last executing test programs: 3.279791708s ago: executing program 1 (id=9914): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000080)={'macvtap0\x00', 0x2000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) recvfrom$inet(r6, &(0x7f0000000040)=""/216, 0xd8, 0x20, 0x0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000000000000000800450000240000c5cf410d907800000300e000000100000000fe9a90780200000000000000"], 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) r7 = socket(0x10, 0x800, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r10], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000003c0)={'gre0\x00', r10, 0x8000, 0x7, 0x5f00, 0x9, {{0x3c, 0x4, 0x3, 0x0, 0xf0, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast1, @loopback, {[@end, @cipso={0x86, 0x3b, 0x0, [{0x7, 0x9, "030ef43104e822"}, {0x7, 0x10, "c1aab0a0f5ec0c62a22e819b1429"}, {0x0, 0xa, "f392f3c898985587"}, {0x2, 0xa, "e3352cd79a863c2a"}, {0x7, 0x8, "7aa973489e8d"}]}, @timestamp_prespec={0x44, 0x3c, 0x18, 0x3, 0xb, [{@rand_addr=0x64010100, 0x40}, {@loopback, 0x9}, {@multicast2, 0x1}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x1000}, {@empty, 0xb342}, {@local, 0x7bd}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0x74, [@loopback, @loopback, @empty, @local, @local, @private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xc6, 0x1, 0x1, [{@multicast2}, {@multicast2}, {@multicast2, 0xff}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xc}]}, @ssrr={0x89, 0x13, 0x58, [@broadcast, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000140)=0x7fff) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2.254787363s ago: executing program 2 (id=9933): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000400)={r0, &(0x7f0000000100)='{\x00', 0x80000, &(0x7f0000000140)={@align=0x10000, {0x6, 0x6, 0xcd7, 0x9}}, 0x2, &(0x7f0000000240)={@_ha_fsid}, &(0x7f00000003c0)}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000080)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x19, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x80002, 0xfffffffe}, 0x10}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) recvmsg$unix(r1, &(0x7f0000000900)={&(0x7f0000000500), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000680)=""/177, 0xb1}, {&(0x7f0000000740)=""/94, 0x5e}, {&(0x7f00000007c0)=""/172, 0xac}], 0x5, &(0x7f0000000380)}, 0x41) 2.252881328s ago: executing program 1 (id=9934): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000080400000008"], 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYRES32=r0], 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022"], 0x1c}], 0x1}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r8 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 2.022167352s ago: executing program 2 (id=9937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010000000000fddbdf2500000000", @ANYRES32=r6, @ANYBLOB="4000000010800000280012800e0001006970366772657461700000001400028006000e"], 0x48}}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000240), 0x10) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r9}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x6, 0x0, 0xfffffffe, {0x77359400}, {0x0, 0x2710}, {0x4}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "20df31e63824a588"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x854) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x4, 0x1, 0x8, @mcast2, @remote, 0x8b, 0x0, 0xbad, 0x7fff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x3, 0x7, {{0x25, 0x4, 0x2, 0x6, 0x94, 0x66, 0x0, 0x7, 0x39, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xb, 0xa2, [@private=0xa010101, @loopback]}, @generic={0x8, 0x5, 'J1L'}, @generic={0x89, 0x5, 'Z2r'}, @lsrr={0x83, 0x1b, 0xc5, [@local, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010102, @multicast1, @private=0xa010101]}, @noop, @generic={0x7, 0x12, "3c296aa0dc54c3826266093fea49364a"}, @noop, @ssrr={0x89, 0x17, 0xc6, [@remote, @empty, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}]}, @rr={0x7, 0x1b, 0x1f, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x35}, @local]}, @generic={0x7, 0xa, "d3a8129eb722a7b9"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) r13 = socket$inet6(0xa, 0x2, 0x0) r14 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r14) getsockname$packet(r14, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r15, 0x50483}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20009054}, 0x0) sendmmsg$inet(r13, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4f1d, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}], 0x30}}], 0x1, 0x4880) r16 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r16, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r16, &(0x7f0000000380)={0x1d, r17, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x4, 0x81, 0x0, 0x7, 0x50, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x10, 0x78ac, 0x9ebd, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f00000006c0)={0x574, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x4}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdb6}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r9}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3000000}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r12}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7, 0x8, 0x35, 0x978}, {0x0, 0x6, 0xc7, 0x2}, {0x81, 0xff, 0xb, 0x5832}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x574}, 0x1, 0x0, 0x0, 0x80}, 0x40000000) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x22040016}, 0xbe66372d97945b71) 1.920915438s ago: executing program 1 (id=9940): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) shutdown(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa8086dd600a3ff200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50010000907800bc1bcff2bd88b49efd1d3e5b2718e8007e7c0c05e7bde3e2fd2d2677ffa4ea380f6fd01ddbe08269398e929d8d17f0"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) bind$xdp(r4, &(0x7f00000000c0)={0x2c, 0x8, 0x0, 0x3c}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) close(0xffffffffffffffff) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r1, @ANYRESOCT=r6, @ANYRESOCT=r3], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004030000000000000000000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r9, @ANYBLOB="00000000000000004e000000000000009500000000000000be396760733a462100d3dae90e7a127e77f418c141d8ee77e4e8c6871f2a003c9ff2d7fa83"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000380)='v', &(0x7f0000000080)=@tcp6=r10, 0x2}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) 1.708550898s ago: executing program 2 (id=9943): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xb0, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x9c, 0x4, 0x0, 0x1, [@typed={0x95, 0x7, 0x0, 0x0, @binary="eb975ded82ee95660069eff6d16c4d88607cb493cc7a8652c68e530e1d686fb9d57c2326ec068160b262576f5d271425844a7899b11d686973bd8b13884f2eab3b8a26c1f97432f00ac0a9f7e3d81fd8f5518f172089770f89812a0b9185f3bb8a11256690fc1bb38e65794e62dd3809d3f4ec0ad3f9efb8be9aeb70fd6aa56c6f2f73a92b024c1b0846983b567988afd8"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a8"], 0x44}}, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) (async) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) (async) r7 = socket$alg(0x26, 0x5, 0x0) (async) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000380)) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) (async) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x89, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@srh]}}}}}}}, 0x0) (async) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r10, 0x84, 0xe, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, 0x0, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) 1.614612913s ago: executing program 1 (id=9944): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xd}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) 1.470902504s ago: executing program 1 (id=9946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="18800300a0010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x44}}, 0x800) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000000c00"], 0x50}}, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000000)=0x205, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000000300)=0x10) setsockopt$inet6_int(r6, 0x29, 0x4a, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xc, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000070000611159001a8a60e31c092a50e317000000e045c1185fcfe8389bdfe363b2276111b51b08e299ba0f7c2227e325a8eff89d6fc11ac28bedd60455fda20ab86c56bec217a0824a71ef99435e524f056d7c08c47a9af41340e3509d86b19ccf09618decb370a59a96e9dc8fd6719b66d44929073f638bcc6f0104a106453de0f000a74114e7561ac007437db2f977eaf40244ceb31795c2130b56102bf18c142a5a82c3c1b7063a3ebb0b186b180adfb6533ae31b8010a12544770946553e94afbf5193769fb4a936298c433c0fc190eb7360926e93d252dac62efc"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.470471981s ago: executing program 2 (id=9947): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)='s', 0x1}], 0x1, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x50}}, 0x0) sendmmsg$unix(r3, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x8800}}], 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) recvmmsg(r7, &(0x7f0000000280)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1, &(0x7f00000001c0)=""/4, 0x4}, 0x1000}], 0x1, 0x2, &(0x7f00000002c0)={0x77359400}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "c43cf3f93d83225a", "b4f6757f3dca139728ecd2e88b7fc0b0", "4ae1a5fd", "b9e13446520c6328"}, 0x28) accept(r0, 0x0, 0x0) 1.445755245s ago: executing program 3 (id=9948): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) r0 = socket(0x1000000010, 0x80802, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e0000040002800800", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000009c000b009c00000507709b4b00f4371f7d8b75fe7cca297af01a3c7200040000000c0000000000000b0100ceb700000600000001000085050000000300000004080000030000000e22f2b4a7000000040000050f0000000600000001000000010000000f00000005000000060000000a000000010000000000000062bd1bbe97dafeffffff00000000010000000900b41489e00006040000000a000000080000000c00000000003dc72aaf0000000000b00c531ecb6f9300000000"], &(0x7f0000000000), 0xb8, 0x0, 0x1, 0xd140, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r4, 0x7, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x4, r3}, 0x10) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 1.186061737s ago: executing program 2 (id=9952): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000007b118800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) getsockopt$inet_int(r2, 0x0, 0x13, 0x0, &(0x7f0000000080)) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) close(0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x2000c800) r5 = socket$netlink(0x10, 0x3, 0x0) epoll_create(0xfffffff7) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x38, 0x2100) socket$nl_route(0x10, 0x3, 0x0) 1.123580882s ago: executing program 3 (id=9953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01070000adccb234f6e93d"], 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x53, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x14) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r4, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x34}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@exit, @call={0x85, 0x0, 0x0, 0xc5}]}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001300)=""/4096, 0x41000, 0x11, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xf, 0x98c, 0x2}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x3, 0x3, 0x4, 0x5}, {0x2, 0x4, 0x2, 0xc}, {0x5, 0x2}, {0x5, 0x5, 0x4, 0x1}, {0x3, 0x2, 0x2, 0x3}, {0x3, 0x1, 0x2, 0x8}, {0x2, 0x4, 0xd, 0x4}, {0x1, 0x5, 0x8, 0x8}, {0x2, 0x1, 0x6, 0xb}], 0x10, 0x5}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x23, &(0x7f00000004c0)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @printk={@u}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @tail_call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], &(0x7f0000000600)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1a, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x0, 0xa6, 0x3}, 0x10, 0x4693, 0xffffffffffffffff, 0x5, &(0x7f00000006c0)=[0x1], &(0x7f0000000700)=[{0x3, 0x2, 0x1, 0x7}, {0x3, 0x5, 0xe, 0x3}, {0x1, 0x1, 0x2, 0x6}, {0x4, 0x2, 0x5}, {0x0, 0x3, 0x1, 0x1}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@fallback=r5, 0x32, 0x0, 0x9, &(0x7f0000000880)=[0x0], 0x1, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x42}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x2, 0x0, 0xa, 0x8, 0x4, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @generic={0x5, 0x1, 0x1, 0x9, 0x7fff80}, @alu={0x0, 0x1, 0x2, 0xa, 0x7058c0b333419efb, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000000a00)='syzkaller\x00', 0x2, 0x82, &(0x7f0000000b00)=""/130, 0x41100, 0x12, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0xc, 0x7, 0x7f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@map, r8, 0x2a, 0x1, r9, @void, @value=r11, @void, @void, r10}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc}, {0xffff, 0x9}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_LABEL={0xfffffffffffffedd, 0x46, 0x5e41}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01070000adccb234f6e93d"], 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x53, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x14) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r4, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8080) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x34}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@exit, @call={0x85, 0x0, 0x0, 0xc5}]}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001300)=""/4096, 0x41000, 0x11, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xf, 0x98c, 0x2}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x3, 0x3, 0x4, 0x5}, {0x2, 0x4, 0x2, 0xc}, {0x5, 0x2}, {0x5, 0x5, 0x4, 0x1}, {0x3, 0x2, 0x2, 0x3}, {0x3, 0x1, 0x2, 0x8}, {0x2, 0x4, 0xd, 0x4}, {0x1, 0x5, 0x8, 0x8}, {0x2, 0x1, 0x6, 0xb}], 0x10, 0x5}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x23, &(0x7f00000004c0)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @printk={@u}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @tail_call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], &(0x7f0000000600)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1a, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x0, 0xa6, 0x3}, 0x10, 0x4693, 0xffffffffffffffff, 0x5, &(0x7f00000006c0)=[0x1], &(0x7f0000000700)=[{0x3, 0x2, 0x1, 0x7}, {0x3, 0x5, 0xe, 0x3}, {0x1, 0x1, 0x2, 0x6}, {0x4, 0x2, 0x5}, {0x0, 0x3, 0x1, 0x1}], 0x10, 0x7}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@fallback=r5, 0x32, 0x0, 0x9, &(0x7f0000000880)=[0x0], 0x1, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x42}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x2, 0x0, 0xa, 0x8, 0x4, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @generic={0x5, 0x1, 0x1, 0x9, 0x7fff80}, @alu={0x0, 0x1, 0x2, 0xa, 0x7058c0b333419efb, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000000a00)='syzkaller\x00', 0x2, 0x82, &(0x7f0000000b00)=""/130, 0x41100, 0x12, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0xc, 0x7, 0x7f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@map, r8, 0x2a, 0x1, r9, @void, @value=r11, @void, @void, r10}, 0x20) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc}, {0xffff, 0x9}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_LABEL={0xfffffffffffffedd, 0x46, 0x5e41}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) 871.034605ms ago: executing program 0 (id=9956): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, 0x2500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@multicast2}]}, 0x18}], 0x1}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x120) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 869.334884ms ago: executing program 3 (id=9957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x51}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0104000000000000000002000000600004805c0001800b00010065787468647200004c00028008000540000000e1080001400000000f080003400000005b08000440000000b605000200830000000800074000000009080001400000000108000340000000fe08000340000000540900010073797a30000000000900020073797a32"], 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x3a8, r5, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5c, 0x18}}}}, [@NL80211_ATTR_TX_RATES={0x240, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xe0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x57, 0x860f823787253cd, 0x16, 0x12, 0x5, 0x9, 0x3, 0x30, 0x3, 0x1b]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x5, 0x3}, {0x1}, {0x1, 0x6}, {0x1, 0x7}, {0x2}, {0x4, 0xa}, {0x2, 0xa}, {0x3, 0x6}, {0x3, 0x4}, {0x4}, {0x0, 0x1}, {0x6, 0x3}, {0x2, 0x8}, {0x6, 0xa}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x1}, {0x2, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0xa}, {0x6, 0xa}, {0x7, 0x9}, {0x5, 0xa}, {0x1, 0x1}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x7}, {0x3, 0x8}, {0x2, 0x5}, {0x3, 0x3}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x2}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x3, 0x4}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x9}, {0x4, 0xa}, {0x4, 0x6}, {0x6, 0x2}, {0x7, 0x7}, {0x1, 0x2}, {0x0, 0x3}, {0x7}, {0x2}, {0x0, 0x2}, {0x0, 0x4}, {0x2, 0x7}, {0x7, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x6}, {0x1}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x6}, {0x6}, {0x0, 0x6}, {0x2, 0x4}, {0x1, 0x8}, {0x6, 0x3}, {0x2, 0x8}, {0x2, 0x6}, {0x3}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0xa}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6cd, 0x9, 0xe, 0x9, 0x7, 0x6, 0x5, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1690bb6e5663a7ba, 0x12, 0x0, 0xd, 0xe, 0x12, 0x30, 0x2, 0x2e, 0x24, 0x9, 0x1b, 0x4, 0x56, 0x37, 0x1, 0x2, 0x48, 0x4, 0xc, 0xb, 0x24, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0xb, 0xb, 0x6c, 0x24, 0x30, 0xb, 0x5, 0x3, 0xb, 0x12, 0x9, 0x4, 0x48, 0x9, 0x6, 0x6, 0x4, 0x6a, 0x1, 0x16, 0x3, 0x18, 0x30, 0x1adb3238f30b61a8, 0x1, 0xc, 0x3, 0x0, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x7, 0x5}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x5, 0x6}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x3}, {0x1, 0x2}, {0x5, 0x5}, {0x1, 0x2}, {0x5, 0x6}, {0x4, 0x3}, {0x1, 0x6}, {}, {0x2, 0x6}, {0x2, 0x6}, {0x7, 0x4}, {0x2, 0x6}, {0x7, 0x3}, {0x2, 0x2}, {0x0, 0x3}, {0x5, 0x6}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0x9}, {0x3, 0x6}, {0x1, 0x4}, {0x2, 0x5}, {0x5, 0x9}, {0x3, 0xa}, {0x4, 0x8}, {0x6, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0xa}, {0x2, 0x8}, {0x7, 0x5}, {0x6, 0x6}, {0x1, 0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x7}, {0x3}, {0x0, 0x5}, {0x0, 0x9}, {0x1, 0x7}, {0x3, 0x6}, {0x1, 0x5}, {0x7, 0x8}, {0x5, 0x2}, {0x0, 0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x6}, {0x2, 0x4}, {0x1, 0x5}, {0x2, 0x4}, {0x6, 0x9}, {0x2, 0x2}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x1, 0x1b, 0x24, 0x30, 0x5, 0x5, 0x16, 0x67, 0x1b, 0x6c, 0x4a, 0x5, 0x5c, 0x60, 0xb, 0x0, 0xb, 0x1b, 0x6c, 0x48, 0xb, 0x18, 0x9, 0x48, 0x24, 0x30, 0x2]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x6, 0x8}, {0x1, 0x4}, {0x6, 0x5}, {0x0, 0x7}, {0x6, 0x1}, {0x7, 0x7}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x6}, {0x2, 0x9}, {0x5, 0x2}, {0x1, 0x2}, {0x5, 0x4}, {0x3, 0x6}, {0x3, 0x5}, {0x3, 0x7}, {0x6, 0xa}, {0x6, 0x9}, {0x4, 0x9}, {0x0, 0x5}, {0x4, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x5, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x6, 0x7, 0x7, 0x3e1, 0x1fa, 0x6, 0x3]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xb, 0x1200, 0xe, 0x4, 0xaee3, 0x4, 0xffff]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xfe}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x818b, 0x7f, 0x6, 0xb, 0x7ff, 0x0, 0x86, 0xe14f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2ac9, 0x8, 0x10, 0x14b, 0xb03f, 0x0, 0x8, 0x8001]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2101, 0x6, 0x3, 0x4, 0x1, 0x3ff, 0xefa8, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x4000, 0xf0a, 0x81, 0x1, 0x7e6f, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0xa, 0x200, 0x3ff, 0x2, 0xfff7, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa1, 0x0, 0x8, 0xfff1, 0xa400, 0x401, 0x4, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfbff, 0x0, 0x6b, 0x9, 0x7, 0xc03, 0x8b4, 0x5]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x5, 0x1, 0x9, 0x65, 0x4, 0x800]}}]}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x1}, {0x6, 0x3}, {0x5, 0xa}, {0x4, 0x7}, {0x5, 0xa}, {0x4, 0x3}, {0x6, 0x2}, {0x6, 0xa}, {0x2, 0x8}, {0x4, 0x4}, {0x3, 0x9}, {0x0, 0x5}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x9}, {0x2, 0x9}, {0x7, 0x6}, {0x0, 0x9}, {0x7, 0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x7}, {0x1}, {0x3, 0x2}, {0x1, 0xa}, {0x5, 0x5}, {0x2, 0x8}, {0x6, 0xa}, {0x6, 0x7}, {0x7, 0x4}, {0x0, 0x2}, {0x6}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0xa}, {0x5, 0x5}, {0x4, 0x9}, {0x5, 0x9}, {0x6, 0x7}, {0x1, 0x3}, {0x5, 0x6}, {0x5, 0x9}, {0x4, 0xa}, {0x4, 0x5}, {0x4, 0x5}, {0x5, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x5, 0x9}, {0x2, 0x3}, {0x0, 0x3}, {0x7, 0x3}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x1, 0x9, 0xfff7, 0xd2, 0x0, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x4, 0xa, 0x1, 0x3928, 0x7ff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x3, 0x2, 0x7, 0x38ed, 0x4, 0x3ff]}}]}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x34004801}, 0x80) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001e00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x24000010) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r10, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) (async) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="28000000120065f2000000005c8602fb93ba9c00", @ANYRES32=0x0, @ANYBLOB="000000000000000008002efc6906672d11d33a840e31f0e61759f8ce1093ccaf91cb500f04ae654d723f9b44b260e4277262b4fc8b83f9e5b60f093b8a4acfa9670bd3732926b407fb65608a0bdc420ff3e8f30653ab102672857d6bb1fc5bacdd0750677196afef32f63dee218ad07a50ef6cbfd0dd728de437eb7b14fcc27968112f", @ANYRES16, @ANYRESDEC=r9, @ANYRESHEX=0x0], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r11 = socket$rxrpc(0x21, 0x2, 0x2) r12 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x5, 0x3, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x5}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) sendmsg$inet(r12, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) (async) shutdown(r12, 0x1) sendmsg$inet(r11, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000280)="71ea2e546003faf875549373e3f89c7836b36c061b00dab2c1f4f30236fddd4c5f60b5b4ee35b52e98575850d013540bd3b26f4996d60526ba0453dfc3e8f9b099e20ff78ff5fcbf1876358b7ace", 0x4e}, {&(0x7f0000000a00)="977a7b228c1a690d263b49c1ce3cae7ccdf4bbdead943ced6314b144d9f1b6f451b049f12497b6f50cc3eb6b3aed2c2cfe9ca6c07eaa77a1fa5cbbe4d6edf943fa3bc9e3406a80f56b2c9a1e133f3402ef84b04e39bdbb03563f9ebc4779ce91dd8a1acc605c285aa4b23dcd957e9ff20a136562e7f65457ac718663eae6d331aeabf7a6c8b2f2833724af6320f74ae6e5e32307523d192fc0ba0cc6127a5d581f510cd2c33f24d3ce3cf2efc638c2e23184c7afd31830aaa78b9566043e26f77afc06facb037a102848a59bccc0eebd547a35fdfc6d18cfb7922b9b38fc9d35b6381685f5ac2f88015cbca8dc76799c422e38dc91aa733142df088129f37f874f78e0a0603c942ec83f9c36100719f33b33266fbc016ef6ee2c2ed8fd955926e03fccd6ef618dc7d4928c3ed5d9c1c8d6f774183b6bbcd4775580acc0b2b59093d1904d37e9db5a4a0be4e1a0b0d50961eacc7b850e52acfaed70c73897da69bce87d2d747e1fddd862b06bf5cc0a2dd2d4f6825e596ca14082b87c9691e8a5593824389c6b0486489389df5bb9f666fe5d3dc2f7d8b7a0e98496eeff65aaaacb0c5686bc4fc99d28a6701bcf4d04a727c9b917a637684a87d537584f51439f244177afa2d96bdcbacdfe1ae370f0235226d90d4a307510c0177a9bd8bae1798dcfca256abb3df54145766387b3119af72fa027b5599c02e1370511d4e9d6ba4256e8c4019714ff14c48b0e3e776469b6a4d8e39b58b2e9c23b2395d2893ecc5f424f264a6ec263eaf1632bb649f4badc952e028c1efae51f2563a092e0ac74381f8d4b1e6126c127571869a5714b97a08a61864af601518fd586b3ffa2e16d83dd0c5895ef1c79e744af3f03e614a75d77c62bc1b16b82f18aa7895cacc15cde1cc61a1a144e78642beef369c3bee642fff8a2e3140dfee204775fcc54fcf1a2c7417d2d78cd22cd83a2a92e3367992e7c5b8f4377521fddc662b7949edfe23242961a74cf920dfdc4a3cdd6ee434eb38aa35fa6f731184e4131e801b7a19fcf4acda2c03cb4ac346f7b9b9322a1c75db1d71d6284eafeaf4d0b89dde40c30ec04026467d92c6a3ed326cb4996cb073e0906bcdd3241bc8ba92a8f4c656ede66bc9ea4e71568da3268d6ef55c1469246953f4c93623e7af5158c9b28537eaaf2f31a23aebba6fc41dccd3f160c7deea271fc1ff6929369a02fd9425c25f99b0f812bc1c3df25ca912c0b96bb19951ca0a94cc95904e50aa6161cacd45d0df5e72a4eb68d4f7940157ec87c621e75985352350186d6e8c5cde5d8afa51f5452b8d34c308bbe6e580ac7e51810a25d5ddb6e42c78c8025c7103d4adb41099c2381aca9d00e63552b828d3258849fccb2b728c4f473e170d28fb6403a5ebe949c86d7c23fcbaa7d79abd7218ca1f81e9ffc0c0dc47a77dd9d31ca5e7a003dcd6cd4b337936c2b2212a42069dad7e18c34faa51ca99bcf24b340762c761c8c36f048b6b9a996490efc8a89c40eff3d88c1053fcae9d55c2528f2ac04afaa363bd46211baaa07d1577fc06c78134f39ee76da921bcf7d4bbd873346eda129ecc6c0458b36fdb60b92a72d2b3e17b9c08faf3fe864c61976c8e706b4c1de1ff9e6f55ef0cf96371c68d0fb0942d2f5c817ea8a152cdad487349865781e5b5d0f92adb7e19e5463ac98101de54e7e20f1b7f5dc195997278d0ffe2d907be5baf10fe13ae8c7d8b6a8f90d0cbf7c4ec255b1f99b48d86b827ae647b529178e0446fbaacf7d43de08c159d5fd7da9aafd1da5d69c7f79a654d8a9607e2237eee19deac1673e893b3d479aaa21d3748cad68d7fce830437b0bbe4bffd907d7fe79b7c4be7690bf91782ddd2278e44302655fdae97aeb155fa0c7615d3dbb72c6c6a1dc570cd2e28b2689095a986e4897d24bfe9885392e1d2ef1cf07cdcbf555f85b6ada7adcf782a9a9b5fc5b5a123638f5f405ca4b481330f8c81d5058bb8b7c289ff56cde8d4bdc8250fa4fdda4169f668c2d8b9e3c62f875975de588a56b2674730adda539da967a84757533b83468dbfe351fb40094e6f6153840f627aaa3198cc67608da1d764c57a02a392736fe500eaf8a86b121dd9cb39f23286c51accf4b9823eafe65bafbbafbc57ea57aad79de4efd047fcab5f18727bad62d4fc9526f5da9e9af0564c230b327633a48903ffac62fa90515bb620fabe86bafb5964a8b59a9920051de61e9cd8d0c5f5c9d456a7be73b843372e8006cd8b81ea2c1f9fc61c13d2be00a1e410c345e4713bee541d96419975c0303273a25f6e848d59fb8d24bbdcc9a485104742737a6cd378490648096869352cd5df67287d12ec36fe63dbc84f4de5c3ff452a71566bac805eaa53536c762a801ab43a7548c4e4dda3aee3e4649443450f557c95e9cf4a414ea4d9df874b6265402b8bc62d5e2212e9b44c155b1b7a0789e43637e0ee16b33c9ccafdacef4933f345e54ec184730e4466da05a1de93e456cafa966fa621ac4bad5ad4fc4d3edef942074e4d903893f27962f9b59e3774d02a40d09544d4081474b760380d69374c15e44a348f53a9f2035aef782bbbeb46f1c6b65ba710b474427a181fd82cbc4a89ff6a49b63a398ef39f92b198df4ccbefeea81621cbf66d098e03be37fb9b47ebf2f6c4c29b1a9a6a817ed54d5a49dae480e998396b0ad9ca1028e38d8599350de7bff351f84fc4206f53f28fec02fefd5dab58a368e9e586029d2e495a5be9c310d19db2d5ca45df67817c2edecb15c43b1f0eb5f9a4c73c0276d6378360358c323bfb494500fee652a947b1e60db505d12ce990dd71634668f0969e2af6896ef9b1f098b0a0b2835aa3c26aa76e43a843bf802b7adbc11d10cddbd165ed6a252384ed120d68dce987be62a5b4e716409542d1941de8874464a30303fda8d86429b34b4f767cd47bd535121f623ea14eb986bda4646484faabb60185f5871549344d7b6664156df6711a0e7b77d86c06e1d9c1e48dd82e6ec3e79f5cf7f7cf379d417d02c6e2ec3798190404842ea67a6226ab4dc68ac6fd6521d020f37b44997b4bd4e19e13c06453303e016394361ddeada5cd265ee772a427a739ae7c09bc78ef8574b308bff199e54b3eeb3e7cbd190552d9a139e7dc1100f74c5f113eb813a9a38c1fe531fbe7df408acc93a7880faca8dec19e0746efbb027cdebbed2c3e5e4fc5c7dbd53f0eb84e7c521a3ba3d0402d9d290f4b05e6c729fceac2128e1d8c7475092e8ab50185622f166542d6cb0d5427535c1da6b91ef9d50af5029216c290f3b707acc359bfce7d0b878d0eac1a9161f2a309af7982245b536574869d8b0b20a2b8cb6ef05d94956a5c420fdf93f3ad12afb2c8db7d673d4a612a63452f79fa88704191688975c6d1d82200082286511aeb67a3a7d0266d3bc0348ab496b60ee7b88e11ecdd5d9c1c4a7d0b4fc6e2e59612564a7c73085abdbe1e25881853e006a542871555b076767a5be8649f11517b20023e05481d46ca232a6fa3ddd7ede43b94795ae64e51862a05bfa1abd31e96e9bf4214db5cc61401a19f37f2fe911e85be769ae24afe8fcdb93ac796f1a8bfad61e7dc3cf1a8d84bdd5c857df2f3677eeeb28752e5f8b800965d9d1c326e29c05a9d3be7bce58f5bf17512c64699385242605000c0efd2c00ae3cef0537e751a5e05c3f05de96384e686b09cb34212b53654434becdbc9970dc8362da675fc73d5ec3cdc2efa82c4816584cca60115ef894a773e231c1450b1bfb616c397d30fc4b6346b8d637faa3c4bc35361fccdff573ce8b9ef98abed0efe01723b1a737ca339d7fe5353132193b148cb3d570b0408d7548aee803319b5000f4a0ce1b82514166ea4b2b87e35a1e929d1a1e8345757aa57095ca17560ad8c965f2bae78ab38f9ab3b1741cccab370fb769d7122674e027252dcc06a4a1f704cedc014f00608629e321bf96a998a322a5d1bb4a16faefbcd176becd754f8e651e847a42d4f5affb38e9f3519f6b8a9f730a852535bbc426c7c62798936d3f121bb9508374f99322b628d9f9bbfec49320ec61b4a5a596cce126cb003af38c6c6de39dc515dbb1d2b6d38d7addc152b44baa2bfa48728d7619efb355fc5ab4c72d8f4095d2396425971032e1126e2c882471a7aaf7fd32e7602e898fb0ca8d86654c564afd79ed0bf1d1542fe2073ac790c92edd33eeba3876c83cdaf653173453c684ff6cdccd454cbc828e15d8cfa3f7934855209b68c9fd47b84909045ba1bb032ccc39c0aff7a7d769861a9fb62234c6e0356f6bd25c6f8c7238c49d60347ee6c338388a1ca758abd9a7e887f9798a0ddc6ca329d1dc85eb89263c681eed13bae86d4b3ada443ea6e261ff1c4acc439d62bdfc1b8a5e601d0256f1fa65a55da5f4f3c02add12dc942868b2ac61bf4105cb39de5c6341466510d5d54fab3d033a775c8ac322599bfbb44fbe0fbce34c9d1914b301042700165f0d83429b2378728cc700f1454bf2e747a81513ace12c9722c6b9f83e6531a50e5fe2c0aa1b8d5c58f94fd85971ec3fc5c2de183597519a6d819e63bd21cabe8dee9fbe8b9ca2f829f51a92b188fa657069220cac63ffb3d7e3f8008341277e7ec79a31d3310f311179526bffaf81d47eb3eccec091d8dbcf0bc2ad8e3b96a16128570a7fcd45e66d1800a3095142a4bda552ffb1ece853567379c500645640ae0b423888ed1a58285fbde48fbb28b1736d815afbbc07323e2ee2c5df4ada08bd396bd8e5afbefd84ed718cb53d10d43acf02290a1d0e34b71a68a152023fa99acc09aab02f9c4354cc996586466305fbba6d7971500ebe858e567a80f4cf59c9299e4c75da68c6e0ee0963fd3d11f467fe790ee20f2efd98c283c5180d121a80db165425c79b7c1a97bf4c1bf48d0a9fc95ea654cb08ef10fd9ee5a43b98b73fffb56a85a37aef60835d4f3574f557396baff172d747cef37268a809ca77aebb6cc4d7d4daf24049aa1c5d251a525a609036c6b9f8a3b7db0976845260dd0a642f7d7a5426dd2e25cd84afb9800cebd0432f91d2109773c4a106bbdb7f197f7eb4f8693405b36d53c24f470a4c21d8cfc4e312dc808162ae49fb26ae8d02e0fa7c71dcfcb6bf33fe78ee92bd8721438fd8d822fa1a769f33f35943e924ca820dff6c625e8903d26defa48549aaad1950825403243b3c78aff8f66a410c32ec2b37228c66850af62bd0c830bfbf9bb2bac945e819b878cb84dc0994c15d5b144a59f9deb33fb422f159ec60d7f5a13a823287771467cd67b6f9f3228e61599de0741809e457057f4c9bc1c13e40364c06fd0e724ed240940314846277358b5464bcae4b15ea4ad495f363aef4fcb2bf57d08070b80072150602a35bc256c060b94251e1e24754fbb02ae2d0f53f9fa2cd4247b312a5c14bb0c33042d1833e9ad97001ba2e7509c169df33b743d6e58ae8a1c0a4cc33b98a514bc3d38832cb9fa069f6b744ebb193db00b5fbd530628194e74a326ed4918f3fc1257dce5428836be6e258f04001e3b7339762942bc9882860fe1e4f47dc5a45e7b5a5ea9fea5c2493bbdcf13e9365d86ddd862669bda559ad921d486eb849240e96a87b99c858ec26a12b98d7b6fcb8f668bfd2d13296e34c8303fcc2746c3d5afa3e63179e3c078cdc38a7b0aa21344f5f7969f16755574dee8a59f2158b0ea21542b60e990075a44a844db69820820d77829f8929f252ddca905a44e8e29618b87cbb0716329a6d25a638547d8dacc64fbe504f615f2917e9a5acea3765f94f10870b8e", 0x1000}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)="568c9422ce0d1365b6c6da7705886274927543fc33d1883d82bb84a0f7ad78957fbf7402356da9e8eeda8c2b2fd630b0b0e7a28c9d5285085bb23bc6b011629f594c02b75cc371defddb3ff9c69b78b46887b3c684bdef72e2aeab483c20c9322302b4301d952ec0f20b77ba2107a6975c73a141afd4938b13294ab822cb8a8ed408a2b6c113a153309cdd5730c4499b450e76e9f0113952e49c5440954fafe18d0094e15ce1df43e91030efbf5b8f0173e4295a1a2abaa1869cde938c7ada541064e9415cd6d3d40151c154c9", 0xcd}, {&(0x7f0000001b40)="3dc5811dfd8ca238dffa9d744c4cbc7dcf0f67d93b83798f725d41996522e5390e05bb3386a0e9dd20aaed41d44221cefdb26a8300bb104fc742dafdddb0f5fb9f96219836536f8b9b411b3f34b3d4785fdc49d8ef97807c39357bdb71781d3195f1d5", 0x63}], 0x5, &(0x7f0000001c40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x31, [@loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, @local, @local]}, @rr={0x7, 0x23, 0xf2, [@rand_addr=0x64010100, @multicast1, @private=0xa010101, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x34}, @empty, @private=0xa010101]}, @rr={0x7, 0x17, 0x14, [@loopback, @dev={0xac, 0x14, 0x14, 0x17}, @remote, @local, @multicast1]}, @ssrr={0x89, 0xb, 0xd, [@empty, @dev={0xac, 0x14, 0x14, 0x31}]}, @noop, @cipso={0x86, 0x5e, 0x1, [{0x1, 0xe, "3f074a01c7f7b0e00a444138"}, {0x3, 0x10, "3f437ba43336c2dca6119a482542"}, {0x1, 0x7, "e61a52cf88"}, {0x2, 0x11, "133d792616fdc75d614350a1273542"}, {0x1, 0x12, "0f14c4346e1cfe442ebc47bee0f1a813"}, {0x3, 0x10, "a00d645e582664fd2f6adca2c706"}]}, @rr={0x7, 0x7, 0x94, [@private=0xa010100]}, @noop, @ssrr={0x89, 0xb, 0x30, [@remote, @broadcast]}]}}}], 0x100}, 0x44044) 776.214888ms ago: executing program 0 (id=9959): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x7, 0x1, 0x4, 0x0, 0x7, 0x1}]}, &(0x7f00000005c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 703.802827ms ago: executing program 3 (id=9960): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@llc_tr={0x11, {@llc={0x42, 0xbc, '6'}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0x115c, r0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x2f}}}}, [@NL80211_ATTR_FRAME_MATCH={0xd1, 0x5b, "4b4f6e8d4e99b5748199350bb292d72ddc2fd163804c3aedb13b1301a1deaaf1d4992fe72266ef816505ccc31a860ee924b442aa7dd3786626c90b3d68035275cb8d8b41dead5c4503ebf2ddbc6f60b8aea63eb585173525896aadbb36b5cd8ca625d488e4309ce1f629acb22f8fac43c758ba6e7e446a6bf7328ee2a349739992cdf57ada8a82aa8b16e7cb2722e3c3227888d7e09a304853b244bc542f2a702787fc76cc556b891d6088515e69f84c594f0d50e1497dc8f60f5388f1ef0eabbbe5b5dcfc608b919708530404"}, @NL80211_ATTR_FRAME_MATCH={0x59, 0x5b, "2e2806167f74400e5a5ec7ed768d247a662fda6f3e9f7997ce4d103697fe17418a648456a1c78c4ab25cdd307d39b0fb4e753ba60b84144603f30e21199bc3cb8ddf548d9a1fd90c06df1d7345781dfae702894518"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}]}, 0x115c}, 0x1, 0x0, 0x0, 0x48044}, 0x24000081) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 703.08443ms ago: executing program 4 (id=9961): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) syz_emit_ethernet(0x284, &(0x7f0000000580)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "4b0ece", 0x24e, 0x3a, 0x1fe, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, {[@fragment={0x3b, 0x0, 0x6, 0x1, 0x0, 0x0, 0x64}, @dstopts={0x2f, 0x0, '\x00', [@pad1]}, @srh={0x3c, 0x0, 0x4, 0x0, 0x5, 0x48, 0x7}, @hopopts={0x52, 0x4, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x7f}, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1]}, @routing={0x1d, 0x10, 0x2, 0x83, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x20}, @ipv4={'\x00', '\xff\xff', @empty}, @remote, @mcast2]}, @fragment={0x2b, 0x0, 0xff, 0x0, 0x0, 0x13, 0x66}, @srh={0x4, 0x2, 0x4, 0x1, 0x8, 0x0, 0x6, [@dev={0xfe, 0x80, '\x00', 0x36}]}], @dest_unreach={0x1, 0x4, 0x0, 0x74, '\x00', {0x4, 0x6, "f499dd", 0x5a, 0x8, 0x0, @private1, @mcast2, [@srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x70, 0x8, [@remote, @dev={0xfe, 0x80, '\x00', 0xe}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2]}, @srh={0x3a, 0x4, 0x4, 0x2, 0x1, 0x0, 0x380, [@private2={0xfc, 0x2, '\x00', 0x1}, @local]}], "777a33e34611a29d90fc2078badbfbee6d1940e4b70f08b709a4883f29bc8db00faa032facc19f19f2ecaa9156b2f3cc8d18f45320e8c19fa595057c7f87ebacd206d12f5cbe81f154238541b29887573aabe64021c08ddb544e3d866620c26b0895a60498e3732c5e0b1ea9fa830fd88474bb89586a6f9054cc42a990946c69a6282cfbf8eec2a1a4343275bad66e972456ee6909bb"}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 0x90, 0x0, [{@local}, {@local}, {}, {@broadcast}, {@initdev}, {@local}, {@dev}, {}, {@dev}]}}) 689.305589ms ago: executing program 0 (id=9962): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="14000000140005b7ffccca38b9000000060860eb", 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, 0x0, &(0x7f0000000540)=""/231}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, 0x0, &(0x7f0000000540)=""/231}, 0x20) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001400)={{r3, &(0x7f0000000040)='\x00', 0x8040, &(0x7f00000000c0)={@_ha_fsid={[0xffff, 0x6]}, {0x6, 0x101, 0xd6, 0x8}}, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x5}, 0x2, &(0x7f00000013c0)=[{0x2, 0x4, &(0x7f0000000180)='\x00', &(0x7f00000012c0)="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", 0xfc, 0x2}, {0x2, 0x0, &(0x7f00000001c0)='GPL\x00', &(0x7f0000000240), 0x0, 0x8}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000001680)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1000, @mcast2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)="e92a028db409aad28e58360ff7013c3cd5d57a3d801602e6bd5faf85c3e714be8dfa4e7630dae62f21adce05076f163bdbb70224527a328b37500127b6436eec185febb5b7c93d601673ed4fbc7d47eed5785256f18501960073dd80ba673ae635029454fa06dcbf83ea0ed44df6e6d7010b89bf92ef5f6fb59b399f835d0b9a25f38c6823024365254c385ce41c19f44ebd60ccfada9dc22837df7ebec519c7590901fad87615c5362a3733d758c86dc4b41828b2cbb0cf44d17f681e32e1bd6c99a8b0cadf438909786e4cfdfd0aca1a7a36e968d67e97b7323584d13ecca64a2fe30a8539536059fb170bcc00e1fba0a9fd87e906eb56d407bd3e24f487f1faebd16c67d5fa2d83809cdea4a8777ab1cbd9be4eff44c7e3b65ac8c2b38ac9881a0bf1f8e33cf3d8dfa3d6695bf1737b6aa60c9d565ad34fadfc204f1fcf513e55df8e0a231f234506f18b9f944e87521e1db2e15d03e7e3bc2fd54ae9960314471d1e37142734143f046748f39ef5af03ca454c38a212cda7375221e4ed4a40d075f964c4147add1c0ea1e1c23a47f4b5165fb3336b4d28fbdac7d12488bc3d09a8ba514b6ac74263acac35fa64d9958457e604d2c4d5621fd6a289939f3c81c2a66144eb0188d8205298961d2b64d3a7711dcda5557cb6a5e19b89650fa96a012bdb4fd29affa12863d10536976e044b632cdbeb18860e3f453270616fe7bbd8c6528ab25b3c90525cf71232372131cf75406d334cb8794edd0167b799d9e3f31824483aa5cb9c88ec3366b9dc0c92ccae7daa531462cf5b8e94297bbf53724fa9afc0266596597b86856633eff5cc1dc2f0bf127e258b7105e598d5bf37b254abd2bc8b30923f19cc27d786266bd98e849e3539fae493c4c5c84f5db22cf0fe7afa1f3268c3c09bad3fc1371fc90243f4c87496504ccbde43c4e44faf53a7df6bcd29f19381c0164a964419125d3590609a3f53e16a3b1fe4661470e19adb29d951ede09248c071f32399706ba0480a813951a45bb72311c0d5f5a1b751575f0f951f100b7bc9ee02c6b7a3595d66cbcd25b5ec94c33681a622971efef17806453ba3f0b14fb146731d8a39cf339bd400781e3a829f0d10bb7a29f4efa4bbd97f3f20b1bd5530e79adafe7182b3541adc81fac6d15dfed20cbd713360263b75d634b7fdb36d5de7665a950a7760fd6fd793b6ab7d3a9d16baab79ee25eae19e892ac5ba4001a5274faa8e105070038c13fad20053134999e18fda6250af86e4807d81722dd3c4369b2e2341d02e97960b18507906b870bcbcfc5e91885d1ee2d1feeb94ba9652bc69e25932d70172c5924c2b2cd8773ef0ec9580da1d26a553ae97ae6788f6aa40872c5ab365919da56f258a8ff35feff7c3140786baab71be04e6fd661e38d331b2a19830e8ab066ebfc3c98b5e3376a3b6d3ea3f5f96670f851e711fb4d726e22ddc1cfbf79376cfed4a0e67c6146e87e8fcb12a7650f54236456420c35ac05fa951975559c34b2cf74de5762e74fb128223400d1aecb47ff52c5395c6738661a312f409a165719fa1b120cf84c2ada219d7bc05f23238c4c2614612e70e8cfa0ecddeb10f57b956def75e1173b94f8229b66227e933641cb05b3578ccf09c35cc4849b66ee27b34612bd095d4fc2e53cbc5aae395427d4146cb3fb6106033f74222304e87557be1d2911169b9450758a202b7186a89561e974fd75cbe18910a18c31ba746f6b429f1e4d1a94c1cba6f08d7890ce0568f189f8e58f253b4fa9c36854b264fbdef6586787c4eb2ea1616f696f147848f8b713ce8b55c0d1e4ac13afaedfc9d9527c8aac472538af0f60a48424cfe95d2bd4f21da2aa0af868561aa826c1ccbbf5a777c87e9bfd8e76b80359ff24ea6b1235bc2175df0f1f762fdd83ac6996b81b782a5ab19e859fcf52c833b30f2fa1a6cb7da45a2d11e350820c0a4108c388e07383de09cc8b1f51f477438c2cd55ca303996ffa91b67a3a1ea5d2828e4db3d4e419dab2206d6cac2a9f23e7ba9ddaa5851691828840331e494ae61d0214392b254d5fd77bdf0ae77eda3bb10553868f3050b974c526a5f6d5702301207896d166a186a502b7008b27399f3266c56ccda35a77256ff7c1053559d2c185a3a77ed9a30f0085faac470b6999517d4846e9fc064710d37e405a77ff94fc9c949f6541ebd68158ed44b0f3656bbd50a2242e8d55f592cfa4934307e37a3f5b28f33782c75ab6a1e009f7d4975b20827c73c7d5f5d7aed07f7ab181e22cecfdbfaac1fe21e8ba2bb24689b19d1c3792630d2913ca016cbcebf7fdf2209a036288671e95901e9ad68e58dbdf01c71ce86dc2ed13d7da2005f237155c8980c8d1b91a0f728867c75d88f62b5240e9e3643d08fbd446df140e97a5c2c66bbe6471d0f4e49f90389e8ac46b0d4fd6b6a66c2547b5774b51b0f5fcb7da985ba816d20acf2bfd2fd69a9bf0cbae2970e6558fb3bee89c6c64de31c1b0d3d7ebce2a9954fd1003c6078082afcab641e1a470fad9db8b934666fa719bfdebbb2d9c9e39e29004f715176dbc67ceb5d4982b0673453a014ec6d95c5d4a6655527fa72621b00d76cd9b93102781604a33855c1b0d5081e4c18bbcd9ebdd2fb3cb4cec1d958e4b6a203d8dac89ff20ec20eb51416546b861d5ccbd4e8afda6e29d513bec016bb579b3b01136955beb68a2864559eccfb43c10a342c895cee6aee6872898d994537a64dc46661d9468ff28a688b5b33ccb4fbb93fe36d67cff2608e5ed437a1c4881163ef86d999e56f89b0a1ecd942377c05243fa55a07e24ed195a17cf69f515bb4945552e4c154ebc51dbe7c4fc2eadd2b56d1a6851162ada440bf36493339892f2771e854b9e7ddb62fbd378c863fa7236a5489fc0c5ce03f1280ea6953404f0d8e31dd2d98c736cc5e6ee91f1c071d055b089ec84626ea43607a94b7f1a2690a2c57bec035dc59d9ef1b20dfb9e8db0d134c10307f89695a41646d1ceb4df6b97c08c32d498243b2d549e6965dc783770675e511aca5998ebb5d7fde5f4ac0a5dbc4e062bcfbeaa58090e9c9e359a42dfb952e0eb38aee34c1cb5a082e00737036b69f4a8afc6cb4641a7bb055d6c39604c7b16e59845fad1558376756e0ec961a44e29f91d06a0b3152d8fb687456c5b279bb549819c5929251d8145fb421d6070dec0e4094a03fed067002d3ce2298313756b10733a9b45e2a4b98e063e106b2d2477e157318d2b2def57a1ac3f7cd9c18b2d1ce151343721605559cd589a127f33d3642bc31ddab7ce7adbdcf97c4c3aa413df81570bc86e0dc0acc0fc6ef02c4b25dd400088151c5d390f3df2b2fd07a3adbdb4319d795d2c4b52e8be9176e8b553b2c2aed887489741ab9a3062a1fecb0dcec273df68b9e2d84bf5e17f4c97c50ac8e9803e3106cc5b332005ead13708ab5092251129ff3f304c9bbc57de72c97a624b72e2789837b2f114c4c8b2b04545d1d8538218326f3d4940c78c66edf90516168476e63296e8cd2ddfe4861ef2c927900fa401ff012efb7bf0f92c7c6e311134ea3edf7e8efa50fa2752c0a339749fdab8308b2779409480b74705c98982ff79626341ce9857f64945f9b46963fae4e07d4a7318715963fa2d55abd23f14cb73e9fc4e55eef488d18dbaee0cc4e4518918dc67f277386fe18832c19158e0292e4da8e7a032f9ff4aa3b1cc0a94ac3c082a54840880f07ca7c0e53a1b9cef4c2b9fa4995cc5f4bf5d6ae536cf78861970d69ff095ff3c75b09b0955bfc1948a423f39c6575bd4a8bdc6372fd674596d279dc635ea524b7559b0a8a04d130c09162fb412dc0d2aceca4c8d9c9f75d172f8e116f8bf79f667d0705c994ee319ddf61370d6b69bc519c18837f3c54f03df6faf603cbe208ced69382d90d4251e98d63a57ad008b9f6485bed0a27f5d4979b018365b851f01ea58212abe2aa7e2145695fe7232e27e9df0ca279380e07f2b357443b8d5450db60512a7adf2835d07fb91305f909837d0b956888d478778a657cd03115bd724efcaeeee2bbcddb8ed9b9d17bccef2a475421b0b5636fc696363b9838b8c69b0f02d6b0edef07285f37d9545826360229cac14aab6b538b9d0ad6fd6c609a22fb217f77d546a92dcb1ec9eb157cf00db097f2ce74409d39125d15e07a7c417f895a52cb6637b0c41997dbfa2d293136179681cbdb053fac0c03ab3a9013f2750037d5bc37641f328a411c1686f90012590a843124b644cb1dc51d57c3ac99ee7bafb30c4cfc8d007fd6f9de076f91963ace3440954a97f75b0cde75456dc30d83b10ed8d437bf9bf94ec9280de93481016af20e3eb037089ca77d8be20d1703bcf558d31158c95f685bfbc5a765fbe023b85e998c690cbaafd179f933f50cf93a3d1a282f4eb7898bd90969c81a056282f171daf9165316d8395cc284f360f97352c9920d4efc9ebe2d5c70b4223e4600a36271f6832eb677670b8085e03ccc41cca01b07ce5d9f42dca99ae2cb50e2af14fc2d58a294ee465dac8f6a3cef760cc81b1fe789cfa0cbf738a35b7eabe07433956f8c0f8173859c3c233bb538380093a5d56d95d4336fc5fdf5cf5d723d6bd6e628282fec80ca97ab1c1fe6ecc86d63bb198d21d08d6f41b9babc3969e37a5813260ab34123d3f8b25d3cac9348ecd6d9bf45667b5789be071fa3063f70fa287ae7a2cc94d6cb876039b404889bfe0870bba32de1d5e7fddf8bf64bc9699fd478d70f654906566351fe918a6dcab6b63b38a7cfbbf6471377f3ca3baf0242962a254f24234f258c5d6f22190a230804041dbda495745b429844e5b21a4ad97ff442cb1b55ef52157197fd08731aa651cedc511eb9ff35307a117a8f63bad7d73528f07f46e805bfacdbb0a03e9fde5e02dfe9257d22c8002e285c5a6636cb2e79d183574f65d6078f715c221abbe34ae4825e9438e0ab5ef0944a71b76203c1dd5040c020713e45c26a566a806e5fea4ebc6fd15cb89f9482c09810f39c5f60312f5a2a5be2ea84223336feb8f33ecc24795dba785bbaaef3df876ee2aadf6ea1b5c48413875b34f99833957c40a7d0e4b14bc2ff1f17e89ee732b416e2a682399572e8f8ff9a0554a3378f39451953e1c5d39c66c8dc5041586d2220a899eaf6d0833fc616022689bd618e4932b3506fff5c0ec01c9deeb56a58579b0c8efb1342cdf5ac311cd8cd7a52fdb6d73f3152059b947bbe4a4dda18fdf9e897d204eb5b455ed868d0ae29ad0786899ef7f2ff6477a709d1c10f2975f5b503c0905039fcf63c3b565b25c2b21bbd53d98995c0871f7ff60e92337843939a681b5e45bcdb068d4aaf47b7df7674863ef92fa4dde41f9e60634de7e0a535a64c2f825b18a75e03c0a3154b23edfc888700657b7f19b829ca27d923287db2e2df2c27d33bb189df2efdf7f7d12f95c0a7e23e84430e4a98b8824c582ac9f5a5d2e7178ef90ce03842cab6c304becd1f7c8445619cc6b74275684153bf11dca173b49e2c79ec7815c039c18ead7e05016b0d7e73a93b36fe964fd50a462cc3a1fe435b2e3712cbf1e48ba3fe27696ee0f29914feb7b76fafca942efb64c4c61c6756acb809626be49ad2219b4c6ca26bc49e4d0e3d932a0054207c48a2f4e9b689cb3422184e899af72e5e1e7e4b8e00d80bc5956ef7a08bb19698f469a86536072d587ed88ca3756e482404ca764c07b40e6d2d220df9bf8c80e0c2c85906d84016d064cccd64", 0xfe1}], 0x1, &(0x7f0000001280)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}}], 0x1, 0x84) (async) sendmmsg$inet6(r6, &(0x7f0000001680)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1000, @mcast2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)="e92a028db409aad28e58360ff7013c3cd5d57a3d801602e6bd5faf85c3e714be8dfa4e7630dae62f21adce05076f163bdbb70224527a328b37500127b6436eec185febb5b7c93d601673ed4fbc7d47eed5785256f18501960073dd80ba673ae635029454fa06dcbf83ea0ed44df6e6d7010b89bf92ef5f6fb59b399f835d0b9a25f38c6823024365254c385ce41c19f44ebd60ccfada9dc22837df7ebec519c7590901fad87615c5362a3733d758c86dc4b41828b2cbb0cf44d17f681e32e1bd6c99a8b0cadf438909786e4cfdfd0aca1a7a36e968d67e97b7323584d13ecca64a2fe30a8539536059fb170bcc00e1fba0a9fd87e906eb56d407bd3e24f487f1faebd16c67d5fa2d83809cdea4a8777ab1cbd9be4eff44c7e3b65ac8c2b38ac9881a0bf1f8e33cf3d8dfa3d6695bf1737b6aa60c9d565ad34fadfc204f1fcf513e55df8e0a231f234506f18b9f944e87521e1db2e15d03e7e3bc2fd54ae9960314471d1e37142734143f046748f39ef5af03ca454c38a212cda7375221e4ed4a40d075f964c4147add1c0ea1e1c23a47f4b5165fb3336b4d28fbdac7d12488bc3d09a8ba514b6ac74263acac35fa64d9958457e604d2c4d5621fd6a289939f3c81c2a66144eb0188d8205298961d2b64d3a7711dcda5557cb6a5e19b89650fa96a012bdb4fd29affa12863d10536976e044b632cdbeb18860e3f453270616fe7bbd8c6528ab25b3c90525cf71232372131cf75406d334cb8794edd0167b799d9e3f31824483aa5cb9c88ec3366b9dc0c92ccae7daa531462cf5b8e94297bbf53724fa9afc0266596597b86856633eff5cc1dc2f0bf127e258b7105e598d5bf37b254abd2bc8b30923f19cc27d786266bd98e849e3539fae493c4c5c84f5db22cf0fe7afa1f3268c3c09bad3fc1371fc90243f4c87496504ccbde43c4e44faf53a7df6bcd29f19381c0164a964419125d3590609a3f53e16a3b1fe4661470e19adb29d951ede09248c071f32399706ba0480a813951a45bb72311c0d5f5a1b751575f0f951f100b7bc9ee02c6b7a3595d66cbcd25b5ec94c33681a622971efef17806453ba3f0b14fb146731d8a39cf339bd400781e3a829f0d10bb7a29f4efa4bbd97f3f20b1bd5530e79adafe7182b3541adc81fac6d15dfed20cbd713360263b75d634b7fdb36d5de7665a950a7760fd6fd793b6ab7d3a9d16baab79ee25eae19e892ac5ba4001a5274faa8e105070038c13fad20053134999e18fda6250af86e4807d81722dd3c4369b2e2341d02e97960b18507906b870bcbcfc5e91885d1ee2d1feeb94ba9652bc69e25932d70172c5924c2b2cd8773ef0ec9580da1d26a553ae97ae6788f6aa40872c5ab365919da56f258a8ff35feff7c3140786baab71be04e6fd661e38d331b2a19830e8ab066ebfc3c98b5e3376a3b6d3ea3f5f96670f851e711fb4d726e22ddc1cfbf79376cfed4a0e67c6146e87e8fcb12a7650f54236456420c35ac05fa951975559c34b2cf74de5762e74fb128223400d1aecb47ff52c5395c6738661a312f409a165719fa1b120cf84c2ada219d7bc05f23238c4c2614612e70e8cfa0ecddeb10f57b956def75e1173b94f8229b66227e933641cb05b3578ccf09c35cc4849b66ee27b34612bd095d4fc2e53cbc5aae395427d4146cb3fb6106033f74222304e87557be1d2911169b9450758a202b7186a89561e974fd75cbe18910a18c31ba746f6b429f1e4d1a94c1cba6f08d7890ce0568f189f8e58f253b4fa9c36854b264fbdef6586787c4eb2ea1616f696f147848f8b713ce8b55c0d1e4ac13afaedfc9d9527c8aac472538af0f60a48424cfe95d2bd4f21da2aa0af868561aa826c1ccbbf5a777c87e9bfd8e76b80359ff24ea6b1235bc2175df0f1f762fdd83ac6996b81b782a5ab19e859fcf52c833b30f2fa1a6cb7da45a2d11e350820c0a4108c388e07383de09cc8b1f51f477438c2cd55ca303996ffa91b67a3a1ea5d2828e4db3d4e419dab2206d6cac2a9f23e7ba9ddaa5851691828840331e494ae61d0214392b254d5fd77bdf0ae77eda3bb10553868f3050b974c526a5f6d5702301207896d166a186a502b7008b27399f3266c56ccda35a77256ff7c1053559d2c185a3a77ed9a30f0085faac470b6999517d4846e9fc064710d37e405a77ff94fc9c949f6541ebd68158ed44b0f3656bbd50a2242e8d55f592cfa4934307e37a3f5b28f33782c75ab6a1e009f7d4975b20827c73c7d5f5d7aed07f7ab181e22cecfdbfaac1fe21e8ba2bb24689b19d1c3792630d2913ca016cbcebf7fdf2209a036288671e95901e9ad68e58dbdf01c71ce86dc2ed13d7da2005f237155c8980c8d1b91a0f728867c75d88f62b5240e9e3643d08fbd446df140e97a5c2c66bbe6471d0f4e49f90389e8ac46b0d4fd6b6a66c2547b5774b51b0f5fcb7da985ba816d20acf2bfd2fd69a9bf0cbae2970e6558fb3bee89c6c64de31c1b0d3d7ebce2a9954fd1003c6078082afcab641e1a470fad9db8b934666fa719bfdebbb2d9c9e39e29004f715176dbc67ceb5d4982b0673453a014ec6d95c5d4a6655527fa72621b00d76cd9b93102781604a33855c1b0d5081e4c18bbcd9ebdd2fb3cb4cec1d958e4b6a203d8dac89ff20ec20eb51416546b861d5ccbd4e8afda6e29d513bec016bb579b3b01136955beb68a2864559eccfb43c10a342c895cee6aee6872898d994537a64dc46661d9468ff28a688b5b33ccb4fbb93fe36d67cff2608e5ed437a1c4881163ef86d999e56f89b0a1ecd942377c05243fa55a07e24ed195a17cf69f515bb4945552e4c154ebc51dbe7c4fc2eadd2b56d1a6851162ada440bf36493339892f2771e854b9e7ddb62fbd378c863fa7236a5489fc0c5ce03f1280ea6953404f0d8e31dd2d98c736cc5e6ee91f1c071d055b089ec84626ea43607a94b7f1a2690a2c57bec035dc59d9ef1b20dfb9e8db0d134c10307f89695a41646d1ceb4df6b97c08c32d498243b2d549e6965dc783770675e511aca5998ebb5d7fde5f4ac0a5dbc4e062bcfbeaa58090e9c9e359a42dfb952e0eb38aee34c1cb5a082e00737036b69f4a8afc6cb4641a7bb055d6c39604c7b16e59845fad1558376756e0ec961a44e29f91d06a0b3152d8fb687456c5b279bb549819c5929251d8145fb421d6070dec0e4094a03fed067002d3ce2298313756b10733a9b45e2a4b98e063e106b2d2477e157318d2b2def57a1ac3f7cd9c18b2d1ce151343721605559cd589a127f33d3642bc31ddab7ce7adbdcf97c4c3aa413df81570bc86e0dc0acc0fc6ef02c4b25dd400088151c5d390f3df2b2fd07a3adbdb4319d795d2c4b52e8be9176e8b553b2c2aed887489741ab9a3062a1fecb0dcec273df68b9e2d84bf5e17f4c97c50ac8e9803e3106cc5b332005ead13708ab5092251129ff3f304c9bbc57de72c97a624b72e2789837b2f114c4c8b2b04545d1d8538218326f3d4940c78c66edf90516168476e63296e8cd2ddfe4861ef2c927900fa401ff012efb7bf0f92c7c6e311134ea3edf7e8efa50fa2752c0a339749fdab8308b2779409480b74705c98982ff79626341ce9857f64945f9b46963fae4e07d4a7318715963fa2d55abd23f14cb73e9fc4e55eef488d18dbaee0cc4e4518918dc67f277386fe18832c19158e0292e4da8e7a032f9ff4aa3b1cc0a94ac3c082a54840880f07ca7c0e53a1b9cef4c2b9fa4995cc5f4bf5d6ae536cf78861970d69ff095ff3c75b09b0955bfc1948a423f39c6575bd4a8bdc6372fd674596d279dc635ea524b7559b0a8a04d130c09162fb412dc0d2aceca4c8d9c9f75d172f8e116f8bf79f667d0705c994ee319ddf61370d6b69bc519c18837f3c54f03df6faf603cbe208ced69382d90d4251e98d63a57ad008b9f6485bed0a27f5d4979b018365b851f01ea58212abe2aa7e2145695fe7232e27e9df0ca279380e07f2b357443b8d5450db60512a7adf2835d07fb91305f909837d0b956888d478778a657cd03115bd724efcaeeee2bbcddb8ed9b9d17bccef2a475421b0b5636fc696363b9838b8c69b0f02d6b0edef07285f37d9545826360229cac14aab6b538b9d0ad6fd6c609a22fb217f77d546a92dcb1ec9eb157cf00db097f2ce74409d39125d15e07a7c417f895a52cb6637b0c41997dbfa2d293136179681cbdb053fac0c03ab3a9013f2750037d5bc37641f328a411c1686f90012590a843124b644cb1dc51d57c3ac99ee7bafb30c4cfc8d007fd6f9de076f91963ace3440954a97f75b0cde75456dc30d83b10ed8d437bf9bf94ec9280de93481016af20e3eb037089ca77d8be20d1703bcf558d31158c95f685bfbc5a765fbe023b85e998c690cbaafd179f933f50cf93a3d1a282f4eb7898bd90969c81a056282f171daf9165316d8395cc284f360f97352c9920d4efc9ebe2d5c70b4223e4600a36271f6832eb677670b8085e03ccc41cca01b07ce5d9f42dca99ae2cb50e2af14fc2d58a294ee465dac8f6a3cef760cc81b1fe789cfa0cbf738a35b7eabe07433956f8c0f8173859c3c233bb538380093a5d56d95d4336fc5fdf5cf5d723d6bd6e628282fec80ca97ab1c1fe6ecc86d63bb198d21d08d6f41b9babc3969e37a5813260ab34123d3f8b25d3cac9348ecd6d9bf45667b5789be071fa3063f70fa287ae7a2cc94d6cb876039b404889bfe0870bba32de1d5e7fddf8bf64bc9699fd478d70f654906566351fe918a6dcab6b63b38a7cfbbf6471377f3ca3baf0242962a254f24234f258c5d6f22190a230804041dbda495745b429844e5b21a4ad97ff442cb1b55ef52157197fd08731aa651cedc511eb9ff35307a117a8f63bad7d73528f07f46e805bfacdbb0a03e9fde5e02dfe9257d22c8002e285c5a6636cb2e79d183574f65d6078f715c221abbe34ae4825e9438e0ab5ef0944a71b76203c1dd5040c020713e45c26a566a806e5fea4ebc6fd15cb89f9482c09810f39c5f60312f5a2a5be2ea84223336feb8f33ecc24795dba785bbaaef3df876ee2aadf6ea1b5c48413875b34f99833957c40a7d0e4b14bc2ff1f17e89ee732b416e2a682399572e8f8ff9a0554a3378f39451953e1c5d39c66c8dc5041586d2220a899eaf6d0833fc616022689bd618e4932b3506fff5c0ec01c9deeb56a58579b0c8efb1342cdf5ac311cd8cd7a52fdb6d73f3152059b947bbe4a4dda18fdf9e897d204eb5b455ed868d0ae29ad0786899ef7f2ff6477a709d1c10f2975f5b503c0905039fcf63c3b565b25c2b21bbd53d98995c0871f7ff60e92337843939a681b5e45bcdb068d4aaf47b7df7674863ef92fa4dde41f9e60634de7e0a535a64c2f825b18a75e03c0a3154b23edfc888700657b7f19b829ca27d923287db2e2df2c27d33bb189df2efdf7f7d12f95c0a7e23e84430e4a98b8824c582ac9f5a5d2e7178ef90ce03842cab6c304becd1f7c8445619cc6b74275684153bf11dca173b49e2c79ec7815c039c18ead7e05016b0d7e73a93b36fe964fd50a462cc3a1fe435b2e3712cbf1e48ba3fe27696ee0f29914feb7b76fafca942efb64c4c61c6756acb809626be49ad2219b4c6ca26bc49e4d0e3d932a0054207c48a2f4e9b689cb3422184e899af72e5e1e7e4b8e00d80bc5956ef7a08bb19698f469a86536072d587ed88ca3756e482404ca764c07b40e6d2d220df9bf8c80e0c2c85906d84016d064cccd64", 0xfe1}], 0x1, &(0x7f0000001280)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}}], 0x1, 0x84) 608.993259ms ago: executing program 4 (id=9963): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000100010095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0xf}, 0x90) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000003c0)={0x0, 'veth0_vlan\x00', {}, 0x200}) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100b000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 508.063864ms ago: executing program 0 (id=9964): unshare(0x6020400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r0, 0x75fb3000) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) close(0x3) 489.186411ms ago: executing program 1 (id=9965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r10, r8, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x8, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xf470, 0x2}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '&'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) splice(r4, &(0x7f00000001c0)=0x3, 0xffffffffffffffff, &(0x7f0000000240)=0x3, 0x5, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0x5, 0xfff1}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 470.442835ms ago: executing program 4 (id=9966): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001080)={0x0, @remote, @multicast1}, &(0x7f0000001100)=0xc) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', r0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x7e) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) (async, rerun: 32) r4 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) syz_emit_ethernet(0x6c, &(0x7f0000000140)=ANY=[@ANYBLOB="006ba788ffff0180c200000008004503005e00000000002f90789a000000e0000001248022eb00000000000900001000080003d5000086dd080088be00000000100000000100000000000007080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) (async) listen(r2, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) shutdown(r5, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r6, 0x1000, 0x3, 0xc, 0x8, 0x7}, 0x14) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) (async) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 338.971575ms ago: executing program 3 (id=9967): r0 = socket$netlink(0x10, 0x3, 0x12) r1 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x6ce9, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x88) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=r0, @ANYBLOB="1922000000000000140012800b0001006261746164760000041002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r3}, 0x18) setsockopt(r2, 0x1000, 0x3, &(0x7f0000000140)="f0ffdb8ac67519ed697f8bc83a469259faf05cf6e94dbace337b2b584e65fbde15eb8758acf2f310fad5cd05ca32c9e49c6ef116c75a3bc08bd71d28d050e4f87d6f180320913e753930d51a9f3e606c2d91e75c2b09591744a25c1afecc9ecf8c315ec409700ab5000fa0b1ace4f46c754f6da4189ee56f0a22b2c482c8ec7a36ab206ad3089f107859fe33a05fdc9e6937b22af08120fb00a4700c6189b1", 0x9f) getsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f0000000280)=""/109, &(0x7f0000000300)=0x6d) 337.282493ms ago: executing program 0 (id=9968): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x1c, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0xfdb7) syz_genetlink_get_family_id$tipc2(0x0, r2) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "08ae00", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1}}}}}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x6d80) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 336.734407ms ago: executing program 4 (id=9969): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffde1, 0x5, &(0x7f0000e68000)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2", 0x46}], 0x1}}], 0x1, 0x50) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='westwood', 0x64) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000001380)="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", 0x222}], 0x1) 194.929301ms ago: executing program 4 (id=9970): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @local}, &(0x7f0000000380)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@ipv6_newaddrlabel={0x74, 0x48, 0x100, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x40, 0x0, r1, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x74}, 0x1, 0xba01}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x4e24, 0x1000, @local, 0xffffff00}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="e459820ac129e0db1bd0c8ecffaf665e8a03f4d1936a08a4d87914daa143060fdb90842e57af300cf4aeb7b2c53c6289ab4d8339e6951c0bf9ce51ffa6ec", 0x3e}], 0x1, &(0x7f00000002c0)=[@authinfo={0x18, 0x84, 0x6, {0x7d0a}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0x30, 0x40000}, 0x4000000) (async) r3 = accept(r0, &(0x7f0000000000)=@in={0x2, 0x0, @empty}, &(0x7f0000000080)=0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x10, 0x7800, 0x7, 0x3, {{0x1d, 0x4, 0x0, 0x8, 0x74, 0x68, 0x0, 0xff, 0x2f, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0x34, 0x2b, 0x3, 0xf, [{@multicast2, 0xb417}, {@remote, 0x6}, {@private=0xa010101, 0xe07b}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x1}, {@private=0xa010102, 0x4}, {@multicast2}]}, @timestamp={0x44, 0x2c, 0xaf, 0x0, 0xf, [0x3, 0x800, 0x4, 0x5, 0x3, 0x6, 0x4, 0x0, 0x8000000, 0x8]}]}}}}}) 141.446011ms ago: executing program 0 (id=9971): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000008c0)={{0xffffffffffffffff, &(0x7f0000000200)='\'!:\x00', 0xb8bc1, &(0x7f00000002c0)={@align=0x8, {0x8001, 0x2008, 0x7ff, 0x7c}}, 0xc, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000380)=0xa}, {[0x5db2, 0x1, 0x10, 0xb]}, 0x3, 0xef, &(0x7f00000007c0)=""/239}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000a40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, r1, 0x8, 0x70bd2d, 0x4, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48800}, 0x400c042) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48) (async, rerun: 32) syz_emit_ethernet(0x4e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}}}}}}}, 0x0) 15.308108ms ago: executing program 3 (id=9972): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000020000000000000000000000900200008700000085000000ba44e2779500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0xffffffffffffffeb, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6}, @RTA_PRIORITY={0x8, 0x6, 0x7}]}, 0x2c}}, 0x0) 14.44794ms ago: executing program 4 (id=9973): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00'}, 0x94) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}, 0x1, 0x0, 0x0, 0x131e284dd61db437}, 0x40011) (async) sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x40, 0x0, [@remote]}}}], 0x28}, 0x0) (async) sendto$inet6(r2, &(0x7f0000000100)="7640826694203a64e12cd6ae87fced1ac6b6b4d0eef840907db339201a9395fcb469f37c78c1ae9deb8855902be4ecfed15f0b74616db43042334c99d841805a84f2267302c733801116312949a910b565c9535795e5aaaf845ea69cd11c2015e46cff577940a30de1e839e1e3ad31f80ea13bb24e504f5d3e87f02125d288b6827ed3e98732ef9a7a24784d96646c4b59ce4da79e98d4d355c01ab437736973ce38a3e6ed4c7efdf83006", 0xab, 0x24000891, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) 0s ago: executing program 2 (id=9974): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0xc) (async) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000200068000000119078000000000000000000014e20000c9078c10900010b2c8da4"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="850000006c0000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) kernel console output (not intermixed with test programs): z.0.8507': attribute type 16 has an invalid length. [ 929.657508][ T5155] netlink: 'syz.0.8507': attribute type 17 has an invalid length. [ 929.724475][ T5161] netlink: 'syz.2.8510': attribute type 2 has an invalid length. [ 929.733941][ T5155] 8021q: adding VLAN 0 to HW filter on device  [ 929.744499][ T5155] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.752073][ T5161] netlink: 'syz.2.8510': attribute type 2 has an invalid length. [ 929.780115][ T5155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 929.811593][ T5164] openvswitch: netlink: Multiple metadata blocks provided [ 929.872436][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8511'. [ 929.932358][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8511'. [ 929.983746][ T5032] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 929.990514][ T5032] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 929.998815][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8511'. [ 930.022705][ T5032] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 930.028828][ T5032] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 930.041392][ T5032] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 930.047360][ T5032] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 930.062816][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8511'. [ 930.212985][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8511'. [ 930.228799][ T5171] netlink: 'syz.4.8512': attribute type 11 has an invalid length. [ 930.259943][ T5171] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8512'. [ 930.305631][ T5182] netlink: 'syz.3.8514': attribute type 3 has an invalid length. [ 930.332184][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8511'. [ 930.345947][ T5182] netlink: 'syz.3.8514': attribute type 1 has an invalid length. [ 930.441799][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8511'. [ 930.714897][ T5193] syzkaller0: entered promiscuous mode [ 930.724554][ T5193] syzkaller0: entered allmulticast mode [ 930.763672][ T5208] netlink: 'syz.4.8522': attribute type 21 has an invalid length. [ 930.779273][ T5208] netlink: 'syz.4.8522': attribute type 4 has an invalid length. [ 930.799627][ T5208] netlink: 'syz.4.8522': attribute type 5 has an invalid length. [ 930.817673][ T5210] netlink: 'syz.4.8522': attribute type 21 has an invalid length. [ 930.842539][ T5192] tipc: Enabled bearer , priority 0 [ 930.887018][ T5190] tipc: Resetting bearer [ 930.989840][ T5190] tipc: Disabling bearer [ 931.111312][ T5225] ip6t_rpfilter: unknown options [ 931.139320][ T5239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 931.191098][ T5238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 931.383960][ T5255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 931.391307][ T5255] IPv6: NLM_F_CREATE should be set when creating new route [ 931.668896][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 931.939825][ T5278] nbd0: detected capacity change from 0 to 63 [ 931.947068][ T5284] block nbd0: NBD_DISCONNECT [ 931.973087][ T5284] block nbd0: Disconnected due to user request. [ 932.014003][ T5284] block nbd0: shutting down sockets [ 932.073028][ C1] blk_print_req_error: 136 callbacks suppressed [ 932.073050][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 932.088901][ C1] buffer_io_error: 138 callbacks suppressed [ 932.088925][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 932.116867][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 932.126480][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 932.135835][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 932.145485][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 932.153386][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 932.162940][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 932.179919][ T4992] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 932.197679][ T4992] Buffer I/O error on dev nbd0, logical block 0, async page read [ 932.233700][ T4992] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 932.255320][ T4992] Buffer I/O error on dev nbd0, logical block 1, async page read [ 932.263964][ T4992] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 932.309807][ T4992] Buffer I/O error on dev nbd0, logical block 2, async page read [ 932.328001][ T4992] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 932.358710][ T4992] Buffer I/O error on dev nbd0, logical block 3, async page read [ 932.378894][ T4992] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 932.397034][ T4992] Buffer I/O error on dev nbd0, logical block 0, async page read [ 932.425264][ T4992] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 932.452098][ T4992] Buffer I/O error on dev nbd0, logical block 1, async page read [ 932.469234][ T4992] ldm_validate_partition_table(): Disk read failed. [ 932.492954][ T4992] Dev nbd0: unable to read RDB block 0 [ 932.516532][ T4992] nbd0: unable to read partition table [ 932.557317][ T4992] ldm_validate_partition_table(): Disk read failed. [ 932.565249][ T5302] wg1 speed is unknown, defaulting to 1000 [ 932.580584][ T4992] Dev nbd0: unable to read RDB block 0 [ 932.592645][ T4992] nbd0: unable to read partition table [ 933.406451][ T5349] 8021q: VLANs not supported on ip6_vti0 [ 933.743010][ T5376] xt_hashlimit: size too large, truncated to 1048576 [ 933.893621][ T5389] netlink: ct family unspecified [ 934.229270][ T5405] 8021q: adding VLAN 0 to HW filter on device bond10 [ 934.240245][ T5408] __nla_validate_parse: 17 callbacks suppressed [ 934.240267][ T5408] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8576'. [ 934.301914][ T5410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8577'. [ 934.337403][ T5411] bond10: (slave bridge9): making interface the new active one [ 934.348360][ T5411] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 934.363881][ T5410] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8577'. [ 934.411858][ T5410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8577'. [ 934.623778][ T5423] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.8579'. [ 934.691432][ T5425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8581'. [ 934.762235][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8582'. [ 935.054785][ T5454] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 935.210432][ T5462] block nbd3: not configured, cannot reconfigure [ 935.559616][ T5495] validate_nla: 10 callbacks suppressed [ 935.559640][ T5495] netlink: 'syz.3.8602': attribute type 11 has an invalid length. [ 935.704073][ T5503] openvswitch: netlink: IP tunnel dst address not specified [ 935.796233][ T5510] pim6reg1: entered promiscuous mode [ 935.804550][ T5510] pim6reg1: entered allmulticast mode [ 935.837528][ T5512] netlink: 54 bytes leftover after parsing attributes in process `syz.3.8606'. [ 935.855068][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8606'. [ 935.923737][ T5516] netlink: 'syz.4.8607': attribute type 33 has an invalid length. [ 935.948908][ T5516] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8607'. [ 935.997918][ T5516] netlink: 'syz.4.8607': attribute type 1 has an invalid length. [ 936.470883][ T5539] netlink: 'syz.4.8617': attribute type 1 has an invalid length. [ 936.554106][ T5539] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 936.565683][ T5539] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 936.671562][ T5548] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 936.725748][ T5539] macvlan3: entered promiscuous mode [ 936.735694][ T5539] macvlan3: entered allmulticast mode [ 936.742784][ T5539] bond5: entered promiscuous mode [ 936.748708][ T5539] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 936.762737][ T5539] bond5: left promiscuous mode [ 936.949550][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 936.957702][ C1] lec:lec_tx_timeout: lec0 [ 937.047994][ T5573] netem: change failed [ 937.717783][ T5609] IPv6: sit2: Disabled Multicast RS [ 938.299039][ T5658] netlink: 'syz.1.8648': attribute type 14 has an invalid length. [ 938.308389][ T5658] netlink: 'syz.1.8648': attribute type 13 has an invalid length. [ 938.339163][ T5658] netlink: 'syz.1.8648': attribute type 14 has an invalid length. [ 938.356789][ T5658] netlink: 'syz.1.8648': attribute type 13 has an invalid length. [ 938.388994][ T5658] netlink: 'syz.1.8648': attribute type 14 has an invalid length. [ 938.403298][ T5658] netlink: 'syz.1.8648': attribute type 13 has an invalid length. [ 939.059790][ T5712] sctp: [Deprecated]: syz.4.8665 (pid 5712) Use of struct sctp_assoc_value in delayed_ack socket option. [ 939.059790][ T5712] Use struct sctp_sack_info instead [ 939.352497][ T5737] __nla_validate_parse: 84 callbacks suppressed [ 939.352516][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8673'. [ 939.383431][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8673'. [ 939.423621][ T5737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8673'. [ 939.528602][ T5746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8677'. [ 939.746055][ T5760] xt_l2tp: missing protocol rule (udp|l2tpip) [ 940.116972][ T5779] sctp: [Deprecated]: syz.1.8687 (pid 5779) Use of int in maxseg socket option. [ 940.116972][ T5779] Use struct sctp_assoc_value instead [ 940.407868][ T5796] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8691'. [ 940.421198][ T5795] only policy match revision 0 supported [ 940.421243][ T5795] unable to load match [ 940.431871][ T5796] xt_policy: neither incoming nor outgoing policy selected [ 941.149744][ T5842] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.8704'. [ 941.187300][ T5845] validate_nla: 60 callbacks suppressed [ 941.187323][ T5845] netlink: 'syz.0.8705': attribute type 1 has an invalid length. [ 941.190080][ T5842] netlink: Conntrack attr has 4 unknown bytes [ 941.371178][ T5852] bridge5: entered promiscuous mode [ 941.376606][ T5852] bridge5: entered allmulticast mode [ 941.386355][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8706'. [ 941.457121][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8709'. [ 941.753428][ T5880] netlink: 'syz.4.8715': attribute type 1 has an invalid length. [ 941.810802][ T5880] netlink: 'syz.4.8715': attribute type 2 has an invalid length. [ 941.848778][ T5880] netlink: 'syz.4.8715': attribute type 1 has an invalid length. [ 941.862184][ T5885] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8716'. [ 941.869691][ T5880] netlink: 'syz.4.8715': attribute type 3 has an invalid length. [ 941.893141][ T5885] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8716'. [ 941.951549][ T5885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.537964][ T5943] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20000 [ 942.622077][T23307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.810630][ T5960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 942.848356][ T5964] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 943.103751][ T5984] gre3: entered promiscuous mode [ 943.113363][ T5984] gre3: entered allmulticast mode [ 943.519056][ T6012] netlink: 'syz.3.8752': attribute type 33 has an invalid length. [ 943.832182][ T6035] gtp1: entered promiscuous mode [ 943.838101][ T6035] gtp1: entered allmulticast mode [ 943.898940][ T6037] syzkaller0: entered promiscuous mode [ 943.905070][ T6037] syzkaller0: entered allmulticast mode [ 946.278912][ T6063] __nla_validate_parse: 7 callbacks suppressed [ 946.278934][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8766'. [ 946.517255][ T6078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8771'. [ 946.559976][ T6082] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8773'. [ 946.568654][ T6080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8772'. [ 947.231843][ T6116] netlink: 'syz.0.8782': attribute type 21 has an invalid length. [ 947.280183][ T6116] netlink: 'syz.0.8782': attribute type 1 has an invalid length. [ 947.778865][ T6148] netlink: 'syz.4.8793': attribute type 1 has an invalid length. [ 947.886792][ T6157] bond6: entered promiscuous mode [ 947.900131][ T6157] bond6: entered allmulticast mode [ 947.918093][ T6157] 8021q: adding VLAN 0 to HW filter on device bond6 [ 947.976062][ T6148] bridge6: entered promiscuous mode [ 948.000838][ T4725] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 948.042739][ T6148] bridge6: entered allmulticast mode [ 948.066223][ T6148] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 948.101136][ T6160] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8795'. [ 948.140348][ T7893] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 948.318931][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8797'. [ 948.438353][ T6176] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8798'. [ 948.833190][ T6194] ipt_REJECT: TCP_RESET invalid for non-tcp [ 949.209056][ T6226] xt_bpf: check failed: parse error [ 949.362107][ T6231] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8812'. [ 949.421802][ T6238] sctp: [Deprecated]: syz.3.8814 (pid 6238) Use of int in max_burst socket option. [ 949.421802][ T6238] Use struct sctp_assoc_value instead [ 949.783855][ T6259] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8819'. [ 949.817118][ T6258] netlink: 'syz.2.8819': attribute type 24 has an invalid length. [ 950.034239][ T6274] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8822'. [ 950.347129][ T6297] openvswitch: netlink: Flow key attr not present in new flow. [ 950.371532][ T6298] netlink: 'syz.2.8826': attribute type 1 has an invalid length. [ 950.563486][ T6304] No such timeout policy "syz0" [ 950.834706][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 950.847739][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 950.856505][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 950.901656][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 950.918448][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 951.000856][T29103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 951.010071][T29103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 951.020258][T29103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 951.037795][T29103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 951.059833][T29103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 951.331315][T27326] syz_tun (unregistering): left allmulticast mode [ 951.385555][ T6348] __nla_validate_parse: 3 callbacks suppressed [ 951.385577][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8841'. [ 951.409251][ T6317] wg1 speed is unknown, defaulting to 1000 [ 951.419624][ T6348] IPv6: NLM_F_CREATE should be specified when creating new route [ 951.490462][T13777] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.509384][T13777] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 951.646211][T13777] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.658453][T13777] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 951.721757][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8844'. [ 951.764563][T13777] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.796367][T13777] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 951.951521][T13777] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.984205][T13777] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 952.087657][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8850'. [ 952.268110][T10228] lec:lec_start_xmit: lec0:No lecd attached [ 952.362737][ T3960] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.400938][ T3960] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.538427][ T6375] wg1 speed is unknown, defaulting to 1000 [ 952.544744][ T6317] chnl_net:caif_netlink_parms(): no params data found [ 952.587282][ T7893] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.597311][ T7893] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.822317][ T7893] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.860762][ T7893] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.975395][ T298] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.983780][ T298] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.105400][ T5835] Bluetooth: hci1: command tx timeout [ 953.367609][ T6435] openvswitch: netlink: IP tunnel dst address not specified [ 953.478713][ T6435] delete_channel: no stack [ 953.608146][T13777] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 953.617700][T13777] ip6gretap1 (unregistering): left allmulticast mode [ 954.075170][T13777]  (unregistering): Released all slaves [ 954.087346][T13777] bond0 (unregistering): Released all slaves [ 954.102829][T13777] bond1 (unregistering): Released all slaves [ 954.123576][T13777] bond2 (unregistering): Released all slaves [ 954.139758][T13777] bond3 (unregistering): (slave bond4): Releasing backup interface [ 954.148565][T13777] bond3 (unregistering): Released all slaves [ 954.165330][T13777] bond4 (unregistering): Released all slaves [ 954.184102][T13777] bond5 (unregistering): Released all slaves [ 954.226777][ T6439] IPv6: sit1: Disabled Multicast RS [ 954.278054][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.312917][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.338255][ T6317] bridge_slave_0: entered allmulticast mode [ 954.362674][ T6317] bridge_slave_0: entered promiscuous mode [ 954.394563][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.417402][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.438015][ T6317] bridge_slave_1: entered allmulticast mode [ 954.446595][ T6317] bridge_slave_1: entered promiscuous mode [ 954.458460][T13777] tipc: Disabling bearer [ 954.470358][T13777] tipc: Left network mode [ 954.567410][ T6317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.585810][ T6317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.657965][ T6317] team0: Port device team_slave_0 added [ 954.671244][ T6317] team0: Port device team_slave_1 added [ 954.733459][ T6462] syzkaller0: entered promiscuous mode [ 954.748328][ T6462] syzkaller0: entered allmulticast mode [ 954.757922][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.765489][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.792620][ T6317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.823982][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.832140][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.860532][ T6317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.893650][ T6462] sch_tbf: burst 4 is lower than device lo mtu (18) ! [ 954.973572][ T6317] hsr_slave_0: entered promiscuous mode [ 954.980672][ T6317] hsr_slave_1: entered promiscuous mode [ 954.987692][ T6317] debugfs: 'hsr0' already exists in 'hsr' [ 954.994822][ T6317] Cannot create hsr debugfs directory [ 955.054359][T13777] hsr_slave_1: left promiscuous mode [ 955.067210][T13777] veth1_vlan: left allmulticast mode [ 955.124956][T13777] pimreg (unregistering): left allmulticast mode [ 955.180202][ T5835] Bluetooth: hci1: command tx timeout [ 955.559331][ T6471] syzkaller0: entered promiscuous mode [ 955.565621][ T6471] syzkaller0: entered allmulticast mode [ 955.715680][ T6317] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.727139][ T6317] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.814342][ T6317] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.824501][ T6317] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.892971][ T6317] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.904504][ T6317] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.964600][T13777] IPVS: stop unused estimator thread 0... [ 956.016046][ T6317] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.026151][ T6317] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.035860][ T6422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 956.363606][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8868'. [ 956.441391][ T6501] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 956.660690][ T6317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 956.708941][ T6317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 956.762973][ T6518] IPv6: NLM_F_CREATE should be specified when creating new route [ 956.772716][ T6317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 956.996533][ T6510] syzkaller0: entered promiscuous mode [ 957.012750][ T6510] syzkaller0: entered allmulticast mode [ 957.025235][ T6317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 957.271929][ T5835] Bluetooth: hci1: command tx timeout [ 957.983886][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5710 ms [ 957.992015][ C1] lec:lec_tx_timeout: lec0 [ 959.340629][ T5835] Bluetooth: hci1: command tx timeout [ 959.665052][ T6317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.725187][ T6317] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.750443][ T6594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8885'. [ 959.766710][ T4728] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.773972][ T4728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.787042][ T6594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8885'. [ 959.808564][ T4728] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.815809][ T4728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.574395][ T6638] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8894'. [ 960.662268][ T6317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.798640][ T6317] veth0_vlan: entered promiscuous mode [ 960.848606][ T6317] veth1_vlan: entered promiscuous mode [ 960.894194][ T6650] wireguard0: entered promiscuous mode [ 960.942902][ T6650] wireguard0: entered allmulticast mode [ 960.994274][ T6656] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8900'. [ 961.023882][ T6650] team0: Device wireguard0 is of different type [ 961.047022][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8900'. [ 961.085735][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8900'. [ 961.177324][ T6317] veth0_macvtap: entered promiscuous mode [ 961.232466][ T6317] veth1_macvtap: entered promiscuous mode [ 961.310155][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.330719][ T6669] netlink: 'syz.4.8901': attribute type 1 has an invalid length. [ 961.343821][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.366230][ T3960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.386334][ T3960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.418795][ T3960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.456288][ T4723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.641194][ T4723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.683458][ T4723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.817244][ T3960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.842186][ T3960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.084644][ T6708] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8830'. [ 962.146558][ T6714] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 962.207771][ T6714] dvmrp6: entered allmulticast mode [ 962.232229][ T6719] netlink: 666 bytes leftover after parsing attributes in process `syz.0.8911'. [ 962.402430][ T6731] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8915'. [ 962.500314][ T6736] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 962.603321][ T6747] syzkaller0: entered promiscuous mode [ 962.608908][ T6747] syzkaller0: entered allmulticast mode [ 962.682730][ T6747] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8917'. [ 962.714201][ T6749] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 964.989383][ T6799] netlink: 'syz.4.8934': attribute type 17 has an invalid length. [ 964.997745][ T6799] __nla_validate_parse: 7 callbacks suppressed [ 964.997765][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8934'. [ 964.997928][ T6800] netlink: 'syz.4.8934': attribute type 17 has an invalid length. [ 965.005316][ T6799] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8934'. [ 965.031332][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8934'. [ 965.040539][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8934'. [ 965.042059][ T6799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8934'. [ 965.058926][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8934'. [ 965.704706][ T6754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 965.853769][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8935'. [ 966.052865][ T6817] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8940'. [ 966.222039][ T6831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8943'. [ 966.456722][ T6841] syzkaller0: entered promiscuous mode [ 966.471304][ T6841] syzkaller0: entered allmulticast mode [ 966.476611][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8944'. [ 966.786987][ T6869] netlink: 'syz.1.8954': attribute type 1 has an invalid length. [ 966.911959][ T6869] 8021q: adding VLAN 0 to HW filter on device bond7 [ 967.294405][ T6888] netlink: 'syz.2.8958': attribute type 4 has an invalid length. [ 967.854056][ T6878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 967.879723][ T6878] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 968.160725][ T6948] x_tables: unsorted underflow at hook 2 [ 968.685961][ T6978] syzkaller0: entered promiscuous mode [ 968.694107][ T6978] syzkaller0: entered allmulticast mode [ 968.814865][ T6989] netlink: 'syz.0.8986': attribute type 8 has an invalid length. [ 968.974140][ T7000] sctp: [Deprecated]: syz.0.8989 (pid 7000) Use of int in max_burst socket option. [ 968.974140][ T7000] Use struct sctp_assoc_value instead [ 969.297226][ T7024] mac80211_hwsim hwsim97 wlan0: entered promiscuous mode [ 969.447868][ T7037] syzkaller0: entered promiscuous mode [ 969.454246][ T7037] syzkaller0: entered allmulticast mode [ 970.107722][ T7073] __nla_validate_parse: 15 callbacks suppressed [ 970.107746][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9009'. [ 970.313625][ T7073] bridge7: port 1(veth7) entered blocking state [ 970.321184][ T7073] bridge7: port 1(veth7) entered disabled state [ 970.342608][ T7073] veth7: entered allmulticast mode [ 970.372629][ T7073] veth7: entered promiscuous mode [ 970.401672][ T7081] veth0_to_bond: left allmulticast mode [ 970.418295][ T7081] bridge7: port 2(veth0_to_bond) entered blocking state [ 970.438578][ T7081] bridge7: port 2(veth0_to_bond) entered disabled state [ 970.462458][ T7081] veth0_to_bond: entered allmulticast mode [ 970.500599][ T7081] veth0_to_bond: entered promiscuous mode [ 970.725417][ T7095] sock: sock_timestamping_bind_phc: sock not bind to device [ 970.745005][ T7097] tipc: Started in network mode [ 970.761105][ T7097] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 970.768367][ T7097] tipc: Enabled bearer , priority 10 [ 970.945455][ T7107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 971.101398][ T7115] block nbd0: not configured, cannot reconfigure [ 971.465806][ T7133] bridge8: entered promiscuous mode [ 971.510062][ T7133] bridge8: entered allmulticast mode [ 971.526656][ T7133] team0: Port device bridge8 added [ 971.618098][ T7139] bridge0: port 3(team0) entered blocking state [ 971.625748][ T7144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9024'. [ 971.637999][ T7139] bridge0: port 3(team0) entered disabled state [ 971.650786][ T7139] team0: entered allmulticast mode [ 971.672521][ T7139] team_slave_0: entered allmulticast mode [ 971.690558][ T7139] team_slave_1: entered allmulticast mode [ 971.704418][ T7139] batadv1: entered allmulticast mode [ 971.720597][ T7139] batadv2: entered allmulticast mode [ 971.737257][ T7139] batadv3: entered allmulticast mode [ 971.757393][ T7139] batadv4: entered allmulticast mode [ 971.769951][ T7139] batadv5: entered allmulticast mode [ 971.775617][ T7139] batadv6: entered allmulticast mode [ 971.790089][ T7139] batadv7: entered allmulticast mode [ 971.806707][ T7139] batadv8: entered allmulticast mode [ 971.816826][ T7139] batadv9: entered allmulticast mode [ 971.834990][ T7139] batadv10: entered allmulticast mode [ 971.848099][ T7139] batadv11: entered allmulticast mode [ 971.854199][T29103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 971.857391][ T7139] batadv12: entered allmulticast mode [ 971.873578][ T7139] team0: entered promiscuous mode [ 971.875980][T29103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 971.879241][ T7139] team_slave_0: entered promiscuous mode [ 971.892615][ T298] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 971.902351][ T298] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 971.920321][ T7139] team_slave_1: entered promiscuous mode [ 971.929211][T29103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 971.937929][ T298] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 971.939221][ T7139] batadv1: entered promiscuous mode [ 971.947261][ T298] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 971.963265][T29103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 971.971372][ T7139] batadv2: entered promiscuous mode [ 971.977157][ T298] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 971.978831][ T7139] batadv3: entered promiscuous mode [ 971.987851][ T298] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 972.004033][T29103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 972.005799][ T298] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 972.011567][ T7139] batadv4: entered promiscuous mode [ 972.011757][ T7139] batadv5: entered promiscuous mode [ 972.012106][ T7139] batadv6: entered promiscuous mode [ 972.021283][ T298] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 972.048051][ T7139] batadv7: entered promiscuous mode [ 972.054430][ T7139] batadv8: entered promiscuous mode [ 972.061152][ T7139] batadv9: entered promiscuous mode [ 972.066580][ T7139] batadv10: entered promiscuous mode [ 972.090333][ T298] batman_adv: batadv10: No IGMP Querier present - multicast optimizations disabled [ 972.100188][ T298] batman_adv: batadv10: No MLD Querier present - multicast optimizations disabled [ 972.110816][ T298] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 972.120159][ T298] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 972.129895][ T298] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled [ 972.134626][ T7139] batadv11: entered promiscuous mode [ 972.139241][ T298] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled [ 972.157094][ T298] batman_adv: batadv9: No IGMP Querier present - multicast optimizations disabled [ 972.166766][ T298] batman_adv: batadv9: No MLD Querier present - multicast optimizations disabled [ 972.177962][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 972.185635][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 972.194760][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 972.205458][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 972.218571][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 972.222133][ T7139] batadv12: entered promiscuous mode [ 972.250040][ T298] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 972.260012][ T298] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 972.285732][ T298] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 972.296240][ T298] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 972.324951][T23307] tipc: Node number set to 10136234 [ 972.457915][ T298] batman_adv: batadv11: No IGMP Querier present - multicast optimizations disabled [ 972.467495][ T298] batman_adv: batadv11: No MLD Querier present - multicast optimizations disabled [ 972.500851][ T298] batman_adv: batadv12: No IGMP Querier present - multicast optimizations disabled [ 972.510716][ T298] batman_adv: batadv12: No MLD Querier present - multicast optimizations disabled [ 972.551967][ T7151] wg1 speed is unknown, defaulting to 1000 [ 972.604358][ T7162] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9029'. [ 972.884864][ T4723] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.896944][ T4723] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 972.911100][ T4723] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.108395][ T7177] syzkaller0: entered promiscuous mode [ 973.115832][ T7177] syzkaller0: entered allmulticast mode [ 974.300553][ T5835] Bluetooth: hci3: command tx timeout [ 975.058166][ T4723] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 975.068351][ T4723] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 975.081329][ T4723] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.135932][ T7195] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 975.212130][ T4723] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 975.251702][ T4723] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 975.261801][ T4723] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.317820][ T7204] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9037'. [ 975.451163][ T4723] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 975.467406][ T7213] sctp: [Deprecated]: syz.3.9042 (pid 7213) Use of int in max_burst socket option deprecated. [ 975.467406][ T7213] Use struct sctp_assoc_value instead [ 975.482997][ T4723] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 975.483078][ T4723] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.555703][ T7151] chnl_net:caif_netlink_parms(): no params data found [ 975.782614][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9047'. [ 975.792550][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9047'. [ 975.876710][ T7893] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 975.885122][ T7893] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.927521][ T7227] bond6: entered allmulticast mode [ 975.947522][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9045'. [ 975.957089][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9045'. [ 975.997369][ T7234] bond1: left allmulticast mode [ 976.007287][T13777] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.018944][T13777] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.045912][ T7227] dvmrp8: entered allmulticast mode [ 976.054302][ T7222] bond6: left allmulticast mode [ 976.088137][ T7248] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.9049'. [ 976.128328][ T7252] netlink: 'syz.2.9051': attribute type 1 has an invalid length. [ 976.153385][ T7151] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.163565][ T7252] netlink: 'syz.2.9051': attribute type 2 has an invalid length. [ 976.175137][ T7151] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.185409][ T7151] bridge_slave_0: entered allmulticast mode [ 976.207833][ T7151] bridge_slave_0: entered promiscuous mode [ 976.305460][ T7151] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.322335][ T7151] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.347676][ T7151] bridge_slave_1: entered allmulticast mode [ 976.362854][ T7151] bridge_slave_1: entered promiscuous mode [ 976.372033][ T3960] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.381292][ T3960] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.390626][ T5835] Bluetooth: hci3: command tx timeout [ 976.435494][ T3960] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.457367][ T3960] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.512005][ T7261] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9053'. [ 976.546203][ T7151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.571559][ T7264] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 976.584143][ T7264] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 976.592898][ T7264] gretap3: entered promiscuous mode [ 976.598240][ T7264] gretap3: entered allmulticast mode [ 976.626666][ T7250] wg1 speed is unknown, defaulting to 1000 [ 976.985434][ T4723] dvmrp6 (unregistering): left allmulticast mode [ 977.316244][ T4723] bond0 (unregistering): Released all slaves [ 977.341032][ T4723] bond1 (unregistering): Released all slaves [ 977.374397][ T4723] bond2 (unregistering): Released all slaves [ 977.389721][ T4723] bond3 (unregistering): Released all slaves [ 977.408034][ T4723] bond4 (unregistering): Released all slaves [ 977.427525][ T4723] bond5 (unregistering): Released all slaves [ 977.444439][ T4723] bond6 (unregistering): Released all slaves [ 977.461249][ T4723] bond7 (unregistering): Released all slaves [ 977.482696][ T7151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.516805][ T7270] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 977.616943][ T4723] tipc: Left network mode [ 977.751808][ T7151] team0: Port device team_slave_0 added [ 977.841197][ T7151] team0: Port device team_slave_1 added [ 977.851216][ T4723] IPVS: stopping master sync thread 28932 ... [ 978.075464][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.107860][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.169594][ T7151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.200897][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.222444][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.254932][ T7151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.407282][ T7309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9063'. [ 978.460613][ T5835] Bluetooth: hci3: command tx timeout [ 978.607315][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9064'. [ 978.707924][ T7314] geneve2: entered promiscuous mode [ 978.732472][ T7314] geneve2: entered allmulticast mode [ 978.771970][ T7151] hsr_slave_0: entered promiscuous mode [ 978.791690][ T7151] hsr_slave_1: entered promiscuous mode [ 978.805609][ T4728] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.830788][ T4728] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.852508][ T4728] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.885201][ T4723] hsr_slave_0: left promiscuous mode [ 978.908597][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9067'. [ 978.917976][ T4723] hsr_slave_1: left promiscuous mode [ 978.964072][ T4723] veth1_macvtap: left promiscuous mode [ 978.983712][ T4723] veth0_macvtap: left promiscuous mode [ 978.989339][ T4723] veth1_vlan: left allmulticast mode [ 979.006107][ T4723] veth1_vlan: left promiscuous mode [ 979.016060][ T4723] veth0_vlan: left promiscuous mode [ 979.163297][ T4723] pimreg (unregistering): left allmulticast mode [ 979.251834][ T4723] pim6reg (unregistering): left allmulticast mode [ 979.611125][ T7328] syzkaller0: entered promiscuous mode [ 979.616665][ T7328] syzkaller0: entered allmulticast mode [ 979.708103][ T7333] syzkaller0: entered promiscuous mode [ 979.714136][ T7333] syzkaller0: entered allmulticast mode [ 979.748376][ T7340] syzkaller0: entered promiscuous mode [ 979.754291][ T7340] syzkaller0: entered allmulticast mode [ 980.539703][ T5835] Bluetooth: hci3: command tx timeout [ 984.056605][ T7384] netlink: 'syz.4.9076': attribute type 10 has an invalid length. [ 984.104275][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.120143][ T7384] bridge_slave_1: left allmulticast mode [ 984.126896][ T7384] bridge_slave_1: left promiscuous mode [ 984.133365][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.154557][ T7384] bridge_slave_1: entered promiscuous mode [ 984.179248][ T7384] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 984.302250][ T7392] __nla_validate_parse: 1 callbacks suppressed [ 984.302271][ T7392] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9080'. [ 984.406092][ T7397] syzkaller1: entered promiscuous mode [ 984.420088][ T7397] syzkaller1: entered allmulticast mode [ 984.452558][ T4723] IPVS: stop unused estimator thread 0... [ 984.665319][ T7151] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.696103][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9083'. [ 984.725953][ T7151] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.807701][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9083'. [ 984.836202][ T7419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9084'. [ 984.868096][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9084'. [ 984.889387][ T7415] netlink: 'syz.0.9083': attribute type 1 has an invalid length. [ 984.936247][ T7415] netlink: 'syz.0.9083': attribute type 2 has an invalid length. [ 984.977850][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9085'. [ 985.010724][ T7421] netlink: 'syz.3.9085': attribute type 5 has an invalid length. [ 985.036083][ T7151] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.073356][ T7151] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.163706][ T7151] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.178292][ T7151] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.274638][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9090'. [ 985.292145][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9089'. [ 985.327475][ T7151] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.338867][ T7151] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.597712][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9092'. [ 985.640972][ T7455] netlink: 11 bytes leftover after parsing attributes in process `syz.2.9095'. [ 985.882777][ T7151] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 985.932670][ T7151] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 985.940281][ T7471] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 985.948685][ T7471] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 985.963370][ T7471] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 985.972777][ T7471] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 985.983380][ T7471] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 985.992674][ T7151] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 986.116959][ T7468] syzkaller0: entered promiscuous mode [ 986.146169][ T7468] syzkaller0: entered allmulticast mode [ 986.189811][ T7151] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 986.363850][T13777] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.385748][ T7490] geneve3: entered promiscuous mode [ 986.391144][ T7490] geneve3: entered allmulticast mode [ 986.656836][ T7512] netlink: 'syz.4.9103': attribute type 6 has an invalid length. [ 986.683471][ T7512] netlink: 'syz.4.9103': attribute type 5 has an invalid length. [ 988.750705][ T7498] bridge0: port 3(syz_tun) entered blocking state [ 988.758132][ T7498] bridge0: port 3(syz_tun) entered disabled state [ 988.765084][ T7498] syz_tun: entered allmulticast mode [ 988.771978][ T7498] syz_tun: entered promiscuous mode [ 988.777638][ T7498] bridge0: port 3(syz_tun) entered blocking state [ 988.784242][ T7498] bridge0: port 3(syz_tun) entered forwarding state [ 988.853227][T13777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.105628][ T7151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.162990][ T7151] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.198622][T28533] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.205906][T28533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.253295][T13777] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.260551][T13777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.371972][ T7565] netlink: 'syz.2.9112': attribute type 30 has an invalid length. [ 989.411919][ T7567] __nla_validate_parse: 14 callbacks suppressed [ 989.411941][ T7567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9113'. [ 989.458726][ T7565] bond11: option arp_missed_max: invalid value (0) [ 989.507182][ T7565] bond11: option arp_missed_max: allowed values 1 - 255 [ 989.535425][ T7565] bond11 (unregistering): Released all slaves [ 989.640657][ T7577] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9111'. [ 989.832649][ T7563] syzkaller0: entered promiscuous mode [ 989.849679][ T7563] syzkaller0: entered allmulticast mode [ 992.193932][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9124'. [ 992.298827][ T7151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.360151][ T7638] netlink: 'syz.0.9127': attribute type 3 has an invalid length. [ 992.400820][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9129'. [ 992.406057][ T7151] veth0_vlan: entered promiscuous mode [ 992.416328][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9129'. [ 992.582073][ T7151] veth1_vlan: entered promiscuous mode [ 992.671399][ T7151] veth0_macvtap: entered promiscuous mode [ 992.692163][ T7151] veth1_macvtap: entered promiscuous mode [ 992.763597][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.823403][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.861046][T13777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.882482][ T7667] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 992.894540][T13777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.925677][T13777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.942571][T13777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.108676][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 993.253073][T13777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.282913][T13777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.347981][ T7687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9141'. [ 993.370354][T13777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.401551][T13777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.410909][ T7685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9140'. [ 993.445117][ T7685] netlink: 120 bytes leftover after parsing attributes in process `syz.3.9140'. [ 993.490076][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9140'. [ 993.702037][ T7702] syzkaller0: entered promiscuous mode [ 993.747860][ T7702] syzkaller0: entered allmulticast mode [ 993.826760][ T7714] sctp: [Deprecated]: syz.4.9148 (pid 7714) Use of int in maxseg socket option. [ 993.826760][ T7714] Use struct sctp_assoc_value instead [ 993.903839][ T7708] tipc: Enabled bearer , priority 0 [ 993.925308][ T7713] syzkaller0: entered promiscuous mode [ 993.954086][ T7713] syzkaller0: entered allmulticast mode [ 993.990660][ T7708] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 994.050187][T29103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 994.073813][T29103] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 994.084027][T29103] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 994.095636][T29103] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 994.111254][ T7713] tipc: Resetting bearer [ 994.117428][T29103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 994.221303][ T7706] tipc: Resetting bearer [ 994.290256][ T7706] tipc: Disabling bearer [ 994.351639][ T7725] netlink: 'syz.1.9150': attribute type 29 has an invalid length. [ 994.371677][ T7733] netlink: 39 bytes leftover after parsing attributes in process `syz.4.9152'. [ 994.465672][T28587] syz_tun (unregistering): left allmulticast mode [ 994.508044][ T7719] wg1 speed is unknown, defaulting to 1000 [ 994.554499][ T7737] x_tables: duplicate underflow at hook 2 [ 994.647559][ T7741] netlink: zone id is out of range [ 994.669635][ T7741] netlink: zone id is out of range [ 994.675512][ T7741] netlink: zone id is out of range [ 994.725891][ T7741] netlink: zone id is out of range [ 994.754525][ T7741] netlink: zone id is out of range [ 994.812637][ T7719] chnl_net:caif_netlink_parms(): no params data found [ 994.922454][ T7755] __nla_validate_parse: 1 callbacks suppressed [ 994.922478][ T7755] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9156'. [ 994.948323][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9159'. [ 994.983764][ T7751] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9156'. [ 995.151503][ T7770] SET target dimension over the limit! [ 995.195030][ T7754] syzkaller0: entered promiscuous mode [ 995.200835][ T7754] syzkaller0: entered allmulticast mode [ 995.229326][ T7761] tipc: Started in network mode [ 995.237492][ T7761] tipc: Node identity , cluster identity 4711 [ 995.246586][ T7761] tipc: Failed to obtain node identity [ 995.252625][ T7761] tipc: Enabling of bearer rejected, failed to enable media [ 995.276684][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.294661][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.311231][ T7719] bridge_slave_0: entered allmulticast mode [ 995.330294][ T7719] bridge_slave_0: entered promiscuous mode [ 995.411884][ T7778] x_tables: duplicate underflow at hook 4 [ 995.469304][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.477486][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.491075][ T7719] bridge_slave_1: entered allmulticast mode [ 995.512044][ T7719] bridge_slave_1: entered promiscuous mode [ 995.527441][ T7785] netlink: 'syz.4.9164': attribute type 61 has an invalid length. [ 995.554952][ T7773] syzkaller1: entered promiscuous mode [ 995.560737][ T7773] syzkaller1: entered allmulticast mode [ 995.653040][ T7719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.674974][ T7785] vlan2: entered promiscuous mode [ 995.697018][ T7788] netlink: 'syz.2.9165': attribute type 1 has an invalid length. [ 995.712165][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.790885][ T7788] 8021q: adding VLAN 0 to HW filter on device bond11 [ 995.869802][ T7719] team0: Port device team_slave_0 added [ 995.882464][ T7719] team0: Port device team_slave_1 added [ 995.926463][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.942108][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.969132][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.983289][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.990649][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.029005][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.137224][ T7719] hsr_slave_0: entered promiscuous mode [ 996.152615][ T7719] hsr_slave_1: entered promiscuous mode [ 996.159295][ T7719] debugfs: 'hsr0' already exists in 'hsr' [ 996.166684][ T7719] Cannot create hsr debugfs directory [ 996.173268][ T7800] syzkaller1: entered promiscuous mode [ 996.178975][ T7800] syzkaller1: entered allmulticast mode [ 996.238509][T29103] Bluetooth: hci5: command tx timeout [ 996.281136][ T7807] netlink: 'syz.2.9171': attribute type 11 has an invalid length. [ 996.297352][ T7807] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9171'. [ 996.651472][ T7719] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.663354][ T7719] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.679144][ T7719] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 45284 - 0 [ 996.882131][ T7719] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.908827][ T7719] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.931889][ T7719] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 45284 - 0 [ 997.309183][ T7719] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.336143][ T7719] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.357809][ T7719] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 45284 - 0 [ 997.432533][ T7868] netlink: 'syz.2.9187': attribute type 2 has an invalid length. [ 997.520761][ T7719] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.531626][ T7719] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.542781][ T7719] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 45284 - 0 [ 997.875777][ T7890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 997.931447][ T7890] syzkaller0: entered promiscuous mode [ 997.937084][ T7890] syzkaller0: entered allmulticast mode [ 997.975449][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9193'. [ 997.997990][ T7719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 998.032767][ T7900] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 998.045016][ T7900] bond3 (unregistering): Released all slaves [ 998.066783][ T7719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 998.120125][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 998.128275][ C1] lec:lec_tx_timeout: lec0 [ 998.300297][T29103] Bluetooth: hci5: command tx timeout [ 998.414647][ T7918] ip6t_rpfilter: unknown options [ 998.446242][ T7719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 998.458113][ T7719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 998.763132][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.827495][ T7719] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.853302][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.860539][ T4725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.881942][ T7939] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 998.907766][ T7941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 998.953329][ T3960] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.960563][ T3960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.994233][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9208'. [ 999.104090][ T7951] netlink: 'syz.0.9210': attribute type 1 has an invalid length. [ 999.114797][ T7949] wg1 speed is unknown, defaulting to 1000 [ 999.130987][ T7951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 999.378617][ T7960] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.9211'. [ 999.492710][ T7967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9212'. [ 999.503577][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.532483][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9213'. [ 999.584154][ T7719] veth0_vlan: entered promiscuous mode [ 999.716722][ T7719] veth1_vlan: entered promiscuous mode [ 999.840382][ T7719] veth0_macvtap: entered promiscuous mode [ 999.858156][ T8563] IPVS: starting estimator thread 0... [ 999.869265][ T7719] veth1_macvtap: entered promiscuous mode [ 999.933978][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.956857][ T7986] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9220'. [ 999.967843][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9219'. [ 999.986907][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.989555][ T7982] IPVS: using max 27 ests per chain, 64800 per kthread [ 1000.035160][ T7988] bridge0: entered promiscuous mode [ 1000.048589][ T7988] macsec1: entered promiscuous mode [ 1000.054858][ T7988] macsec1: entered allmulticast mode [ 1000.062360][ T7988] bridge0: entered allmulticast mode [ 1000.072688][ T7988] bridge0: port 3(macsec1) entered blocking state [ 1000.082159][ T7988] bridge0: port 3(macsec1) entered disabled state [ 1000.098646][ T7988] bridge0: left allmulticast mode [ 1000.106331][ T7988] bridge0: left promiscuous mode [ 1000.135313][ T7996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1000.147741][ T7990] batadv14: entered allmulticast mode [ 1000.178779][ T3960] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.211134][ T3960] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.271397][ T3960] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.310937][ T3960] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.325479][ T7998] netlink: 'syz.0.9224': attribute type 1 has an invalid length. [ 1000.351669][ T7998] netlink: 'syz.0.9224': attribute type 4 has an invalid length. [ 1000.384958][T29103] Bluetooth: hci5: command tx timeout [ 1000.403821][ T7998] netlink: 9491 bytes leftover after parsing attributes in process `syz.0.9224'. [ 1000.515900][ T4723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.556020][ T4723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.699092][ T3960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.711226][ T3960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.890355][ T8014] bond12: option fail_over_mac: invalid value (16) [ 1000.905774][ T8014] bond12 (unregistering): Released all slaves [ 1000.969848][ T8025] netlink: 'syz.1.9233': attribute type 1 has an invalid length. [ 1001.035108][ T8025] gretap1: entered promiscuous mode [ 1001.132603][ T8028] syzkaller0: entered promiscuous mode [ 1001.158107][ T8028] syzkaller0: entered allmulticast mode [ 1001.203784][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9235'. [ 1001.310805][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9238'. [ 1001.359692][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9238'. [ 1001.445445][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1001.457450][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1001.471160][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1001.480066][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1001.493806][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1001.572886][ T8041] wg1 speed is unknown, defaulting to 1000 [ 1001.794930][ T8054] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9241'. [ 1002.022077][ T3960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.235054][ T8083] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9247'. [ 1002.284831][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9247'. [ 1002.324436][ T8083] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9247'. [ 1002.448599][ T3960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.461336][T29103] Bluetooth: hci5: command tx timeout [ 1002.563510][ T3960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.656990][ T8093] openvswitch: netlink: Key type 219 is out of range max 32 [ 1002.778096][ T8041] chnl_net:caif_netlink_parms(): no params data found [ 1003.095213][ T8120] netlink: 'syz.1.9258': attribute type 4 has an invalid length. [ 1003.151618][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.181519][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.241807][T13777] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.263700][T13777] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.364864][ T8135] xt_cgroup: path and classid specified [ 1003.375424][T13777] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.400744][T13777] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.460741][T13777] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.479266][T13777] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.518351][ T8041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.547482][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.563846][ T8041] bridge_slave_0: entered allmulticast mode [ 1003.580706][T29103] Bluetooth: hci2: command tx timeout [ 1003.592785][ T8041] bridge_slave_0: entered promiscuous mode [ 1003.606149][ T8041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.614581][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.622131][ T8041] bridge_slave_1: entered allmulticast mode [ 1003.640759][ T8041] bridge_slave_1: entered promiscuous mode [ 1003.881911][ T8166] "syz.0.9272" (8166) uses obsolete ecb(arc4) skcipher [ 1004.058109][ T3960] bond2 (unregistering): (slave gretap2): Releasing active interface [ 1004.118786][ T3960] dvmrp8 (unregistering): left allmulticast mode [ 1004.385343][ T3960] bond2 (unregistering): (slave bridge4): Releasing active interface [ 1004.445077][ T3960] bond3 (unregistering): (slave bridge5): Removing an active aggregator [ 1004.456458][ T3960] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 1004.466023][ T3960] bond3 (unregistering): (slave bridge5): the permanent HWaddr of slave - 9e:45:5b:ef:fa:77 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1004.495005][ T3960] bond3 (unregistering): (slave bridge6): Releasing backup interface [ 1004.633876][ T3960] bond10 (unregistering): (slave bridge9): Releasing active interface [ 1004.693857][ T3960] bond0 (unregistering): Released all slaves [ 1004.707610][ T3960] bond1 (unregistering): Released all slaves [ 1004.739199][ T3960] bond2 (unregistering): Released all slaves [ 1004.760313][ T3960] bond3 (unregistering): Released all slaves [ 1004.796876][ T3960] bond4 (unregistering): Released all slaves [ 1004.817780][ T3960] bond5 (unregistering): Released all slaves [ 1004.846974][ T3960] bond6 (unregistering): Released all slaves [ 1004.865754][ T3960] bond7 (unregistering): Released all slaves [ 1004.901202][ T3960] bond8 (unregistering): (slave lo): Releasing backup interface [ 1004.917493][ T3960] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1004.929295][ T3960] bond8 (unregistering): Released all slaves [ 1004.954728][ T3960] bond9 (unregistering): Released all slaves [ 1004.977437][ T3960] bond10 (unregistering): Released all slaves [ 1005.001427][ T3960] bond11 (unregistering): Released all slaves [ 1005.085028][ T8188] netlink: 'syz.0.9275': attribute type 4 has an invalid length. [ 1005.201235][ T8041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.234899][ T8041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.308456][ T8198] __nla_validate_parse: 5 callbacks suppressed [ 1005.308478][ T8198] netlink: 165 bytes leftover after parsing attributes in process `syz.4.9276'. [ 1005.404427][ T8041] team0: Port device team_slave_0 added [ 1005.507872][ T8208] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9279'. [ 1005.511319][ T8041] team0: Port device team_slave_1 added [ 1005.564242][ T8211] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9279'. [ 1005.669527][T29103] Bluetooth: hci2: command tx timeout [ 1005.706069][ T8041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.714850][ T8041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.745669][ T8041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.800446][ T8041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.817699][ T8041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.902207][ T8041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.134586][ T8041] hsr_slave_0: entered promiscuous mode [ 1006.166395][ T8041] hsr_slave_1: entered promiscuous mode [ 1006.175868][ T8041] debugfs: 'hsr0' already exists in 'hsr' [ 1006.183400][ T8041] Cannot create hsr debugfs directory [ 1006.713233][ T3960] hsr_slave_0: left promiscuous mode [ 1006.726588][ T3960] hsr_slave_1: left promiscuous mode [ 1006.774675][ T3960] pim6reg (unregistering): left allmulticast mode [ 1007.337695][ T8284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9295'. [ 1007.759793][T29103] Bluetooth: hci2: command tx timeout [ 1007.940472][ T8041] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1007.978994][ T8041] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.117249][ T8041] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.161838][ T8041] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.206771][ T8301] team0: Cannot enslave team device to itself [ 1008.325858][ T8302] bond3: entered promiscuous mode [ 1008.466090][ T8041] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.477647][ T8041] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.705909][ T8041] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.718779][ T8041] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.743276][ T8323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9305'. [ 1008.791824][ T3960] IPVS: stop unused estimator thread 0... [ 1009.119338][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9308'. [ 1009.129337][ T8333] syzkaller0: entered promiscuous mode [ 1009.138657][ T8333] syzkaller0: entered allmulticast mode [ 1009.171175][ T8338] netlink: 312 bytes leftover after parsing attributes in process `syz.4.9310'. [ 1009.359069][ T8348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9311'. [ 1009.380790][ T8041] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1009.420700][ T8041] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1009.452897][ T8041] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1009.493337][ T8041] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1009.542822][ T8359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9314'. [ 1009.555455][ T8355] x_tables: unsorted underflow at hook 1 [ 1009.746712][ T8041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.805909][ T8041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.819717][T29103] Bluetooth: hci2: command tx timeout [ 1009.835023][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.842272][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.901715][ T3960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.909061][ T3960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.144983][ T8387] netlink: 484 bytes leftover after parsing attributes in process `syz.0.9320'. [ 1010.442308][ T8393] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.532738][ T8041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.687557][ T8393] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.922295][ T8393] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.962550][ T8565] IPVS: starting estimator thread 0... [ 1011.067399][ T8423] IPVS: using max 25 ests per chain, 60000 per kthread [ 1011.110421][ T8393] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.192562][ T8041] veth0_vlan: entered promiscuous mode [ 1011.244196][ T8041] veth1_vlan: entered promiscuous mode [ 1011.311070][ T298] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.353373][ T298] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.367062][ T8041] veth0_macvtap: entered promiscuous mode [ 1011.393659][ T4728] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.426966][ T8041] veth1_macvtap: entered promiscuous mode [ 1011.467132][ T4723] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.489200][ T8438] gtp1: entered promiscuous mode [ 1011.496231][ T8438] gtp1: entered allmulticast mode [ 1011.544364][ T8041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.591742][ T8041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.625265][ T4723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.648520][ T4723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.686093][ T4723] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.706698][T13777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.906479][ T51] Bluetooth: hci2: command tx timeout [ 1011.972769][ T4728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.008363][ T4728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.062453][ T4728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.077656][ T8457] netlink: 'syz.1.9336': attribute type 22 has an invalid length. [ 1012.087379][ T4728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.096882][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9336'. [ 1012.156301][T28533] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.166950][ T8457] netlink: 'syz.1.9336': attribute type 22 has an invalid length. [ 1012.177021][T28533] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.191396][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9336'. [ 1012.200699][T28533] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.210117][T28533] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.807266][ T8487] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1012.818095][ T8487] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1012.826732][ T8487] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1012.835538][ T8487] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1012.844437][ T8487] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1012.973826][ T8490] Bluetooth: MGMT ver 1.23 [ 1012.992347][ T8483] wg1 speed is unknown, defaulting to 1000 [ 1013.049639][ T8494] netlink: 'syz.2.9345': attribute type 30 has an invalid length. [ 1013.164112][ T8494] bond1: option arp_missed_max: invalid value (0) [ 1013.174642][ T8494] bond1: option arp_missed_max: allowed values 1 - 255 [ 1013.188161][ T8494] bond1 (unregistering): Released all slaves [ 1013.453486][T28533] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.482060][T28533] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.510351][T28533] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1013.783598][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9351'. [ 1013.842152][T28533] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.872984][T28533] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.914005][T28533] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1013.942676][ T8535] netlink: 'syz.0.9352': attribute type 39 has an invalid length. [ 1013.980085][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 1014.094285][T28533] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.132328][T28533] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.160511][T28533] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1014.335321][T28533] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.369800][T28533] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.396999][T28533] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1014.466448][ T8570] openvswitch: netlink: Tunnel attr 10 has unexpected len 8 expected 2 [ 1014.513952][ T5969] wg1 speed is unknown, defaulting to 1000 [ 1014.521813][ T5969] syz2: Port: 1 Link DOWN [ 1014.604852][ T7893] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.622379][ T7893] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.695368][ T8483] chnl_net:caif_netlink_parms(): no params data found [ 1014.737754][ T8578] netlink: 'syz.1.9359': attribute type 1 has an invalid length. [ 1014.757661][ T3960] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.768890][ T3960] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.795611][ T3960] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.813239][ T3960] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.896160][ T7893] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.904730][ T7893] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.927780][T28533] team0: left allmulticast mode [ 1014.933194][T28533] team_slave_0: left allmulticast mode [ 1014.938717][T28533] team_slave_1: left allmulticast mode [ 1014.942916][ T51] Bluetooth: hci0: command tx timeout [ 1014.949929][T28533] batadv1: left allmulticast mode [ 1014.955148][T28533] batadv2: left allmulticast mode [ 1014.961342][T28533] batadv3: left allmulticast mode [ 1014.967517][T28533] batadv4: left allmulticast mode [ 1014.974189][T28533] batadv5: left allmulticast mode [ 1014.979334][T28533] batadv6: left allmulticast mode [ 1014.984728][T28533] batadv7: left allmulticast mode [ 1014.990676][T28533] batadv8: left allmulticast mode [ 1014.995764][T28533] batadv9: left allmulticast mode [ 1015.002124][T28533] batadv10: left allmulticast mode [ 1015.007295][T28533] batadv11: left allmulticast mode [ 1015.012865][T28533] batadv12: left allmulticast mode [ 1015.059595][T28533] team0: left promiscuous mode [ 1015.064574][T28533] team_slave_0: left promiscuous mode [ 1015.080867][T28533] team_slave_1: left promiscuous mode [ 1015.086505][T28533] batadv1: left promiscuous mode [ 1015.103947][T28533] batadv2: left promiscuous mode [ 1015.109172][T28533] batadv3: left promiscuous mode [ 1015.121476][T28533] batadv4: left promiscuous mode [ 1015.126669][T28533] batadv5: left promiscuous mode [ 1015.132310][T28533] batadv6: left promiscuous mode [ 1015.137479][T28533] batadv7: left promiscuous mode [ 1015.143417][T28533] batadv8: left promiscuous mode [ 1015.148593][T28533] batadv9: left promiscuous mode [ 1015.158530][T28533] batadv10: left promiscuous mode [ 1015.200433][T28533] batadv11: left promiscuous mode [ 1015.205723][T28533] batadv12: left promiscuous mode [ 1015.220389][T28533] bridge0: port 3(team0) entered disabled state [ 1015.233103][T28533] bridge_slave_0: left promiscuous mode [ 1015.238939][T28533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.284344][T28533] veth0_to_bond: left allmulticast mode [ 1015.291651][T28533] veth0_to_bond: left promiscuous mode [ 1015.297402][T28533] bridge7: port 2(veth0_to_bond) entered disabled state [ 1015.331876][T28533] veth7: left allmulticast mode [ 1015.336809][T28533] veth7: left promiscuous mode [ 1015.344835][T28533] bridge7: port 1(veth7) entered disabled state [ 1015.470558][ T8598] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 1015.692977][T28533] bond3 (unregistering): (slave vti0): Releasing backup interface [ 1015.712412][T28533] vti0 (unregistering): left promiscuous mode [ 1015.777653][T28533] gretap0 (unregistering): left promiscuous mode [ 1015.815507][T28533] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 1015.826629][T28533] gretap2 (unregistering): left promiscuous mode [ 1015.918182][T28533] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1016.116427][T28533] bond5 (unregistering): (slave bridge4): Releasing active interface [ 1016.215630][T28533] bond6 (unregistering): (slave bridge6): Removing an active aggregator [ 1016.225007][T28533] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 1016.237174][T28533] bridge6 (unregistering): left promiscuous mode [ 1016.243982][T28533] bridge6 (unregistering): left allmulticast mode [ 1016.388957][T28533] team0: Port device bridge8 removed [ 1016.456122][T28533] bond0 (unregistering): left promiscuous mode [ 1016.463616][T28533] bond_slave_0: left promiscuous mode [ 1016.469263][T28533] bond_slave_1: left promiscuous mode [ 1016.477023][T28533] bridge_slave_1: left promiscuous mode [ 1016.494387][T28533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.507768][T28533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.521573][T28533] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1016.535742][T28533] bond0 (unregistering): Released all slaves [ 1016.553657][T28533] bond1 (unregistering): Released all slaves [ 1016.573679][T28533] bond2 (unregistering): Released all slaves [ 1016.596871][T28533] bond3 (unregistering): Released all slaves [ 1016.623906][T28533] bond4 (unregistering): Released all slaves [ 1016.646817][T28533] bond5 (unregistering): Released all slaves [ 1016.676414][T28533] bond6 (unregistering): Released all slaves [ 1016.788244][ T8483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.822033][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.835301][ T8483] bridge_slave_0: entered allmulticast mode [ 1016.852756][ T8483] bridge_slave_0: entered promiscuous mode [ 1016.864408][ T8483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.881027][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.888550][ T8483] bridge_slave_1: entered allmulticast mode [ 1016.897528][ T8483] bridge_slave_1: entered promiscuous mode [ 1016.917754][T28533] tipc: Disabling bearer [ 1016.923610][T28533] tipc: Left network mode [ 1017.004866][ T8483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.030647][ T51] Bluetooth: hci0: command tx timeout [ 1017.044397][ T8483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.238335][ T8483] team0: Port device team_slave_0 added [ 1017.251495][ T5835] block nbd0: Receive control failed (result -32) [ 1017.276630][ T8614] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1017.322860][ T8614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.339791][ T8614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.371162][ T8614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.389552][ T8614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.461529][ T8621] netlink: 'syz.3.9367': attribute type 61 has an invalid length. [ 1017.481939][ T8483] team0: Port device team_slave_1 added [ 1017.661882][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.668972][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.759487][ T8483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.858400][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9368'. [ 1017.884293][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.908292][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.989211][ T8483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.344813][T10228] lec:lec_start_xmit: lec0:No lecd attached [ 1018.373695][ T8483] hsr_slave_0: entered promiscuous mode [ 1018.388827][ T8483] hsr_slave_1: entered promiscuous mode [ 1018.405429][ T8483] debugfs: 'hsr0' already exists in 'hsr' [ 1018.434278][ T8483] Cannot create hsr debugfs directory [ 1019.102799][ T5835] Bluetooth: hci0: command tx timeout [ 1019.203911][ T8674] netlink: 'syz.1.9380': attribute type 21 has an invalid length. [ 1019.243162][ T8674] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9380'. [ 1019.570638][ T8483] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1019.591271][ T8483] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.694903][ T8688] netlink: 'syz.1.9383': attribute type 4 has an invalid length. [ 1019.861027][ T8483] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1019.890366][ T8483] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.911513][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9387'. [ 1020.136300][ T8483] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1020.172695][ T8483] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.186881][ T8724] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20002 [ 1020.437728][ T8726] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9392'. [ 1020.494831][T28533] hsr_slave_0: left promiscuous mode [ 1020.529572][T28533] hsr_slave_1: left promiscuous mode [ 1020.537060][T28533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.580147][T28533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.623888][T28533] º: left promiscuous mode [ 1020.628623][T28533] veth0_vlan: left promiscuous mode [ 1020.717388][ T8744] netlink: 'syz.0.9395': attribute type 15 has an invalid length. [ 1020.828977][T28533] team0 (unregistering): Port device batadv12 removed [ 1020.847403][T28533] team0 (unregistering): Port device batadv11 removed [ 1020.868857][T28533] team0 (unregistering): Port device batadv10 removed [ 1020.884109][T28533] team0 (unregistering): Port device batadv9 removed [ 1020.903865][T28533] team0 (unregistering): Port device batadv8 removed [ 1020.920146][T28533] team0 (unregistering): Port device batadv7 removed [ 1020.934172][T28533] team0 (unregistering): Port device batadv6 removed [ 1020.956252][T28533] team0 (unregistering): Port device batadv5 removed [ 1020.982506][T28533] team0 (unregistering): Port device batadv4 removed [ 1020.995867][T28533] team0 (unregistering): Port device batadv3 removed [ 1021.008946][T28533] team0 (unregistering): Port device batadv2 removed [ 1021.043441][T28533] team0 (unregistering): Port device batadv1 removed [ 1021.190256][ T5835] Bluetooth: hci0: command tx timeout [ 1021.221145][T28533] team0 (unregistering): Port device team_slave_1 removed [ 1021.242720][T28533] team0 (unregistering): Port device team_slave_0 removed [ 1021.492251][T28533] smc: removing net device caif0 with user defined pnetid SYZ2 [ 1021.542880][T28533] smc: removing net device team0 with user defined pnetid SYZ2 [ 1021.693308][ T8483] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1021.719455][ T8483] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.937972][ T8753] veth0_to_bond: entered allmulticast mode [ 1022.193642][ T8763] macsec1: entered promiscuous mode [ 1022.553618][ T8773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9402'. [ 1022.951797][ T8483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1023.004079][ T8483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1023.058594][ T8483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1023.107088][ T8793] netlink: 'syz.2.9407': attribute type 1 has an invalid length. [ 1023.157583][ T8483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1023.301964][ T8795] bond1: (slave ip6gretap1): making interface the new active one [ 1023.310708][ T8795] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1023.332172][ T8800] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1023.383330][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9409'. [ 1023.535895][ T8815] xt_hashlimit: max too large, truncated to 1048576 [ 1023.638180][ T8820] netlink: 'syz.0.9411': attribute type 64 has an invalid length. [ 1023.712759][ T8821] sctp: [Deprecated]: syz.3.9409 (pid 8821) Use of int in max_burst socket option. [ 1023.712759][ T8821] Use struct sctp_assoc_value instead [ 1023.979411][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5630 ms [ 1023.987549][ C1] lec:lec_tx_timeout: lec0 [ 1024.280863][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9412'. [ 1024.329309][T28533] IPVS: stop unused estimator thread 0... [ 1024.720466][ T8853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9415'. [ 1024.827222][ T8483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.985260][ T8483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.027567][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.034841][ T4723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.164698][ T4728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.171952][ T4728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.385104][ T8879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9419'. [ 1025.573899][ T8885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9419'. [ 1025.730253][ T8890] xt_hashlimit: size too large, truncated to 1048576 [ 1025.841071][ T8894] sctp: [Deprecated]: syz.0.9422 (pid 8894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1025.841071][ T8894] Use struct sctp_sack_info instead [ 1025.932689][ T8894] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1026.272065][ T8483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.519271][ T8915] IPVS: set_ctl: invalid protocol: 255 172.30.1.2:20003 [ 1026.539303][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9428'. [ 1026.558944][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9428'. [ 1026.583714][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9428'. [ 1026.601625][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9428'. [ 1027.178846][ T8483] veth0_vlan: entered promiscuous mode [ 1027.196787][ T8483] veth1_vlan: entered promiscuous mode [ 1027.308480][ T8483] veth0_macvtap: entered promiscuous mode [ 1027.315945][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9436'. [ 1027.325336][ T8483] veth1_macvtap: entered promiscuous mode [ 1027.353605][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.395046][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.446610][ T7893] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.473686][ T7893] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.534831][ T8956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.564113][ T8956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.574597][ T8964] netlink: 'syz.2.9440': attribute type 3 has an invalid length. [ 1027.597079][ T8956] bond0 (unregistering): Released all slaves [ 1027.618196][ T7893] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.682614][ T7893] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.868123][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.890990][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.966952][ T7893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.025048][ T7893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.454760][ T9016] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1028.638645][ T9027] __nla_validate_parse: 6 callbacks suppressed [ 1028.638667][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9459'. [ 1028.665958][ T9031] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9461'. [ 1029.082291][ T7893] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.092094][ T7893] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.113049][ T7893] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.135942][ T7893] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.273916][ T9071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1029.284515][ T9070] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9472'. [ 1029.508554][ T9075] bond2: entered allmulticast mode [ 1029.528352][ T9075] bridge1: entered promiscuous mode [ 1029.537407][ T9075] bridge1: entered allmulticast mode [ 1029.555490][ T9075] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1029.664359][ T9085] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1029.704594][ T9085] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1029.747304][ T9085] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 1029.994428][ T9099] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9481'. [ 1030.031998][ T9106] syzkaller0: entered promiscuous mode [ 1030.037553][ T9106] syzkaller0: entered allmulticast mode [ 1030.052510][ T9099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9481'. [ 1030.537871][ T9099] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9481'. [ 1030.582780][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9489'. [ 1030.611824][ T9124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9489'. [ 1030.654272][ T9124] geneve2: entered promiscuous mode [ 1030.667631][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9489'. [ 1030.682085][ T9129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9489'. [ 1030.695314][ T9124] geneve2: entered allmulticast mode [ 1031.175794][ T9153] erspan0: entered promiscuous mode [ 1031.598608][ T9185] netlink: 'syz.2.9504': attribute type 16 has an invalid length. [ 1031.698489][ T9195] tipc: Enabling of bearer rejected, failed to enable media [ 1031.932477][ T9207] ip6gre1: entered allmulticast mode [ 1032.060967][ T9211] netlink: 'syz.4.9512': attribute type 2 has an invalid length. [ 1032.357836][ T9224] xt_CT: No such helper "snmp_trap" [ 1032.516009][ T9234] vlan2: entered allmulticast mode [ 1032.539305][ T9234] hsr0: entered allmulticast mode [ 1032.555178][ T9234] hsr_slave_0: entered allmulticast mode [ 1032.581639][ T9234] hsr_slave_1: entered allmulticast mode [ 1033.000781][ T9261] netlink: 'syz.2.9530': attribute type 1 has an invalid length. [ 1033.023819][ T9261] netlink: 'syz.2.9530': attribute type 2 has an invalid length. [ 1033.068882][ T9261] netlink: 'syz.2.9530': attribute type 1 has an invalid length. [ 1033.078225][ T9261] netlink: 'syz.2.9530': attribute type 10 has an invalid length. [ 1033.133998][ T9261] team0 (unregistering): Port device team_slave_0 removed [ 1033.184383][ T9261] team0 (unregistering): Port device team_slave_1 removed [ 1033.441312][ T9235] lec:lec_atm_close: lec0: Shut down! [ 1033.711079][ T9293] netlink: 'syz.1.9539': attribute type 21 has an invalid length. [ 1033.856955][ T9294] veth1_macvtap: renamed from macvlan0 [ 1034.120132][ T9311] __nla_validate_parse: 7 callbacks suppressed [ 1034.120152][ T9311] netlink: 512 bytes leftover after parsing attributes in process `syz.2.9545'. [ 1034.196255][ T9311] xt_ipcomp: unknown flags 1D [ 1034.398344][ T9331] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1034.558284][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9552'. [ 1034.592323][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9552'. [ 1034.626579][ T9342] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1034.832497][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9558'. [ 1034.851302][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9558'. [ 1034.873752][ T9363] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9557'. [ 1034.940794][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9559'. [ 1035.373068][ T9386] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1035.391175][ T9395] netlink: 'syz.2.9565': attribute type 4 has an invalid length. [ 1035.644695][ T9408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9568'. [ 1036.046468][ T9429] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 1036.082328][ T9429] bond1: option packets_per_slave: allowed values 0 - 65535 [ 1036.152986][ T9429] bond1 (unregistering): Released all slaves [ 1036.189091][ T9445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9576'. [ 1036.211386][ T9447] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9578'. [ 1036.243472][ T9450] netlink: 'syz.2.9579': attribute type 21 has an invalid length. [ 1036.538105][ T9466] netlink: 'syz.3.9584': attribute type 1 has an invalid length. [ 1036.621157][ T9473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1036.995157][ T9497] syz.1.9592: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1037.058349][ T9497] CPU: 0 UID: 0 PID: 9497 Comm: syz.1.9592 Not tainted syzkaller #0 PREEMPT(full) [ 1037.058383][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1037.058400][ T9497] Call Trace: [ 1037.058410][ T9497] [ 1037.058421][ T9497] dump_stack_lvl+0xe8/0x150 [ 1037.058465][ T9497] warn_alloc+0x249/0x340 [ 1037.058494][ T9497] ? stack_trace_save+0xa9/0x100 [ 1037.058523][ T9497] ? __pfx_warn_alloc+0x10/0x10 [ 1037.058556][ T9497] ? kasan_save_track+0x4f/0x80 [ 1037.058578][ T9497] ? kasan_save_track+0x3e/0x80 [ 1037.058598][ T9497] ? __kasan_kmalloc+0x93/0xb0 [ 1037.058619][ T9497] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1037.058642][ T9497] ? xskq_create+0x56/0x170 [ 1037.058675][ T9497] ? xsk_setsockopt+0x54c/0x990 [ 1037.058703][ T9497] ? do_sock_setsockopt+0x17c/0x1b0 [ 1037.058736][ T9497] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1037.058766][ T9497] ? do_syscall_64+0x14d/0xf80 [ 1037.058793][ T9497] __vmalloc_node_range_noprof+0x132/0x1730 [ 1037.058861][ T9497] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1037.058894][ T9497] ? __kasan_kmalloc+0x93/0xb0 [ 1037.058926][ T9497] vmalloc_user_noprof+0xad/0xe0 [ 1037.058950][ T9497] ? xskq_create+0xbf/0x170 [ 1037.058983][ T9497] xskq_create+0xbf/0x170 [ 1037.059017][ T9497] xsk_init_queue+0x8a/0xe0 [ 1037.059052][ T9497] xsk_setsockopt+0x54c/0x990 [ 1037.059085][ T9497] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1037.059116][ T9497] ? __pfx_aa_sk_perm+0x10/0x10 [ 1037.059148][ T9497] ? aa_sock_opt_perm+0xff/0x1a0 [ 1037.059180][ T9497] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1037.059205][ T9497] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1037.059237][ T9497] do_sock_setsockopt+0x17c/0x1b0 [ 1037.059275][ T9497] __x64_sys_setsockopt+0x13d/0x1b0 [ 1037.059313][ T9497] do_syscall_64+0x14d/0xf80 [ 1037.059334][ T9497] ? trace_irq_disable+0x3b/0x150 [ 1037.059413][ T9497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.059438][ T9497] ? clear_bhb_loop+0x40/0x90 [ 1037.059468][ T9497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.059491][ T9497] RIP: 0033:0x7f028a99c799 [ 1037.059514][ T9497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.059535][ T9497] RSP: 002b:00007f0288bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1037.059560][ T9497] RAX: ffffffffffffffda RBX: 00007f028ac15fa0 RCX: 00007f028a99c799 [ 1037.059577][ T9497] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1037.059592][ T9497] RBP: 00007f028aa32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 1037.059606][ T9497] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.059621][ T9497] R13: 00007f028ac16038 R14: 00007f028ac15fa0 R15: 00007ffc9c7f24c8 [ 1037.059664][ T9497] [ 1037.354810][ T9497] Mem-Info: [ 1037.358068][ T9497] active_anon:6792 inactive_anon:0 isolated_anon:0 [ 1037.358068][ T9497] active_file:2374 inactive_file:40718 isolated_file:0 [ 1037.358068][ T9497] unevictable:768 dirty:40 writeback:0 [ 1037.358068][ T9497] slab_reclaimable:13605 slab_unreclaimable:112123 [ 1037.358068][ T9497] mapped:31418 shmem:1460 pagetables:1781 [ 1037.358068][ T9497] sec_pagetables:0 bounce:0 [ 1037.358068][ T9497] kernel_misc_reclaimable:0 [ 1037.358068][ T9497] free:1294872 free_pcp:23651 free_cma:0 [ 1037.535365][ T9497] Node 0 active_anon:34968kB inactive_anon:0kB active_file:9496kB inactive_file:162672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:39960kB dirty:160kB writeback:0kB shmem:12704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14356kB pagetables:6888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1037.619987][ T9497] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87312kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1037.650562][ T9497] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 1037.733644][ T9497] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1037.749640][ T9497] Node 0 DMA32 free:1461228kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36368kB inactive_anon:0kB active_file:9496kB inactive_file:162672kB unevictable:1536kB writepending:160kB zspages:0kB present:3129332kB managed:2552820kB mlocked:0kB bounce:0kB free_pcp:33856kB local_pcp:12692kB free_cma:0kB [ 1037.850586][ T9497] lowmem_reserve[]: 0 0 0 0 0 [ 1037.877499][ T9497] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1037.921360][ T9497] lowmem_reserve[]: 0 0 0 0 0 [ 1037.926204][ T9497] Node 1 Normal free:3704600kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:54828kB local_pcp:27852kB free_cma:0kB [ 1038.009806][ T9497] lowmem_reserve[]: 0 0 0 0 0 [ 1038.024164][ T9497] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11248kB [ 1038.044313][ T9497] Node 0 DMA32: 10240*4kB (UME) 8050*8kB (UME) 5447*16kB (UME) 1123*32kB (UME) 698*64kB (UME) 1013*128kB (UME) 632*256kB (UME) 504*512kB (UM) 372*1024kB (UME) 129*2048kB (UM) 0*4096kB = 1467744kB [ 1038.065129][ T9497] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1038.116296][ T9497] Node 1 Normal: 9*4kB (U) 17*8kB (UME) 20*16kB (UME) 13*32kB (UME) 21*64kB (UME) 17*128kB (UME) 16*256kB (UME) 17*512kB (UME) 11*1024kB (UM) 9*2048kB (UE) 893*4096kB (UM) = 3704652kB [ 1038.157261][ T9497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1038.179620][ T9497] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1038.209346][ T9497] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1038.224302][ T9497] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1038.252828][ T9497] 44495 total pagecache pages [ 1038.264279][ T9497] 0 pages in swap cache [ 1038.283093][ T9497] Free swap = 124996kB [ 1038.319496][ T9497] Total swap = 124996kB [ 1038.326399][ T9497] 2097051 pages RAM [ 1038.330073][ T9540] netlink: 'syz.3.9602': attribute type 3 has an invalid length. [ 1038.351816][ T9497] 0 pages HighMem/MovableOnly [ 1038.366820][ T9497] 427010 pages reserved [ 1038.376963][ T9497] 0 pages cma reserved [ 1038.518253][ T9546] IPv6: NLM_F_CREATE should be specified when creating new route [ 1038.602106][ T9546] netlink: 'syz.0.9606': attribute type 1 has an invalid length. [ 1038.835877][ T9569] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1038.843870][ T9569] nbd: must specify at least one socket [ 1038.939483][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 1038.947552][ C1] lec:lec_tx_timeout: lec0 [ 1039.006810][ T9580] gretap0: entered promiscuous mode [ 1039.030576][ T9580] gretap0: left promiscuous mode [ 1039.219099][ T9588] syzkaller0: entered promiscuous mode [ 1039.234125][ T9588] syzkaller0: entered allmulticast mode [ 1039.382147][ T9591] __nla_validate_parse: 14 callbacks suppressed [ 1039.382170][ T9591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9619'. [ 1039.440503][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9619'. [ 1039.576865][ T9609] netlink: 'syz.2.9625': attribute type 6 has an invalid length. [ 1039.600546][ T9609] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.9625'. [ 1039.846237][ T9613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9619'. [ 1039.890619][ T9620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9627'. [ 1040.009965][ T9623] tipc: Enabling of bearer rejected, failed to enable media [ 1040.243720][ T9632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9631'. [ 1040.395142][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9629'. [ 1040.468429][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9632'. [ 1040.543816][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9632'. [ 1040.980769][ T9666] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9644'. [ 1041.026678][ T9664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1041.091569][ T9674] veth1_to_hsr: entered allmulticast mode [ 1041.492635][ T8562] IPVS: starting estimator thread 0... [ 1041.593095][ T9696] IPVS: using max 25 ests per chain, 60000 per kthread [ 1042.237819][ T9738] netlink: 'syz.0.9659': attribute type 5 has an invalid length. [ 1043.335449][ T9811] –: renamed from vxcan1 (while UP) [ 1043.540998][ T9817] block nbd1: server does not support multiple connections per device. [ 1043.585784][ T9817] block nbd1: shutting down sockets [ 1044.103744][ T9860] sctp: [Deprecated]: syz.3.9688 (pid 9860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1044.103744][ T9860] Use struct sctp_sack_info instead [ 1044.577790][ T9889] __nla_validate_parse: 15 callbacks suppressed [ 1044.577815][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9697'. [ 1044.649619][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9696'. [ 1044.840288][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9699'. [ 1044.861324][ T9913] netlink: get zone limit has 4 unknown bytes [ 1045.041509][ T9921] netlink: 'syz.2.9704': attribute type 6 has an invalid length. [ 1045.080872][ T9930] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9706'. [ 1045.112491][ T9925] netlink: 'syz.3.9705': attribute type 6 has an invalid length. [ 1045.394319][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9711'. [ 1045.457989][ T9939] syzkaller0: entered promiscuous mode [ 1045.464353][ T9939] syzkaller0: entered allmulticast mode [ 1045.642624][ T9956] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1045.829078][ T9967] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9716'. [ 1045.981978][ T9972] netlink: 376 bytes leftover after parsing attributes in process `syz.0.9719'. [ 1046.118316][ T9980] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9720'. [ 1048.645918][T10002] syzkaller1: entered promiscuous mode [ 1048.651892][T10002] syzkaller1: entered allmulticast mode [ 1048.832662][T10034] netlink: 596 bytes leftover after parsing attributes in process `syz.0.9732'. [ 1049.386408][T10071] delete_channel: no stack [ 1049.721787][T10091] delete_channel: no stack [ 1050.182601][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9749'. [ 1050.202182][T10112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9748'. [ 1050.241546][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9749'. [ 1050.688488][T10148] netlink: 'syz.1.9757': attribute type 1 has an invalid length. [ 1050.837763][T10148] bond1: entered promiscuous mode [ 1050.851384][T10148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1050.953188][T10151] bond1: (slave bridge2): making interface the new active one [ 1050.960928][T10151] bridge2: entered promiscuous mode [ 1050.967225][T10151] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1050.977152][T10155] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9758'. [ 1051.031935][T10166] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9760'. [ 1051.161164][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9761'. [ 1051.237134][T10175] netlink: 'syz.4.9762': attribute type 2 has an invalid length. [ 1051.247142][T10175] netlink: 'syz.4.9762': attribute type 1 has an invalid length. [ 1051.256613][T10176] netlink: 'syz.1.9763': attribute type 10 has an invalid length. [ 1051.471053][T10176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.483387][T10176] bridge_slave_1: left allmulticast mode [ 1051.517768][T10176] bridge_slave_1: left promiscuous mode [ 1051.531596][T10176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.556894][T10176] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1051.581306][T10184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.629974][T10184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.667153][T10184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.712477][T10184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.730426][T10190] xt_TCPMSS: Only works on TCP SYN packets [ 1051.813268][T10204] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9771'. [ 1051.823711][T10184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.844340][T10184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.852316][T10203] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9771'. [ 1051.873714][T10184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.891714][T10184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.949329][T10184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1052.009852][T10184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1052.145197][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9776'. [ 1052.154480][T10214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9776'. [ 1052.340825][T10232] netlink: 'syz.1.9779': attribute type 1 has an invalid length. [ 1052.713164][T10270] syzkaller0: entered promiscuous mode [ 1052.718710][T10270] syzkaller0: entered allmulticast mode [ 1053.383304][T10295] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1054.547112][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1054.556257][ T4721] bridge_slave_1: left allmulticast mode [ 1054.562562][ T4721] bridge_slave_1: left promiscuous mode [ 1054.568522][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.579258][ T4721] bridge_slave_0: left allmulticast mode [ 1054.585382][ T4721] bridge_slave_0: left promiscuous mode [ 1054.592449][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.782368][ T4721] erspan0 (unregistering): left promiscuous mode [ 1054.808016][ T4721] gretap0 (unregistering): left promiscuous mode [ 1055.155691][ T4721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.166920][ T4721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.177450][ T4721] bond0 (unregistering): Released all slaves [ 1055.195177][ T4721] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 1055.205205][ T4721] bond1 (unregistering): Released all slaves [ 1055.222553][ T4721] bond2 (unregistering): Released all slaves [ 1055.240329][ T4721] bond3 (unregistering): Released all slaves [ 1055.255868][ T4721] bond4 (unregistering): (slave veth5): Releasing active interface [ 1055.266631][ T4721] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1055.283317][ T4721] bond4 (unregistering): Released all slaves [ 1055.300207][ T4721] bond5 (unregistering): Released all slaves [ 1055.315141][ T4721] bond6 (unregistering): Released all slaves [ 1055.445338][ T4721] tipc: Disabling bearer [ 1055.451061][ T4721] tipc: Left network mode [ 1055.505525][T10248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1055.524193][T10264] netlink: 'syz.1.9782': attribute type 11 has an invalid length. [ 1055.547387][T10264] __nla_validate_parse: 3 callbacks suppressed [ 1055.547408][T10264] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.9782'. [ 1055.741773][T10303] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9794'. [ 1055.909530][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9797'. [ 1056.051696][T10309] xt_TCPMSS: Only works on TCP SYN packets [ 1056.465329][ T4721] hsr_slave_0: left promiscuous mode [ 1056.477398][ T4721] hsr_slave_1: left promiscuous mode [ 1056.495901][ T4721] veth0_macvtap: left promiscuous mode [ 1056.582131][T10353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9810'. [ 1056.783539][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9804'. [ 1056.876044][T10362] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.9813'. [ 1056.894045][T10362] net_ratelimit: 23 callbacks suppressed [ 1056.894068][T10362] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1057.061775][ T4721] team0 (unregistering): Port device team_slave_1 removed [ 1057.088320][ T4721] team0 (unregistering): Port device team_slave_0 removed [ 1057.876116][T10398] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9822'. [ 1057.898965][ T4721] IPVS: stop unused estimator thread 0... [ 1057.942290][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9824'. [ 1058.095321][T10411] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9826'. [ 1058.121562][T10411] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1058.217466][T10421] netlink: 'syz.4.9829': attribute type 1 has an invalid length. [ 1058.233364][T10421] netlink: 'syz.4.9829': attribute type 2 has an invalid length. [ 1058.289883][ T29] audit: type=1804 audit(1772439967.943:11): pid=10423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9828" name="/newroot/157/cgroup.controllers" dev="tmpfs" ino=812 res=1 errno=0 [ 1058.365310][ T29] audit: type=1800 audit(1772439967.943:12): pid=10423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9828" name="cgroup.controllers" dev="tmpfs" ino=812 res=0 errno=0 [ 1058.432959][T10438] xt_TCPMSS: Only works on TCP SYN packets [ 1058.609790][T10449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1058.751727][T10458] tipc: Failed to obtain node identity [ 1058.757797][T10458] tipc: Enabling of bearer rejected, failed to enable media [ 1058.898156][T10466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9843'. [ 1058.909283][T10464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1059.065072][T10479] netlink: 'syz.0.9845': attribute type 1 has an invalid length. [ 1059.377564][ T51] Bluetooth: hci0: link tx timeout [ 1059.383897][ T51] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1059.398954][ T5835] Bluetooth: hci0: link tx timeout [ 1059.404938][ T5835] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1059.421437][T10496] netlink: 'syz.1.9848': attribute type 4 has an invalid length. [ 1059.435866][T10496] netlink: 'syz.1.9848': attribute type 4 has an invalid length. [ 1059.531975][T10498] syzkaller0: entered promiscuous mode [ 1059.537772][T10498] syzkaller0: entered allmulticast mode [ 1059.630819][ T5835] Bluetooth: hci0: link tx timeout [ 1059.636010][ T5835] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1059.983033][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1059.991121][ C1] lec:lec_tx_timeout: lec0 [ 1061.427384][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 1062.205534][T10528] __nla_validate_parse: 3 callbacks suppressed [ 1062.205560][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9859'. [ 1062.535832][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9869'. [ 1063.046280][T10609] syzkaller0: entered promiscuous mode [ 1063.057085][T10609] syzkaller0: entered allmulticast mode [ 1063.076425][T10611] syzkaller1: entered promiscuous mode [ 1063.090163][T10611] syzkaller1: entered allmulticast mode [ 1063.141850][T10612] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9877'. [ 1063.151844][T10612] netlink: 'syz.3.9877': attribute type 63 has an invalid length. [ 1063.366762][T10621] netlink: 'syz.4.9879': attribute type 2 has an invalid length. [ 1063.377037][T10621] netlink: 119 bytes leftover after parsing attributes in process `syz.4.9879'. [ 1063.580459][T10629] syzkaller0: entered promiscuous mode [ 1063.589647][T10629] syzkaller0: entered allmulticast mode [ 1063.726746][T10636] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1063.802906][T10638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1063.970944][T10642] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1064.022002][T10642] IPv6: NLM_F_CREATE should be specified when creating new route [ 1064.041456][T10642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1064.048783][T10642] IPv6: NLM_F_CREATE should be set when creating new route [ 1064.073970][T10642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1064.081343][T10642] IPv6: NLM_F_CREATE should be set when creating new route [ 1064.198537][T10658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9893'. [ 1064.250812][T10657] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9892'. [ 1064.306374][T10665] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9895'. [ 1064.750065][T10694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9903'. [ 1064.876798][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9905'. [ 1064.886578][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9905'. [ 1065.501804][T10725] x_tables: duplicate underflow at hook 1 [ 1065.504628][T10726] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 1065.732552][T10746] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1065.946932][T10761] vlan2: entered promiscuous mode [ 1065.960141][T10761] bridge0: entered promiscuous mode [ 1065.965567][T10761] vlan2: entered allmulticast mode [ 1066.000803][T10761] bridge0: entered allmulticast mode [ 1066.048629][T10753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1066.485026][ T5969] IPVS: starting estimator thread 0... [ 1066.649752][T10798] IPVS: using max 29 ests per chain, 69600 per kthread [ 1067.025963][T10837] netlink: 'syz.2.9943': attribute type 8 has an invalid length. [ 1067.252780][T10847] __nla_validate_parse: 16 callbacks suppressed [ 1067.252804][T10847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9946'. [ 1067.428984][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9949'. [ 1067.652667][T10881] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9954'. [ 1067.700779][T10881] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9954'. [ 1067.829130][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9956'. [ 1067.839308][T10889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9956'. [ 1068.032749][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9960'. [ 1068.045184][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9960'. [ 1068.133312][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9960'. [ 1068.150239][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9960'. [ 1068.419898][T10926] syzkaller0: entered promiscuous mode [ 1068.443355][T10926] syzkaller0: entered allmulticast mode [ 1068.578223][T10926] tipc: Started in network mode [ 1068.583528][T10926] tipc: Node identity 2a069e6f951d, cluster identity 4711 [ 1068.600643][T10926] tipc: Enabled bearer , priority 0 [ 1068.658491][T10916] tipc: Resetting bearer [ 1068.744513][T10941] [ 1068.746935][T10941] ====================================================== [ 1068.753995][T10941] WARNING: possible circular locking dependency detected [ 1068.761222][T10941] syzkaller #0 Not tainted [ 1068.765670][T10941] ------------------------------------------------------ [ 1068.772720][T10941] syz.4.9973/10941 is trying to acquire lock: [ 1068.778904][T10941] ffffffff8fd48c18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 1068.788249][T10941] [ 1068.788249][T10941] but task is already holding lock: [ 1068.795648][T10941] ffff8880261c0370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1068.804929][T10941] [ 1068.804929][T10941] which lock already depends on the new lock. [ 1068.804929][T10941] [ 1068.815357][T10941] [ 1068.815357][T10941] the existing dependency chain (in reverse order) is: [ 1068.824394][T10941] [ 1068.824394][T10941] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1068.832521][T10941] _raw_spin_lock_bh+0x36/0x50 [ 1068.837922][T10941] nr_rt_ioctl+0x215/0xf90 [ 1068.842907][T10941] sock_do_ioctl+0x101/0x320 [ 1068.848124][T10941] sock_ioctl+0x5c6/0x7f0 [ 1068.853012][T10941] __se_sys_ioctl+0xfc/0x170 [ 1068.858192][T10941] do_syscall_64+0x14d/0xf80 [ 1068.863340][T10941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.869874][T10941] [ 1068.869874][T10941] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1068.877756][T10941] _raw_spin_lock_bh+0x36/0x50 [ 1068.883091][T10941] nr_rt_device_down+0xbe/0x860 [ 1068.888586][T10941] nr_device_event+0x137/0x150 [ 1068.893912][T10941] notifier_call_chain+0x1be/0x400 [ 1068.899613][T10941] __dev_notify_flags+0x16d/0x310 [ 1068.905330][T10941] netif_change_flags+0xe8/0x1a0 [ 1068.910830][T10941] dev_change_flags+0x130/0x260 [ 1068.916316][T10941] dev_ioctl+0x7b4/0x1150 [ 1068.921257][T10941] sock_do_ioctl+0x23e/0x320 [ 1068.926422][T10941] sock_ioctl+0x5c6/0x7f0 [ 1068.931304][T10941] __se_sys_ioctl+0xfc/0x170 [ 1068.936452][T10941] do_syscall_64+0x14d/0xf80 [ 1068.941593][T10941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.948034][T10941] [ 1068.948034][T10941] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1068.955978][T10941] __lock_acquire+0x15a5/0x2cf0 [ 1068.961425][T10941] lock_acquire+0xf0/0x2e0 [ 1068.966407][T10941] _raw_spin_lock_bh+0x36/0x50 [ 1068.971736][T10941] nr_rt_ioctl+0x40c/0xf90 [ 1068.976708][T10941] sock_do_ioctl+0x101/0x320 [ 1068.981846][T10941] sock_ioctl+0x5c6/0x7f0 [ 1068.986720][T10941] __se_sys_ioctl+0xfc/0x170 [ 1068.991851][T10941] do_syscall_64+0x14d/0xf80 [ 1068.996981][T10941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.003417][T10941] [ 1069.003417][T10941] other info that might help us debug this: [ 1069.003417][T10941] [ 1069.013692][T10941] Chain exists of: [ 1069.013692][T10941] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1069.013692][T10941] [ 1069.027569][T10941] Possible unsafe locking scenario: [ 1069.027569][T10941] [ 1069.035127][T10941] CPU0 CPU1 [ 1069.040512][T10941] ---- ---- [ 1069.045921][T10941] lock(&nr_node->node_lock); [ 1069.050735][T10941] lock(nr_node_list_lock); [ 1069.057904][T10941] lock(&nr_node->node_lock); [ 1069.065210][T10941] lock(nr_neigh_list_lock); [ 1069.069909][T10941] [ 1069.069909][T10941] *** DEADLOCK *** [ 1069.069909][T10941] [ 1069.078089][T10941] 2 locks held by syz.4.9973/10941: [ 1069.083303][T10941] #0: ffffffff8fd48c78 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 1069.092820][T10941] #1: ffff8880261c0370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1069.102507][T10941] [ 1069.102507][T10941] stack backtrace: [ 1069.108417][T10941] CPU: 0 UID: 0 PID: 10941 Comm: syz.4.9973 Not tainted syzkaller #0 PREEMPT(full) [ 1069.108440][T10941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1069.108451][T10941] Call Trace: [ 1069.108459][T10941] [ 1069.108468][T10941] dump_stack_lvl+0xe8/0x150 [ 1069.108497][T10941] print_circular_bug+0x2e1/0x300 [ 1069.108527][T10941] check_noncircular+0x12e/0x150 [ 1069.108564][T10941] __lock_acquire+0x15a5/0x2cf0 [ 1069.108588][T10941] ? kasan_save_track+0x4f/0x80 [ 1069.108613][T10941] lock_acquire+0xf0/0x2e0 [ 1069.108634][T10941] ? nr_rt_ioctl+0x40c/0xf90 [ 1069.108654][T10941] ? nr_rt_ioctl+0x40c/0xf90 [ 1069.108669][T10941] _raw_spin_lock_bh+0x36/0x50 [ 1069.108694][T10941] ? nr_rt_ioctl+0x40c/0xf90 [ 1069.108709][T10941] nr_rt_ioctl+0x40c/0xf90 [ 1069.108730][T10941] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1069.108751][T10941] ? apparmor_capable+0x126/0x170 [ 1069.108856][T10941] ? capable+0x88/0xe0 [ 1069.108892][T10941] ? nr_ioctl+0x1b1/0x3b0 [ 1069.108917][T10941] sock_do_ioctl+0x101/0x320 [ 1069.108938][T10941] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1069.108955][T10941] ? do_futex+0x395/0x420 [ 1069.108987][T10941] sock_ioctl+0x5c6/0x7f0 [ 1069.109006][T10941] ? __pfx_sock_ioctl+0x10/0x10 [ 1069.109023][T10941] ? __fget_files+0x2a/0x420 [ 1069.109057][T10941] ? __fget_files+0x3a0/0x420 [ 1069.109081][T10941] ? __fget_files+0x2a/0x420 [ 1069.109105][T10941] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1069.109127][T10941] ? __pfx_sock_ioctl+0x10/0x10 [ 1069.109144][T10941] __se_sys_ioctl+0xfc/0x170 [ 1069.109164][T10941] do_syscall_64+0x14d/0xf80 [ 1069.109180][T10941] ? trace_irq_disable+0x3b/0x150 [ 1069.109206][T10941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.109224][T10941] ? clear_bhb_loop+0x40/0x90 [ 1069.109243][T10941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.109261][T10941] RIP: 0033:0x7fca79d9c799 [ 1069.109278][T10941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.109294][T10941] RSP: 002b:00007fca7ac28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1069.109313][T10941] RAX: ffffffffffffffda RBX: 00007fca7a015fa0 RCX: 00007fca79d9c799 [ 1069.109327][T10941] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 1069.109338][T10941] RBP: 00007fca79e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1069.109350][T10941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.109362][T10941] R13: 00007fca7a016038 R14: 00007fca7a015fa0 R15: 00007fff3b618298 [ 1069.109385][T10941] [ 1069.365876][T10916] tipc: Disabling bearer