last executing test programs: 9.166060217s ago: executing program 3 (id=1213): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001180)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf4861, 0x4, 0xfffffc01, 0x10001}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x94}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 8.537396989s ago: executing program 3 (id=1218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000010000305000000000000070000000000", @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 8.321155467s ago: executing program 3 (id=1221): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 3.975757658s ago: executing program 0 (id=1261): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000840)={@empty, @private=0xa010100, 0x800, 0x2}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711068000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) 3.819175601s ago: executing program 0 (id=1264): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002", 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc04c880}, 0x20008000) 3.717811435s ago: executing program 4 (id=1266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r2, 0x100000000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) writev(r5, 0x0, 0x0) epoll_create1(0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x2abc, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2a6c, 0x3, 0x0, 0x1, [{0x253c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x106c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_ELEM_DATA={0x12b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x42, 0x1, "bca226bf528be4daea8dda630177a049b5e967cc41afde3dab2881bba957e01b18b5341bd41840473ca26b52cabfff7c662f32e6586d6fab84216dc9053b"}, @NFTA_DATA_VALUE={0x6d, 0x1, "4edf616b913c7483db089d9fe3481da46e779bc4b17349d399120ac532b1f6c2961146cfab1bddf127407599d7685accb0f2e115f7c978dee5def19d283a8c8d7adabcf6c6dd7ef1a78af02b453415bc64ac461ee5021bf1242bf30dd1b9955f6b241d834a082b2959"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x74, 0x1, "665c87b2b09f2b859fa173441a9b531bad84e56893a29a93c1f9504090e0d2f82a291221c3c711dda98ce5069b6a160ba461a31a54f71ed79a4eb2cd395caa79157e9cbed83c73122bb582bc01f7581f38e2f180349e0c2d78da529fe7c51df645efde11f163d234f5506089eab3885d"}, @NFTA_DATA_VALUE={0x59, 0x1, "ddd007fcab857662ca0fca6e1a87101f8e763ce4d68cc5c261aaee3883cdbf9e092cd218085d2a494161ca04597c45dfabf9c110d02081ff4439ee3f3508af09cd836ce5bb35a2ab5d042eafad0671a31480731671"}, @NFTA_DATA_VALUE={0xb5, 0x1, "4e2431e29d95bdf33993cd30ab1b146651d0478b459ea1ab97fa188ad69956b319a3a0d0a4b49fdd24c6d3dfc4fc70809153811e285b75729e803e134ad2c45aa0f1717dcfe85f25224e1c8df5e8b1eaf1f920c96692785e68b3a04c4f6b6a91fcc3a154d610d81a343af78e9982d68a8e37f91842c346407345091ea6168deead3e6413996d4b8808aa508b3d2edd210cb2007c0026329a4fc5c5aef52de4d40b11cc3c4fffea45cda66bda63fb554334"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x1e4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0xff69, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "22575248a59ab9e481dc1e9980fa9eb71c9b098f659f1f8681563582a658daf2785b2577283150eeafbd621d3f4be43092fe48ef205639767e92445118eee450f6cf941932aafee1016a5fc642c150c757de42474c722bd1d8941ed56bade11c5adc0d2bff1c7bc36b8d50ed73335b3dc5805c35958a8841f5ffca0d793d4c88ac0cadb0a7d25dca1db4efd47c282b54619d198ba57380479d061d7f04b00a1f7ccba5f589bac8c67efcff2862ba361019cec39a4851253288f6da451e3786cf37ec1c53d8093cabfd45ff42f0b4b46f333e60552791c92f87"}, @NFTA_DATA_VALUE={0x36, 0x1, "6bf6bcd814779c283f4ebef25faca8c45707417dfbddc10d8d90c2ed9b056a57566d9c30510d660d1fca79b0f75fca673d5e"}, @NFTA_DATA_VALUE={0x77, 0x1, "2756a227444ad3f9ff2df2169f2b20fb56465101ca6e365ae0d7ee2fceb95c2dc6cce674af46766b53ecaf689f336d11f6ca339e563456431fda648f995c5b1813fa54d847aed7a7b02e63080de873706889a2ff6726821fd39c1b6feb8d75d22978fc64bfdcade3b14a93851e97f374afc4e2"}]}]}, {0x488, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x85, 0x6, 0x1, 0x0, "8539ea3126605c0c197ba33da4f04340b627239b4c91a23de76dac039952ed268226e9284709ae294187c64d575b9d21f7c7df7b7da3b0221a532188d3795dbe9d91e79652416bc00a17cd620172944a7213e970d5dd21329c40f12f0a1e49135a8fd0307ea5e67443f930da1c5b0f47aea49ce09dfa083d35b5cffa57cc699678"}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_ELEM_KEY={0x294, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd2, 0x1, "836f0fb657ab747c569534c9ec9107b3b76659597b689a5c04429e696c861e0b94ef9a592ad79b2aea3c6b2af5b5b5542f65772cac353316409aef19ee59424c8fc44b37f26eac07f9f1bebf25a6c00075972ec293971cde6382e7db1aa30bc0dd75af9283a574d16af2420934cb606a31c1621cb2340cdd25fc42e5002cf37627b3eb5cc3f0b0d0c21cd5d5fd8e482dadfc19f599ac20141659b3d2135d5ca24674aa9dbc5bd7e09d9320c2d558b9ca2b5c2fc703c85b30437a728c6663bf7e95cc5d24a272d682ba32509093ed"}, @NFTA_DATA_VALUE={0x46, 0x1, "367bead3e5c81059b833ebb4b6ff420693782c428d983e89eabb1824ca402a5108a704947866db78ca1b8286fa789e1123be2e7cec7c1c15f0aa07f339792be8cace"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x85, 0x1, "ff3c99ddf7860953ead4ca6385601d05685ec846e4934bdadc20615215f7c20f1d5ded47058f6b732531c3c75e900585c5872926d6b91d17d4ed92b015352556a83e1f404eb8d8b172b439ef9938a16da26cf8b397b65bc50205a73fc23de1e8f4e0c47c425b8a6b498d2050ca03a8b61f06b0ab5b720d0d4c9ae53d9209305190"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x15c, 0xb, 0x0, 0x1, [{0xfc, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xec, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0xc9, 0x3, "6b46bed0a66535c032524baeb489b203ebcf760b0bf11216253598465802740d2cc036daa55766e4e331ad390257dda1820d879543642bcb715d84473576bf328a2476ac9714360c64dbc5a25e26cf9bf3b9a52931dd4aa7ecf518ee24f3a6a584c72419f09802a8d25ac06fed58425cf41e83544c51ddb441d12e23225d85c63639dde9bf02c9977d0e1b3a08fc6b7bdb3d1b547e4999c57a9c6cdff352be134029d7433ddb55e9558b92b833c98b5c52532a12fd5bf0d4948c91d09e47d21ecfaff279ce"}, @NFTA_TARGET_REV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x98, 0x6, 0x1, 0x0, "c6cbf2621df51415b75198b4765ad3d3567a90b0448f3d19a7d57a218c152d902260eae9eb25a202a68b7840636b5d508c1904716ac269d3cf5fbf66dba23949b9f0ec94db3aeca58da83726a717c6314c298abc4e0d1bcd29c49b232ae99306de4a255a58c2e1cd86c8a37a5d8dd82d7265b9d9e73a17e3f45b12c8e7996bc0b70fdc07aa9da00c03c36f1029c32dc4323e40b3"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2b24}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000000000008001e00eeffffff05001d"], 0x2c}}, 0x80) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket(0x11, 0x6, 0xd3) 3.644331625s ago: executing program 0 (id=1267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x6a, 0x2, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket(0x11, 0x4, 0xb) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x11) write$tun(r0, &(0x7f00000024c0)=ANY=[@ANYBLOB="0000080000000300d69b000000004915002c0065000004019078ac1414bbffffffff940ff00c8e2b2410c08a00120090780000ffff"], 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket(0x1d, 0x2, 0x6) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x6a, 0x2, 0x0, &(0x7f0000000300)) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket(0x11, 0x4, 0xb) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x11) (async) write$tun(r0, &(0x7f00000024c0)=ANY=[@ANYBLOB="0000080000000300d69b000000004915002c0065000004019078ac1414bbffffffff940ff00c8e2b2410c08a00120090780000ffff"], 0x3a) (async) 3.339340313s ago: executing program 0 (id=1272): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001180)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf4861, 0x4, 0xfffffc01, 0x10001}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x94}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 3.058572464s ago: executing program 0 (id=1274): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) r4 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000440)={0x1, 0x9, 0x63, &(0x7f0000000340)=""/99}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f0000002500)=""/4101, 0x0, 0xe}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xcd3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c, 0x0}}, {{&(0x7f0000002980)={0xa, 0x4e21, 0x5, @empty, 0x8}, 0x1c, &(0x7f0000003c00)=[{0x0}, {&(0x7f0000003ac0)="e6dc648ea089b992a03af4354caea3986bc1ebf2ed6eb4f6c54a4a964200b62b1119", 0x22}], 0x2}}], 0x2, 0x40000000) shutdown(r5, 0x1) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f000000240000400007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYRES64=r6, @ANYRES64=r6], 0x6c}}, 0x4004800) 2.961564223s ago: executing program 1 (id=1276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000bc000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000300000061107100000000009521"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000000)={0x34, r4, 0xf1aad47e89fb43b5, 0xfffffffe, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x10) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) (rerun: 64) 2.86729232s ago: executing program 1 (id=1277): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4020000000000256111730000000000850000001d0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x10, 0x80, 0x362, 0xc, {{0x6, 0x4, 0x3, 0x2f, 0x18, 0x65, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@generic={0x86, 0x4, "7ce5"}]}}}}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) unshare(0x6a040000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x4000) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@void, @val={0x3, 0x0, 0x27, 0x8000, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @dev={0xac, 0x14, 0x14, 0x26}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x700, 0x0, 0x18, {[@timestamp={0x8, 0xa, 0x7f, 0x7fff}]}}}}}}, 0x3e) 2.750848102s ago: executing program 4 (id=1278): unshare(0x28000600) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000"], 0x0}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfd3fd, 0x400}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000}, 0x4000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x20, 0x1404, 0x10, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x44, r6, 0x800, 0x70bd24, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c800}, 0x4040834) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000040)=0x4a) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="89000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x7b, &(0x7f00000002c0)=""/123, 0x0, 0xc8, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) 2.530116106s ago: executing program 0 (id=1281): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}}, 0x4b}, 0x1, 0x0, 0x0, 0x20040084}, 0x10) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/77, 0x37}, {&(0x7f00000007c0)=""/232, 0xf2}, {&(0x7f0000000540)=""/32, 0x20}], 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r0, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) r4 = socket(0x35, 0x800, 0x6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$IMGETCOUNT(r4, 0x61e2, 0x0) 2.206478317s ago: executing program 3 (id=1282): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000140)) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000011140102"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="5a35f3627000ffcbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8080) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}, 0x1c) ioctl$OCFS2_IOC_UNRESVSP64(r5, 0x4030582b, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x9, 0x2, 0x7fffffff}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000006e9cfd6680520ba25d55b08e9af63c37e0bfddf6921309c557cfac8695402bed921226d358e00dc10a26ceb1edaf207c725eacb40d123a583ae49d2974bf4acd6639", @ANYBLOB="772f2c76910fb7f28c4d47123c5993a5dca1040f5e3af9f9c9cf17159569489b26df9c17be8e6e307a659a731ba5d03ce7923d37fcf9ca613884fbeeb619f3d048a9f34c4b1a8449ea16a794e9d6e47801f671833dc75963adab5a22ebbea72aa973f4af0e9196679714007c0e7c33c932e5a525893ee1a6502908d13c8ec1b2de8a32633f023bcda660325ab71153b9e666720df553f61c34abd2392f20c9caff5e56bc31fd6fa5642598e13291a53ac0b113b33be0881b2ea64f41", @ANYBLOB="040027bd7000fedbdf250400000006001d000500000006000e0003000000"], 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) sendmmsg$inet(r12, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@getqdisc={0x2c, 0x26, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x7, 0xa}, {0xffe0, 0xe}, {0xb}}, [{0x4}, {0x4}]}, 0x2c}}, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 2.098752781s ago: executing program 4 (id=1283): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000019ffff0f0000000001000201180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfe4, &(0x7f0000001e00)=""/4068, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r1], 0x18}}, 0x2080) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce9a00000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.025983495s ago: executing program 4 (id=1284): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001180)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf4861, 0x4, 0xfffffc01, 0x10001}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x94}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 1.994687721s ago: executing program 2 (id=1285): unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) unshare(0x8000000) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 1.759420529s ago: executing program 2 (id=1286): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18, 0x4004881}, 0x14010096) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) 1.602547269s ago: executing program 2 (id=1287): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0xfffd, 0xa, 0x2}, {@in=@multicast1, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) readv(r3, &(0x7f0000000340)=[{&(0x7f0000000400)=""/163, 0xa3}], 0x1) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0xe8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x7, 0x8}}, [@TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x9, 0xb2, 0x566, 0x1, 0x9, 0x5, 0x2}}, {0x8, 0x2, [0x8, 0x1]}}, {{0x1c, 0x1, {0x5, 0x81, 0x2, 0x0, 0x1, 0x401, 0x5, 0x3}}, {0xa, 0x2, [0x3db3, 0x0, 0x4]}}, {{0x1c, 0x1, {0xc, 0x9, 0xeac8, 0xfff, 0x0, 0x2, 0x0, 0x5}}, {0xe, 0x2, [0xfb, 0x4, 0xfff, 0x0, 0x0]}}, {{0x1c, 0x1, {0x73, 0xf4, 0x5ba, 0x5, 0x1, 0x9, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x8]}}, {{0x1c, 0x1, {0x2, 0xc0, 0x5, 0x4, 0x2, 0x7, 0x40, 0x1}}, {0x6, 0x2, [0x7ff]}}]}]}, 0xe8}}, 0x800) 1.538474123s ago: executing program 3 (id=1288): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x2b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x800) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r5, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.351345258s ago: executing program 4 (id=1289): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x134, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@generic="5321bc3e0bb5f35389147b8894f96c7cad9bfdbb1ab86d8aafb86e84294d807a2988229925d8d1e71161ab8ba4b2c84db6eb849f8a2bee3f6c2f945024c7ace7d3aff7c61aff846d4d1c7781a1a9bb6e1d2d29c26a0c4f429af48020999e9167b967220408e7a4ac23b72ed9abcbe378275bf80a58c4bb037bbd6bb916a6dc5854dbc44c686bb97b24c0c12779e9c33a7b6452625055842871189513e672f55b6afa2b7ec7bcb0c6b5327df01041bd06e1f2e22574b3199fd8ede927d2d3609e6efa895e0c385022a99a0df660adf2626b6ddad91173932a8c1e55480b0a223f298e3b86e83306925ed34c0b2a3fac81b0f4e05a776bacfab4449baf8e6a8b42"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x134}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000600)={0xfdf9, 0x8, 0x1f}, 0x8) sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3355}, 0x1c) recvmmsg(r5, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000140, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r6) write(r3, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r7, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, &(0x7f0000000080)) getsockopt$inet_mreqn(r2, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) 1.332085093s ago: executing program 1 (id=1290): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_create(0x4) (async) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xcaa54b5b2ca42ecc}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x7, 0x8000000}]}, @func_proto]}, {0x0, [0x2e, 0x0, 0x2e]}}, 0x0, 0x3d}, 0x28) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='ipvlan0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r2, 0x2000}, {r2, 0x8104}], 0x2, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800003000000000000001300000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.307242852s ago: executing program 2 (id=1291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, 0x3b, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x20}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x42, 0x8, 0x2, 0x0, 0x1}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r2, &(0x7f00000004c0), &(0x7f0000000780)=@udp6=r3, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7fffffff, 0x0, 0x1}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x7fffffffffffffff, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r6, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r7, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x400, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, r10, 0x80}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x0, 0x0, 0xffffffff, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}}, 0x0) 1.255398022s ago: executing program 3 (id=1292): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x94}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 977.330314ms ago: executing program 1 (id=1293): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0xc0, 0x24, 0x200, 0x70bd28, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0x3, 0xffff}, {0x0, 0xc}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x91, 0xd, 0x5, 0x1fcd7e99, 0x1, 0x1, 0x8, 0x3}}, {0xa, 0x2, [0xfff, 0x1, 0x5]}}]}, @qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x800}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0xb, 0xa, 0xb, 0xe, 0xd, 0xb, 0x10, 0xa, 0x10, 0xa, 0xe, 0x2, 0x0, 0x6, 0x5, 0xb], 0x0, [0x9, 0x0, 0x7fff, 0x3, 0xe4ab, 0x6, 0x3, 0x8, 0x81, 0x9, 0x7, 0x81, 0x4, 0x0, 0x6, 0xff7f], [0x7, 0x4, 0x7, 0x3, 0xae, 0x5, 0x8, 0x0, 0x14c6, 0x10, 0x5, 0x1, 0x0, 0x6, 0x7ff, 0x2]}}]}}]}, 0xc0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000001100000000ff0000080001"], 0x20}, 0x1, 0x200000000000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x4, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) unshare(0x400) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) readv(r2, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x0) r5 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000002c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0)=r4}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x53, 0x4, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7800, 0x10, 0x909, 0x10}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000002380)={{r5, &(0x7f0000000800)='/dev/ppp\x00', 0x6140, &(0x7f0000000840)={@align=0x3ff, {0x6, 0x6, 0x2, 0x4}}, 0x9ed, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x8d9}, {[0xffffffe7, 0xe0, 0xd1, 0x3]}, 0x7, 0x1000, &(0x7f0000001380)=""/4096}) setsockopt(r0, 0xf, 0x9, &(0x7f0000000900)="15818c205c3aa9", 0x7) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom(r11, 0x0, 0x0, 0x22, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0xc2, &(0x7f0000000040)=""/194, 0x41000, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0x14, 0xf, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f00000005c0)='GPL\x00', 0x6, 0xaf, &(0x7f0000000600)=""/175, 0x40f00, 0x44, '\x00', r8, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0xd, 0x3, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002400)=[r9, r10], 0x0, 0x10, 0xffffff7f}, 0x94) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x1, 'macvlan0\x00', {}, 0x101}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a00)={'ip6gre0\x00'}) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r12, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xa0a, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmsg$inet6(r12, &(0x7f0000000440)={&(0x7f0000000000)={0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, 0x0}, 0x804) 835.340999ms ago: executing program 2 (id=1294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmmsg$alg(r2, &(0x7f0000001240)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="9e29fff306089f83e464b01e5e963e41e9905d985916965ad1c4b3f7d14ad22e0bca21e1129c7f03a5af46bf75a2a4557f2fa14fe0761d7cdcbc95747eefd71082bc75f57fd72ebe8166629d8ad52d563fc29bc228ac87f5d913bd475ff87c27af7f93c46ab6612fa4653badac8371dfb4e95cea26cf9527cc201d26658918b795221ec0772f3b3fe3b9acfa589a481cb5376b", 0x93}], 0x1, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x108, 0x117, 0x2, 0xee, "8efa16907eeedd3ab5fa10ce4e70d7ad433a03d299574cb2028586bfe0a1df4a1817af3dfaf9b23988fb56787be03af0a273a1318db8687a8da12ef9ca703909079071d52dd90916b952503bdffd91f7b8686fbdb7e667e0cfec305f4a731c3ac7e7152b39fff64dbc4762cfe240de5a2ed943b8297c266ad24207a437e7eec67c3ecfc888f959872235b4230cead48947ba84742348dc7b5e18dbee1e9a4f63abb3b671dd85feb421c6b150b4624c9eeeb66671bf2985a4c680d987d7e7077292a325c290af04799256e377b48bd5871f8a5df609e3cf08b27ea99386f65195f193934f70f88fb72a720d12fa37"}, @iv={0x78, 0x117, 0x2, 0x63, "adcfedbebc35db532b19cfd1d15d17393df93aae0fa03627f6707e519a6db4e652fbd37ff02d5b116a1a4af3042f2d782f48514122a7c1def4be2e385dbbc5e223c452f7b09651c30c54d92a4b1e753748eefe8647c63b0928c30cbea46fb413c2edbb"}, @op={0x18}, @op={0x18}], 0x1e0, 0x24000894}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000800)="1a3b5e5d09fa2a6b5473a133ec0bcae5c9445e60f6baf9da03f9c8580789f34333884b179b17124d47d08267b75fd3834b6dc241f2f85a6ee3960d385c0b22791544703888947c8a4a67b763ffdd2d86", 0x50}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="41bf50545908736054702049060f626d79c658c58889ad6815ec58ef1fc6c1e98e339452e0d6fa02ec0df447305c29f69c3e50fa45098d4874360c0bc4bcafd8ef986c8a5cf78b974b72b7941a6f6bb268a20fedd341a65a2eadb0298513786507788dbc7076e3ae81b2830c6a441ef1a6c81d1f9d667b695bc0", 0x7a}, {&(0x7f0000000940)="5cbd840c6651dfea93d4b9df4e92fdaf2a536ba95b9604dae4c77dd7b5bd8631d40ae13f2d03cafafd21815e733caa0079203656e658233fff9f3748ea40bdae008e97b393e6e214cf2db67c04eed0d4d036249302f1bd4b1894e786853bebf1bad452fe7a2d17bcb2c702d2efbe1255d86c2bf851bc9fde70073f4c00d444", 0x7f}], 0x4, &(0x7f0000000a00)=[@assoc={0x18, 0x117, 0x4, 0x7fffffff}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x4048001}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a40)="6477cb02645003a3d6379e6f8de7b5189127ae6539ace3fe96cde92022e3177a1f9164307ba89faeea7f3f87f312fee0406e3f2320fad71f7766759638aac16c7cd52d507f42a2bc1962e95d962fb72e7d89dde58183e7b93931dcaedca3704bb6364c3ab9d86baf79976c94ac9c78d55a1226544c037950aafdd25cd7b6a86ff42fba8106e236b679264c03e7eee1bfb92c59df1a381ecdc4cb18e6ec381c3094d8ca82676078059cff15de79ceef0ad8dcec5aecb80293c18bb37fe2e1c5b67b7f71f7ca7b0d2339a3b6a2c6efa3795e705af464d987f69034a14a93", 0xdd}], 0x1, &(0x7f0000000b80)=[@iv={0xd0, 0x117, 0x2, 0xb7, "8f673c33a126ae1b1e6515955195cbd21d8d60ab0bfc70f6aa78940fcc91971fc47db1457fa0a295d3fe26c31e95c34a4f4dd2124595cf920d5323f5ed749d49277a7d1c1c872b4a736b8a9b7a7afdbeeb5e428fd3f665c0fed8476b0654a0c3b0446a00e681e5df3beefe334b19e5ea1aa86f62687d03f11df1e8108e288075ebdac9b343e330cd1bfed6e979d8feaa8347c49c285e5286050036f96f60f25e980ce11de9bc5d66756bc489ea154f5d673230684a2fde"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x68, "ad0c6227a362ecb672e0030cd582abfe348ab4d9e0d4c3210b7b2f58b983de92bb3bede9682ce62d350f16e7bcaa7df95726b550ace22e1be3e4a691eaa19ae0cece300fd90116c78b88a2b7d66566d21fa2d024ea3330be61ae04472a657e4b47d70c5e357b4220"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffff80}], 0x198, 0x4000800}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d40)="6027eab2c1c8e4c9f20165f5b4", 0xd}, {&(0x7f0000000d80)="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", 0xfc}, {&(0x7f0000000e80)="139556b81f530b5b7a2fb99c3dad4451862f60c17f2957a202fddac92655cf4f3ae31545b6c77251ef541763115199699ef02b0f2dffdb9a5c40c3715a0d3435217df1a808332ac5a2fa95763fffff602cb4db4f765b40bb7a9a90cc06c8288d67bbba6aec689cb2c182056cdaa25159e993ca817a2f6de29d53784aebaa5c484d0c3d6b859e352dad04d6fb5c576a29f9438dc40c61e463256ded308b637b80b2ff47e6acf235b6ee11178e05f39df2e95c4ff770902ef6d150a96b00389fad8e72363504373fb06f32e0f30c7a002210a9b2c9543e10b0859641936872ba0960e31deda83dc0cb3336773095fda5931df83bd8243c05b7ce97", 0xfa}, {&(0x7f0000000f80)="fef82539cdefbbf787ee3bf8e9462922b50ebc09ed966d7fabdbae1351941f6e5d4f15767162917fe1d85bea2d6258156d2cdcad6f5f5766bbc00e87cf7c78db30f799d240f18002ce0edcb03fb7a908f0484196", 0x54}, {&(0x7f0000001000)="6ad018f4b8a4608a2a2949fb1fc785e989b348a844aef5137fc8a26097b0018b31c6c3e1fe93fc3741c68efc06591e338a1665ea8779ea3b2fd3f9c6f56044de87f71d3ad5aea68cd3410602e8c18e9e915d52e3797776f86cba88a7672586ee83876c4cb5054af62f1b7230d6eaf19f2964304e23015668ada01549827bf4e34e40fb33f9420ec2735aa9906cf1864692b98e9424dd22fa8ba1601d28e83e891d5ef5", 0xa3}], 0x5, &(0x7f0000001140)=[@op={0x18}, @op={0x18}, @iv={0x60, 0x117, 0x2, 0x49, "cb762448e6a0cf5c011140f3f8351752c1c3498c131de19f150ce78b629d2c239c6cfabbd250c3e4535ea1f795d61cbc554f3c30a4c3bca1bceb9f66664d07a29b70732a234a4b1918"}, @assoc={0x18, 0x117, 0x4, 0x7f}, @iv={0x58, 0x117, 0x2, 0x3f, "819ee994eb5cd6ed0187f7762c932372409d376f7bd02a80880513e1554aa51f781b694f17dc44adf5b852a417b33616f60d89da2f2cec32694b3265b0c12b"}], 0x100}], 0x4, 0x4000001) syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800466100400066000002069078ac1e0001ac1414aa000100000000000000000000000000000000000400004e2300004e0c000000040000000400000003000000022bf139a7787d1ae5970aada2bab59d9f8aafc282b2cf3e3b46a57b5d55b90dd28f9a22dec5dafe7a0abb5c49a82e75d5bd3edd17a1304664da80df782499e20d9591b58c33a71ecc8f1b544709e59b4d5b6a7404e16dd95c032e30b672"], 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltaction={0x14, 0x31, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20008800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getnexthop={0x28, 0x76, 0xb0d, 0x20, 0x25dfdbff, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 500.054196ms ago: executing program 1 (id=1295): syz_emit_ethernet(0x5e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000280600fc000000000000000000000000000000ff0200000000000000000000000000014e244001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a08200009078000000fe06e2d4c3d9080aff00"/28], 0x0) syz_emit_ethernet(0x80, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @remote, @void, {@mpls_uc={0x8847, {[{0x8, 0x0, 0x1}, {0x5391}, {0x80}, {0xc38, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8}, {0x400, 0x0, 0x1}], @llc={@llc={0x4, 0x2, '?', "300c83660f03781ece630c31f68862ff9df9042303a2c161e6d377e9d5c5694db3d4757fc12723f10ce766d44c6ebb0a922d2219200034bc0da5eaa21280e46955d01aa300b9cccf1356aeae6aac645bca6b57"}}}}}}, &(0x7f0000000080)={0x0, 0x4, [0x165, 0xdba, 0xa74, 0xcf1]}) 303.276977ms ago: executing program 1 (id=1296): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, {0x0, 0x4}}, 0xfffffffd, 0x7fff}, [@mark={0xc, 0x15, {0x35075a, 0x5}}, @proto={0x5, 0x1b}]}, 0x10c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10}, 0x10}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x100}, 0x40000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x303}, '\x00', "9a3790020d4100", "00000001", "3b8eda4d6920ba22"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r4, 0x0, 0x20000000002) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000480)={&(0x7f0000000080)="007525d30962dfc2b64f195ea3bf6e2af5caf20df6893f304221c611403564bf9b2035bdd4482230c8339dd5c0f8490978bf83bebbe6978c9461066b79fae69ccfbd625570adeab7cb0081bdc70fcef6b9b4799dfa01c300442c109a65ea399685cd9fe4e309b027a84f35ed98de2d79344fd1312cf0b1f5443c5261203867221d3be56b978326ef158eaa253d080a157b3f2a94bb", &(0x7f00000002c0)=""/115, &(0x7f0000000340)="8b0e50216e75430b2555104aac02c4fc7f752fc07c0a81fcd338e9656c9419562a2f5f4240475e2a6a6ec743fc9e0de99ddc51", &(0x7f0000000380)="dc18a2b3a5b82f8de2439812facfa4a2e41b67d1a3e8ac391c791df2278b0d8488492e95e892d5d3ca29b3cff5ee969e68375c7b91f0a0dd5454b9d6d805e22a8e5a9f033f1a5428663b026c1d17d10a2c5a93539271983ef0a4c1384bfeb07d09d2ba991f29815371990326f5daedbc3acbd4bdc933cc08ec624f07993d3524886af1a60e306c743aaa5eb993929e41065bdff78ce70e05c7eaa36247e72288c8e1c5335e58f663d19cb41c65a876e140d00a20b958bc67b6fd312b8a70c9a7f31819e07345473226316dfaa2ba9bf55fbe6c925bd3e9d31e7343df245b709559", 0x4482354, r4}, 0x38) 168.077778ms ago: executing program 2 (id=1297): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x81, @f={0xf8, 0x2, 0x3, 0x2, 0x0, 0x4, 0x2, {0x9, 0x73, "92b54a8974fea4d5cd0079f69b25e324ab9deea5c428e2b4eb19679c1eb31c0b0e2814a1dc8c80d014174a94e77450c8446b47a38e3048a73331b410205a394c15fbf4d939d422ce8686861618b3af8b5ebd67f1c242923129c6d2094afe1ad48e2c6b0690d780c4b55ffc4fb48ea75bcac640"}, 0x7f, 0x3, 0xb2, 0x1}}, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000bc0008000000800095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 0s ago: executing program 4 (id=1298): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x2f, 0xb, 0xb, {0x1, @sctp_ip6_spec={@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e24, 0x4e24, 0x4}, {0x0, @multicast, 0xfff7, 0xe, [0x8, 0xe939]}, @sctp_ip4_spec={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x15}, 0x4e24, 0x4e24, 0x13}, {0x0, @local, 0x0, 0x1, [0xffffffe8, 0x8]}, 0x6b, 0x2}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x6a, 0x2, 0x0, 0x0, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0x7fff, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x393b478e, 0xd6, 0x0, 0x80020, 0xffffffffffffffff, 0x10001, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0xe}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 80.287452][ T5813] cgroup: Unknown subsys name 'net' [ 80.417491][ T5813] cgroup: Unknown subsys name 'cpuset' [ 80.426005][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.072761][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.246220][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.255152][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.263310][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.266173][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.271300][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.278747][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.286324][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.300676][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.303077][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.309517][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.319491][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.323484][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.329266][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.338184][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.344944][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.351090][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.357166][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.373135][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.383347][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.390584][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.399108][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.409529][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.409775][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.425996][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.432842][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.089190][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 85.164271][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 85.187178][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 85.269615][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 85.340037][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 85.489249][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.497250][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.504650][ T5826] bridge_slave_0: entered allmulticast mode [ 85.511798][ T5826] bridge_slave_0: entered promiscuous mode [ 85.527767][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.534914][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.542277][ T5826] bridge_slave_1: entered allmulticast mode [ 85.550053][ T5826] bridge_slave_1: entered promiscuous mode [ 85.599562][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.606909][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.614251][ T5837] bridge_slave_0: entered allmulticast mode [ 85.621410][ T5837] bridge_slave_0: entered promiscuous mode [ 85.638635][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.645842][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.653548][ T5825] bridge_slave_0: entered allmulticast mode [ 85.660738][ T5825] bridge_slave_0: entered promiscuous mode [ 85.685332][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.692879][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.700026][ T5837] bridge_slave_1: entered allmulticast mode [ 85.707433][ T5837] bridge_slave_1: entered promiscuous mode [ 85.724734][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.731912][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.739671][ T5825] bridge_slave_1: entered allmulticast mode [ 85.746953][ T5825] bridge_slave_1: entered promiscuous mode [ 85.776580][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.797048][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.804319][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.811602][ T5831] bridge_slave_0: entered allmulticast mode [ 85.820722][ T5831] bridge_slave_0: entered promiscuous mode [ 85.839486][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.846846][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.854489][ T5828] bridge_slave_0: entered allmulticast mode [ 85.861599][ T5828] bridge_slave_0: entered promiscuous mode [ 85.871381][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.906519][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.915871][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.923265][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.930556][ T5831] bridge_slave_1: entered allmulticast mode [ 85.939317][ T5831] bridge_slave_1: entered promiscuous mode [ 85.959822][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.967169][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.975744][ T5828] bridge_slave_1: entered allmulticast mode [ 85.983118][ T5828] bridge_slave_1: entered promiscuous mode [ 86.003204][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.037289][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.059618][ T5826] team0: Port device team_slave_0 added [ 86.078743][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.090615][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.101957][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.122764][ T5826] team0: Port device team_slave_1 added [ 86.160951][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.183643][ T5837] team0: Port device team_slave_0 added [ 86.223822][ T5831] team0: Port device team_slave_0 added [ 86.231720][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.244244][ T5837] team0: Port device team_slave_1 added [ 86.250676][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.257707][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.284201][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.298222][ T5825] team0: Port device team_slave_0 added [ 86.309590][ T5831] team0: Port device team_slave_1 added [ 86.336220][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.343458][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.369511][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.388141][ T5825] team0: Port device team_slave_1 added [ 86.435429][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.442445][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.463448][ T5145] Bluetooth: hci4: command tx timeout [ 86.468690][ T5835] Bluetooth: hci0: command tx timeout [ 86.474362][ T5833] Bluetooth: hci2: command tx timeout [ 86.479889][ T5835] Bluetooth: hci3: command tx timeout [ 86.485552][ T5145] Bluetooth: hci1: command tx timeout [ 86.497257][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.533462][ T5828] team0: Port device team_slave_0 added [ 86.540118][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.548050][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.574451][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.608036][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.615536][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.642115][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.654167][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.661243][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.687597][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.701060][ T5828] team0: Port device team_slave_1 added [ 86.727433][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.734550][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.761214][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.773231][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.780208][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.806388][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.833930][ T5837] hsr_slave_0: entered promiscuous mode [ 86.840751][ T5837] hsr_slave_1: entered promiscuous mode [ 86.891344][ T5826] hsr_slave_0: entered promiscuous mode [ 86.898146][ T5826] hsr_slave_1: entered promiscuous mode [ 86.904745][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 86.910657][ T5826] Cannot create hsr debugfs directory [ 86.946110][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.953324][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.979679][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.027875][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.035506][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.062095][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.115942][ T5825] hsr_slave_0: entered promiscuous mode [ 87.122345][ T5825] hsr_slave_1: entered promiscuous mode [ 87.129277][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 87.135621][ T5825] Cannot create hsr debugfs directory [ 87.155411][ T5831] hsr_slave_0: entered promiscuous mode [ 87.162404][ T5831] hsr_slave_1: entered promiscuous mode [ 87.169427][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 87.175779][ T5831] Cannot create hsr debugfs directory [ 87.439905][ T5828] hsr_slave_0: entered promiscuous mode [ 87.447909][ T5828] hsr_slave_1: entered promiscuous mode [ 87.454546][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 87.460298][ T5828] Cannot create hsr debugfs directory [ 87.886037][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.917687][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.936347][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.955052][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.993284][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.017316][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.029204][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.052706][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.105846][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.128583][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.139150][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.165799][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.263628][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.280170][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.290299][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.300661][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.425306][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.446017][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.456804][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.469702][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.480463][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.510282][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.540405][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.543100][ T5145] Bluetooth: hci1: command tx timeout [ 88.548438][ T5844] Bluetooth: hci2: command tx timeout [ 88.552460][ T5833] Bluetooth: hci3: command tx timeout [ 88.557889][ T5835] Bluetooth: hci4: command tx timeout [ 88.557920][ T5835] Bluetooth: hci0: command tx timeout [ 88.611203][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.618769][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.629902][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.637772][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.654408][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.707018][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.714357][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.740355][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.747522][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.806337][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.876159][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.897561][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.948543][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.977021][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.984320][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.027989][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.035619][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.106192][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.113516][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.125577][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.132900][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.191291][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.302439][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.315476][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.368579][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.375880][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.446570][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.453773][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.480293][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.678135][ T5826] veth0_vlan: entered promiscuous mode [ 89.716006][ T5826] veth1_vlan: entered promiscuous mode [ 89.806496][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.822340][ T5826] veth0_macvtap: entered promiscuous mode [ 89.848458][ T5826] veth1_macvtap: entered promiscuous mode [ 89.937658][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.975045][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.025271][ T1333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.061231][ T1333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.095239][ T1333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.119020][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.128023][ T1333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.196272][ T5825] veth0_vlan: entered promiscuous mode [ 90.215623][ T5837] veth0_vlan: entered promiscuous mode [ 90.249670][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.267510][ T5825] veth1_vlan: entered promiscuous mode [ 90.288062][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.315457][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.323870][ T5837] veth1_vlan: entered promiscuous mode [ 90.372044][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.396314][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.458906][ T5825] veth0_macvtap: entered promiscuous mode [ 90.477912][ T5828] veth0_vlan: entered promiscuous mode [ 90.486990][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.511028][ T5837] veth0_macvtap: entered promiscuous mode [ 90.530018][ T5831] veth0_vlan: entered promiscuous mode [ 90.544363][ T5825] veth1_macvtap: entered promiscuous mode [ 90.561670][ T5837] veth1_macvtap: entered promiscuous mode [ 90.588010][ T5831] veth1_vlan: entered promiscuous mode [ 90.610465][ T5828] veth1_vlan: entered promiscuous mode [ 90.624263][ T5835] Bluetooth: hci3: command tx timeout [ 90.629809][ T5835] Bluetooth: hci1: command tx timeout [ 90.635437][ T5844] Bluetooth: hci4: command tx timeout [ 90.635462][ T51] Bluetooth: hci0: command tx timeout [ 90.640909][ T5844] Bluetooth: hci2: command tx timeout [ 90.681078][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.697167][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.756565][ T5831] veth0_macvtap: entered promiscuous mode [ 90.784746][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.793267][ T5831] veth1_macvtap: entered promiscuous mode [ 90.818348][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.876477][ T984] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.886070][ T984] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.934071][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.942146][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.960526][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 90.967960][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 91.016202][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.027948][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.111802][ T984] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.121400][ T984] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.151182][ T984] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.160748][ T984] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.200336][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.216763][ T5828] veth0_macvtap: entered promiscuous mode [ 91.247431][ T984] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.257767][ T984] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.305217][ T984] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.321464][ T984] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.337285][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.347966][ T5828] veth1_macvtap: entered promiscuous mode [ 91.360591][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.412231][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.447837][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.481338][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.537581][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.550650][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.569926][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.620041][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.644175][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.657515][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.668949][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.672593][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.703845][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.729122][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.775435][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.799954][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.821755][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 91.823288][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.838791][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.848587][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.919489][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.929630][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.962688][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.970766][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.982300][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.990337][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.072377][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.097521][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.216791][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.234286][ T29] cfg80211: failed to load regulatory.db [ 92.276987][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.431150][ T5977] syzkaller0: entered promiscuous mode [ 92.437497][ T5977] syzkaller0: entered allmulticast mode [ 92.450876][ T5980] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 92.493353][ T5980] netlink: 280 bytes leftover after parsing attributes in process `syz.0.12'. [ 92.598894][ T5980] pim6reg: entered allmulticast mode [ 92.678662][ T5979] pim6reg: left allmulticast mode [ 92.703136][ T5844] Bluetooth: hci4: command tx timeout [ 92.703180][ T51] Bluetooth: hci3: command tx timeout [ 92.708753][ T5844] Bluetooth: hci1: command tx timeout [ 92.708780][ T5844] Bluetooth: hci2: command tx timeout [ 92.708827][ T5835] Bluetooth: hci0: command tx timeout [ 92.809413][ T5984] @ÿ: renamed from veth0_vlan (while UP) [ 93.025081][ T5996] netlink: 504 bytes leftover after parsing attributes in process `syz.0.16'. [ 93.076035][ T5997] netlink: 504 bytes leftover after parsing attributes in process `syz.0.16'. [ 93.383357][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 94.393016][ T6086] Zero length message leads to an empty skb [ 94.553569][ T6086] syzkaller0: entered promiscuous mode [ 94.645593][ T6086] syzkaller0: entered allmulticast mode [ 94.752827][ T6086] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 94.781820][ T6090] tipc: Started in network mode [ 94.793774][ T6090] tipc: Node identity f6a076c3f5b2, cluster identity 4711 [ 94.805099][ T6090] tipc: Enabled bearer , priority 0 [ 94.833816][ T6100] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 94.846205][ T6090] tipc: Resetting bearer [ 94.869908][ T6090] tipc: Disabling bearer [ 94.925650][ T6100] bond1: entered promiscuous mode [ 94.930936][ T6100] bond1: entered allmulticast mode [ 94.966008][ T6100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.044418][ T6104] erspan1: entered allmulticast mode [ 95.417566][ T6119] syz.0.40 uses obsolete (PF_INET,SOCK_PACKET) [ 95.451208][ T6119] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 95.492218][ T6125] pimreg0: tun_chr_ioctl cmd 1074025681 [ 95.605902][ T6131] syzkaller1: entered promiscuous mode [ 95.627694][ T6131] syzkaller1: entered allmulticast mode [ 95.713227][ T6131] vlan2: entered promiscuous mode [ 95.718435][ T6131] bridge0: entered promiscuous mode [ 95.897024][ T6140] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 95.967073][ T6146] xt_hashlimit: size too large, truncated to 1048576 [ 96.090362][ T6151] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 96.350618][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 96.365056][ T6161] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 96.388855][ T6160] bond0: entered promiscuous mode [ 96.394693][ T6160] bond_slave_0: entered promiscuous mode [ 96.409622][ T6160] bond_slave_1: entered promiscuous mode [ 96.421427][ T6160] batadv_slave_0: entered promiscuous mode [ 96.432181][ T6160] batadv_slave_0: left promiscuous mode [ 96.441282][ T6160] bond0: left promiscuous mode [ 96.446949][ T6160] bond_slave_0: left promiscuous mode [ 96.454374][ T6160] bond_slave_1: left promiscuous mode [ 96.482041][ T6161] netlink: 'syz.0.53': attribute type 21 has an invalid length. [ 96.490072][ T6161] netlink: 128 bytes leftover after parsing attributes in process `syz.0.53'. [ 96.502464][ T6161] netlink: 'syz.0.53': attribute type 4 has an invalid length. [ 96.514944][ T6161] netlink: 'syz.0.53': attribute type 5 has an invalid length. [ 96.530192][ T6161] netlink: 3 bytes leftover after parsing attributes in process `syz.0.53'. [ 96.735456][ T6173] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 96.781858][ T6173] bridge1: entered allmulticast mode [ 97.105744][ T6202] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 97.122039][ T6202] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 97.217452][ T6202] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len [ 97.394585][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 97.440816][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 97.454065][ T6217] pim6reg1: entered promiscuous mode [ 97.462841][ T6217] pim6reg1: entered allmulticast mode [ 97.478870][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 97.697042][ T6226] Illegal XDP return value 1355808803 on prog (id 42) dev N/A, expect packet loss! [ 98.129317][ T6236] hsr0 speed is unknown, defaulting to 1000 [ 98.142133][ T6236] hsr0 speed is unknown, defaulting to 1000 [ 98.158931][ T6236] hsr0 speed is unknown, defaulting to 1000 [ 98.259016][ T6236] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.380389][ T6236] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 98.583411][ T6236] hsr0 speed is unknown, defaulting to 1000 [ 98.600770][ T6236] hsr0 speed is unknown, defaulting to 1000 [ 98.644855][ T6236] hsr0 speed is unknown, defaulting to 1000 [ 98.648023][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 98.701760][ T6236] hsr0 speed is unknown, defaulting to 1000 [ 98.794732][ T6236] hsr0 speed is unknown, defaulting to 1000 [ 98.816189][ T6236] hsr0 speed is unknown, defaulting to 1000 [ 99.031259][ T6277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.081323][ T6280] tipc: Enabled bearer , priority 0 [ 99.117779][ T6283] bridge0: entered promiscuous mode [ 99.124703][ T6280] syzkaller0: entered promiscuous mode [ 99.130317][ T6280] syzkaller0: entered allmulticast mode [ 99.215340][ T6280] netlink: 44 bytes leftover after parsing attributes in process `syz.2.84'. [ 99.283455][ T6285] warning: `syz.1.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.316304][ T6280] tipc: Resetting bearer [ 99.387170][ T6280] macsec1: entered promiscuous mode [ 99.392456][ T6280] geneve1: entered promiscuous mode [ 99.493056][ T6280] macsec1: entered allmulticast mode [ 99.527408][ T6280] geneve1: entered allmulticast mode [ 99.551413][ T6293] syzkaller1: entered promiscuous mode [ 99.567729][ T6293] syzkaller1: entered allmulticast mode [ 99.609312][ T6279] tipc: Resetting bearer [ 99.623372][ T6279] tipc: Disabling bearer [ 99.633654][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 99.646179][ T6303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.721559][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 99.869380][ T6310] xt_ecn: cannot match TCP bits for non-tcp packets [ 101.014683][ T6355] bond0: Unable to set down delay as MII monitoring is disabled [ 101.134579][ T6360] netlink: 'syz.1.109': attribute type 1 has an invalid length. [ 101.160955][ T6356] hsr0 speed is unknown, defaulting to 1000 [ 101.576082][ T6372] Bluetooth: MGMT ver 1.23 [ 101.675838][ T6376] hsr0 speed is unknown, defaulting to 1000 [ 101.683027][ T6378] __nla_validate_parse: 6 callbacks suppressed [ 101.683047][ T6378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.114'. [ 101.842096][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 101.989038][ T6383] macvlan2: entered allmulticast mode [ 102.003764][ T6383] hsr0: entered allmulticast mode [ 102.009014][ T6383] hsr_slave_0: entered allmulticast mode [ 102.021471][ T6383] hsr_slave_1: entered allmulticast mode [ 102.174593][ T6396] netlink: 132 bytes leftover after parsing attributes in process `syz.0.117'. [ 102.549425][ T6413] openvswitch: netlink: Flow key attr not present in new flow. [ 102.737052][ T6422] Cannot find del_set index 1 as target [ 102.762778][ T6423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.126'. [ 102.812219][ T6431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.124'. [ 102.904571][ T6434] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.933670][ T6433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.129'. [ 102.943101][ T6433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.129'. [ 103.142767][ T6440] netlink: 'syz.0.132': attribute type 1 has an invalid length. [ 103.190922][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'. [ 103.205774][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.132'. [ 103.276785][ T6449] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 103.328884][ T6452] netlink: 24 bytes leftover after parsing attributes in process `syz.4.136'. [ 103.565983][ T6463] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 103.567697][ T6464] xt_socket: unknown flags 0x8 [ 103.604401][ T6467] xt_socket: unknown flags 0x8 [ 103.892928][ T6064] nci: nci_ntf_packet: unknown ntf opcode 0x13d [ 104.560895][ T6476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.607980][ T6496] hsr0 speed is unknown, defaulting to 1000 [ 105.241120][ T6530] netlink: 'syz.1.159': attribute type 1 has an invalid length. [ 105.646437][ T6534] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 105.800194][ T6537] veth3: entered promiscuous mode [ 105.834348][ T6537] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 107.216600][ T6595] __nla_validate_parse: 2 callbacks suppressed [ 107.216622][ T6595] netlink: 72 bytes leftover after parsing attributes in process `syz.2.180'. [ 107.232958][ T6594] syzkaller1: entered promiscuous mode [ 107.233008][ T6594] syzkaller1: entered allmulticast mode [ 107.369855][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 107.423926][ T6606] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 107.467013][ T6610] hsr0 speed is unknown, defaulting to 1000 [ 107.563449][ T6617] netlink: 'syz.1.185': attribute type 16 has an invalid length. [ 107.800545][ T6627] vlan2: entered promiscuous mode [ 107.806064][ T6627] bridge0: entered promiscuous mode [ 108.240414][ T6645] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 108.364064][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 108.646176][ T6658] bond1: entered promiscuous mode [ 108.651698][ T6658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.881582][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 109.046659][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.197'. [ 109.060395][ T6667] hsr0 speed is unknown, defaulting to 1000 [ 109.442430][ T6673] syz.0.198 (6673) used greatest stack depth: 17472 bytes left [ 109.744702][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 109.760254][ T6704] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 109.781729][ T6701] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.055160][ T6701] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.298249][ T6701] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.435162][ T6701] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.770427][ T6728] bridge0: port 3(vlan0) entered blocking state [ 110.800180][ T6728] bridge0: port 3(vlan0) entered disabled state [ 110.841938][ T6728] vlan0: entered allmulticast mode [ 110.851345][ T6728] geneve0: entered allmulticast mode [ 110.882869][ T6728] vlan0: entered promiscuous mode [ 110.893704][ T6728] geneve0: entered promiscuous mode [ 110.911912][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 111.024365][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 111.241678][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.350084][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.401388][ T6749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.509166][ T6049] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.628301][ T6757] netlink: 'syz.0.223': attribute type 30 has an invalid length. [ 111.671360][ T64] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.885196][ T6770] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.225'. [ 112.013063][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'. [ 112.035944][ T6773] netlink: 'syz.2.228': attribute type 13 has an invalid length. [ 112.159103][ T6781] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 112.558461][ T6804] 8021q: VLANs not supported on ip_vti0 [ 113.240926][ T6839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.247'. [ 113.362024][ T6842] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 113.459404][ T6848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.466988][ T6848] IPv6: NLM_F_CREATE should be set when creating new route [ 113.474404][ T6848] IPv6: NLM_F_CREATE should be set when creating new route [ 113.481775][ T6848] IPv6: NLM_F_CREATE should be set when creating new route [ 113.636609][ T6856] geneve1: left allmulticast mode [ 113.641732][ T6856] geneve1: left promiscuous mode [ 113.679627][ T6856] hsr0: left allmulticast mode [ 113.684807][ T6856] hsr_slave_0: left allmulticast mode [ 113.690629][ T6856] hsr_slave_1: left allmulticast mode [ 113.878435][ T6871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.936460][ T6873] netlink: 'syz.1.258': attribute type 1 has an invalid length. [ 113.975649][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.258'. [ 114.471052][ T6897] nftables ruleset with unbound set [ 114.662898][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. [ 114.739906][ T6917] netlink: 32 bytes leftover after parsing attributes in process `syz.2.266'. [ 114.752440][ T5145] block nbd0: Receive control failed (result -1) [ 115.102950][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.109223][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 115.455239][ T6937] xt_bpf: check failed: parse error [ 115.769280][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.273'. [ 115.919154][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 115.951502][ T6944] bond2: entered promiscuous mode [ 115.967614][ T6944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.013691][ T6947] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.020977][ T6947] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 116.033693][ T6947] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 116.065474][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 116.358181][ T6962] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 116.487647][ T6962] netlink: 'syz.0.278': attribute type 61 has an invalid length. [ 116.495109][ T6967] netlink: 228 bytes leftover after parsing attributes in process `syz.4.280'. [ 116.502853][ T6962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.278'. [ 116.509270][ T6967] netlink: 228 bytes leftover after parsing attributes in process `syz.4.280'. [ 116.526119][ T6968] netlink: 232 bytes leftover after parsing attributes in process `syz.1.279'. [ 116.874100][ T6976] openvswitch: netlink: Message has 16 unknown bytes. [ 117.041108][ T6985] vlan2: entered promiscuous mode [ 117.054943][ T6985] bridge0: entered promiscuous mode [ 117.088150][ T6987] ipt_ECN: cannot use operation on non-tcp rule [ 117.200565][ T6996] netlink: 'syz.2.290': attribute type 9 has an invalid length. [ 117.220234][ T6996] netlink: 'syz.2.290': attribute type 11 has an invalid length. [ 117.247803][ T6996] netlink: 'syz.2.290': attribute type 12 has an invalid length. [ 117.273481][ T7000] netlink: 'syz.3.292': attribute type 1 has an invalid length. [ 117.321429][ T6994] batadv_slave_1: entered promiscuous mode [ 117.328694][ T6994] macsec1: entered promiscuous mode [ 117.383479][ T7008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.435212][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.442873][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.508868][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.526163][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.700936][ T64] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.733076][ T64] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.808867][ T64] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.822311][ T64] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.186339][ T7028] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20001 [ 118.289981][ T7038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.572262][ T7040] hsr0 speed is unknown, defaulting to 1000 [ 118.617539][ T7040] hsr0 speed is unknown, defaulting to 1000 [ 118.626847][ T7047] __nla_validate_parse: 15 callbacks suppressed [ 118.626870][ T7047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.306'. [ 118.723070][ T7052] netlink: 'syz.3.305': attribute type 1 has an invalid length. [ 118.812838][ T7040] hsr0 speed is unknown, defaulting to 1000 [ 118.881950][ T7040] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 118.901503][ T7052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.979105][ T7044] netlink: 'syz.3.305': attribute type 1 has an invalid length. [ 118.996480][ T7040] hsr0 speed is unknown, defaulting to 1000 [ 119.011061][ T7040] hsr0 speed is unknown, defaulting to 1000 [ 120.309382][ T7040] hsr0 speed is unknown, defaulting to 1000 [ 120.316958][ T7040] hsr0 speed is unknown, defaulting to 1000 [ 120.325409][ T7040] hsr0 speed is unknown, defaulting to 1000 [ 121.400096][ T7137] syzkaller1: entered promiscuous mode [ 121.445234][ T7137] syzkaller1: entered allmulticast mode [ 121.481954][ T7137] netlink: 56 bytes leftover after parsing attributes in process `syz.0.329'. [ 121.715782][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.333'. [ 122.123663][ T7167] hsr0 speed is unknown, defaulting to 1000 [ 122.134634][ T7169] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.339'. [ 122.459999][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.344'. [ 122.628793][ T7194] netlink: 120 bytes leftover after parsing attributes in process `syz.4.345'. [ 122.639009][ T7194] netlink: 'syz.4.345': attribute type 1 has an invalid length. [ 122.647831][ T7194] netlink: 64 bytes leftover after parsing attributes in process `syz.4.345'. [ 122.791774][ T7202] netlink: 'syz.1.347': attribute type 1 has an invalid length. [ 123.008661][ T7202] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.205502][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 124.267263][ T7246] netlink: 'syz.3.357': attribute type 13 has an invalid length. [ 124.275940][ T7246] netlink: 'syz.3.357': attribute type 17 has an invalid length. [ 124.459332][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 124.479319][ T7256] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 124.494614][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 124.587792][ T7246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.598718][ T7246] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.635696][ T7246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.717346][ T7262] netlink: 48 bytes leftover after parsing attributes in process `syz.0.362'. [ 124.744717][ T7262] netlink: 48 bytes leftover after parsing attributes in process `syz.0.362'. [ 124.961221][ T7273] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.367'. [ 124.995527][ T7273] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.367'. [ 125.247367][ T7283] netlink: 'syz.2.370': attribute type 2 has an invalid length. [ 125.286407][ T7288] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.567305][ T7295] netlink: 'syz.0.374': attribute type 11 has an invalid length. [ 125.639667][ T7297] tc_dump_action: action bad kind [ 125.999812][ T7302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.377'. [ 126.409392][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 126.488098][ T7324] netlink: 168 bytes leftover after parsing attributes in process `syz.0.384'. [ 126.522798][ T7315] erspan1: entered promiscuous mode [ 126.528286][ T7315] erspan1: entered allmulticast mode [ 126.664253][ T7320] dvmrp1: entered allmulticast mode [ 126.683044][ T7322] dvmrp1: left allmulticast mode [ 126.729545][ T7326] netlink: 'syz.3.385': attribute type 22 has an invalid length. [ 126.809735][ T7326] ip6gre1: entered promiscuous mode [ 126.922565][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.931538][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.972983][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.982276][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.211891][ T7343] xt_TPROXY: Can be used only with -p tcp or -p udp [ 127.456220][ T7361] sch_tbf: peakrate 7836759490224633571 is lower than or equals to rate 15540063224392467819 ! [ 127.479655][ T7361] netlink: zone id is out of range [ 127.491433][ T7361] netlink: zone id is out of range [ 127.501453][ T7349] hsr0 speed is unknown, defaulting to 1000 [ 127.512854][ T7361] netlink: zone id is out of range [ 127.531083][ T7361] netlink: zone id is out of range [ 127.547897][ T7361] netlink: zone id is out of range [ 127.553606][ T7361] netlink: zone id is out of range [ 127.559059][ T7361] netlink: zone id is out of range [ 127.581082][ T7361] netlink: zone id is out of range [ 127.800569][ T7372] netlink: 'syz.4.399': attribute type 18 has an invalid length. [ 128.107505][ T7378] netlink: 'syz.2.400': attribute type 4 has an invalid length. [ 129.728821][ T7409] __nla_validate_parse: 9 callbacks suppressed [ 129.728842][ T7409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.408'. [ 129.912455][ T7417] netlink: 'syz.1.411': attribute type 10 has an invalid length. [ 129.947485][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.955452][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.073479][ T7417] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.075915][ T7424] x_tables: duplicate underflow at hook 2 [ 130.080846][ T7417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.094883][ T7417] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.102174][ T7417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.146533][ T7417] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 130.161737][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 130.391645][ T7429] netlink: 'syz.1.415': attribute type 30 has an invalid length. [ 130.693785][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 130.703288][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 130.722714][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 130.829911][ T7442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.420'. [ 130.897849][ T7442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.420'. [ 131.071941][ T7450] net_ratelimit: 46 callbacks suppressed [ 131.071963][ T7450] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 131.097908][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 131.137472][ T7448] tipc: Enabling of bearer rejected, failed to enable media [ 131.314660][ T7456] Cannot find add_set index 0 as target [ 131.501423][ T7465] hsr0 speed is unknown, defaulting to 1000 [ 131.539604][ T7470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.717971][ T7472] hsr0 speed is unknown, defaulting to 1000 [ 131.784794][ T7476] netlink: 'syz.3.428': attribute type 1 has an invalid length. [ 131.799574][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 131.809358][ T7476] netlink: 'syz.3.428': attribute type 1 has an invalid length. [ 131.848941][ T7475] macvtap0: entered promiscuous mode [ 131.856917][ T7475] macvtap0: entered allmulticast mode [ 131.862417][ T7475] veth0_macvtap: entered allmulticast mode [ 132.309504][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 132.879985][ T7494] netlink: 'syz.0.434': attribute type 9 has an invalid length. [ 133.187626][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.171122][ T7536] hsr0 speed is unknown, defaulting to 1000 [ 134.245325][ T7530] hsr0 speed is unknown, defaulting to 1000 [ 134.907486][ T7568] netlink: 'syz.0.452': attribute type 32 has an invalid length. [ 134.944596][ T7568] __nla_validate_parse: 4 callbacks suppressed [ 134.944616][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 135.116097][ T7564] syzkaller1: entered promiscuous mode [ 135.121857][ T7564] syzkaller1: entered allmulticast mode [ 135.235520][ T7568] bond3: Setting coupled_control to off (0) [ 135.614584][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 135.615588][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 135.672919][ T7594] IPVS: set_ctl: invalid protocol: 98 172.20.20.36:20001 [ 135.775906][ T7579] trusted_key: syz.2.453 sent an empty control message without MSG_MORE. [ 136.693534][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 136.758930][ T7627] netlink: 43 bytes leftover after parsing attributes in process `syz.2.465'. [ 136.798594][ T7627] IPv6: sit2: Disabled Multicast RS [ 136.824220][ T7627] sit2: entered allmulticast mode [ 137.061461][ T7636] netlink: 104 bytes leftover after parsing attributes in process `syz.4.469'. [ 137.138000][ T7644] netlink: 104 bytes leftover after parsing attributes in process `syz.4.469'. [ 137.155893][ T7645] netlink: 104 bytes leftover after parsing attributes in process `syz.4.469'. [ 137.159527][ T7640] hsr0 speed is unknown, defaulting to 1000 [ 137.216904][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.467'. [ 138.496442][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 138.711550][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.719362][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.838380][ T5835] Bluetooth: hci4: link tx timeout [ 138.844772][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.047285][ T7700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.074414][ T7700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.798513][ T7751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.758368][ T7766] __nla_validate_parse: 5 callbacks suppressed [ 140.758391][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 140.960851][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 141.791098][ T7788] netlink: 'syz.2.507': attribute type 3 has an invalid length. [ 141.903000][ T30] audit: type=1107 audit(1775345506.837:2): pid=7791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 142.141053][ T7806] netlink: 27 bytes leftover after parsing attributes in process `syz.3.514'. [ 142.256077][ T7811] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.516'. [ 142.292722][ T7811] netlink: 44 bytes leftover after parsing attributes in process `syz.4.516'. [ 142.342049][ T7811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.416943][ T7812] syzkaller0: entered promiscuous mode [ 142.426758][ T7812] syzkaller0: entered allmulticast mode [ 142.454573][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'. [ 142.505820][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 142.535783][ T7820] macsec2: entered allmulticast mode [ 142.541344][ T7820] macsec0: entered allmulticast mode [ 143.094003][ T7853] netlink: 'syz.0.526': attribute type 4 has an invalid length. [ 143.119473][ T7853] netlink: 'syz.0.526': attribute type 4 has an invalid length. [ 143.145479][ T7853] netlink: 'syz.0.526': attribute type 4 has an invalid length. [ 143.286041][ T7860] x_tables: duplicate underflow at hook 1 [ 143.364288][ T7864] netlink: 32 bytes leftover after parsing attributes in process `syz.0.529'. [ 143.426256][ T7865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.529'. [ 143.439576][ T7870] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 143.478964][ T7870] bond3: (slave lo): Enslaving as an active interface with an up link [ 143.488231][ T7870] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 143.523941][ T7869] batman_adv: batadv0: Adding interface: wlan1 [ 143.542631][ T7869] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.571557][ T7876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.531'. [ 143.609938][ T7869] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 143.646517][ T7874] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 143.649833][ T10] IPVS: starting estimator thread 0... [ 143.773191][ T7879] IPVS: using max 23 ests per chain, 55200 per kthread [ 143.996688][ T7897] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 144.131145][ T7897] bond4: entered promiscuous mode [ 144.166150][ T7897] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.724739][ T7925] hsr0 speed is unknown, defaulting to 1000 [ 144.734353][ T7936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.545'. [ 144.827974][ T7938] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 144.889820][ T7943] FAULT_INJECTION: forcing a failure. [ 144.889820][ T7943] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 144.915933][ T7943] CPU: 1 UID: 0 PID: 7943 Comm: syz.3.549 Not tainted syzkaller #0 PREEMPT(full) [ 144.915960][ T7943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 144.915970][ T7943] Call Trace: [ 144.915976][ T7943] [ 144.915982][ T7943] dump_stack_lvl+0xe8/0x150 [ 144.916011][ T7943] should_fail_ex+0x412/0x560 [ 144.916045][ T7943] _copy_from_user+0x2d/0xb0 [ 144.916065][ T7943] __sys_bpf+0x229/0x950 [ 144.916085][ T7943] ? __pfx___sys_bpf+0x10/0x10 [ 144.916120][ T7943] ? ksys_write+0x242/0x270 [ 144.916146][ T7943] ? __pfx_ksys_write+0x10/0x10 [ 144.916174][ T7943] __x64_sys_bpf+0x7c/0x90 [ 144.916201][ T7943] do_syscall_64+0x14d/0xf80 [ 144.916223][ T7943] ? trace_irq_disable+0x3b/0x150 [ 144.916238][ T7943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.916256][ T7943] ? clear_bhb_loop+0x40/0x90 [ 144.916278][ T7943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.916297][ T7943] RIP: 0033:0x7fa618f9c819 [ 144.916314][ T7943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.916329][ T7943] RSP: 002b:00007fa619e3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.916349][ T7943] RAX: ffffffffffffffda RBX: 00007fa619215fa0 RCX: 00007fa618f9c819 [ 144.916361][ T7943] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000002 [ 144.916372][ T7943] RBP: 00007fa619e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 144.916383][ T7943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.916394][ T7943] R13: 00007fa619216038 R14: 00007fa619215fa0 R15: 00007ffe8a4400f8 [ 144.916426][ T7943] [ 145.389517][ T7959] netlink: 'syz.4.554': attribute type 1 has an invalid length. [ 145.435212][ T7957] macvtap1: entered promiscuous mode [ 145.450082][ T7957] macvtap1: entered allmulticast mode [ 145.730136][ T7966] IPVS: Scheduler module ip_vs_ not found [ 145.891352][ T7980] syzkaller0: entered promiscuous mode [ 145.897039][ T7980] syzkaller0: entered allmulticast mode [ 146.075746][ T7987] __nla_validate_parse: 3 callbacks suppressed [ 146.075764][ T7987] netlink: 14 bytes leftover after parsing attributes in process `syz.1.562'. [ 146.098557][ T7990] netlink: 80 bytes leftover after parsing attributes in process `syz.3.563'. [ 146.300718][ T8001] xt_bpf: check failed: parse error [ 146.903966][ T8032] x_tables: unsorted entry at hook 2 [ 147.183356][ T8044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.576'. [ 147.327220][ T8047] netlink: 68 bytes leftover after parsing attributes in process `syz.1.577'. [ 147.468154][ T8054] syzkaller0: entered promiscuous mode [ 147.476137][ T8054] syzkaller0: entered allmulticast mode [ 147.544652][ T8060] netlink: 'syz.3.579': attribute type 10 has an invalid length. [ 147.567647][ T8060] netlink: 224 bytes leftover after parsing attributes in process `syz.3.579'. [ 147.711528][ T8066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.583'. [ 148.157853][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 148.228811][ T8094] block nbd1: server does not support multiple connections per device. [ 148.255812][ T8094] block nbd1: shutting down sockets [ 148.457210][ T8106] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 148.479447][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 148.721760][ T8106] xt_CT: No such helper "netbios-ns" [ 148.800826][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.599'. [ 148.861094][ T8120] netlink: 'syz.3.599': attribute type 8 has an invalid length. [ 149.258039][ T7712] IPVS: starting estimator thread 0... [ 149.286817][ T8135] bond4 (unregistering): Released all slaves [ 149.412980][ T8139] IPVS: using max 27 ests per chain, 64800 per kthread [ 149.479900][ T8137] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 149.730511][ T8162] xt_CONNSECMARK: invalid mode: 254 [ 149.821071][ T8168] netlink: 'syz.1.611': attribute type 1 has an invalid length. [ 149.855813][ T8168] netlink: 'syz.1.611': attribute type 2 has an invalid length. [ 149.992394][ T8171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.615'. [ 150.809512][ T8197] gre1: entered promiscuous mode [ 150.820451][ T8192] syzkaller0: entered promiscuous mode [ 150.833746][ T8192] syzkaller0: entered allmulticast mode [ 152.044384][ T8244] xt_bpf: check failed: parse error [ 152.251463][ T8251] netlink: 52 bytes leftover after parsing attributes in process `syz.0.640'. [ 152.279530][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.287789][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.791014][ T8272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.646'. [ 152.861741][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 152.975182][ T8274] ipvlan0: entered allmulticast mode [ 152.980561][ T8274] syz_tun: entered allmulticast mode [ 153.329910][ T8301] bond4: (slave vlan0): Opening slave failed [ 153.487980][ T8314] syzkaller0: entered promiscuous mode [ 153.493581][ T8314] syzkaller0: entered allmulticast mode [ 153.520701][ T8323] syzkaller0: entered promiscuous mode [ 153.527387][ T8323] syzkaller0: entered allmulticast mode [ 153.585340][ T30] audit: type=1800 audit(1775345518.527:3): pid=8324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.658" name="memory.events" dev="tmpfs" ino=756 res=0 errno=0 [ 153.640639][ T8327] netlink: 'syz.0.659': attribute type 7 has an invalid length. [ 153.650840][ T8327] netlink: 'syz.0.659': attribute type 8 has an invalid length. [ 153.659812][ T8327] netlink: 'syz.0.659': attribute type 9 has an invalid length. [ 156.221484][ T8303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.431521][ T8342] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.664'. [ 156.475419][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 156.715158][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'. [ 156.969438][ T8360] bond3: entered allmulticast mode [ 156.989402][ T8360] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.184098][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.676'. [ 157.209428][ T8381] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 157.448598][ T8395] netlink: 'syz.0.678': attribute type 1 has an invalid length. [ 157.483421][ T8389] netlink: 'syz.4.679': attribute type 1 has an invalid length. [ 157.617992][ T8402] bond6: (slave geneve2): making interface the new active one [ 157.628515][ T8402] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 157.640719][ T8389] netlink: 'syz.4.679': attribute type 6 has an invalid length. [ 157.648931][ T8389] netlink: 'syz.4.679': attribute type 7 has an invalid length. [ 157.661910][ T8389] netlink: 'syz.4.679': attribute type 8 has an invalid length. [ 157.751457][ T6060] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.772699][ T6060] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.811103][ T6060] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.824326][ T6060] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.875607][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'. [ 158.146706][ T8411] bridge2: port 1(veth7) entered blocking state [ 158.168575][ T8411] bridge2: port 1(veth7) entered disabled state [ 158.189346][ T8411] veth7: entered allmulticast mode [ 158.208548][ T8411] veth7: entered promiscuous mode [ 158.220751][ T8415] bridge2: port 2(veth0_to_bond) entered blocking state [ 158.234788][ T8415] bridge2: port 2(veth0_to_bond) entered disabled state [ 158.242350][ T8415] veth0_to_bond: entered allmulticast mode [ 158.251542][ T8415] veth0_to_bond: entered promiscuous mode [ 158.285815][ T8421] bridge2: port 3(veth9) entered blocking state [ 158.292408][ T8421] bridge2: port 3(veth9) entered disabled state [ 158.301191][ T8421] veth9: entered allmulticast mode [ 158.313914][ T8421] veth9: entered promiscuous mode [ 158.487600][ T8428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.690'. [ 158.499046][ T8428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.690'. [ 158.509258][ T8428] netlink: 'syz.3.690': attribute type 4 has an invalid length. [ 158.711137][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 158.730501][ T8434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.693'. [ 158.755615][ T8434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.693'. [ 158.961733][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 159.123631][ T8442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.221690][ T8444] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 159.235794][ T8444] bond4 (unregistering): Released all slaves [ 159.287311][ T8448] vxcan2: entered allmulticast mode [ 159.376219][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'. [ 159.386524][ T8451] block nbd1: Unsupported socket: should be TCP or UNIX. [ 160.071656][ T8467] TCP: TCP_TX_DELAY enabled [ 160.212832][ T8473] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.703'. [ 160.424080][ T8479] macvtap0: entered promiscuous mode [ 160.430635][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'. [ 160.450427][ T8478] macvtap0: left promiscuous mode [ 160.506586][ T8481] syz_tun: entered promiscuous mode [ 160.531943][ T8481] macvtap2: entered promiscuous mode [ 160.555318][ T8481] macvtap2: entered allmulticast mode [ 160.573402][ T8481] syz_tun: entered allmulticast mode [ 160.585276][ T8484] syz_tun: left allmulticast mode [ 160.590793][ T8484] syz_tun: left promiscuous mode [ 160.830803][ T8496] bridge5: entered promiscuous mode [ 160.876010][ T8496] bridge5: entered allmulticast mode [ 160.897763][ T8496] team0: Port device bridge5 added [ 160.920179][ T8500] netlink: 'syz.1.711': attribute type 3 has an invalid length. [ 160.956948][ T8500] netlink: 'syz.1.711': attribute type 3 has an invalid length. [ 161.366761][ T8519] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000 [ 161.454405][ T8502] dvmrp1: entered allmulticast mode [ 162.085015][ T8547] bpq0: entered promiscuous mode [ 162.471241][ T8556] bond5: option all_slaves_active: invalid value (4) [ 162.481314][ T8556] bond5 (unregistering): Released all slaves [ 162.522454][ T8560] netlink: 'syz.4.734': attribute type 4 has an invalid length. [ 163.100562][ T8593] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 163.158062][ T8592] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 163.418981][ T8614] __nla_validate_parse: 2 callbacks suppressed [ 163.419005][ T8614] netlink: 16 bytes leftover after parsing attributes in process `syz.3.746'. [ 163.551254][ T8609] tipc: Started in network mode [ 163.585541][ T8609] tipc: Node identity 0e5394861594, cluster identity 4711 [ 163.610097][ T8609] tipc: Enabled bearer , priority 0 [ 163.730766][ T8625] netlink: 'syz.3.748': attribute type 83 has an invalid length. [ 163.986996][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 164.139852][ T8608] tipc: Disabling bearer [ 164.344802][ T8646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.754'. [ 164.833187][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'. [ 164.946757][ T8669] lec:lec_atm_send: lec0: Unknown message type 255 [ 164.950627][ T8670] netlink: 'syz.3.761': attribute type 8 has an invalid length. [ 165.145160][ T8640] lec:lec_atm_close: lec0: Shut down! [ 165.232320][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'. [ 165.495977][ T8692] bond7 (unregistering): Released all slaves [ 165.673680][ T8704] pimreg: tun_chr_ioctl cmd 1074025677 [ 165.689590][ T8704] pimreg: linktype set to 774 [ 165.996884][ T8717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.092818][ T7714] lec:lec_start_xmit: lec0:No lecd attached [ 166.116327][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 166.187320][ T8723] vlan0: entered allmulticast mode [ 166.250809][ T8730] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1514) ! [ 166.292583][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.776'. [ 166.370758][ T8730] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 166.533949][ T8739] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 166.597696][ T8739] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 166.625082][ T8742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.776'. [ 166.670979][ T8730] tipc: Started in network mode [ 166.676090][ T8730] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 166.735208][ T8730] tipc: Enabled bearer , priority 26 [ 167.028737][ T8767] netlink: 'syz.2.780': attribute type 10 has an invalid length. [ 167.055984][ T8768] netlink: 'syz.2.780': attribute type 10 has an invalid length. [ 167.085900][ T8767] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.126792][ T8767] bond0: (slave team0): Enslaving as an active interface with an up link [ 167.249872][ T8779] syzkaller0: entered promiscuous mode [ 167.274460][ T8779] syzkaller0: entered allmulticast mode [ 167.627947][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 167.857209][ T7714] tipc: Node number set to 4269801491 [ 168.054273][ T8821] batman_adv: batadv0: Adding interface: dummy0 [ 168.060701][ T8821] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 168.091237][ T8821] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 168.157156][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 168.391932][ T8841] veth1_virt_wifi: entered promiscuous mode [ 168.969706][ T8875] __nla_validate_parse: 1 callbacks suppressed [ 168.969725][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.810'. [ 169.020171][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.810'. [ 169.199895][ T8880] macvtap1: entered promiscuous mode [ 169.223053][ T8880] macvtap1: entered allmulticast mode [ 169.228507][ T8880] veth1_vlan: entered allmulticast mode [ 169.275283][ T8883] macvtap2: entered promiscuous mode [ 169.280865][ T8883] macvtap2: entered allmulticast mode [ 169.289947][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 169.308906][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 169.333486][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 169.352275][ T8892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.814'. [ 169.395163][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 169.471696][ T8893] netlink: 40 bytes leftover after parsing attributes in process `syz.4.814'. [ 169.496489][ T8901] raw_sendmsg: syz.1.818 forgot to set AF_INET. Fix it! [ 169.660033][ T8907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.820'. [ 169.669823][ T8907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.820'. [ 169.756171][ T8913] netlink: 'syz.0.821': attribute type 13 has an invalid length. [ 169.887917][ T8915] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 169.945833][ T8913] bond7: Unable to set up delay as MII monitoring is disabled [ 169.955067][ T8913] bond7 (unregistering): Released all slaves [ 170.109750][ T8920] netlink: 'syz.0.823': attribute type 5 has an invalid length. [ 170.352220][ T8932] team0: Port device team_slave_0 removed [ 170.702699][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 171.234055][ T8972] syzkaller0: entered promiscuous mode [ 171.244610][ T8972] syzkaller0: entered allmulticast mode [ 171.304653][ T8979] syzkaller0: entered promiscuous mode [ 171.311505][ T8979] syzkaller0: entered allmulticast mode [ 171.582532][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms [ 171.591661][ C1] lec:lec_tx_timeout: lec0 [ 171.596727][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 172.782635][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 172.914240][ T9005] syzkaller1: entered promiscuous mode [ 172.919798][ T9005] syzkaller1: entered allmulticast mode [ 173.266010][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.280000][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.313006][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.340246][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.374966][ T9032] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.474844][ T9032] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.483480][ T9046] netlink: 'syz.2.860': attribute type 10 has an invalid length. [ 173.558543][ T9032] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.683580][ T9032] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.859584][ T6060] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.870782][ T6060] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.889295][ T6060] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.930443][ T6060] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.989522][ T9069] netlink: 'syz.1.865': attribute type 10 has an invalid length. [ 174.027538][ T9069] team0: Port device dummy0 added [ 174.281555][ T9078] bond6: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 174.291647][ T9078] bond6: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 174.506456][ T9093] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 174.514067][ T9093] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 174.522023][ T9093] __nla_validate_parse: 16 callbacks suppressed [ 174.522037][ T9093] netlink: 64 bytes leftover after parsing attributes in process `syz.0.870'. [ 176.387761][ T9038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.716521][ T9119] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 176.827050][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 176.853752][ T9122] bond0: (slave bridge0): Releasing backup interface [ 176.915096][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.922617][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.107099][ T9122] team0: Port device dummy0 removed [ 177.127022][ T9122] bridge_slave_0: left allmulticast mode [ 177.139070][ T9122] bridge_slave_0: left promiscuous mode [ 177.152939][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.178405][ T9122] bridge_slave_1: left allmulticast mode [ 177.213437][ T9122] bridge_slave_1: left promiscuous mode [ 177.267410][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.328308][ T9122] bond0: (slave bond_slave_0): Releasing backup interface [ 177.342521][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 177.350867][ C1] lec:lec_tx_timeout: lec0 [ 177.356192][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 177.385306][ T9122] bond0: (slave bond_slave_1): Releasing backup interface [ 177.415782][ T9122] team0: Port device team_slave_0 removed [ 177.484982][ T9122] team0: Port device team_slave_1 removed [ 177.491456][ T9122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.500722][ T9122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.513274][ T9122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.520783][ T9122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.530126][ T9122] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 177.805422][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 177.873026][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 177.887129][ T9161] n: the hash_elasticity option has been deprecated and is always 16 [ 177.925027][ T9161] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 177.938468][ T9166] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.888'. [ 177.963414][ T9164] n: the hash_elasticity option has been deprecated and is always 16 [ 177.972163][ T9166] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.888'. [ 177.985743][ T9164] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 177.989372][ T9171] IPVS: length: 181 != 5987704 [ 178.099730][ T9162] hsr0 speed is unknown, defaulting to 1000 [ 178.198286][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'. [ 178.570547][ T9204] xt_hashlimit: size too large, truncated to 1048576 [ 178.740380][ T9209] geneve2: entered promiscuous mode [ 178.870571][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 178.900680][ T6058] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.018307][ T6058] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.040369][ T6058] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.142204][ T6058] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.489351][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.906'. [ 179.520971][ T9256] netlink: 108 bytes leftover after parsing attributes in process `syz.3.905'. [ 179.570579][ T9240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.584019][ T9240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.670814][ T9262] netlink: 60 bytes leftover after parsing attributes in process `syz.2.906'. [ 179.771597][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 179.784467][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 179.820479][ T9249] vlan1: entered allmulticast mode [ 179.826479][ T9249] bridge0: port 4(vlan1) entered blocking state [ 179.834553][ T9249] bridge0: port 4(vlan1) entered disabled state [ 179.844985][ T9249] vlan1: entered promiscuous mode [ 179.853644][ T9252] netlink: 984 bytes leftover after parsing attributes in process `syz.2.906'. [ 180.015106][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.036165][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.064341][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 180.088914][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 180.213338][ T9281] netlink: 32 bytes leftover after parsing attributes in process `syz.2.911'. [ 180.289092][ T9272] 8021q: adding VLAN 0 to HW filter on device bond7 [ 180.315977][ T9289] Set syz1 is full, maxelem 768 reached [ 180.331650][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.367354][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.377877][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.392457][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.417811][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 180.486420][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.500906][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.642083][ T9300] netlink: 'syz.4.914': attribute type 9 has an invalid length. [ 180.664556][ T9304] tipc: Can't bind to reserved service type 0 [ 180.812180][ T9304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.916'. [ 180.881965][ T9308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.916'. [ 181.277202][ T9328] Unsupported ieee802154 address type: 0 [ 181.361299][ T9329] netlink: 'syz.1.923': attribute type 1 has an invalid length. [ 181.623176][ T9346] netlink: 'syz.2.926': attribute type 17 has an invalid length. [ 181.666782][ T6064] bond0: (slave bond_slave_0): interface is now down [ 181.681515][ T6064] bond0: (slave bond_slave_1): interface is now down [ 181.681703][ T9349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.769922][ T9354] team0: Port device syz_tun added [ 181.792456][ T9352] team0: Port device syz_tun removed [ 181.798899][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.819595][ T9352] bridge_slave_1: left allmulticast mode [ 181.825447][ T9352] bridge_slave_1: left promiscuous mode [ 181.833604][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.846821][ T9352] bond0: (slave bond_slave_0): Releasing backup interface [ 181.854896][ T6060] bond0: (slave bond_slave_0): interface is now down [ 181.861657][ T6060] bond0: (slave bond_slave_1): interface is now down [ 181.871155][ T9352] bond0: (slave bond_slave_1): Releasing backup interface [ 181.900595][ T9352] team0: Port device team_slave_1 removed [ 181.915722][ T9352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.937805][ T9352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.968449][ T9352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.003357][ T12] bond0: (slave bond_slave_0): interface is now down [ 182.011681][ T12] bond0: (slave bond_slave_1): interface is now down [ 182.070581][ T9371] netlink: 'syz.3.932': attribute type 1 has an invalid length. [ 182.079694][ T9371] netlink: 'syz.3.932': attribute type 1 has an invalid length. [ 182.235599][ T12] bond0: (slave bond_slave_0): interface is now down [ 182.259218][ T12] bond0: (slave bond_slave_1): interface is now down [ 182.279806][ T12] bond0: now running without any active interface! [ 182.361516][ T9376] netlink: 'syz.2.934': attribute type 1 has an invalid length. [ 182.369844][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 182.369909][ C1] lec:lec_tx_timeout: lec0 [ 182.378201][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 182.391447][ T9374] tipc: Started in network mode [ 182.402697][ T9374] tipc: Node identity 9a85a6961645, cluster identity 4711 [ 182.413492][ T9374] tipc: Enabled bearer , priority 0 [ 182.421794][ T9378] netlink: 'syz.0.935': attribute type 1 has an invalid length. [ 182.431610][ T9378] netlink: 'syz.0.935': attribute type 2 has an invalid length. [ 182.441370][ T9374] syzkaller0: entered promiscuous mode [ 182.475368][ T9374] syzkaller0: entered allmulticast mode [ 182.598495][ T9374] syzkaller0: mtu less than device minimum [ 182.606939][ T9373] tipc: Resetting bearer [ 182.651686][ T9373] tipc: Disabling bearer [ 183.693701][ T9428] block nbd1: Unsupported socket: should be TCP or UNIX. [ 183.907300][ T9431] hsr0 speed is unknown, defaulting to 1000 [ 184.784172][ T9463] netlink: 'syz.1.963': attribute type 2 has an invalid length. [ 184.846003][ T9468] netlink: 'syz.2.965': attribute type 3 has an invalid length. [ 184.857624][ T9466] tipc: Started in network mode [ 184.867417][ T9468] __nla_validate_parse: 8 callbacks suppressed [ 184.867434][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 184.883619][ T9466] tipc: Node identity 7efd8a8aa1db, cluster identity 4711 [ 184.893317][ T9466] tipc: Enabled bearer , priority 0 [ 184.979835][ T9468] ipvlan2: entered allmulticast mode [ 185.002199][ T9468] syz_tun: entered allmulticast mode [ 185.169366][ T9466] syzkaller0: entered promiscuous mode [ 185.182604][ T9466] syzkaller0: entered allmulticast mode [ 185.247423][ T9470] tunl0: Caught tx_queue_len zero misconfig [ 185.320442][ T9460] tipc: Resetting bearer [ 185.354998][ T9460] tipc: Disabling bearer [ 185.664858][ T9489] bridge0: Device is already in use. [ 185.712873][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 185.841103][ T9496] validate_nla: 1 callbacks suppressed [ 185.841122][ T9496] netlink: 'syz.0.972': attribute type 21 has an invalid length. [ 185.917830][ T9499] netlink: 140 bytes leftover after parsing attributes in process `syz.0.972'. [ 186.205338][ T9510] netlink: 'syz.0.975': attribute type 1 has an invalid length. [ 186.523096][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.2.979'. [ 186.985093][ T9557] hsr0 speed is unknown, defaulting to 1000 [ 187.119947][ T9568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.983'. [ 187.156889][ T9568] netlink: 164 bytes leftover after parsing attributes in process `syz.1.983'. [ 187.186260][ T9568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.983'. [ 187.246733][ T9570] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 187.283403][ T9574] netlink: 72 bytes leftover after parsing attributes in process `syz.4.985'. [ 187.382572][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 187.390881][ C1] lec:lec_tx_timeout: lec0 [ 187.395657][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 187.446551][ T9572] netlink: 'syz.2.984': attribute type 49 has an invalid length. [ 187.458498][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.984'. [ 187.469077][ T9577] netlink: 'syz.2.984': attribute type 29 has an invalid length. [ 187.528619][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 187.607833][ T9585] netlink: 'syz.1.988': attribute type 1 has an invalid length. [ 187.717068][ T9585] bond8: entered promiscuous mode [ 187.722950][ T9585] 8021q: adding VLAN 0 to HW filter on device bond8 [ 187.734733][ T9589] netlink: 'syz.3.989': attribute type 10 has an invalid length. [ 187.780185][ T9594] 8021q: adding VLAN 0 to HW filter on device bond8 [ 187.806458][ T9594] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 187.821832][ T9594] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 187.836745][ T9594] bond8: (slave vti0): making interface the new active one [ 187.844364][ T9594] vti0: entered promiscuous mode [ 187.852355][ T9594] bond8: (slave vti0): Enslaving as an active interface with an up link [ 187.867705][ T9589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.878321][ T9589] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 187.907332][ T9596] macsec3: entered promiscuous mode [ 187.913219][ T9596] batadv_slave_1: entered promiscuous mode [ 188.993813][ T9662] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 189.205805][ T7717] IPVS: starting estimator thread 0... [ 189.242830][ T9678] netlink: 'syz.3.1014': attribute type 5 has an invalid length. [ 189.380780][ T9675] IPVS: using max 37 ests per chain, 88800 per kthread [ 189.470892][ T9688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.053369][ T9720] netlink: 'syz.3.1028': attribute type 89 has an invalid length. [ 190.148405][ T9722] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 190.434547][ T9733] Unknown metaid 0 dlen 28 [ 190.705343][ T9743] wg1 speed is unknown, defaulting to 1000 [ 190.731146][ T9743] wg1 speed is unknown, defaulting to 1000 [ 190.762415][ T9743] wg1 speed is unknown, defaulting to 1000 [ 190.940111][ T9746] __nla_validate_parse: 12 callbacks suppressed [ 190.940131][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 191.053221][ T30] audit: type=1800 audit(1775345555.997:4): pid=9754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1039" name="cgroup.controllers" dev="tmpfs" ino=1042 res=0 errno=0 [ 191.201284][ T9754] syzkaller0: entered promiscuous mode [ 191.211738][ T9754] syzkaller0: entered allmulticast mode [ 191.264778][ T9743] infiniband syz0: set down [ 191.281029][ T9743] infiniband syz0: added wg1 [ 191.458926][ T9743] RDS/IB: syz0: added [ 191.482165][ T9743] smc: adding ib device syz0 with port count 1 [ 191.490433][ T9743] smc: ib device syz0 port 1 has no pnetid [ 191.517536][ T7720] IPVS: starting estimator thread 0... [ 191.614245][ T9771] IPVS: using max 27 ests per chain, 64800 per kthread [ 192.412616][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 192.420865][ C1] lec:lec_tx_timeout: lec0 [ 192.425734][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 192.986001][ T7717] wg1 speed is unknown, defaulting to 1000 [ 192.988759][ T9786] mpoa:mpoad_close: () going down [ 193.003817][ T7712] wg1 speed is unknown, defaulting to 1000 [ 193.011390][ T9743] wg1 speed is unknown, defaulting to 1000 [ 193.175985][ T9801] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1049'. [ 193.192579][ T9801] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1049'. [ 193.212982][ T9801] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1049'. [ 193.687408][ T9743] wg1 speed is unknown, defaulting to 1000 [ 194.215408][ T9743] wg1 speed is unknown, defaulting to 1000 [ 194.227035][ T9839] lo: Caught tx_queue_len zero misconfig [ 194.394953][ T9845] netlink: 'syz.0.1061': attribute type 1 has an invalid length. [ 194.460941][ T9849] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1061'. [ 194.630478][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.941261][ T9743] wg1 speed is unknown, defaulting to 1000 [ 194.969870][ T9870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1067'. [ 195.162649][ T9878] netlink: 'syz.1.1069': attribute type 1 has an invalid length. [ 195.188062][ T9877] netlink: 'syz.1.1069': attribute type 1 has an invalid length. [ 195.285174][ T9878] 8021q: adding VLAN 0 to HW filter on device bond9 [ 195.331873][ T9884] bond9: (slave veth5): Enslaving as an active interface with a down link [ 195.455192][ T9887] hsr0 speed is unknown, defaulting to 1000 [ 195.635207][ T9899] hsr0 speed is unknown, defaulting to 1000 [ 195.648394][ T9887] wg1 speed is unknown, defaulting to 1000 [ 195.796247][ T9914] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1077'. [ 195.951020][ T9917] netlink: 'syz.2.1079': attribute type 4 has an invalid length. [ 195.992345][ T9917] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1079'. [ 196.024857][ T9917] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 196.099654][ T9899] wg1 speed is unknown, defaulting to 1000 [ 196.746189][ T9950] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 196.774140][ T9743] wg1 speed is unknown, defaulting to 1000 [ 197.848582][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 197.984643][ T9977] can: request_module (can-proto-0) failed. [ 197.994946][ T9974] macvtap1: entered promiscuous mode [ 198.000329][ T9974] veth1_to_hsr: entered promiscuous mode [ 198.023395][ T9974] macvtap1: entered allmulticast mode [ 198.028871][ T9974] veth1_to_hsr: entered allmulticast mode [ 198.060597][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 198.073293][ T9977] batadv_slave_1: left promiscuous mode [ 198.079976][ T9977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.119594][ T9982] bond4: entered promiscuous mode [ 198.126895][ T9982] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.166992][ T9985] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.196489][ T9985] bond4: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 198.230489][ T9985] bond4: (slave ip6tnl3): Error -95 calling set_mac_address [ 198.462507][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6040 ms [ 198.470581][ C1] lec:lec_tx_timeout: lec0 [ 198.475523][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 198.624379][ T9998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1102'. [ 198.642647][ T9998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1102'. [ 198.838761][T10003] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1103'. [ 198.847911][T10003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.161447][T10015] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1107'. [ 199.179792][T10015] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1107'. [ 199.581555][T10025] IPVS: sh: FWM 3 0x00000003 - no destination available [ 199.608974][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 199.686167][T10025] tc_dump_action: action bad kind [ 199.691712][T10028] hsr0 speed is unknown, defaulting to 1000 [ 199.726034][T10028] wg1 speed is unknown, defaulting to 1000 [ 199.915423][T10043] ip6erspan0: entered allmulticast mode [ 200.230991][T10048] nbd: socks must be embedded in a SOCK_ITEM attr [ 200.239947][T10048] block nbd2: shutting down sockets [ 200.291828][T10048] tipc: New replicast peer: 255.255.255.255 [ 200.298752][T10048] tipc: Enabled bearer , priority 26 [ 200.388605][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1118'. [ 200.688705][T10063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1121'. [ 201.084264][T10080] netlink: 'syz.1.1124': attribute type 1 has an invalid length. [ 201.116717][T10081] __nla_validate_parse: 2 callbacks suppressed [ 201.116736][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'. [ 201.250075][T10080] bond10: entered promiscuous mode [ 201.256399][T10080] 8021q: adding VLAN 0 to HW filter on device bond10 [ 201.412692][ T5919] tipc: Node number set to 3743845002 [ 201.739092][T10111] x_tables: duplicate underflow at hook 1 [ 201.842786][T10115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1134'. [ 201.959623][T10119] hsr0 speed is unknown, defaulting to 1000 [ 201.966065][T10116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1135'. [ 201.984579][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 202.005507][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 202.033028][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 202.053239][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 202.073568][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 202.112926][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 202.142674][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 202.206569][T10119] wg1 speed is unknown, defaulting to 1000 [ 202.321334][T10125] hsr0 speed is unknown, defaulting to 1000 [ 202.484184][T10125] wg1 speed is unknown, defaulting to 1000 [ 204.222506][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 204.230625][ C1] lec:lec_tx_timeout: lec0 [ 204.236702][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 204.283522][T10196] syzkaller0: entered promiscuous mode [ 204.289232][T10196] syzkaller0: entered allmulticast mode [ 204.319589][T10196] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 204.960615][T10235] netlink: 'syz.2.1165': attribute type 5 has an invalid length. [ 205.114400][T10240] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 205.299641][T10247] batman_adv: batadv0: Adding interface: gretap1 [ 205.323506][T10247] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 205.353353][T10247] batman_adv: batadv0: Interface activated: gretap1 [ 205.399687][T10252] 8021q: VLANs not supported on caif0 [ 205.902941][T10275] netlink: 'syz.0.1177': attribute type 2 has an invalid length. [ 205.920818][T10275] netlink: 'syz.0.1177': attribute type 8 has an invalid length. [ 206.020224][T10277] hsr0 speed is unknown, defaulting to 1000 [ 206.034605][T10277] wg1 speed is unknown, defaulting to 1000 [ 206.144935][T10272] ipt_ECN: cannot use operation on non-tcp rule [ 206.191617][T10283] batman_adv: batadv0: Adding interface: dummy0 [ 206.212553][T10283] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.302566][T10283] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 206.373197][T10272] hsr0 speed is unknown, defaulting to 1000 [ 206.521987][T10272] wg1 speed is unknown, defaulting to 1000 [ 206.522909][T10287] __nla_validate_parse: 100 callbacks suppressed [ 206.522925][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 206.823554][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'. [ 206.949514][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 206.958520][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 206.964319][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 208.432884][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'. [ 208.542642][T10334] netlink: 522 bytes leftover after parsing attributes in process `syz.2.1190'. [ 208.552376][T10336] netlink: 522 bytes leftover after parsing attributes in process `syz.2.1190'. [ 208.864286][T10342] netlink: 'syz.2.1192': attribute type 1 has an invalid length. [ 208.872285][T10342] netlink: 'syz.2.1192': attribute type 2 has an invalid length. [ 208.915337][T10341] hsr0 speed is unknown, defaulting to 1000 [ 208.942197][T10341] wg1 speed is unknown, defaulting to 1000 [ 209.036456][T10354] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1191'. [ 209.046508][T10354] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1191'. [ 209.252512][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 209.260626][ C1] lec:lec_tx_timeout: lec0 [ 209.266514][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 209.334895][T10359] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1195'. [ 209.866931][T10372] netlink: 'syz.1.1199': attribute type 21 has an invalid length. [ 209.896000][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1199'. [ 210.464534][T10390] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1203'. [ 210.989694][T10401] 8021q: VLANs not supported on ip6tnl0 [ 211.227998][T10406] netlink: 'syz.1.1207': attribute type 9 has an invalid length. [ 211.285203][T10408] netlink: 'syz.1.1207': attribute type 9 has an invalid length. [ 211.767742][T10428] macvtap0: entered promiscuous mode [ 212.444263][T10454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1218'. [ 212.683944][T10458] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1220'. [ 212.742600][T10458] openvswitch: netlink: Flow key attr not present in new flow. [ 213.257779][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1224'. [ 213.282995][T10469] tun0: tun_chr_ioctl cmd 1074812118 [ 213.304297][T10469] tun0: tun_chr_ioctl cmd 1074033169 [ 213.328635][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 213.363179][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1225'. [ 213.374715][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1223'. [ 213.927173][T10479] 8021q: adding VLAN 0 to HW filter on device bond11 [ 213.937112][T10479] team0: Port device bond11 added [ 214.069960][T10485] openvswitch: netlink: IP tunnel dst address not specified [ 214.084882][T10484] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 214.092771][T10484] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 214.249493][T10490] x_tables: duplicate underflow at hook 1 [ 214.282511][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 214.290727][ C1] lec:lec_tx_timeout: lec0 [ 214.295638][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 214.402807][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1233'. [ 215.260038][T10512] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.965549][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'. [ 216.020572][T10547] tipc: Enabled bearer , priority 0 [ 216.035892][T10547] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 216.059234][T10547] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 216.083123][T10547] tipc: Resetting bearer [ 216.173846][T10549] tipc: Resetting bearer [ 216.293840][T10558] syzkaller0: entered promiscuous mode [ 216.299460][T10558] syzkaller0: entered allmulticast mode [ 216.746400][T10588] netlink: 'syz.4.1258': attribute type 1 has an invalid length. [ 216.815379][T10588] bond1: entered promiscuous mode [ 216.821098][T10588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.946406][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'. [ 216.967288][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'. [ 217.484681][T10636] netlink: 'syz.4.1266': attribute type 29 has an invalid length. [ 217.567712][T10635] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 217.634102][T10635] bond6 (unregistering): Released all slaves [ 217.716704][T10643] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 217.724266][T10643] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 217.732010][T10643] tipc: Resetting bearer [ 218.170918][T10661] hsr0 speed is unknown, defaulting to 1000 [ 218.216499][T10661] wg1 speed is unknown, defaulting to 1000 [ 218.242774][T10650] nbd2: detected capacity change from 0 to 77309411391 [ 218.252199][ T5835] block nbd2: Receive control failed (result -32) [ 218.258014][T10663] block nbd2: Send control failed (result -32) [ 218.260978][ T5145] block nbd2: Receive control failed (result -32) [ 218.356501][T10663] block nbd2: Request send failed, requeueing [ 218.426416][ T1720] block nbd2: Dead connection, failed to find a fallback [ 218.436694][ T1720] block nbd2: shutting down sockets [ 218.442917][ T1720] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.454001][ T1720] Buffer I/O error on dev nbd2, logical block 0, async page read [ 218.469825][T10663] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.554457][T10663] Buffer I/O error on dev nbd2, logical block 1, async page read [ 218.588148][T10663] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.633439][T10680] __nla_validate_parse: 31 callbacks suppressed [ 218.633462][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'. [ 218.652828][T10663] Buffer I/O error on dev nbd2, logical block 2, async page read [ 218.673061][T10663] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.702855][T10663] Buffer I/O error on dev nbd2, logical block 3, async page read [ 218.710827][T10663] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.746076][T10663] Buffer I/O error on dev nbd2, logical block 0, async page read [ 218.764842][T10663] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.788143][T10677] hsr0 speed is unknown, defaulting to 1000 [ 218.794939][T10684] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1282'. [ 218.822555][T10663] Buffer I/O error on dev nbd2, logical block 1, async page read [ 218.830538][T10663] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.871578][T10663] Buffer I/O error on dev nbd2, logical block 2, async page read [ 218.892927][T10663] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.902560][T10663] Buffer I/O error on dev nbd2, logical block 3, async page read [ 218.917725][T10663] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.928203][T10663] Buffer I/O error on dev nbd2, logical block 0, async page read [ 218.936416][T10663] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.946676][T10663] Buffer I/O error on dev nbd2, logical block 1, async page read [ 218.962398][T10663] ldm_validate_partition_table(): Disk read failed. [ 218.966585][T10684] bond5: invalid ARP target 0.0.0.0 specified for addition [ 218.983522][T10663] Dev nbd2: unable to read RDB block 0 [ 218.989734][T10663] nbd2: unable to read partition table [ 219.005008][T10684] bond5: option arp_ip_target: invalid value (0) [ 219.021384][T10663] ldm_validate_partition_table(): Disk read failed. [ 219.031389][T10663] Dev nbd2: unable to read RDB block 0 [ 219.039317][T10663] nbd2: unable to read partition table [ 219.040086][T10684] bond5 (unregistering): Released all slaves [ 219.117554][T10677] wg1 speed is unknown, defaulting to 1000 [ 219.302535][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 219.310727][ C1] lec:lec_tx_timeout: lec0 [ 219.316102][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 219.410382][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'. [ 219.452639][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'. [ 219.729803][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 219.739389][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 219.782259][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 219.827760][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 220.003334][T10727] netlink: 'syz.1.1293': attribute type 1 has an invalid length. [ 220.039908][T10727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.995222][T10740] [ 220.997621][T10740] ====================================================== [ 221.004833][T10740] WARNING: possible circular locking dependency detected [ 221.011888][T10740] syzkaller #0 Not tainted [ 221.016328][T10740] ------------------------------------------------------ [ 221.023393][T10740] syz.1.1296/10740 is trying to acquire lock: [ 221.029571][T10740] ffffffff8ee9ed10 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0 [ 221.039287][T10740] [ 221.039287][T10740] but task is already holding lock: [ 221.046764][T10740] ffff8880548aaae0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 221.056296][T10740] [ 221.056296][T10740] which lock already depends on the new lock. [ 221.056296][T10740] [ 221.066740][T10740] [ 221.066740][T10740] the existing dependency chain (in reverse order) is: [ 221.075784][T10740] [ 221.075784][T10740] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 221.083683][T10740] lock_sock_nested+0x41/0x100 [ 221.089019][T10740] inet_shutdown+0x6a/0x390 [ 221.094079][T10740] nbd_mark_nsock_dead+0x2e9/0x560 [ 221.099757][T10740] recv_work+0x1c7f/0x1d90 [ 221.104722][T10740] process_scheduled_works+0xb6e/0x18c0 [ 221.110901][T10740] worker_thread+0xa53/0xfc0 [ 221.116133][T10740] kthread+0x388/0x470 [ 221.120732][T10740] ret_from_fork+0x51e/0xb90 [ 221.125859][T10740] ret_from_fork_asm+0x1a/0x30 [ 221.131182][T10740] [ 221.131182][T10740] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 221.138856][T10740] __mutex_lock+0x19f/0x1300 [ 221.143988][T10740] nbd_queue_rq+0x37b/0x1100 [ 221.149110][T10740] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 221.155179][T10740] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 221.162073][T10740] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 221.168583][T10740] blk_mq_run_hw_queue+0x348/0x4f0 [ 221.174224][T10740] blk_mq_dispatch_list+0xd16/0xe10 [ 221.179954][T10740] blk_mq_flush_plug_list+0x48d/0x570 [ 221.185935][T10740] __blk_flush_plug+0x3ed/0x4d0 [ 221.191324][T10740] __submit_bio+0x28d/0x580 [ 221.196471][T10740] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 221.202739][T10740] block_read_full_folio+0x599/0x830 [ 221.208728][T10740] filemap_read_folio+0x137/0x3b0 [ 221.214457][T10740] do_read_cache_folio+0x358/0x590 [ 221.220112][T10740] read_part_sector+0xb6/0x2b0 [ 221.225491][T10740] adfspart_check_ICS+0xa5/0xa40 [ 221.230987][T10740] bdev_disk_changed+0x7ba/0x1550 [ 221.236550][T10740] blkdev_get_whole+0x380/0x510 [ 221.241930][T10740] bdev_open+0x31e/0xd30 [ 221.246738][T10740] blkdev_open+0x470/0x610 [ 221.251771][T10740] do_dentry_open+0x785/0x14e0 [ 221.257072][T10740] vfs_open+0x3b/0x340 [ 221.261842][T10740] path_openat+0x2e08/0x3860 [ 221.266962][T10740] do_file_open+0x23e/0x4a0 [ 221.271990][T10740] do_sys_openat2+0x113/0x200 [ 221.277327][T10740] __x64_sys_openat+0x138/0x170 [ 221.282796][T10740] do_syscall_64+0x14d/0xf80 [ 221.288182][T10740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.294597][T10740] [ 221.294597][T10740] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 221.301824][T10740] __mutex_lock+0x19f/0x1300 [ 221.306947][T10740] nbd_queue_rq+0xc6/0x1100 [ 221.311978][T10740] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 221.318136][T10740] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 221.325106][T10740] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 221.331619][T10740] blk_mq_run_hw_queue+0x348/0x4f0 [ 221.337279][T10740] blk_mq_dispatch_list+0xd16/0xe10 [ 221.343003][T10740] blk_mq_flush_plug_list+0x48d/0x570 [ 221.348975][T10740] __blk_flush_plug+0x3ed/0x4d0 [ 221.354353][T10740] __submit_bio+0x28d/0x580 [ 221.359385][T10740] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 221.365552][T10740] block_read_full_folio+0x599/0x830 [ 221.371387][T10740] filemap_read_folio+0x137/0x3b0 [ 221.376969][T10740] do_read_cache_folio+0x358/0x590 [ 221.382611][T10740] read_part_sector+0xb6/0x2b0 [ 221.387901][T10740] adfspart_check_ICS+0xa5/0xa40 [ 221.393364][T10740] bdev_disk_changed+0x7ba/0x1550 [ 221.399026][T10740] blkdev_get_whole+0x380/0x510 [ 221.404577][T10740] bdev_open+0x31e/0xd30 [ 221.409346][T10740] blkdev_open+0x470/0x610 [ 221.414286][T10740] do_dentry_open+0x785/0x14e0 [ 221.419591][T10740] vfs_open+0x3b/0x340 [ 221.424202][T10740] path_openat+0x2e08/0x3860 [ 221.429416][T10740] do_file_open+0x23e/0x4a0 [ 221.434531][T10740] do_sys_openat2+0x113/0x200 [ 221.439735][T10740] __x64_sys_openat+0x138/0x170 [ 221.445136][T10740] do_syscall_64+0x14d/0xf80 [ 221.450354][T10740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.456773][T10740] [ 221.456773][T10740] -> #5 (set->srcu){.+.+}-{0:0}: [ 221.463998][T10740] __synchronize_srcu+0xca/0x300 [ 221.469554][T10740] elevator_switch+0x1e8/0x7a0 [ 221.474846][T10740] elevator_change+0x2cc/0x450 [ 221.480133][T10740] elevator_set_default+0x36c/0x430 [ 221.486306][T10740] blk_register_queue+0x366/0x430 [ 221.492119][T10740] __add_disk+0x677/0xd50 [ 221.497061][T10740] add_disk_fwnode+0xfb/0x480 [ 221.502268][T10740] nbd_dev_add+0x72c/0xb50 [ 221.507470][T10740] nbd_init+0x168/0x1f0 [ 221.512163][T10740] do_one_initcall+0x250/0x8d0 [ 221.517488][T10740] do_initcall_level+0x104/0x190 [ 221.523058][T10740] do_initcalls+0x59/0xa0 [ 221.527929][T10740] kernel_init_freeable+0x2a6/0x3e0 [ 221.533664][T10740] kernel_init+0x1d/0x1d0 [ 221.538613][T10740] ret_from_fork+0x51e/0xb90 [ 221.543737][T10740] ret_from_fork_asm+0x1a/0x30 [ 221.549128][T10740] [ 221.549128][T10740] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 221.557041][T10740] __mutex_lock+0x19f/0x1300 [ 221.562170][T10740] elevator_change+0x1b3/0x450 [ 221.567633][T10740] elevator_set_none+0xb5/0x140 [ 221.573096][T10740] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 221.579441][T10740] nbd_start_device+0x17f/0xb10 [ 221.584818][T10740] nbd_genl_connect+0x165b/0x1cf0 [ 221.590453][T10740] genl_family_rcv_msg_doit+0x22a/0x330 [ 221.596654][T10740] genl_rcv_msg+0x61c/0x7a0 [ 221.601687][T10740] netlink_rcv_skb+0x232/0x4b0 [ 221.606978][T10740] genl_rcv+0x28/0x40 [ 221.611576][T10740] netlink_unicast+0x80f/0x9b0 [ 221.616857][T10740] netlink_sendmsg+0x813/0xb40 [ 221.622403][T10740] ____sys_sendmsg+0x972/0x9f0 [ 221.627794][T10740] ___sys_sendmsg+0x2a5/0x360 [ 221.633001][T10740] __x64_sys_sendmsg+0x1bd/0x2a0 [ 221.638471][T10740] do_syscall_64+0x14d/0xf80 [ 221.643587][T10740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.650135][T10740] [ 221.650135][T10740] -> #3 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 221.658746][T10740] blk_alloc_queue+0x546/0x680 [ 221.664037][T10740] __blk_mq_alloc_disk+0x197/0x390 [ 221.669763][T10740] nbd_dev_add+0x499/0xb50 [ 221.674728][T10740] nbd_init+0x168/0x1f0 [ 221.679497][T10740] do_one_initcall+0x250/0x8d0 [ 221.684788][T10740] do_initcall_level+0x104/0x190 [ 221.690253][T10740] do_initcalls+0x59/0xa0 [ 221.695294][T10740] kernel_init_freeable+0x2a6/0x3e0 [ 221.701019][T10740] kernel_init+0x1d/0x1d0 [ 221.706045][T10740] ret_from_fork+0x51e/0xb90 [ 221.711276][T10740] ret_from_fork_asm+0x1a/0x30 [ 221.716587][T10740] [ 221.716587][T10740] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 221.724019][T10740] fs_reclaim_acquire+0x71/0x100 [ 221.729520][T10740] __kmalloc_cache_noprof+0x40/0x660 [ 221.735357][T10740] cryptomgr_notify+0x85/0x930 [ 221.740756][T10740] notifier_call_chain+0x1be/0x400 [ 221.746432][T10740] blocking_notifier_call_chain+0x6a/0x90 [ 221.752692][T10740] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 221.758596][T10740] crypto_alloc_tfm_node+0x13e/0x3f0 [ 221.764410][T10740] crypto_alloc_sync_skcipher+0x39/0xd0 [ 221.770542][T10740] rxkad_init+0x20/0xe0 [ 221.775217][T10740] rxrpc_init_security+0x72/0x120 [ 221.780941][T10740] af_rxrpc_init+0x13d/0x2e0 [ 221.786052][T10740] do_one_initcall+0x250/0x8d0 [ 221.791438][T10740] do_initcall_level+0x104/0x190 [ 221.797014][T10740] do_initcalls+0x59/0xa0 [ 221.802151][T10740] kernel_init_freeable+0x2a6/0x3e0 [ 221.807891][T10740] kernel_init+0x1d/0x1d0 [ 221.812845][T10740] ret_from_fork+0x51e/0xb90 [ 221.817966][T10740] ret_from_fork_asm+0x1a/0x30 [ 221.823257][T10740] [ 221.823257][T10740] -> #1 ((crypto_chain).rwsem){++++}-{4:4}: [ 221.831694][T10740] down_read+0x47/0x2e0 [ 221.836383][T10740] blocking_notifier_call_chain+0x54/0x90 [ 221.842625][T10740] __crypto_register_alg+0x32b/0x3c0 [ 221.848616][T10740] crypto_register_alg+0x447/0x810 [ 221.854335][T10740] do_one_initcall+0x250/0x8d0 [ 221.859657][T10740] do_initcall_level+0x104/0x190 [ 221.865163][T10740] do_initcalls+0x59/0xa0 [ 221.870047][T10740] kernel_init_freeable+0x2a6/0x3e0 [ 221.875783][T10740] kernel_init+0x1d/0x1d0 [ 221.880661][T10740] ret_from_fork+0x51e/0xb90 [ 221.885866][T10740] ret_from_fork_asm+0x1a/0x30 [ 221.891163][T10740] [ 221.891163][T10740] -> #0 (crypto_alg_sem){++++}-{4:4}: [ 221.898752][T10740] __lock_acquire+0x15a5/0x2cf0 [ 221.904130][T10740] lock_acquire+0xf0/0x2e0 [ 221.909174][T10740] down_write+0x96/0x200 [ 221.914029][T10740] crypto_alg_mod_lookup+0x211/0x5f0 [ 221.919925][T10740] crypto_alloc_tfm_node+0x13e/0x3f0 [ 221.925740][T10740] tls_set_sw_offload+0xa33/0x1780 [ 221.931471][T10740] tls_setsockopt+0xef2/0x15c0 [ 221.936763][T10740] do_sock_setsockopt+0x17c/0x1b0 [ 221.942317][T10740] __x64_sys_setsockopt+0x13d/0x1b0 [ 221.948057][T10740] do_syscall_64+0x14d/0xf80 [ 221.953192][T10740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.959625][T10740] [ 221.959625][T10740] other info that might help us debug this: [ 221.959625][T10740] [ 221.970033][T10740] Chain exists of: [ 221.970033][T10740] crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 221.970033][T10740] [ 221.983096][T10740] Possible unsafe locking scenario: [ 221.983096][T10740] [ 221.990562][T10740] CPU0 CPU1 [ 221.995948][T10740] ---- ---- [ 222.001313][T10740] lock(sk_lock-AF_INET6); [ 222.005843][T10740] lock(&nsock->tx_lock); [ 222.012803][T10740] lock(sk_lock-AF_INET6); [ 222.020014][T10740] lock(crypto_alg_sem); [ 222.024383][T10740] [ 222.024383][T10740] *** DEADLOCK *** [ 222.024383][T10740] [ 222.032920][T10740] 1 lock held by syz.1.1296/10740: [ 222.038037][T10740] #0: ffff8880548aaae0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 222.047885][T10740] [ 222.047885][T10740] stack backtrace: [ 222.053879][T10740] CPU: 1 UID: 0 PID: 10740 Comm: syz.1.1296 Not tainted syzkaller #0 PREEMPT(full) [ 222.053898][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 222.053907][T10740] Call Trace: [ 222.053915][T10740] [ 222.053923][T10740] dump_stack_lvl+0xe8/0x150 [ 222.053945][T10740] print_circular_bug+0x2e1/0x300 [ 222.053969][T10740] check_noncircular+0x12e/0x150 [ 222.053996][T10740] __lock_acquire+0x15a5/0x2cf0 [ 222.054025][T10740] lock_acquire+0xf0/0x2e0 [ 222.054042][T10740] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 222.054066][T10740] down_write+0x96/0x200 [ 222.054087][T10740] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 222.054105][T10740] ? __pfx_down_write+0x10/0x10 [ 222.054126][T10740] ? crypto_larval_alloc+0x1bf/0x290 [ 222.054145][T10740] crypto_alg_mod_lookup+0x211/0x5f0 [ 222.054166][T10740] crypto_alloc_tfm_node+0x13e/0x3f0 [ 222.054187][T10740] ? timer_init_key+0x161/0x2f0 [ 222.054203][T10740] tls_set_sw_offload+0xa33/0x1780 [ 222.054227][T10740] tls_setsockopt+0xef2/0x15c0 [ 222.054243][T10740] ? __pfx_tls_setsockopt+0x10/0x10 [ 222.054260][T10740] ? __fget_files+0x2a/0x420 [ 222.054273][T10740] ? aa_sock_opt_perm+0xff/0x1a0 [ 222.054286][T10740] ? sock_common_setsockopt+0x36/0xc0 [ 222.054302][T10740] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 222.054317][T10740] do_sock_setsockopt+0x17c/0x1b0 [ 222.054337][T10740] __x64_sys_setsockopt+0x13d/0x1b0 [ 222.054357][T10740] do_syscall_64+0x14d/0xf80 [ 222.054376][T10740] ? trace_irq_disable+0x3b/0x150 [ 222.054388][T10740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.054403][T10740] ? clear_bhb_loop+0x40/0x90 [ 222.054418][T10740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.054433][T10740] RIP: 0033:0x7fcd1a59c819 [ 222.054447][T10740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.054459][T10740] RSP: 002b:00007fcd1b3dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 222.054475][T10740] RAX: ffffffffffffffda RBX: 00007fcd1a815fa0 RCX: 00007fcd1a59c819 [ 222.054486][T10740] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000005 [ 222.054495][T10740] RBP: 00007fcd1a632c91 R08: 0000000000000028 R09: 0000000000000000 [ 222.054512][T10740] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 222.054520][T10740] R13: 00007fcd1a816038 R14: 00007fcd1a815fa0 R15: 00007ffd7c7aa9d8 [ 222.054536][T10740] [ 223.801850][T10744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.322626][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 224.330699][ C1] lec:lec_tx_timeout: lec0 [ 224.335415][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 229.342624][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 229.350670][ C1] lec:lec_tx_timeout: lec0 [ 229.355484][ C1] lec:lec_start_xmit: lec0:No lecd attached