbcf6c95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.891530][T24972] RAX: ffffffffffffffda RBX: 00007fbcf6015fa0 RCX: 00007fbcf5d9acb9 [ 709.891546][T24972] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 709.891558][T24972] RBP: 00007fbcf6c95090 R08: 0000000000000000 R09: 0000000000000000 [ 709.891570][T24972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.891584][T24972] R13: 00007fbcf6016038 R14: 00007fbcf6015fa0 R15: 00007fffef402e58 [ 709.891619][T24972] [ 710.474348][T24982] netlink: 'syz.4.4381': attribute type 3 has an invalid length. [ 710.482501][T24982] netlink: 61203 bytes leftover after parsing attributes in process `syz.4.4381'. [ 710.762942][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 710.857288][T24995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4385'. [ 711.051158][T24981] ip6_vti0 speed is unknown, defaulting to 1000 [ 711.187455][T25008] ip6tnl0: Caught tx_queue_len zero misconfig [ 711.250050][T25009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4389'. [ 711.259772][T25009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4389'. [ 711.287380][T25009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4389'. [ 711.617743][T25026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4395'. [ 711.671178][T25029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4395'. [ 711.746086][T25026] 8021q: adding VLAN 0 to HW filter on device bond5 [ 711.929620][T25035] syzkaller1: entered promiscuous mode [ 711.940117][T25035] syzkaller1: entered allmulticast mode [ 712.202916][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5930 ms [ 712.210983][ C0] lec:lec_tx_timeout: lec0 [ 712.216544][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 712.319870][T25058] netlink: 'syz.3.4402': attribute type 1 has an invalid length. [ 712.334422][T25058] netlink: 'syz.3.4402': attribute type 3 has an invalid length. [ 712.342429][T25058] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4402'. [ 712.498271][T25058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4402'. [ 712.600068][T25070] tipc: Enabled bearer , priority 0 [ 712.627302][ T30] audit: type=1800 audit(1769285058.354:16): pid=25071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4405" name="memory.events" dev="tmpfs" ino=1300 res=0 errno=0 [ 712.673874][T25073] syzkaller0: entered promiscuous mode [ 712.712820][T25073] syzkaller0: entered allmulticast mode [ 712.728833][T25076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4408'. [ 712.803987][T25073] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4407'. [ 712.828255][T25070] tipc: Resetting bearer [ 712.864019][T25069] tipc: Resetting bearer [ 712.901973][T25069] tipc: Disabling bearer [ 712.918582][T25082] sit0: entered promiscuous mode [ 712.936550][T25082] netlink: 'syz.0.4411': attribute type 1 has an invalid length. [ 713.076882][T25091] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 713.084067][T25088] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 713.179007][T25100] tipc: Enabled bearer , priority 0 [ 713.206216][T25100] tipc: Resetting bearer [ 713.276615][T25098] tipc: Disabling bearer [ 713.494478][T25116] team_slave_0: entered promiscuous mode [ 713.500240][T25116] team_slave_1: entered promiscuous mode [ 713.523477][T25116] vlan3: entered promiscuous mode [ 713.528831][T25116] team0: entered promiscuous mode [ 713.793529][T25139] netlink: 'syz.3.4429': attribute type 10 has an invalid length. [ 713.826061][T25139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.940735][T25149] netlink: 'syz.3.4431': attribute type 62 has an invalid length. [ 714.131304][T25151] netlink: 'syz.1.4432': attribute type 298 has an invalid length. [ 714.156311][T25155] netlink: 'syz.1.4432': attribute type 298 has an invalid length. [ 714.344473][T25163] netlink: 'syz.0.4435': attribute type 1 has an invalid length. [ 714.409794][T25163] 8021q: adding VLAN 0 to HW filter on device bond7 [ 714.494001][T25164] 8021q: adding VLAN 0 to HW filter on device bond7 [ 714.501219][T25164] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 714.578917][T25164] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 714.676852][T25173] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 714.695751][T25173] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 715.055995][T25203] netlink: 'syz.2.4446': attribute type 21 has an invalid length. [ 715.128733][T25203] bond6: entered promiscuous mode [ 715.148255][T25203] 8021q: adding VLAN 0 to HW filter on device bond6 [ 715.185545][T25205] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 715.234057][T25215] xt_TCPMSS: Only works on TCP SYN packets [ 715.752741][T25226] ip6_vti0 speed is unknown, defaulting to 1000 [ 716.081775][T25248] batadv1: entered promiscuous mode [ 716.579869][T25266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.614801][T25266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.751957][T25272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.849565][T25275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.876905][T25234] ip6_vti0 speed is unknown, defaulting to 1000 [ 717.222879][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 717.231146][ C0] lec:lec_tx_timeout: lec0 [ 717.236277][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 717.287601][T25283] __nla_validate_parse: 13 callbacks suppressed [ 717.287622][T25283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4467'. [ 717.339025][T25255] ip6_vti0 speed is unknown, defaulting to 1000 [ 717.415549][T25286] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4468'. [ 717.425212][T25286] openvswitch: netlink: Flow key attr not present in new flow. [ 717.950636][T25297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.690528][T25315] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.4475'. [ 718.721998][T25315] netlink: ct family unspecified [ 719.077233][T25331] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 719.181478][T25334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4479'. [ 719.206348][T25334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4479'. [ 719.371938][T25339] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4480'. [ 719.413262][T25339] nbd: couldn't find a device at index 0 [ 719.472420][T25343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4481'. [ 719.486922][T25343] netlink: 'syz.1.4481': attribute type 15 has an invalid length. [ 719.794214][T25356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4482'. [ 720.005152][T25364] tipc: Enabling of bearer rejected, failed to enable media [ 720.090094][T25328] ip6_vti0 speed is unknown, defaulting to 1000 [ 720.245197][T25374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4486'. [ 720.482019][T25383] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4488'. [ 720.536356][T25384] netlink: 'syz.2.4487': attribute type 10 has an invalid length. [ 720.579674][T25383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.589465][T25383] bond_slave_0: left promiscuous mode [ 720.599737][T25383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.618219][T25383] bond_slave_1: left promiscuous mode [ 720.626949][T25383] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 720.638895][T25383] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 720.647767][T25383] mac80211_hwsim hwsim40 wlan1: left promiscuous mode [ 720.668412][T25383] bond0 (unregistering): Released all slaves [ 721.279116][T25404] syzkaller0: entered promiscuous mode [ 721.287262][T25404] syzkaller0: entered allmulticast mode [ 721.880780][T25441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 721.888213][T25441] IPv6: NLM_F_CREATE should be set when creating new route [ 721.895761][T25441] IPv6: NLM_F_CREATE should be set when creating new route [ 721.910225][T25441] ------------[ cut here ]------------ [ 721.917744][T25441] i != fen6_info->nsiblings [ 721.917780][T25441] WARNING: drivers/net/netdevsim/fib.c:831 at nsim_fib_event_nb+0xed8/0x1080, CPU#0: syz.0.4505/25441 [ 721.933938][T25441] Modules linked in: [ 721.937913][T25441] CPU: 0 UID: 0 PID: 25441 Comm: syz.0.4505 Not tainted syzkaller #0 PREEMPT(full) [ 721.947771][T25441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 721.958411][T25441] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 721.964734][T25441] Code: fa be 02 00 00 00 eb 0a e8 75 08 c5 fa be 01 00 00 00 4c 89 f7 e8 a8 ce 9a fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 59 08 c5 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 721.986832][T25441] RSP: 0018:ffffc9000213eea8 EFLAGS: 00010293 [ 721.993665][T25441] RAX: ffffffff86fd90b7 RBX: 0000000000000002 RCX: ffff888028d55b80 [ 722.002720][T25441] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 722.011453][T25441] RBP: dffffc0000000000 R08: ffff88806bb8c02f R09: 1ffff1100d771805 [ 722.019617][T25441] R10: dffffc0000000000 R11: ffffed100d771806 R12: ffff888036d9e000 [ 722.028038][T25441] R13: ffffc9000213f020 R14: 0000000000000001 R15: ffffc9000213f038 [ 722.036462][T25441] FS: 00007f7e037f66c0(0000) GS:ffff888125924000(0000) knlGS:0000000000000000 [ 722.046032][T25441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.052677][T25441] CR2: 0000000000000000 CR3: 0000000043564000 CR4: 00000000003526f0 [ 722.061180][T25441] Call Trace: [ 722.064575][T25441] [ 722.067548][T25441] notifier_call_chain+0x19d/0x3a0 [ 722.072788][T25441] ? atomic_notifier_call_chain+0x26/0x180 [ 722.078731][T25441] atomic_notifier_call_chain+0xda/0x180 [ 722.084784][T25441] call_fib_notifiers+0x31/0x60 [ 722.089673][T25441] call_fib6_multipath_entry_notifiers+0xf5/0x160 [ 722.096205][T25441] ? inet6_rtm_newroute+0xfb8/0x19e0 [ 722.101529][T25441] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 722.108622][T25441] ? inet6_rtm_newroute+0xfb8/0x19e0 [ 722.114279][T25441] ? inet6_rtm_newroute+0xfb8/0x19e0 [ 722.119604][T25441] inet6_rtm_newroute+0x14a2/0x19e0 [ 722.125216][T25441] ? kasan_quarantine_put+0xbb/0x1f0 [ 722.130573][T25441] ? lockdep_hardirqs_on+0x7a/0x110 [ 722.136147][T25441] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 722.142082][T25441] ? kmem_cache_free+0x195/0x610 [ 722.147726][T25441] ? nlmon_xmit+0xb0/0x100 [ 722.152255][T25441] ? lockdep_hardirqs_on+0x7a/0x110 [ 722.157921][T25441] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 722.163667][T25441] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 722.168695][T25441] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 722.174206][T25441] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 722.179996][T25441] ? ref_tracker_free+0x693/0x840 [ 722.185155][T25441] ? __copy_skb_header+0xa3/0x4a0 [ 722.190579][T25441] ? __pfx_ref_tracker_free+0x10/0x10 [ 722.196091][T25441] netlink_rcv_skb+0x232/0x4b0 [ 722.200991][T25441] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 722.206852][T25441] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 722.212271][T25441] ? netlink_deliver_tap+0x2e/0x1b0 [ 722.217687][T25441] netlink_unicast+0x80f/0x9b0 [ 722.222516][T25441] ? __pfx_netlink_unicast+0x10/0x10 [ 722.227977][T25441] ? netlink_sendmsg+0x650/0xb40 [ 722.233262][T25441] ? skb_put+0x11b/0x210 [ 722.237549][T25441] netlink_sendmsg+0x813/0xb40 [ 722.243036][T25441] ? finish_task_switch+0x161/0x920 [ 722.248345][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 722.248432][ C0] lec:lec_tx_timeout: lec0 [ 722.256982][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 722.267872][T25441] ? lock_acquire+0x106/0x330 [ 722.272624][T25441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.278204][T25441] ? finish_task_switch+0x23c/0x920 [ 722.283685][T25441] ? aa_sock_msg_perm+0xf1/0x1b0 [ 722.288772][T25441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 722.294480][T25441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.299823][T25441] __sock_sendmsg+0x21c/0x270 [ 722.304639][T25441] ____sys_sendmsg+0x500/0x810 [ 722.309441][T25441] ? __might_fault+0xaf/0x130 [ 722.314227][T25441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 722.319580][T25441] ? import_iovec+0x73/0xa0 [ 722.324496][T25441] ___sys_sendmsg+0x2a5/0x360 [ 722.329233][T25441] ? __lock_acquire+0x6b5/0x2cf0 [ 722.334308][T25441] ? __pfx____sys_sendmsg+0x10/0x10 [ 722.339564][T25441] ? preempt_schedule_common+0x82/0xd0 [ 722.345393][T25441] ? preempt_schedule_thunk+0x16/0x30 [ 722.350852][T25441] ? __fget_files+0x2a/0x420 [ 722.356175][T25441] ? __fget_files+0x3a0/0x420 [ 722.360958][T25441] __sys_sendmmsg+0x27c/0x4e0 [ 722.365979][T25441] ? __pfx___sys_sendmmsg+0x10/0x10 [ 722.371249][T25441] ? do_futex+0x395/0x420 [ 722.375805][T25441] ? fd_install+0x94/0x3d0 [ 722.380271][T25441] ? lock_acquire+0x106/0x330 [ 722.385406][T25441] ? rcu_is_watching+0x15/0xb0 [ 722.390237][T25441] __x64_sys_sendmmsg+0xa0/0xc0 [ 722.395207][T25441] do_syscall_64+0xe2/0xf80 [ 722.399768][T25441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.406054][T25441] ? trace_irq_disable+0x37/0x100 [ 722.411154][T25441] ? clear_bhb_loop+0x60/0xb0 [ 722.416246][T25441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.422199][T25441] RIP: 0033:0x7f7e0559acb9 [ 722.426770][T25441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.447177][T25441] RSP: 002b:00007f7e037f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 722.456052][T25441] RAX: ffffffffffffffda RBX: 00007f7e05815fa0 RCX: 00007f7e0559acb9 [ 722.464243][T25441] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 722.472358][T25441] RBP: 00007f7e05608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 722.480767][T25441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.489090][T25441] R13: 00007f7e05816038 R14: 00007f7e05815fa0 R15: 00007fff9ed777e8 [ 722.497249][T25441] [ 722.500337][T25441] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 722.508003][T25441] CPU: 0 UID: 0 PID: 25441 Comm: syz.0.4505 Not tainted syzkaller #0 PREEMPT(full) [ 722.517526][T25441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 722.527814][T25441] Call Trace: [ 722.531285][T25441] [ 722.534265][T25441] vpanic+0x1e0/0x670 [ 722.538392][T25441] panic+0xc5/0xd0 [ 722.542261][T25441] ? __pfx_panic+0x10/0x10 [ 722.546771][T25441] __warn+0x315/0x4a0 [ 722.550888][T25441] ? nsim_fib_event_nb+0xed8/0x1080 [ 722.556360][T25441] ? nsim_fib_event_nb+0xed8/0x1080 [ 722.561621][T25441] __report_bug+0x29a/0x540 [ 722.566189][T25441] ? inet6_rtm_newroute+0x14a2/0x19e0 [ 722.571611][T25441] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 722.576820][T25441] ? netlink_rcv_skb+0x232/0x4b0 [ 722.581830][T25441] ? nsim_fib_event_nb+0xed8/0x1080 [ 722.587069][T25441] ? __pfx___report_bug+0x10/0x10 [ 722.592148][T25441] ? nsim_fib_event_nb+0xed8/0x1080 [ 722.597466][T25441] report_bug+0x16a/0x220 [ 722.601839][T25441] ? nsim_fib_event_nb+0xed8/0x1080 [ 722.607072][T25441] ? nsim_fib_event_nb+0xeda/0x1080 [ 722.612313][T25441] handle_bug+0x98/0x200 [ 722.616606][T25441] exc_invalid_op+0x1a/0x50 [ 722.621316][T25441] asm_exc_invalid_op+0x1a/0x20 [ 722.626490][T25441] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 722.632411][T25441] Code: fa be 02 00 00 00 eb 0a e8 75 08 c5 fa be 01 00 00 00 4c 89 f7 e8 a8 ce 9a fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 59 08 c5 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 722.652315][T25441] RSP: 0018:ffffc9000213eea8 EFLAGS: 00010293 [ 722.658418][T25441] RAX: ffffffff86fd90b7 RBX: 0000000000000002 RCX: ffff888028d55b80 [ 722.666507][T25441] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 722.674505][T25441] RBP: dffffc0000000000 R08: ffff88806bb8c02f R09: 1ffff1100d771805 [ 722.682583][T25441] R10: dffffc0000000000 R11: ffffed100d771806 R12: ffff888036d9e000 [ 722.690702][T25441] R13: ffffc9000213f020 R14: 0000000000000001 R15: ffffc9000213f038 [ 722.699083][T25441] ? nsim_fib_event_nb+0xed7/0x1080 [ 722.704340][T25441] ? nsim_fib_event_nb+0xed7/0x1080 [ 722.709584][T25441] notifier_call_chain+0x19d/0x3a0 [ 722.714856][T25441] ? atomic_notifier_call_chain+0x26/0x180 [ 722.720785][T25441] atomic_notifier_call_chain+0xda/0x180 [ 722.726547][T25441] call_fib_notifiers+0x31/0x60 [ 722.731447][T25441] call_fib6_multipath_entry_notifiers+0xf5/0x160 [ 722.737902][T25441] ? inet6_rtm_newroute+0xfb8/0x19e0 [ 722.743221][T25441] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 722.750283][T25441] ? inet6_rtm_newroute+0xfb8/0x19e0 [ 722.755855][T25441] ? inet6_rtm_newroute+0xfb8/0x19e0 [ 722.761203][T25441] inet6_rtm_newroute+0x14a2/0x19e0 [ 722.766431][T25441] ? kasan_quarantine_put+0xbb/0x1f0 [ 722.771753][T25441] ? lockdep_hardirqs_on+0x7a/0x110 [ 722.777156][T25441] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 722.782927][T25441] ? kmem_cache_free+0x195/0x610 [ 722.787894][T25441] ? nlmon_xmit+0xb0/0x100 [ 722.792371][T25441] ? lockdep_hardirqs_on+0x7a/0x110 [ 722.797742][T25441] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 722.803317][T25441] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 722.808313][T25441] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 722.813460][T25441] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 722.818957][T25441] ? ref_tracker_free+0x693/0x840 [ 722.824053][T25441] ? __copy_skb_header+0xa3/0x4a0 [ 722.829198][T25441] ? __pfx_ref_tracker_free+0x10/0x10 [ 722.834619][T25441] netlink_rcv_skb+0x232/0x4b0 [ 722.839589][T25441] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 722.845080][T25441] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 722.850521][T25441] ? netlink_deliver_tap+0x2e/0x1b0 [ 722.855774][T25441] netlink_unicast+0x80f/0x9b0 [ 722.860623][T25441] ? __pfx_netlink_unicast+0x10/0x10 [ 722.865941][T25441] ? netlink_sendmsg+0x650/0xb40 [ 722.870996][T25441] ? skb_put+0x11b/0x210 [ 722.875260][T25441] netlink_sendmsg+0x813/0xb40 [ 722.880054][T25441] ? finish_task_switch+0x161/0x920 [ 722.885280][T25441] ? lock_acquire+0x106/0x330 [ 722.889990][T25441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.895301][T25441] ? finish_task_switch+0x23c/0x920 [ 722.900626][T25441] ? aa_sock_msg_perm+0xf1/0x1b0 [ 722.905686][T25441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 722.911003][T25441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.916327][T25441] __sock_sendmsg+0x21c/0x270 [ 722.921128][T25441] ____sys_sendmsg+0x500/0x810 [ 722.925915][T25441] ? __might_fault+0xaf/0x130 [ 722.930653][T25441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 722.935969][T25441] ? import_iovec+0x73/0xa0 [ 722.940497][T25441] ___sys_sendmsg+0x2a5/0x360 [ 722.945197][T25441] ? __lock_acquire+0x6b5/0x2cf0 [ 722.950166][T25441] ? __pfx____sys_sendmsg+0x10/0x10 [ 722.955401][T25441] ? preempt_schedule_common+0x82/0xd0 [ 722.960993][T25441] ? preempt_schedule_thunk+0x16/0x30 [ 722.966410][T25441] ? __fget_files+0x2a/0x420 [ 722.971211][T25441] ? __fget_files+0x3a0/0x420 [ 722.976028][T25441] __sys_sendmmsg+0x27c/0x4e0 [ 722.981204][T25441] ? __pfx___sys_sendmmsg+0x10/0x10 [ 722.986984][T25441] ? do_futex+0x395/0x420 [ 722.991451][T25441] ? fd_install+0x94/0x3d0 [ 722.996024][T25441] ? lock_acquire+0x106/0x330 [ 723.000875][T25441] ? rcu_is_watching+0x15/0xb0 [ 723.005700][T25441] __x64_sys_sendmmsg+0xa0/0xc0 [ 723.011038][T25441] do_syscall_64+0xe2/0xf80 [ 723.015660][T25441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.021844][T25441] ? trace_irq_disable+0x37/0x100 [ 723.027061][T25441] ? clear_bhb_loop+0x60/0xb0 [ 723.031820][T25441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.037752][T25441] RIP: 0033:0x7f7e0559acb9 [ 723.042279][T25441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.062085][T25441] RSP: 002b:00007f7e037f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 723.070624][T25441] RAX: ffffffffffffffda RBX: 00007f7e05815fa0 RCX: 00007f7e0559acb9 [ 723.078640][T25441] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 723.087079][T25441] RBP: 00007f7e05608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 723.095077][T25441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.103074][T25441] R13: 00007f7e05816038 R14: 00007f7e05815fa0 R15: 00007fff9ed777e8 [ 723.111383][T25441] [ 723.115239][T25441] Kernel Offset: disabled [ 723.119955][T25441] Rebooting in 86400 seconds..