last executing test programs: 5.43407405s ago: executing program 0 (id=3629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x1e0, 0x1398, 0x1398, 0x1e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xff, 0xff, 0xff, 0xff], [0xff, 0xff0000ff, 0xffffff00, 0xff000000], 'veth1_to_team\x00', 'vlan1\x00', {0xff}, {}, 0x33, 0x81, 0x5}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0xfff7, 0x0, 0x7, 'snmp_trap\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0xff, 0xffffffff, 0xff000000, 0xffffffff], [0xffffff00, 0x1fffffffe, 0xffffff, 0xff], 'dvmrp0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x32, 0x7, 0x2, 0x2}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4, 0x1}, {0x0, 0x4, 0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) (async) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x6001, 0x110}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}]}}}]}, 0x3c}}, 0x84000) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x6001, 0x110}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}]}}}]}, 0x3c}}, 0x84000) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2000c011}, 0x20004000) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1001}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x88}, 0x1, 0x0, 0x0, 0x8801}, 0x24000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r6, &(0x7f0000000380)=[{&(0x7f00000011c0)="c800b66cf7", 0x5}], 0x1) readv(r6, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) (async) readv(r6, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe, 0x40010, r8, 0x952de000) (async) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe, 0x40010, r8, 0x952de000) openat$cgroup_ro(r8, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 5.075418796s ago: executing program 0 (id=3631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f00000004c0)=0x10) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r3, 0x2}, &(0x7f0000000100)=0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0) 4.182412286s ago: executing program 0 (id=3639): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000020000000000000000600000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000090000000000000000000000090000000000000000000000090200000000"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) socket(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40088c0) sendfile(r2, r3, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) epoll_create1(0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0xb, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x100000000}, 0x0, &(0x7f00000002c0)={0x3fd, 0x800, 0x2, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x58, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x24604, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x26}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x6, 0x21, 0x0, 0x0, 0xac0}, {0x8, 0x1a, 0x0, 0x0, 0xfffffffe}]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008810}, 0x20040850) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r6 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f00000006c0)="281e3162e61e5f8e22c14cebe48862dda7b2fddc249bd774480a07f7ea440013", 0x20}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4800) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x4000000) write$rfkill(r5, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 4.063672363s ago: executing program 2 (id=3640): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800004196d8a5dc1604a4002000000005000000000000000100000f04000000000000000000000000000000000000040000000000006161"], 0x0, 0x3d}, 0x28) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e21, 0x2, @private2, 0x4000000c}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000200)="8000e859667fbc13", 0x8}], 0x1, &(0x7f0000000100)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x33, 0x2, 0x2, 0x2, 0x0, [@empty]}}}], 0x28}, 0x8040) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) (async, rerun: 32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000c80)=@newtclass={0xe54, 0x28, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0x6, 0x5}, {0xc, 0x2}}, [@c_atm={{0x8}, {0x28, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0xfff2}}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x12, 0x3, "29c666645f2f78393eaf2d70d411"}]}}, @c_cbq={{0x8}, {0x420, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x2, 0x0, 0x10, 0xf9, 0x80000000, 0x40, 0x8000, 0x43}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x7f, 0x2, 0x9, 0x8, 0x80, 0x802, 0x9, 0x6, 0x0, 0x10000, 0x3, 0x1, 0x9, 0x7, 0x4, 0x400, 0x9, 0x7, 0x7, 0x0, 0x9, 0x8, 0xfffffffd, 0x5187, 0x54, 0x10000, 0x0, 0x5, 0x10000, 0x8, 0x7, 0x0, 0x4, 0xb4bb, 0x5, 0x3, 0x2, 0xaa8, 0x9, 0x10, 0x3, 0x9, 0x8, 0x2, 0xe2, 0x1, 0x7, 0x6, 0xd, 0x0, 0x2, 0x1, 0xfffffffc, 0xa3, 0x9, 0xe, 0x0, 0xffffff81, 0x1, 0x7, 0x5, 0xfff, 0x4, 0x1000, 0x6, 0x0, 0x7, 0x7, 0x4, 0x6, 0x4, 0x510e, 0x9, 0x6, 0xce, 0x9, 0x0, 0x7e2, 0x1, 0x7fffffff, 0x400, 0x5, 0x5, 0xfffffff2, 0x6, 0x9, 0x8a, 0x5, 0x0, 0x2, 0x6, 0x7, 0x7, 0x2, 0x1, 0x80, 0x101, 0x0, 0x101, 0x1, 0xb84, 0x7, 0x6, 0x6, 0x9, 0xf, 0x4, 0x3, 0x81, 0x8001, 0x10001, 0x7f, 0x1, 0x5, 0x2, 0x140000, 0x8, 0x1, 0x8, 0x10001, 0x7, 0xfffeffff, 0xfff, 0x7, 0x1, 0x3ff, 0x0, 0x4, 0x80, 0x7, 0x924, 0x1, 0x40, 0x0, 0xfff, 0x1000, 0x3, 0x8, 0x7, 0x7c, 0x68, 0x0, 0xfffffdba, 0xffff, 0x40, 0x4, 0x51b7, 0x8, 0x10000, 0x6, 0x6, 0x49b0, 0x4, 0xd01e7cf9, 0x7, 0x400000, 0xfffffc00, 0x3, 0x2, 0x88, 0x6, 0xffff, 0x2, 0xffff, 0x5, 0x9, 0xfffffff7, 0x2, 0xfffffffa, 0x8001, 0x7fffffff, 0x4, 0x7, 0xffffff80, 0x0, 0x1000, 0x6fc, 0x48000, 0x1, 0x9adf, 0x800, 0xe244, 0xffff, 0x10, 0x10, 0x401, 0x100000, 0x6, 0x401, 0x7, 0xd, 0xffff, 0x3db, 0xc00, 0xfffffffa, 0x6, 0x2, 0xffff, 0x3d, 0x10000, 0xa2, 0xf4da, 0x40, 0x8, 0xd15, 0x4, 0x6, 0x10, 0x9, 0x3, 0x7, 0x0, 0x7, 0x3, 0x7ac, 0x9, 0x5, 0x2, 0x1, 0x0, 0x6, 0x1, 0x6, 0x33, 0x13, 0x4, 0x9, 0x3, 0x4, 0x5035, 0x7, 0x1, 0x9, 0x671f, 0xa, 0x7, 0x401, 0x8, 0xaa5, 0x7, 0xb75, 0x9, 0x2e, 0x7, 0x7, 0x46, 0x8001, 0x5, 0x101, 0x7fffffff, 0xfffffbff, 0xffff, 0x2, 0x0, 0xd9e]}]}}, @c_atm={{0x8}, {0x1c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x3}}, @TCA_ATM_HDR={0xf, 0x3, "2b6bb5016b119cf3784d9a"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x3}}}, @c_cbq={{0x8}, {0x470, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x8, 0x8, 0x6, 0x7, 0x9}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3d, 0x2, 0xe, 0x3, 0x7, 0x3, 0xfffffffd, 0x9}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x658, 0xb23, 0xf, 0x0, 0xc, 0x7dcde08, 0xfffffffe, 0x400, 0x9, 0x8, 0x5, 0x1, 0x401, 0x101, 0x5, 0x8, 0x100, 0x8, 0x2530, 0xffffffff, 0x7a5, 0x3f95f181, 0xe5c, 0x7, 0xf1d, 0x8, 0x1ff, 0xf, 0x4, 0x200, 0x0, 0x3, 0xd, 0x3ff, 0x1, 0x6, 0x18000, 0x6, 0x1, 0x0, 0x6, 0x4d2615ef, 0x8e8a, 0x2, 0x2, 0x64, 0x2, 0xa2b5, 0x3948, 0x896, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x7fff, 0x80000001, 0x7, 0x9, 0x6, 0x9, 0x5, 0x5, 0x4, 0x8, 0x81, 0xe, 0x45, 0x0, 0x1, 0x5, 0x5, 0xfffffff9, 0xa384, 0x8, 0x0, 0x7fffffff, 0xbf, 0x1, 0xe8f3, 0xf323, 0x0, 0x3, 0x1, 0x8, 0x7, 0x7fff, 0xfffffe00, 0x5, 0x9, 0x80, 0x6, 0x10, 0xfff, 0x80000000, 0x4, 0xc9, 0x1, 0x0, 0x0, 0x40, 0x8, 0x7ff, 0x401, 0x101, 0x4, 0x7fffffff, 0x1e4, 0x4, 0x8, 0x8, 0xfff, 0x0, 0x80000000, 0x1, 0x7fff, 0x2, 0x2, 0x80000001, 0x2, 0x1, 0x9, 0x7, 0x8, 0x1, 0x2, 0x1, 0x78, 0xffffffff, 0xb6d1, 0x3ff, 0x2c, 0xc, 0x2214, 0xfff, 0x3, 0x1, 0x9, 0xc1, 0x1, 0x5, 0x9, 0x81, 0x4, 0x401, 0x3, 0x4, 0x3, 0x4, 0x5, 0x1, 0x9, 0xea4, 0x800, 0x42, 0x0, 0x1, 0xaa5b, 0x100, 0x1, 0x6, 0x3, 0x3, 0xfffffffd, 0x2a, 0x2, 0x1, 0x5, 0xe, 0x200, 0x9, 0x5, 0x7, 0x76, 0x5, 0x0, 0x3, 0xcd8, 0x101, 0x5, 0x0, 0x1, 0x7, 0x9, 0x1ff, 0x9, 0x70, 0x4, 0x1, 0x8, 0x1ff, 0x10, 0x762e, 0xd121c000, 0x69, 0x4, 0x3, 0xfffffffd, 0x4, 0x8, 0x101, 0x1, 0x8001, 0x4, 0x3f2372e4, 0x4, 0x0, 0x8, 0x7, 0xa4b, 0x6, 0x2, 0x3, 0x6, 0x5, 0x6, 0xc3, 0x1, 0x1, 0xbff, 0x3fafa8c5, 0x3, 0x4, 0x20, 0x1, 0x80000001, 0xc91, 0x2, 0x8, 0x8, 0x200, 0x81, 0x7, 0x80000000, 0xa, 0x8, 0x10, 0x2, 0x1, 0x7d, 0x5, 0x2, 0x1, 0xe, 0x8, 0x5401, 0x100, 0x1000, 0x9e2, 0x8, 0x3, 0x4, 0x2a, 0x2, 0x1, 0xffff]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x2, 0x0, 0x3, 0x8, 0x6}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xf, 0x0, 0x3, 0xc, 0x7, 0xfffffffd, 0x9, 0x7}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3f, 0x1, 0x16, 0x2, 0x1, 0x4, 0x7ff, 0x1eb}}]}}, @c_atm={{0x8}, {0x94, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0xfff2}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0x4}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x10, 0x1}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0x3}}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0x4}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x7, 0xfff1}}, @TCA_ATM_HDR={0x38, 0x3, "499784fd5b52853c69417a2f4569fb81285798bc26e47bdd8fe3069eee5b2a75c20e8f696e88660777296aedd6d247972ef25cc4"}, @TCA_ATM_HDR={0x17, 0x3, "4308cbe3fbc8d5aedc434941f1b1f99cc30529"}]}}, @c_cbq={{0x8}, {0x480, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xe, 0x0, 0x6, 0x8001, 0xfff, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x0, 0x5, 0x1, 0xff01, 0x7}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x11, 0x0, 0x1d, 0xf2, 0x2, 0x2, 0x5, 0xa}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x0, 0x4, 0xc, 0x8, 0x7, 0x6}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x1, 0x2, 0x6, 0x9, 0xfff, 0x2, 0x9, 0xb0c, 0x3, 0x8, 0x6, 0x2, 0x4, 0x7f, 0x200, 0x7, 0x9, 0x8000, 0xffff, 0x6, 0x1, 0x1, 0x1, 0x7, 0x8, 0x6, 0x8001, 0xfffffffe, 0x7, 0xa, 0x7, 0x8, 0x90000, 0x9, 0x7fffffff, 0x7fff, 0x5, 0xd57, 0xff, 0x80, 0x5, 0xed, 0xe, 0xfffff000, 0x3, 0xfff, 0x1, 0x200, 0x4, 0x5, 0x1, 0x4, 0xcc2, 0xffff, 0xffffffff, 0x0, 0x0, 0xfff, 0x40000, 0x9, 0x5, 0x758, 0x80000000, 0x670c, 0xf5, 0xffffffff, 0x6, 0x80000001, 0xc, 0x1ff, 0x3, 0xaf, 0x2, 0x200, 0xffffffff, 0x1, 0x81, 0x80, 0x1bb, 0x97c, 0x7, 0x8, 0x6, 0x7, 0x7, 0x0, 0x6, 0x4, 0x7ecdc36b, 0x3, 0x8, 0x5, 0x101, 0x6, 0x5, 0x7, 0x1a1e089c, 0x6, 0x0, 0x200, 0xaa3, 0x37, 0xffffff3e, 0x8, 0x0, 0xfffffffe, 0x7, 0x7f, 0xffffdd41, 0x4, 0x8, 0xfffffff9, 0x4, 0x9, 0x0, 0x3, 0x401, 0x7fec, 0x0, 0x8, 0x9, 0x6, 0xd10, 0x1, 0x80000000, 0x518b, 0x2, 0xffffffa5, 0x8, 0x80000000, 0x41b, 0x9, 0x9, 0x1, 0xfffe, 0x9, 0x9, 0x3, 0xffffffb6, 0x5, 0x3ff, 0xfffffffd, 0x4, 0x400, 0xfb, 0x7fffffff, 0x400, 0x7fffffff, 0x200, 0x8001, 0x10000, 0x6, 0x7, 0xac, 0xfffff62e, 0xd9b2, 0x7, 0x9, 0x6, 0x3ff, 0x5e3d, 0xff, 0x40, 0x80000000, 0x9, 0x5, 0xab, 0x6, 0xffffff01, 0x200, 0x8, 0x0, 0xf, 0x1, 0x9, 0x8, 0x8000, 0x3, 0x7, 0x81, 0x2, 0x4, 0x1, 0xffffffff, 0x80000000, 0x8, 0x80000001, 0x7ddb, 0xe, 0x1, 0x4, 0x5, 0x4, 0x3, 0x1, 0x5, 0x9, 0x76, 0x8, 0x0, 0x8000, 0x7e, 0xbc9, 0x101, 0x45b7, 0x1, 0x6, 0x7ff, 0x9, 0x0, 0x1000, 0x7, 0xffff7fff, 0x1, 0x3d7, 0x8, 0x2, 0x2, 0xfffffff8, 0x5, 0x7, 0x8, 0x7a, 0xfffffff6, 0x3, 0x4, 0x1, 0x9, 0x400, 0xffffffff, 0x9, 0x0, 0xd6c, 0x9, 0x9, 0x8, 0xd04, 0x7, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x7f6b, 0x0, 0xfc5, 0x4, 0x1ff, 0x8, 0x6106, 0x572, 0x145c, 0x20, 0xc, 0x8000]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x23, 0x1, 0x1d, 0xfb, 0x2, 0x3ca8c50c, 0x6, 0x8001}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x13, 0x3, 0x1f, 0xf, 0x10, 0x5, 0x3, 0xd}}]}}]}, 0xe54}}, 0x0) 3.875471923s ago: executing program 2 (id=3641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)=0x3) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0xd0, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x627f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]}) write$ppp(r2, &(0x7f0000000140)="0647", 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) connect$netlink(r3, &(0x7f0000000180), 0xc) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x4, &(0x7f0000000000)=[{0x4, 0x4, 0x0, 0xfffffffb}, {0x80, 0x1, 0x5}, {0x8, 0x4, 0x3, 0x3}, {0xfc6, 0x14, 0x10}]}, 0x10) recvmmsg(r4, &(0x7f0000001ec0)=[{{0x0, 0x1e, 0x0}, 0x4d0}], 0x1, 0x140, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)=0x3) (async) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0xd0, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x627f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]}) (async) write$ppp(r2, &(0x7f0000000140)="0647", 0x2) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) (async) connect$netlink(r3, &(0x7f0000000180), 0xc) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x4, &(0x7f0000000000)=[{0x4, 0x4, 0x0, 0xfffffffb}, {0x80, 0x1, 0x5}, {0x8, 0x4, 0x3, 0x3}, {0xfc6, 0x14, 0x10}]}, 0x10) (async) recvmmsg(r4, &(0x7f0000001ec0)=[{{0x0, 0x1e, 0x0}, 0x4d0}], 0x1, 0x140, 0x0) (async) 3.114373625s ago: executing program 2 (id=3642): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) socket$inet(0x2, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) 2.886797226s ago: executing program 0 (id=3643): recvmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000880)=""/149, 0x95}, {&(0x7f0000000a00)=""/253, 0xfd}, {&(0x7f0000000080)=""/7, 0x7}], 0x3}, 0x9}], 0x1, 0xc0002102, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x226c}, 0x1c) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(adiantum(cryptd(lrw-serpent-avx2),des3_ede-asm,poly1305-s'}, 0x58) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0xc2f1788970f1e6ef) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000480)={r6, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x80}, &(0x7f0000000100)=0x90) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x8, [@func={0x5, 0x0, 0x0, 0xc, 0x1}, @struct={0xb, 0x1, 0x0, 0x4, 0x0, 0x3, [{0xa}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x5}}]}, {0x0, [0x2e, 0x2e, 0x0, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000780)=""/22, 0x5c, 0x16, 0x0, 0x1ff, 0x10000, @value=r2}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) 2.559744811s ago: executing program 2 (id=3644): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071001e00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x1}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) sendmmsg$alg(r2, &(0x7f0000002c00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="8612fc658c6a12afb00d6eb3ca35f72da5cdc2202a7cc51f9a5f1675cbd2e5", 0x1f}], 0x1}, {0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d29976d12d413c3df857c9fe5b8443d989a66ceacaabd5373d678ff977ce0a37fa9660be94b55993b94a164f3be7854daa84026f981cf104de379442035609328ac2a9ddeb9016e8c7aa67837a35cbff67e2fddfe0c80de8eebaffe0f7a4f60906ebb753ada5f88ad4eb89d24cf0a0c32de8a2f81ab49c90ab2e7660686914a9c208f50671145edcb11a07ff87", 0x8d}, {&(0x7f0000000280)="cbff14af6e8c0e3ef5a3049bac9a5b6aba1c3a0fbf2f55e6924e26dae387d2d1dee00f978a437be2489e660f6840606e997e07676831069be52bc8418d64d4d64baa367af860e3edba996e6f7729e90b991826106329e88415f3fee6e5a2ef94abf48743b0fbab0e2c2b72bcb04c60cdd0ae7fb30fc59eb4d6edc7ddf87eac409ff4deb90d118ac989bead52e5c64307d6921c8f9405c4b65d77ea15dde9a4f343af93d429e7d5ce541fdc295f", 0xad}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="62466456f4392296a2eb0b8f3fce6625365f8cdc19214bab353b9433917ab7412a32a3d3ac82e6ae4e6116957612902c82d34815c5e6aa09bd1912d2d3d85058e7148f98df85baf06131edcfef2ed5e8cc3bb6d16aba61544371bd8982341cfa1aa0594fdb3625dd5eda1a7922012363c9ad336e6e93437725906f8b18ea7351cad1a92854d6ec808506606d6433bf31188fc99649a581b9b87bbb7c42f5e4c3f33a47f58f5e8b155d1aa6163490a0d79e18545001ea0e6b4a18f83c13", 0xbd}], 0x4, &(0x7f0000001400)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xd8, 0x117, 0x2, 0xbe, "8e2b1d770f939ff4dfc4702092a2d9a866c37737620211cd32484ce518b8524625bae6ef57b537c5e06c53ed812709fd5e294a9d7b099d4494ccbfea961cc50540df88236318e6acdab58c16a37acddcdb1c94534c7ddf9114d1f6e603dab4732acffbe0a72e4af1b1befbaf48dcf29cd2f7e4e753b8fb5d2d51b4089174f78f72ceef98a4b9ae30998828a039d60a579f0dde3804dc6b06a098a85b6f2183e6afbaee7398dd50b96ba26c4823ad51b7a34cf292326fe88566605372ddff"}, @iv={0x1018, 0x117, 0x2, 0x1000, "c927b2ffe32958e1985c9ba5e94f858b9673afad0f31b8f32ef98cfc14627dd0fd3f2ed15704873755609c0e59d55645b280067032fe871fd82be6a2cac87179c8393ef6cfa8d8488e33d97543af254ca21b21e4407b72d3bdd84f4c0169a9c20ce2d727bc5aab299103a9820c3da890dac249ea7a991e6535e311669ce396b36975c059d6e6a9158f11a67410bd5e50762e906a6c8890e8ecba16e267d8b52a7515b61eca1cf25b16a8df104b402604d328dfad107e40155440c02aa767bd7b16b637b74c8457df8a181fcb07e46653303136fcfbade752302b14acc916d9bec5443dc5e0f58d514bcde4f0a3b3fd9ef0e420166b8ad3a01af1ce5fb8236347cfcec5da4734cf2f6f1e6c85b0d34debb5b03c4198c2ae12d2fa8e8875d97d5a7463af667f7aec1a47716b4a85969799ca18df8720333aac14b33bb7877bd77aa97b2e39dea092ca97fdbc562ee2b2e4cb930be71f237ec5c814393ae3a7e2e57dbbaaeb7a8a21f38c76530bc8445f8d85ff1c1e1c4bb9373fef1e4f9940ce496879db9e3a7c832cd07ffc0aa2af612168278e91a48805eb82cc7771bcce4b896dee3d240a616855590d4db8bc0f3f79a1ac78b82f974f3aa8fcc198639165e0ebc28094e4d55fac6941c2e834a4c6e7c5b43240549018249e74ae3b900d2546db53944ee2a8889cdf46ce8f7aa5f2f5521890bba472095e4832d1bea516decc9ad18b4f605d3c919cca39aa5155f65b2cb7217dd5a56220e478afe17c3f461cda4e55f5efc85c363b73346592cd798a38ac678bd2861a84c2a3e18dcd6c4551883eb0bdd7d99edd195dd7e8083f1f236c3bad9d226306f21d09dbbbcbca3f7c0b7d92ee107705172264ba2389683379582d68ba1c337e4fed1872686d46145dccb3d17423a3820e97dbfe7725ef8680c96fe90e9cc29b5c57b722c6d313292a5ba61d5d397dd0941f5c42ba21e21beea48fd27e9f7c35262da9594e2265d24b5c79d43513dbc0e03e527ecdd60b2240a334adfa2e023b95907ba85ecbca582f5d860d0827fea6a83545e9bef9ef5e9b746cbe01d773907457f529366830d0670a08365ad796cd200728431cfecc1ab1f5797e9bcea17390d25cf5e1120ed00c11636f6e022d84ed390343b7c5e392774d104b50a3d71a8c624f1ffd7b6b8b3ecf767248815fd86652a6938540cb0a3636a9541b47ab7ab9cee7bc8f0c6b87eff23215f5d2f29376118a8f8b8f19b6f52c47bf2ab1be89d812b0ec2ffd07c3a8dc0893e834094dc5c15863f8fe05dfdf75ac3bf1a75e5097c2d29385f3fc6a2ffbf7a9c8af2e8d3359140d51a986f8f4bd668e3c81b84399a85996256204c798a94f7a4d08c170c19c80b4229282f3574b7998f080cc12ffd05ca2170ea4548aba7fd2e776b22e0c148c864b0e2decc056eb18b2902ce92874adb7a68d4579cc8ab190c9633fc8ea82a5ade645a7a9721483c165f126d0761cc8c1a6ae64ac0573750e62712d4edcd294452985d8f596c043a3c4fe1a522362e73fd4c4eb296ecbe15e2df92b74f9d330de99a26d61de575f3116ba8bbd20982465389b1f98a507c1f8b579833d168308920de502c7b3a614b0eb9b341378efc16b0bcbd6359143823daff30df5c54b46167ffc7692fc554493656f4f8e1068a2e531644457681d256913cb463b6af599bb9bc51320d66aa994cb2cb621ab3c35d0d81be802047250559eb487cf65fd627d208e957d20c5120a978086105dda0fe92268a7dfc00b1cedbb9403dba9dbced4c70794241ef9a48e6faa120e86c33753595f375747677448512f60c10985b767d888a8331e5b5d2f30459866f593dbf4d04c18f306ebe8b8d441b2070fc99a9697b2d0a5503a216f3c64acc2de587af211f4de08521dce4ccbc2a4c388684ba638c323879edb8ae336a18aa0cbeefc6646c973d46ce68db909ac88abc449db406405b6d08d1e865dc657ec130f7378e9a41cb60fd9171682b2191f224c7c327831ef5e4d82a18ed3e1860d9957156b4391eb87b56173c78c15c447b5e0b7fc2726fc6f7b8d117241b1be45ff0a51b129c7074d021209809f66bec02d3336ccc15ff2d1de2f4c317b065d3e5fe116ea927a27523e592859fb3fa1ce4cd1b63d07e7274886546d460e9519e59b9e7c6e54c8c471c42015a26c3d9e3745689ad088fcdf572c14aef5b1ca0a73f96a631bddc9dc5040dd6ed6aa38f1b559027647fe87523f703f7f83d939a153b1d86c6bb1a53b075a5fd00c08e6ee93b8d76bdec5003ee09f5e3d3580dcf7accd38351ff1337d3def114f6b534675697422719ce3acee73e5e9efa8f3ab307dfec78d0a81efc9b1bc44022ce8cff4a5c9e5a4b8a26f7c114ccf1cbbda81cd6b428433bb063d1d18cd186400bccc0dfa076c88f405e6ff4c650cc0a5dd46a082684e041d35c3459414834f0a28ba34fb5b8313e4bf0ecace00a927b96b3a9ad1381cf4a2d78d35276222b189e16e145303aa282c698ef1ba4f939ebcbe6a8f2fdfb4749c6e6c2c7eb0a37ad75ad9db554f9038380a1adbe4482ecaa96e98f3bfe3829e6aa9a4e5e25c9e6504946551d9d8f7cce03c6b5f5a7106ef786e2bbf011333116069662e31007b5b6d3f6d3c7cfd8da64033b93a602554035e7bb3f9fc197c0ebe382438962807d38687b03db9b553ef9df77adcb15b4a6e7f9b98dfdb5f08fe656c2fc4e17ad0d1a87c345d388cc76223a134bf6f02f66572694d7cb783216097c9964e84646a9e69869c2690f4aad0d9f4ca60a4b6a8a247375e57adc6f669ef3bce59d3b84c9a7aae89ce4b47b12945813a7916223309acd07fa6480bcefcfd88dbc5d9a718bfaa6b845abd1db44e6dd4c7ec83aa04b0846a677badab18156cbe5515a61bc25a2ad182b1451096b19cc26bdca80cc115bb88181fdb5fa14161001267def751ae6a0f2c5821f3194e5fca9b75c311a8d0e00bf2a3b0bbefe15e5a63bd9db39a5feab80ffa0bd3c971194791aeb4866dc26a025952d81a79fcfb09f72afe813af7709b19eb3e65b44d97bb187c65aad6fc855091233723196fcc67d4cb1d8ec92119b78d4e38ded64ffcecbf6f3421f954aae11d880f10f83314c9dd3b1acfd2026e5957e0358eef0025980776eee3a19f1e457e49f4c829cac20d72084fb50613f68eacc8ccd037924c9c29423fbca8f48d25df06cd13d4bcab344bec355a245ff17bc524702eaf869e6d05ed12a9c4d39a2b38f09c41507055abf1e0b99c0e056d5177628319340c1a52bda27bb2dc6738717205199315b3e6600800f02b5bcc3d76bd147a5e72850170cae068871e0a1aa4aafd913de7bb26ed00c3d8e6c331b24e1f45a75be31c4bed4b1e0c3152571e55473ed9c04866e08574105f5700441c44ddaea26853b20615e5db732d4ce465098fd9cec1031ff73ba1fbd8030fdb91eaa16afb2ef0f9ab38c62e3c237e428f44778f616cf036b9631af06fb07d6694181e9a859cb73966cd033e606fd3307e215254fab19dae394ad09d9ff5b72826ce8237ff47b8c6c13ce924639a2485af8e6d8827d4cf9cff7c610bbc0f8e5071c28218939476f85edff4baee2bc097c83ff87ca7928e475034bb8a517c472d5a3751c8e447112a651f0c9597613f563ccba8252879832447e9ac915ac74d5616c13fbe4ccbbd5a3520d91e222335079cbc1c051f495b6f0edc35a3888047c8769ffe671a468b558fedd9836ddd96479c19caccf1bf704fdaa002f239cf8b7c29a1068d4e6f71e4294b621c1c216dbccd3563b90e43aab4b2187cc3d2c4dbb6f49261b0cce70f62e992b1650c81d4efe6848e5125eb104f540ef664e2d78369fb9e3e82622bdd0a7e4a11cf77dd73e768ed6bf6b5ff98b2425df701c09b6643cc980c90b9aeff356951c7354876f23c78b7f1ba5a18b6842d960706b32dbb3d3d3ddca667fe24cc89beeb962cb66439328f4a91288bc88ac13b1b0e89c02e2ef0201f2d0b9792b4df57aba96df31b6573d98045910e11d337d8285c4b9d7535e5e99374f6600cd0c0712cec4e03bcda7cf6c80cd12087688f800c0f794783278362e08d34cfcff9dd13c9474c4d54e1f4ae8f9ba96bb7e00181cd92207ce20499137c4de625cc8ba298427da51636c3ed9ba6202063235744314c524877edab328a49dd1880c9ab257cf9e44af1cff65b9f8ff3edb4a33650ea56894bd0b2863e05ca35ad09085b3ca02d0295342ea1be43dd1843ab91be90f35a71267822902b469b0e5f08b19fc827396b2e0c7fcc4c5c71db51bccef6710b4c9f39585183271a22ede84a1161bcf4c4442a31704b82b4cc3e125835dd2fa4af5b47a91df8525129cf2ee0c52e57c47a7b7d5cf1ac50437419dea945ccfeb0f54a9e251b4234f6107f8d49d5d31021fc8bf6702325c35372bb48c5fd0b4c217de9fbdc542d9dff0e5ba14818e548833bfb3b39df4c667bdf881fc2161f2e989d1bc4947bae18457774e3bb951c000d1664f45fd31fd04139a5c7694914754f299d45f26d4d852d59f2ebdebe59781e506e767d7e8a684f90692773f0d7885b20826591ba45955a06aa39790a3323296ec367e2184fa008d1bbf51e58e2fc3e9266d221b15742c5d02b87b490ba0af21077929434efc58effa9520abd63b844eb0c300ac3735eae0d3ec3611fb789227059200e483707b66c48d9f8996670b259a71cae9b6ceac1372f6af062b42841732738ba9186e5bd47dfcfc793078c4fc63a16e4a0be455dd32ec8dddeaf1dc5e63ec0906194f926b06b9843cd03691827b0b9b2ad6162a0f9daba6d9186ca37b8a9a0601686bce79036e76ad2d9216392c5bb6a67cf6d85a9ea1fb277f677d9420b0fdffaee88998b0883f48fcdf5286962026a94b80964b62f05d3390a86a23b77a101cde9434e3a2b1273474ed9842ec9b6faa502ec49dcc438f76ccdeb52a36dcfb973aef425f5b016f05a0bb4f1bc8e404ae6b1631d56b8e1c2a9fa7b3fbc377d08e59ef3e9e6f18fab0cd4ec564559ee7f3f66790f6c172a1bb5e2e0b22935fdff001e12eea1fbf366976fa2dfacbb2ad395863cd1eb1951e154d6069db5efdb4a505aafc7d97adafbaff2a883b29a9f5a4bbccc81cca7e780665b2fc6baf54796b0ec1ab73825ea96d450ba6a651f96111489ae1c1399b6aaa58af82e5d52e12afe2f162fdf0c32f04ac02b7a92ff53bd5868d7e6b7bf17ac982a9e9bdf1021ad17b812e29f8894657e75a66d23e0302a212ee59819195258c89feef1b460d2268f580b7b1ffff502df852c038b3754f52f6ae851aadb732b598fd2157f6a0295470b7ecbd1fb874f179b66886d67014a688cf36c99d96bac0d5b19cb56b1ee1369b6f39cc21d222ad61f4aa4dd0229ea556bcc4ddbd2cf4e0484f33cc5bbd66d0aa7b50978938a1bf33e3e00348ec7b84596791999db75fd9abb9910a2139d4222368f0e8de137aac45114980487118ca2932080f3612f6ab6b9e4b8fa452fd34a114bcc2b1eb1a4e41fa01ad2eaff0b090f9b28f5fb870a4e5d722ac4862edf491c3f1a64ed925010153d51d579007d96e8f04d5f49fd94a473019fa1cabae4433e261fc58686aab4257965d6f6f4c26c5c15e610676673149c3b8cabe47192bf1b559504b15d1f5c32b716a16e138087f2f90455da6c8689aabde4ad2b976a7cec527988924646057af364da3bd46a65b49027b6f1aefe468e74a8947c47fc39f0257f741dcefa790283822d591b83cb731aa9ccc7f15c355cc1851c7e03f6d498b90679ed45169dde0922057bb67b6f"}, @iv={0xa8, 0x117, 0x2, 0x92, "cdb18af7e9de90e16d04473a663abb6fcaafcccf094ead559fe35d84f48653e5c76ea3e1a53f91d1cf8190f72b967c0671830c3b3fa20f2911e8c46f3ac320b7e355396787c4d1ca50d0ea00291cfd3d23e9621f79f03c1fe6ee5ac46686ed2b33b6cee62616b3f341b0c450d745afc9c83945ac874df6b43a402505a00fbff2c7ad07ec06e4eb345a1e8da5af87134d0cfb"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x11f8, 0x800}, {0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002600)="54601569839811af9d22d91188cab747b4244fe400e9efd354d209389f3ede70a316d375fce9eb2278962faf4b562c74ecfc9889c5a7682b1e893e98c675969a68f438e3007fabdbd7ee3aa9c1cad1e261604dbc70743361bdea64e2ed189ea66ff3898c0810fd87eec2c28e5401a1924f67fe486f4fb0c759a65548355cda2a221904078df6c73be7221603e9997a00efe36ed3f96ce662f7e357d841d111c033ded4e5e855cf16efcd", 0xaa}, {&(0x7f00000026c0)="712da5c5c4055818883096a336971898e6fcda1301df3284307dfaf5957b0c6a6092383baeb87b523d66e4f7c5a22bf7a4fc666c05f1f969146f16ecdcea117852eb0ca7febe1f592996b44aaf094994054c9735f8cb28db223fa15b889c56c00b6b18e7a6358e69012ef9a0eb81", 0x6e}, {&(0x7f00000000c0)="6f2a4954c61a9ee52c2efa739890be4af304ea08edca69be5547375f", 0x1c}, {&(0x7f0000002740)="be6ac9b079a87cfb57668480b48df0f5e6d2c8527f96", 0x16}, {&(0x7f0000002780)="079ed5dc44151547537b9f450d7953dbf01fb33672f628331e199ad4cec5617276b1171679b43c53473007f8fb7b8f6b88a0ecd91b721630d6dcaea5475d2210c23a5691eeddf445ced7c27500edd7f0417f1cfd5c451e576fefca56e4509b64c5c607819b4bd6665a0b35a6320aa053ee6a51120047e568f04a8868a0c29008", 0x80}, {&(0x7f0000002800)="db5ce9b04c06d1c90d7e390b4969fd60fe37253733e49e759617dabed84e3337a3bf404adfd9afdd714f8f095953b3b287d3f2abb37f3cd355deba839f88c58f86bb5224a73282cbdbe7e652bad9", 0x4e}, {&(0x7f0000002880)="b4bb68bba4bc21fd8e0640a4863cedec3a4597ab50d7f01e620b570e6ddc5b856ba295508139d05126ea728073d4bce9e2494cf891262867e81a3f0830a5c1afedccdfcd8e08a0ef290d6243ae45f1bc6f123507a3c12f6e49caaf4d95ee4847c5c40b69c7342d9f81c0", 0x6a}, {&(0x7f0000002900)="a72a2b72e2e8accb3ed1e78847dcceec9929903ab0a7c6272f370f3170620a51fe6980df4a5ebcfedee354e2ec6199ebb388ca10f04c78f9aa7334efa159501a4811a65a36a3bf9212648c702eb858430c2664de45822a4cf5b538e178a6f2ac60e0b7d678f748f4177d4a7bff308def3e01d1ef2eb278849f74e3c967183aeff6e949a06cd9a78e923eb38863eb00997d5a0a9326b3", 0x96}, {&(0x7f00000029c0)="3083563a24b99ed13a4b95ab5f642110c212f6f71bb0ba7218d8fdb39782b7f8d6af3dbc34eec3b88c64cf00a8e1e7b7319c7a010cb122ce5c583fa355b81079cd5ef5521b6e01d09142d2fce94ff7d75c6609c8f38f71a9b8894d2e5c280b8dca1c38b2890594cd4defdfdb8276", 0x6e}], 0x9, &(0x7f0000002b00)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x70, 0x117, 0x2, 0x5b, "b71b68c9ba751dbe688e7fc7e46dc2766da550f7fa41c7754589854c532a0435db76087d7cd699b2b21a445ed74b03c9027f4c4394a800a36eaf7f0ce1f106222c187166799c41b7ace9933e7b93999d1541d38b50020f6ab526b8"}, @assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x361e6e4d}], 0xd0, 0x4000004}], 0x3, 0x80004) 2.373122875s ago: executing program 2 (id=3648): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x16}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x14) write$cgroup_int(r3, 0x0, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000010c0)={@mcast2, 0x0}, &(0x7f0000001100)=0x14) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x4, &(0x7f0000001000)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}], &(0x7f0000001080)='GPL\x00', 0x4965eccd, 0xc8, &(0x7f0000001180)=""/200, 0x41100, 0x4, '\x00', r5, 0x25, r3, 0x8, &(0x7f0000001280)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x5, 0x9, 0x7, 0x4864f814}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001300)=[r3, r6, r2, r3], &(0x7f0000001340)=[{0x1, 0x2, 0xa, 0x2}, {0x0, 0x4, 0x5, 0xa}], 0x10, 0x1}, 0x94) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 2.134135042s ago: executing program 4 (id=3650): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = socket$caif_stream(0x25, 0x1, 0x1) connect$caif(r2, &(0x7f0000000040)=@util={0x25, "b98d0f20b8751a55eaf47663849703bf"}, 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13e10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.058745193s ago: executing program 0 (id=3652): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x11, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0xffffffffffffffff, r1}, 0x94) 1.79875728s ago: executing program 4 (id=3654): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) socket$inet(0x2, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) 1.694475734s ago: executing program 3 (id=3655): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r2, 0x0, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001600", 0x3c}, 0x60) close(r1) sendto(r0, 0x0, 0x0, 0x4000, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x41010) ioctl(r3, 0x9, &(0x7f0000000180)="1b12cadf9129829baba95f61dbeb702ec14e8dcdb79f7e003be66d97818087fc1ccdb16174ebdcd2b536f83cde8996e82e2ed9e2af1c7a73fa199004d8f770426943c4f059f138b3030e876a68f8a4b63f49d9a48b16f94c188fc8280cf4fdcb2581d9e41f0dd2f84239f30d0c3ccb4d54220e2a4bef6c76febbdde4e86d4d2e9b5988ff30272668cbe654a415c1518229eca88115472e02bfcd9a7511a75b3d1c4a0654f9f745c5bbf3401145acd44c6bf52d387139cd4b7afefc594c908c0fefa88e52b7f88a815a981f86615130cc7b3ccbfc5b5aa4f7cbd498fc93") 1.688272934s ago: executing program 0 (id=3656): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="f78d9ca38fff48e4", 0x8}], 0x1}], 0x1, 0x40800) recvmmsg(r1, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b40)=""/1, 0x1}, {&(0x7f0000000b80)=""/147, 0x93}], 0x2}, 0xfffff800}], 0x1, 0x42, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) unshare(0x0) socket(0x8, 0x1, 0x0) 1.581453467s ago: executing program 1 (id=3657): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x10000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x83}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x7, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010101}, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r4) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3e}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x4008084) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="2da52abd700016dcdf250300000008000100000000000800010000000000340007"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 1.369007726s ago: executing program 4 (id=3658): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x11, 0x9, 0x57a6, 0x200, 0xc00, r1, 0xfff, '\x00', 0x0, r0, 0x0, 0x1, 0x5}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x15, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@generic={0x68, 0x8, 0xc, 0xff81, 0x6}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @ldst={0x0, 0x3, 0x3, 0x5, 0xa, 0x18, 0x10}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) (async) listen(r2, 0x1ad72f7) (async) accept4(r2, 0x0, 0x0, 0x80000) (async) r4 = accept4$netrom(r2, 0x0, 0x0, 0x80000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xb}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) writev(r4, &(0x7f00000001c0), 0x7) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept$netrom(r4, &(0x7f0000000600)={{0x3, @default}, [@remote, @null, @netrom, @netrom, @default, @rose]}, &(0x7f0000000400)=0x48) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r6) (async) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r9, @ANYBLOB="20000280", @ANYRES32=r8, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff000005000300000000000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000c50000009500001700000040"], &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, 0x2a}, 0x94) 1.322690332s ago: executing program 1 (id=3659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x200048c0}, 0x20008000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) close(0x3) (async) r4 = socket$kcm(0xa, 0x5, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0x2, 0xb7, 0xfffff014}, {0x6, 0x6, 0x5, 0xfffffffb}]}, 0x10) (async) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x17, r8, 0x1, 0x40, 0x6, @broadcast}, 0x14) (async) getsockname$packet(r7, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) (async) close(0x3) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @remote}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.320648161s ago: executing program 3 (id=3660): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async, rerun: 64) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async, rerun: 64) r3 = epoll_create1(0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20000008}) (async, rerun: 32) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) connect$bt_l2cap(r1, 0x0, 0x0) (async, rerun: 32) r4 = socket(0x2b, 0x80801, 0x1) (rerun: 32) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5cac}, 0x1c) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x2, 0x0) (async) splice(r7, 0x0, r6, 0x0, 0x1c, 0xe) (async) ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) (rerun: 32) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1000, 0x1000, 0x0, 0x3}, 0x20) (async, rerun: 32) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140), 0x6e, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1}, 0x142) (async, rerun: 32) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.219020914s ago: executing program 3 (id=3661): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x70, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x400) (async) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x70, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x400) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000012853819809737b150000000000", @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000100000008000200", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3a}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) socket(0x26, 0x3, 0x0) (async) r9 = socket(0x26, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x14, 0x5a, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x14, 0x5a, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r10, 0x89e8) (async) ioctl$SIOCX25CALLACCPTAPPRV(r10, 0x89e8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000017c0)={{0xffffffffffffffff, 0x0, 0x2000, 0x0, 0x8f, 0x0, 0x0}, 0x2, &(0x7f0000000400)=[{0x2, 0x3, 0x0, 0x0, 0x0, 0x18}, {0x3, 0xffff, &(0x7f00000003c0)='syz0\x00', 0x0, 0x0, 0x2}]}) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000202020014000200776732000000000000000000000000000900010073"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) (async) sendmsg$SMC_PNETID_DEL(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000202020014000200776732000000000000000000000000000900010073"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x6, 0x2e739c21, 0x800, 0x40002, r11, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) 1.208867211s ago: executing program 1 (id=3662): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="910400000000000000000000000000fb00000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500"/28], 0x50) getsockopt$inet6_udp_int(r0, 0x11, 0x34d36a8d0dbe6362, 0x0, &(0x7f0000000680)) (async) getsockopt$inet6_udp_int(r0, 0x11, 0x34d36a8d0dbe6362, 0x0, &(0x7f0000000680)) 1.154516286s ago: executing program 4 (id=3663): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r3, 0x1, 0x9, 0x0, &(0x7f0000000080)) r4 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x6a, 0x1, 0x0, &(0x7f0000000640)) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="00022dbd7000fedbdf257600000008000300", @ANYRES32=r2, @ANYBLOB="0c00580142000000000000000c0058006b000000000000000c00580019000000000000000c0058004f000000000000000c00580075000000000000e2fe000c00580022000000000000000c00580065000000000000000c0058003d000000000000000c00580072000000000000000c0058005d00000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x840}, 0x4008000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x7, 0xc, 0xb, 0x0, 0x1}, 0x50) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r7, 0x29, 0xcb, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000200)={0x0, 0xfffffff9}, 0x8) sendto$inet6(r6, &(0x7f0000000000)="ea", 0x1, 0x10, &(0x7f00000001c0)={0xa, 0x4e21, 0xe1, @ipv4={'\x00', '\xff\xff', @local}, 0x50be}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000100), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) 993.068361ms ago: executing program 1 (id=3664): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0x2, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010102, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x67, 0x0, 0xffffffffffffffff, 0x3b22, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @local}, &(0x7f00000002c0)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @local}, &(0x7f00000002c0)=0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000400)={r0, &(0x7f0000000300)='deflate\x00', 0x109000, &(0x7f0000000340)={@align=0x2, {0x5642, 0x34ad, 0x7, 0x4}}, 0x29, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x6}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000800)={{r0, &(0x7f00000004c0)='deflate\x00', 0x20002, &(0x7f0000000640)={@align=0x2, {0x5, 0x3, 0x7, 0xe812}}, 0x6, &(0x7f0000000680), &(0x7f00000006c0)=0x3}, 0x1, &(0x7f00000007c0)=[{0x1, 0x7fff, &(0x7f0000000700)='\x00', &(0x7f0000000740)="1f9c4af820f4c44955e4e7aaaeba0ff9f6fa893c41e3037a5afe33e819b951f54dfb2499fa56ba048804765e0d58c813883ae3a1b6c7dd926996f9c9c3f34833fd634e3554d73e607eb3841f9147bf89e1f0626eb5f6509f766bf8eaaafc2dd508d5f8", 0x63}]}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x10}, 0x18) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x12, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x1f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0xfffffffb, 0x6f, &(0x7f0000000200)=""/111, 0x41000, 0x18, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000440)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, r5, r6, r7], 0x0, 0x10, 0xfffffff8}, 0x94) 983.168589ms ago: executing program 2 (id=3665): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x800, @local, 0x9}]}, &(0x7f0000000480)=0x10) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000140)) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x18, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8822}, 0x20000000) sendmmsg$inet(r3, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="1f8cceb4b59395ba", 0x8}, {&(0x7f0000000200)="03296e951835b5dab703b89044f1d3c1496815ac8fc9975f185cb4f353e3f3a445c512", 0x23}, {&(0x7f00000002c0)="56db8ad82d2621bccd8661470e62d31e7344e0797dc634e5618c34b80d6dd8b21d89e56220c095041bd89a6743519f03cb8e15a39b542c2d0677285475b71839af11013919a817cfe855f918f767f98367e1e4", 0x53}, {&(0x7f0000000380)="6afb13fcf611f725abc40aa2b3f799cac374951847e45d763a2f1e10476175ff1127a93dc7f2", 0x26}, {&(0x7f0000000580)="6b5b6871b4205a7a7434c9f225dbde551bdfaf5e136c6dc27cc88ac4efc748ad472989e75813a97dccff2fb3f586cb7334d3a9804d59bba615408ec985c8a195dac2e027ece953e4dc634c6db6fb00ad989c38691037b756ab8abbc38b26856c9dbdb42aa717257dbb746e217345b4dda266286c649807cfd136332aea97d0f82c82e44cce524a717527e3d69e8de504aea5fbbde59f127b4f73b4bee9feef745056c7efc6a7e80b2621b51c0344fd88013933dd69345d1671a7567b", 0xbc}], 0x5}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r6}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r6, 0x7}, &(0x7f0000000080)=0xc) getsockopt(r0, 0x4, 0x0, &(0x7f00000003c0)=""/11, &(0x7f0000000440)=0xb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 878.120806ms ago: executing program 3 (id=3666): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2d, 0x2, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x108, 0xc, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r2}, 0xc) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@dev, @loopback, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x1407, 0x100, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c880}, 0x20000000) bind$tipc(r1, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000380)={r3, &(0x7f0000000100)='/dev/virtual_nci\x00', 0x40000, &(0x7f0000000200)={@align=0x1, {0x0, 0x2, 0x1, 0xc}}, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x6}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x2f, "49720705000000004709b89e6fb2c55c00a79e082584e55fee49e00255020f1f55001d00"/47}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000680)={0x0, 0x6}, &(0x7f00000006c0)=0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xfff, '\x00', r4, r5, 0x1, 0x1, 0x3}, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x40, 0x0, 0x0, 0xbacabbefe60a3201}, 0x9c) 877.325341ms ago: executing program 1 (id=3667): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x7, 0x100000000, 0xfffffffffffffff9, 0xd, 0xe, 0x1, 0x6, 0x5, 0x7, 0x992, 0x10001, 0xfbb, 0x5, 0x10001, 0xbca0]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000380)={r3, 0x68, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x7, @loopback}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x3, @local, 0xc4}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f00000003c0)=0x10) unshare(0x60000600) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001800dd8d0000000002000000020000040000000600145528"], 0x1c}}, 0x4000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}, {0x6, 0x4a, 0x6, 0x6}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x28}}}}}, 0x36) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) writev(r8, &(0x7f0000000380)=[{&(0x7f0000000040)="3700000013", 0x5}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$inet(r6, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000400)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) 743.056376ms ago: executing program 3 (id=3668): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) socket$inet(0x2, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) 303.963492ms ago: executing program 3 (id=3669): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x22, 0x2, 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) sendmsg$alg(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x8020) sendmsg$alg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="816b", 0x2}, {0x0}], 0x2, 0x0, 0x0, 0x2400c8c0}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="10000000000000001c001280ef0b00010065727370616e00000c00028008000700000080000a000100aaaaaaaaaa0400"], 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002000010325bdd64e26e25df753260bad"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r5, @ANYBLOB="07020000000000000000010000002c01088044b3078008000600b300000008000500ff00000008000600e10000000800050040ef116808000600cd00000008000600af00000008000500f712f706080006009600000034000780080006003c00004f08000500e2f05c100800050012c61f100800060066000000080005007118862e08000600fd0000001c00078008000500a156eb25080005000b608179080006007f0000003c000780080006009100000008000500a06e96730800060094000000080005004baa1d3f0800050038560852080005009889fe5708000600180000004400078008000600570000000800060059000000080006005a0000000800060097000000080006008300000008000500b252a030080006005000000008000600410000001400078008000500d9a9bc2c0800050075190a492c0004800500030001000000050003000000000005000300010000000500030000000000050003000100000008000100030000000800020001"], 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r7) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB="2cdb6f651cccf5f37ff6b14a85d3cc8f8271c8502cfb7ea917100003c6c2339e3f296137bdde238ca56484f2ffe5728f07dea15db8a8fb3e74c7602e743cb8b41316d93ebee9d8f20a00b50000", @ANYRES16=r8, @ANYBLOB="010026bd7000fbdbdfa54d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e00a80066697273746e616d650000000f00a8007365636f6e646e616d650000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4084) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r9, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x6000000}, 0x80) sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c040e610012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$XFS_IOC_START_COMMIT(r10, 0x80585882, &(0x7f00000002c0)) 186.352744ms ago: executing program 4 (id=3670): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x15, 0x1, 0x0) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x2, 0xd, 0x7}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) r2 = socket(0x40000000015, 0x5, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x7) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) bind$phonet(r2, &(0x7f00000000c0)={0x23, 0x9, 0x1, 0x7}, 0x10) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000180)={@empty}, &(0x7f00000001c0)=0x14) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000100)) 64.244696ms ago: executing program 4 (id=3671): unshare(0x20000400) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket(0x11, 0xa, 0x8) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) recvmsg$can_raw(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x20) write$tun(r1, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x8016, 0x68, 0x0, 0x60, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "21f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da"}}, 0xfdef) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0xf}}, 0x14}}, 0x4000000) syz_emit_ethernet(0x4d, &(0x7f0000000200)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @val={@val={0x88a8, 0x7}, {0x8100, 0x2}}, {@llc={0x4, {@llc={0x0, 0xff, 'b', "465e0be8e32a85f0f6d59b2b98af1330c7cd16dac046cb9e3af8b27ca3b4f7d9b7668f18bfd50d48a0e685512cfbf871ae4fb7b5"}}}}}, &(0x7f0000000040)={0x1, 0x2, [0x5a2, 0x6b5, 0xd92, 0xb59]}) 0s ago: executing program 1 (id=3672): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) setsockopt(r3, 0xc41, 0xdf, &(0x7f0000001100)="6a6be98bdac30affd205cdab26b0b43f5d9b0369dd060347078fb9a64e3f53fc72f3b93dfd2aa5d73a56cba270b84dc7a4f30d00fb7ff4e7296a7be39997e0fdabf08ec4ae49d2d79f14d0edd147185b6a07095334d6b38c4b6d15f10c79536fb337a7a21126ec9c6bf2526b0c55a22711dcc7e3a950deb5873873cbda3ef1d8a7c77dbf082fee95542f272b2917af2a9358a1ec443f099f397556cb31ac42b75dd9d423b23f31c74bade656cdc235", 0xaf) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000580)=0x6) write(r6, &(0x7f00000005c0)="0a00dc99ea47", 0x6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r8, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000200)={r6}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000001080)=0xffffffffffffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x68, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffe0, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x100000, 0x100000, 0xfffffffd, 0x1, 0x5, 0xf}, [@TCA_NETEM_RATE={0x14, 0x6, {0x200, 0x7, 0x7, 0xf1}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@loopback, @multicast1, 0x0}, &(0x7f0000000240)=0xc) r12 = socket(0x10, 0x3, 0x9) connect$netlink(r12, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x200}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x17, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000008000000000000000700000018110000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x3, 0x6, 0xb9}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x10, 0x6}, 0x94) kernel console output (not intermixed with test programs): 452837][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.506871][T15361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2387'. [ 494.608385][T15363] netlink: 'syz.0.2389': attribute type 15 has an invalid length. [ 494.621183][T15363] syzkaller0: entered promiscuous mode [ 494.627247][T15363] syzkaller0: entered allmulticast mode [ 494.676019][T15371] netlink: 'syz.1.2394': attribute type 9 has an invalid length. [ 494.727630][T15374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2394'. [ 495.068833][T15388] netlink: 'syz.1.2397': attribute type 1 has an invalid length. [ 495.285743][T15388] bond12: entered promiscuous mode [ 495.299126][T15388] 8021q: adding VLAN 0 to HW filter on device bond12 [ 495.353433][T15400] netlink: 'syz.3.2401': attribute type 2 has an invalid length. [ 495.370133][T15393] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2400'. [ 495.495044][T15402] 8021q: adding VLAN 0 to HW filter on device bond13 [ 495.590253][T15408] netlink: 'syz.4.2404': attribute type 1 has an invalid length. [ 495.750645][T15413] netlink: 'syz.4.2404': attribute type 21 has an invalid length. [ 495.771356][T15413] netlink: 'syz.4.2404': attribute type 22 has an invalid length. [ 495.805425][T15413] netlink: 'syz.4.2404': attribute type 23 has an invalid length. [ 496.205610][T15454] tipc: Invalid UDP bearer configuration [ 496.205668][T15454] tipc: Enabling of bearer rejected, failed to enable media [ 496.857296][T15488] SET target dimension over the limit! [ 496.914910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.923382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.048418][T15492] openvswitch: netlink: Message has 21 unknown bytes. [ 497.555369][T12193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.994555][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 498.002673][ C1] lec:lec_tx_timeout: lec0 [ 498.007706][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 498.081986][T15501] __nla_validate_parse: 16 callbacks suppressed [ 498.082006][T15501] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2425'. [ 499.306316][T15473] veth9: entered promiscuous mode [ 499.350477][T15499] kthread_run failed with err -4 [ 499.367406][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.376170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.407782][T13428] lo speed is unknown, defaulting to 1000 [ 499.430222][T13428] syz0: Port: 1 Link ACTIVE [ 499.440120][T13416] lo speed is unknown, defaulting to 1000 [ 499.671461][T15530] FAULT_INJECTION: forcing a failure. [ 499.671461][T15530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.687229][T15525] pim6reg99999999: entered allmulticast mode [ 499.687424][T15530] CPU: 1 UID: 0 PID: 15530 Comm: syz.3.2435 Not tainted syzkaller #0 PREEMPT(full) [ 499.687513][T15530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.687556][T15530] Call Trace: [ 499.687577][T15530] [ 499.687600][T15530] dump_stack_lvl+0xe8/0x150 [ 499.687704][T15530] should_fail_ex+0x412/0x560 [ 499.687798][T15530] _copy_from_user+0x2d/0xb0 [ 499.687861][T15530] ___sys_recvmsg+0x175/0x590 [ 499.687946][T15530] ? __pfx____sys_recvmsg+0x10/0x10 [ 499.688038][T15530] ? __fget_files+0x2a/0x420 [ 499.688172][T15530] do_recvmmsg+0x334/0x800 [ 499.688266][T15530] ? __pfx_do_recvmmsg+0x10/0x10 [ 499.688383][T15530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 499.688507][T15530] __x64_sys_recvmmsg+0x198/0x250 [ 499.688591][T15530] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 499.688697][T15530] do_syscall_64+0x14d/0xf80 [ 499.688783][T15530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.688856][T15530] ? trace_irq_disable+0x37/0x100 [ 499.688928][T15530] ? clear_bhb_loop+0x40/0x90 [ 499.688998][T15530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.689044][T15530] RIP: 0033:0x7f9d47f9c629 [ 499.689097][T15530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.689142][T15530] RSP: 002b:00007f9d48d71028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 499.689203][T15530] RAX: ffffffffffffffda RBX: 00007f9d48215fa0 RCX: 00007f9d47f9c629 [ 499.689245][T15530] RDX: 0000000004000210 RSI: 0000200000001740 RDI: 0000000000000003 [ 499.689287][T15530] RBP: 00007f9d48d71090 R08: 0000000000000000 R09: 0000000000000000 [ 499.689320][T15530] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 499.689351][T15530] R13: 00007f9d48216038 R14: 00007f9d48215fa0 R15: 00007ffcf3cbfd08 [ 499.689447][T15530] [ 499.886903][T15533] bond0: option all_slaves_active: invalid value (99) [ 499.999482][T15545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2437'. [ 500.023871][T15547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2436'. [ 500.339257][T15562] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20001 [ 500.422925][T15562] RDS: rds_bind could not find a transport for ::9800:0:20:0, load rds_tcp or rds_rdma? [ 500.437546][T15566] validate_nla: 9 callbacks suppressed [ 500.437564][T15566] netlink: 'syz.1.2440': attribute type 4 has an invalid length. [ 500.569937][T15572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2443'. [ 500.764771][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.773237][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.781674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.790014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.812152][T15581] @: renamed from veth0_to_batadv [ 500.866247][T15583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2447'. [ 500.888509][T15583] netlink: 'syz.3.2447': attribute type 1 has an invalid length. [ 502.620514][T15533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.805920][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2449'. [ 502.843371][T15592] openvswitch: netlink: IP tunnel dst address not specified [ 502.861431][T15595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2448'. [ 502.881152][T15599] tipc: Enabled bearer , priority 28 [ 502.912326][T15600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2452'. [ 503.014616][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 503.022714][ C1] lec:lec_tx_timeout: lec0 [ 503.027488][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 503.145226][T15606] syzkaller0: entered promiscuous mode [ 503.150892][T15606] syzkaller0: entered allmulticast mode [ 503.352490][T15610] lo speed is unknown, defaulting to 1000 [ 503.583384][T15633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2459'. [ 503.628169][T15633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2459'. [ 504.445674][T12198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.454803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.596977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.605411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.613699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.984081][ T5886] tipc: Node number set to 3934885563 [ 505.271577][T15648] 8021q: adding VLAN 0 to HW filter on device bond14 [ 505.367232][T15659] tipc: Enabled bearer , priority 0 [ 505.425033][T15661] netlink: 'syz.1.2467': attribute type 1 has an invalid length. [ 505.435185][T15662] syzkaller0: entered promiscuous mode [ 505.451192][T15662] syzkaller0: entered allmulticast mode [ 505.525309][T15663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2467'. [ 505.673613][T15663] bond15: (slave bridge4): making interface the new active one [ 505.683537][T15663] bond15: (slave bridge4): Enslaving as an active interface with an up link [ 505.710361][T15665] bond15: (slave bridge5): Enslaving as an active interface with a down link [ 505.726234][T15666] tipc: Resetting bearer [ 505.741622][T15661] macvlan3: entered promiscuous mode [ 505.747424][T15661] macvlan3: entered allmulticast mode [ 505.753634][T15661] bond15: entered promiscuous mode [ 505.758980][T15661] bridge4: entered promiscuous mode [ 505.765705][T15661] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 505.773583][T15661] bond15: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 505.795360][T15661] bond15: left promiscuous mode [ 505.800517][T15661] bridge4: left promiscuous mode [ 506.086807][T15654] tipc: Resetting bearer [ 506.128894][T15654] tipc: Disabling bearer [ 506.411836][T15707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2476'. [ 506.435144][T15707] openvswitch: netlink: Flow key attr not present in new flow. [ 506.579004][T10250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.600565][T10250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.635281][T12193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.646665][T12193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.773812][T15727] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 506.790729][T15727] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2482'. [ 506.975445][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2485'. [ 506.984385][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2485'. [ 506.999988][T15734] netlink: 'syz.0.2485': attribute type 13 has an invalid length. [ 507.008881][T15734] netlink: 'syz.0.2485': attribute type 12 has an invalid length. [ 507.185275][T15751] x_tables: duplicate underflow at hook 3 [ 507.256571][T15752] bond10: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 507.272809][T15752] bond10 (unregistering): Released all slaves [ 507.329866][T15756] veth0_to_bridge: entered promiscuous mode [ 507.350857][T15756] veth0_to_bridge: entered allmulticast mode [ 507.543626][T15766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2497'. [ 507.616460][T15766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2497'. [ 508.034652][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 508.042941][ C1] lec:lec_tx_timeout: lec0 [ 508.047752][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 508.087226][T15789] lo speed is unknown, defaulting to 1000 [ 508.322834][T15795] syzkaller0: entered promiscuous mode [ 508.332193][T15795] syzkaller0: entered allmulticast mode [ 508.354244][T15798] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.419802][T15798] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.434741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.443244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.640387][T15798] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.743165][T15798] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.775091][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2510'. [ 508.820254][T15817] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2510'. [ 508.856557][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2510'. [ 508.892736][T15817] veth0_macvtap: left promiscuous mode [ 509.172374][T10250] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.181041][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2514'. [ 509.181068][T15830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2514'. [ 509.215451][ T8597] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.263702][ T8597] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.307512][ T8597] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.471073][T15840] netlink: 'syz.3.2518': attribute type 1 has an invalid length. [ 509.659342][T15840] bond7: entered promiscuous mode [ 509.695108][T15840] 8021q: adding VLAN 0 to HW filter on device bond7 [ 509.710083][T15841] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 509.723625][T15841] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 509.740202][T15841] bond7: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 509.795143][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.804184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.425763][T15866] delete_channel: no stack [ 510.516173][T15870] bond14: option mode: unable to set because the bond device is up [ 510.541915][T15870] bond14: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 510.588045][T12193] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 510.723524][T15880] dvmrp1: entered allmulticast mode [ 510.735552][T12206] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 510.768399][T15885] dvmrp1: left allmulticast mode [ 511.051091][T15902] netlink: 'syz.4.2533': attribute type 2 has an invalid length. [ 511.087980][T15906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2530'. [ 511.165309][T15908] netlink: 'syz.4.2533': attribute type 2 has an invalid length. [ 511.188890][T15902] !: entered promiscuous mode [ 511.288350][T15906] bond0: (slave dummy0): Releasing backup interface [ 511.428159][T15914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2535'. [ 511.597995][T15922] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 511.615599][T15925] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 511.634751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.643253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.696970][T15928] xt_hashlimit: size too large, truncated to 1048576 [ 511.769467][T15935] ¾x9ÿ: renamed from bridge_slave_0 [ 512.014878][T15943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'. [ 512.184449][T15955] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.2544'. [ 512.251907][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2546'. [ 512.263925][T15955] netlink: 'syz.0.2544': attribute type 13 has an invalid length. [ 512.283034][T15957] lo speed is unknown, defaulting to 1000 [ 512.291725][T15955] netlink: 'syz.0.2544': attribute type 17 has an invalid length. [ 512.951122][T15977] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 512.973764][T15977] bond8 (unregistering): Released all slaves [ 513.054608][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 513.062697][ C1] lec:lec_tx_timeout: lec0 [ 513.067602][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 513.822262][T16009] batman_adv: batadv0: Adding interface: ipvlan3 [ 513.869787][T16009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.929181][T16009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.982569][T16009] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 514.752983][T16040] netlink: 'syz.1.2566': attribute type 3 has an invalid length. [ 514.843639][T16040] bond10: entered allmulticast mode [ 514.856837][T16040] vti1: entered allmulticast mode [ 514.875780][T16040] __nla_validate_parse: 6 callbacks suppressed [ 514.875800][T16040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2566'. [ 515.004826][T16056] "syz.0.2570" (16056) uses obsolete ecb(arc4) skcipher [ 515.039614][T16041] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.053192][T16041] bridge0: port 3(dummy0) entered blocking state [ 515.059939][T16041] bridge0: port 3(dummy0) entered forwarding state [ 515.082335][T16041] net_ratelimit: 4 callbacks suppressed [ 515.082347][T16041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.144210][T16039] bond10: left allmulticast mode [ 515.162194][T16039] vti1: left allmulticast mode [ 515.461786][T16067] syzkaller0: entered promiscuous mode [ 515.474614][T16067] syzkaller0: entered allmulticast mode [ 515.553797][T16067] tipc: Enabled bearer , priority 0 [ 515.561076][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.570353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.579214][T16067] tipc: Resetting bearer [ 515.618187][T16064] tipc: Resetting bearer [ 515.651210][T16069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2576'. [ 515.812030][T16064] tipc: Disabling bearer [ 515.842286][T16081] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2579'. [ 516.062300][T16080] syzkaller0: entered promiscuous mode [ 516.079894][T16080] syzkaller0: entered allmulticast mode [ 516.100076][T16097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2582'. [ 516.193025][ T8597] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.208804][ T8597] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.227795][ T8597] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.265199][T10250] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.319488][T16106] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 516.439139][T16101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2584'. [ 518.995602][T16162] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2597'. [ 519.043615][T16168] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.394625][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 519.402849][ C1] lec:lec_tx_timeout: lec0 [ 519.408089][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 519.438299][T16168] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.601461][T16168] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.711485][T16199] syzkaller0: entered promiscuous mode [ 519.717237][T16199] syzkaller0: entered allmulticast mode [ 519.768568][T16168] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.100844][ T58] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.124464][T16227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2614'. [ 520.144849][T10250] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.178153][T10250] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.187349][T16222] lo speed is unknown, defaulting to 1000 [ 520.212727][T10249] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.676063][T10249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.686534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.033889][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2624'. [ 521.200926][T16266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2626'. [ 521.328738][T16266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2626'. [ 521.356934][T16266] sctp: [Deprecated]: syz.0.2626 (pid 16266) Use of int in max_burst socket option. [ 521.356934][T16266] Use struct sctp_assoc_value instead [ 521.587564][T16283] bond10: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 521.696247][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'. [ 521.708686][T16283] bond10 (unregistering): Released all slaves [ 521.824039][T16292] netlink: 'syz.4.2633': attribute type 2 has an invalid length. [ 521.856643][T16286] lo speed is unknown, defaulting to 1000 [ 521.959270][T16301] tipc: Enabling of bearer rejected, media not registered [ 522.159382][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 522.293713][T16310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2639'. [ 522.399787][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 522.713460][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'. [ 522.729871][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'. [ 523.359556][T16356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.428421][T16359] openvswitch: netlink: Flow actions attr not present in new flow. [ 523.571395][T16365] netlink: 'syz.2.2651': attribute type 1 has an invalid length. [ 523.630504][ T30] audit: type=1800 audit(1771368834.578:7): pid=16369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2652" name="memory.events" dev="tmpfs" ino=2676 res=0 errno=0 [ 523.675164][ T30] audit: type=1804 audit(1771368834.578:8): pid=16369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2652" name="/newroot/522/memory.events" dev="tmpfs" ino=2676 res=1 errno=0 [ 523.868448][T16374] geneve4: entered promiscuous mode [ 523.900693][ T58] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 523.916229][ T58] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 523.936971][ T58] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 523.960946][ T58] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 524.337430][T16405] lo speed is unknown, defaulting to 1000 [ 525.154570][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 525.162703][ C1] lec:lec_tx_timeout: lec0 [ 525.167420][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 525.423070][T16467] __nla_validate_parse: 5 callbacks suppressed [ 525.423091][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2676'. [ 525.709356][T16454] lo speed is unknown, defaulting to 1000 [ 525.844000][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2682'. [ 525.906548][T16490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2682'. [ 525.975230][T16502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2682'. [ 526.062817][T16502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2682'. [ 526.085399][T16502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2682'. [ 526.118308][T16502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2682'. [ 526.151141][T16502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2682'. [ 526.184557][T16502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2682'. [ 526.203815][T16502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2682'. [ 526.390214][T13432] lo speed is unknown, defaulting to 1000 [ 526.396188][T13432] syz0: Port: 1 Link DOWN [ 526.409315][T10249] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.424576][T10249] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 526.444130][T10249] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.464842][T10249] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 526.509324][T10249] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.528183][T10249] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 526.574431][T16512] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 526.579404][T13416] lo speed is unknown, defaulting to 1000 [ 526.626432][T10249] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.635561][T10249] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 526.673748][T16512] ip6gre2: entered allmulticast mode [ 526.726553][T16523] netlink: 'syz.3.2688': attribute type 1 has an invalid length. [ 527.041803][T16536] lo speed is unknown, defaulting to 1000 [ 527.335575][T16558] netlink: 'syz.2.2698': attribute type 1 has an invalid length. [ 527.364178][T16558] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 527.756751][T16575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.811670][T16581] netlink: 'syz.4.2703': attribute type 2 has an invalid length. [ 527.856529][T16581] !©9: entered promiscuous mode [ 527.882181][T16581] netlink: 'syz.4.2703': attribute type 2 has an invalid length. [ 528.079908][T16575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.109311][T16581] !©9: left promiscuous mode [ 528.169701][T16575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.343376][T16575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.404247][T16607] tipc: Enabled bearer , priority 0 [ 528.412932][T16607] syzkaller0: entered promiscuous mode [ 528.449138][T16607] syzkaller0: entered allmulticast mode [ 528.500357][T16607] tipc: Resetting bearer [ 528.554435][T16606] tipc: Resetting bearer [ 528.596169][T16606] tipc: Disabling bearer [ 528.653844][T16617] tipc: Enabling of bearer rejected, failed to enable media [ 528.709348][T16617] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 528.721497][T10250] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.781977][T12199] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.828775][T12199] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.881662][T16629] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 528.938048][T12199] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.058568][T16634] lo speed is unknown, defaulting to 1000 [ 529.126070][T16630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 529.133387][T16630] IPv6: NLM_F_CREATE should be set when creating new route [ 529.140747][T16630] IPv6: NLM_F_CREATE should be set when creating new route [ 529.334026][T16651] sctp: [Deprecated]: syz.1.2724 (pid 16651) Use of int in max_burst socket option deprecated. [ 529.334026][T16651] Use struct sctp_assoc_value instead [ 529.847325][T16676] netlink: 'syz.2.2729': attribute type 1 has an invalid length. [ 529.941888][T16683] bond10: (slave ip6erspan0): making interface the new active one [ 529.953714][T16683] bond10: (slave ip6erspan0): Enslaving as an active interface with an up link [ 530.076798][T16688] netlink: 'syz.4.2731': attribute type 2 has an invalid length. [ 530.129807][T16691] netlink: 'syz.4.2731': attribute type 2 has an invalid length. [ 530.225203][T16688] : entered promiscuous mode [ 530.231331][T16691] : left promiscuous mode [ 530.269852][T16696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.326495][T16699] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 530.363700][T16696] bond0: (slave syz_tun): Releasing backup interface [ 530.381986][T16696] bridge_slave_0: left allmulticast mode [ 530.395630][T16696] bridge_slave_0: left promiscuous mode [ 530.401840][T16696] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.421979][T16696] bridge_slave_1: left allmulticast mode [ 530.435190][T16696] bridge_slave_1: left promiscuous mode [ 530.441155][T16696] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.453898][T16696] bond0: (slave bond_slave_0): Releasing backup interface [ 530.467729][T16696] bond0: (slave bond_slave_1): Releasing backup interface [ 530.507408][T16696] team0: Port device team_slave_0 removed [ 530.522386][T16696] team0: Port device team_slave_1 removed [ 530.529945][T16696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.538009][T16696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.555375][T16696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.562924][T16696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.572349][T16696] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 530.633791][ T30] audit: type=1800 audit(1771368841.578:9): pid=16711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2739" name="memory.events" dev="tmpfs" ino=2652 res=0 errno=0 [ 530.659453][ T30] audit: type=1804 audit(1771368841.578:10): pid=16711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2739" name="/newroot/517/memory.events" dev="tmpfs" ino=2652 res=1 errno=0 [ 530.810299][T16717] __nla_validate_parse: 225 callbacks suppressed [ 530.810318][T16717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2742'. [ 530.914513][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 530.922642][ C1] lec:lec_tx_timeout: lec0 [ 530.927986][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 530.989216][T16731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2744'. [ 531.024832][T16731] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.2744'. [ 531.077538][T16732] lo speed is unknown, defaulting to 1000 [ 531.285034][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2750'. [ 531.358423][T16745] xt_cgroup: path and classid specified [ 531.558064][T16757] block nbd0: not configured, cannot reconfigure [ 531.577344][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2754'. [ 531.713502][T16752] syzkaller0: entered promiscuous mode [ 531.721943][T16752] syzkaller0: entered allmulticast mode [ 531.739075][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2758'. [ 531.749290][T16764] ip6gretap0: entered promiscuous mode [ 531.756107][T16764] vlan4: entered promiscuous mode [ 532.072411][T16783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2760'. [ 532.121084][T16780] tipc: Enabled bearer , priority 0 [ 532.130481][T16780] syzkaller0: entered promiscuous mode [ 532.214957][T16780] syzkaller0: entered allmulticast mode [ 532.356856][T16780] tipc: Resetting bearer [ 532.699677][T16776] tipc: Resetting bearer [ 532.800108][T16776] tipc: Disabling bearer [ 533.239142][T16801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2764'. [ 533.495769][T16814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2768'. [ 533.516072][T16814] netlink: 580 bytes leftover after parsing attributes in process `syz.2.2768'. [ 533.669764][T16816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.231367][T16831] netlink: 'syz.0.2774': attribute type 1 has an invalid length. [ 534.333893][T16838] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 534.360977][T16838] : renamed from bond_slave_0 [ 534.378741][T16836] netlink: 'syz.2.2776': attribute type 29 has an invalid length. [ 534.547898][T16842] lo speed is unknown, defaulting to 1000 [ 534.993770][T16858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.087365][T16858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.099172][T16835] delete_channel: no stack [ 535.326547][T16857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.618878][T16883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.747204][T16886] geneve5: entered promiscuous mode [ 535.855628][T16898] netlink: 'syz.2.2794': attribute type 4 has an invalid length. [ 535.863430][T16898] __nla_validate_parse: 8 callbacks suppressed [ 535.863449][T16898] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2794'. [ 535.934527][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 535.942795][ C1] lec:lec_tx_timeout: lec0 [ 535.947527][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 535.967335][T16902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2797'. [ 535.986135][T16905] netlink: 'syz.3.2796': attribute type 4 has an invalid length. [ 536.015878][T16905] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2796'. [ 536.085364][T16909] netlink: 'syz.1.2798': attribute type 33 has an invalid length. [ 536.101394][T16909] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2798'. [ 536.124447][T16909] `: renamed from team0 (while UP) [ 536.180270][T16915] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2802'. [ 536.531036][T16938] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2807'. [ 536.582877][T16943] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2807'. [ 536.699744][T16946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2810'. [ 536.899393][T16952] syzkaller0: entered promiscuous mode [ 536.910520][T16952] syzkaller0: entered allmulticast mode [ 536.940405][T16952] tipc: Enabled bearer , priority 0 [ 536.972578][T16951] tipc: Resetting bearer [ 537.115594][T16963] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2818'. [ 537.137029][T16951] tipc: Disabling bearer [ 537.163880][T16961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.183533][T16964] batadv_slave_1: entered promiscuous mode [ 537.192507][T16966] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 537.205551][T16957] batadv_slave_1: left promiscuous mode [ 537.326408][T16977] netlink: 'syz.2.2821': attribute type 10 has an invalid length. [ 537.358237][T16977] dummy0: left promiscuous mode [ 537.368377][T16977] dummy0: entered promiscuous mode [ 537.381918][T16977] team0: Port device dummy0 added [ 537.406408][T16977] netlink: 'syz.2.2821': attribute type 10 has an invalid length. [ 537.446475][T16977] dummy0: left promiscuous mode [ 537.473506][T16977] team0: Port device dummy0 removed [ 537.483185][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2822'. [ 537.897732][T17005] atomic_op ffff88807f88c198 conn xmit_atomic 0000000000000000 [ 538.071091][T17011] xt_cgroup: invalid path, errno=-2 [ 538.261574][T17018] lo speed is unknown, defaulting to 1000 [ 538.445306][T17030] geneve3: entered promiscuous mode [ 538.606948][T17034] netlink: 'syz.2.2837': attribute type 21 has an invalid length. [ 539.021462][T17060] netlink: 'syz.0.2842': attribute type 2 has an invalid length. [ 539.282142][T17061] lo speed is unknown, defaulting to 1000 [ 539.819657][T17094] ip6gretap2: entered promiscuous mode [ 540.831259][T17143] netlink: 'syz.4.2864': attribute type 1 has an invalid length. [ 540.952812][T17143] bond8: entered promiscuous mode [ 540.958001][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 540.958037][ C1] lec:lec_tx_timeout: lec0 [ 540.966385][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 540.987368][T17143] 8021q: adding VLAN 0 to HW filter on device bond8 [ 540.998610][T17147] __nla_validate_parse: 10 callbacks suppressed [ 540.998631][T17147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2865'. [ 541.129438][T17150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2864'. [ 541.154253][T17159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2869'. [ 541.218088][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2868'. [ 541.300986][T17161] tipc: Enabled bearer , priority 0 [ 541.315471][T17162] syzkaller0: entered promiscuous mode [ 541.321006][T17162] syzkaller0: entered allmulticast mode [ 541.495866][T17167] netlink: 'syz.4.2871': attribute type 4 has an invalid length. [ 541.551163][T17170] netlink: 'syz.4.2871': attribute type 4 has an invalid length. [ 541.885957][T17156] tipc: Resetting bearer [ 541.981059][T17156] tipc: Disabling bearer [ 542.062323][T17192] netlink: 'syz.2.2878': attribute type 5 has an invalid length. [ 542.086081][T17194] netlink: 'syz.2.2878': attribute type 5 has an invalid length. [ 542.150961][T17199] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2879'. [ 542.161126][T17199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2879'. [ 542.387355][T17209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2882'. [ 542.416271][T17209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2882'. [ 542.464180][T17209] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2882'. [ 542.472848][T17215] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20004 [ 542.513767][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 542.552368][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 542.573403][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 542.597453][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 542.612245][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 542.762419][T17216] lo speed is unknown, defaulting to 1000 [ 542.975426][T17237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.983484][T17240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2890'. [ 543.317543][T17256] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 543.430993][T10249] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.600768][T10249] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.724262][T10249] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.765257][T17264] lo speed is unknown, defaulting to 1000 [ 543.962127][T10249] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.073625][T17297] tipc: Enabled bearer , priority 10 [ 544.168250][T17216] chnl_net:caif_netlink_parms(): no params data found [ 544.198393][T17302] bond0: entered promiscuous mode [ 544.205117][T17302] bond0: left promiscuous mode [ 544.211547][T17300] netlink: 'syz.1.2905': attribute type 11 has an invalid length. [ 544.473313][T17319] netlink: 'syz.0.2908': attribute type 89 has an invalid length. [ 544.680066][ T51] Bluetooth: hci5: command tx timeout [ 544.802076][T17216] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.810554][T17216] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.818084][T17216] bridge_slave_0: entered allmulticast mode [ 544.827490][T17216] bridge_slave_0: entered promiscuous mode [ 544.853316][T17328] hsr0: entered promiscuous mode [ 544.858650][T17328] macvlan5: entered allmulticast mode [ 544.864181][T17328] hsr0: entered allmulticast mode [ 544.870440][T17328] hsr_slave_0: entered allmulticast mode [ 544.876557][T17328] hsr_slave_1: entered allmulticast mode [ 544.939449][T17216] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.952905][T17216] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.961159][T17216] bridge_slave_1: entered allmulticast mode [ 544.970818][T17216] bridge_slave_1: entered promiscuous mode [ 544.986029][T17317] lo speed is unknown, defaulting to 1000 [ 545.147245][T10249] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 545.560862][T10249] bond0 (unregistering): Released all slaves [ 545.572124][T10249] bond1 (unregistering): Released all slaves [ 545.588410][T10249] bond2 (unregistering): Released all slaves [ 545.603945][T10249] bond3 (unregistering): Released all slaves [ 545.619219][T10249] bond4 (unregistering): Released all slaves [ 545.646371][T10249] bond5 (unregistering): Released all slaves [ 545.661572][T10249] bond6 (unregistering): Released all slaves [ 545.680604][T10249] bond7 (unregistering): Released all slaves [ 545.711194][T13415] tipc: Node number set to 3758096386 [ 545.792057][T17216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.847759][T10249] : left promiscuous mode [ 545.890653][T17216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.974606][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 545.982679][ C1] lec:lec_tx_timeout: lec0 [ 545.987499][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 546.044113][T10249] tipc: Left network mode [ 546.052785][T17216] team0: Port device team_slave_0 added [ 546.116933][T17216] team0: Port device team_slave_1 added [ 546.346363][T17349] bond7: entered promiscuous mode [ 546.378275][T17346] vcan0: entered promiscuous mode [ 546.383533][T17346] vcan0: entered allmulticast mode [ 546.414249][T17216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.424370][T17216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.461443][T17216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.483865][T17347] lo speed is unknown, defaulting to 1000 [ 546.508671][T17216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.518265][T17216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.556568][T17216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.595804][T17354] netlink: 'syz.0.2916': attribute type 13 has an invalid length. [ 546.614175][T17354] netlink: 'syz.0.2916': attribute type 17 has an invalid length. [ 546.757170][ T51] Bluetooth: hci5: command tx timeout [ 546.817063][T17216] hsr_slave_0: entered promiscuous mode [ 546.900507][T17216] hsr_slave_1: entered promiscuous mode [ 546.944698][T17216] debugfs: 'hsr0' already exists in 'hsr' [ 546.950502][T17216] Cannot create hsr debugfs directory [ 547.274754][T17368] bond17: option lacp_rate: invalid value (192) [ 547.292442][T17368] bond17 (unregistering): Released all slaves [ 547.619427][T17378] lo speed is unknown, defaulting to 1000 [ 548.638767][T10249] dummy0: left promiscuous mode [ 548.650220][T10249] macvlan1: left promiscuous mode [ 548.689328][T10249] hsr_slave_0: left promiscuous mode [ 548.709781][T10249] hsr_slave_1: left promiscuous mode [ 548.737420][T17418] __nla_validate_parse: 5 callbacks suppressed [ 548.737437][T17418] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.2930'. [ 548.827433][T10249] pim6reg (unregistering): left allmulticast mode [ 548.835926][ T51] Bluetooth: hci5: command tx timeout [ 549.141682][T17429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2931'. [ 549.491307][T17435] netlink: 'syz.0.2932': attribute type 13 has an invalid length. [ 549.587221][T17435] netlink: 'syz.0.2932': attribute type 17 has an invalid length. [ 549.645007][T17435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 550.157042][T17216] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 550.164055][T17457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2935'. [ 550.230260][T17216] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 550.289233][T17216] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 550.362776][T17216] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 550.411187][T10249] IPVS: stop unused estimator thread 0... [ 550.472333][T17473] syzkaller0: entered promiscuous mode [ 550.489531][T17473] syzkaller0: entered allmulticast mode [ 550.525920][T17483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2941'. [ 550.540044][T17485] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2940'. [ 550.602266][T17483] ip6gretap2: entered promiscuous mode [ 550.612987][T17483] ip6gretap2: entered allmulticast mode [ 550.630380][T17485] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2940'. [ 550.662165][T17487] mac80211_hwsim hwsim33 wlan0: Caught tx_queue_len zero misconfig [ 550.808185][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2942'. [ 550.910767][T17498] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2944'. [ 550.920157][ T51] Bluetooth: hci5: command tx timeout [ 550.994603][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 551.002742][ C1] lec:lec_tx_timeout: lec0 [ 551.007517][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 551.062459][T17216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.229788][T17216] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.254634][T17516] lo: Caught tx_queue_len zero misconfig [ 551.371980][T12198] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.379217][T12198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.469299][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.476553][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.500471][T17536] tipc: Enabled bearer , priority 0 [ 551.612546][T17536] tipc: Disabling bearer [ 551.758419][T17550] netlink: 'syz.4.2953': attribute type 11 has an invalid length. [ 551.793401][T17548] syzkaller0: entered promiscuous mode [ 551.812386][T17548] syzkaller0: entered allmulticast mode [ 551.985404][T17562] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2958'. [ 552.156589][T17569] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2956'. [ 552.265486][T17216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.429028][T17216] veth0_vlan: entered promiscuous mode [ 552.493709][T17216] veth1_vlan: entered promiscuous mode [ 552.657265][T17216] veth0_macvtap: entered promiscuous mode [ 552.690119][T17216] veth1_macvtap: entered promiscuous mode [ 552.737354][T17589] vxcan0: entered allmulticast mode [ 552.776113][T17596] netlink: 'syz.1.2962': attribute type 3 has an invalid length. [ 552.820332][T17596] block nbd1: NBD_DISCONNECT [ 552.875151][T17596] siw: device registration error -23 [ 552.882606][T17216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.931767][T17596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.981783][T17216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.055280][T12199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.078703][T12199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.103204][T12199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.141954][T12199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.468021][ T8597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.502901][ T8597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.638513][T17630] netlink: 'syz.1.2968': attribute type 1 has an invalid length. [ 553.676744][T10250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.710997][T10250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.722836][T17630] bridge0: port 3(dummy0) entered disabled state [ 553.904384][T17643] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 553.936953][T17641] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 553.948517][T13432] IPVS: starting estimator thread 0... [ 553.960637][T17645] gretap1: entered promiscuous mode [ 554.054590][T17646] IPVS: using max 31 ests per chain, 74400 per kthread [ 554.126162][T17648] __nla_validate_parse: 1 callbacks suppressed [ 554.126186][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2972'. [ 554.164774][T17648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2972'. [ 554.438246][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 554.448293][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 554.456535][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 554.471599][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 554.484958][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 554.558231][T17654] netlink: 'syz.3.2974': attribute type 13 has an invalid length. [ 554.581251][T17652] lo speed is unknown, defaulting to 1000 [ 554.753542][T17658] block nbd1: NBD_DISCONNECT [ 554.790613][T17657] netlink: 'syz.1.2975': attribute type 3 has an invalid length. [ 554.836415][T17662] netlink: 'syz.2.2976': attribute type 1 has an invalid length. [ 554.864656][T17662] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2976'. [ 554.877772][T17662] NCSI netlink: No device for ifindex 0 [ 554.946189][T17666] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2976'. [ 555.043560][T17670] bridge0: port 3(dummy0) entered blocking state [ 555.050168][T17670] bridge0: port 3(dummy0) entered forwarding state [ 555.099718][T17670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.156480][T17667] siw: device registration error -23 [ 555.305396][T17679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2979'. [ 555.432896][T17689] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 555.479751][T17652] chnl_net:caif_netlink_parms(): no params data found [ 555.549133][T17692] netlink: 'syz.1.2983': attribute type 1 has an invalid length. [ 555.671275][T17652] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.678768][T17652] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.686663][T17652] bridge_slave_0: entered allmulticast mode [ 555.695097][T17652] bridge_slave_0: entered promiscuous mode [ 555.704143][T17652] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.714273][T17652] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.722022][T17652] bridge_slave_1: entered allmulticast mode [ 555.730447][T17652] bridge_slave_1: entered promiscuous mode [ 555.836077][T17704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2986'. [ 555.846364][T17652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.878272][T17652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.931357][T17701] lo speed is unknown, defaulting to 1000 [ 556.014526][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 556.022678][ C1] lec:lec_tx_timeout: lec0 [ 556.027808][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 556.038947][T17652] team0: Port device team_slave_0 added [ 556.067776][T17652] team0: Port device team_slave_1 added [ 556.156632][T17652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.163724][T17652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.190596][T17652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.203947][T17652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.211362][T17652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.241515][T17652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.309806][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2989'. [ 556.328960][T17652] hsr_slave_0: entered promiscuous mode [ 556.337335][T17652] hsr_slave_1: entered promiscuous mode [ 556.343923][T17652] debugfs: 'hsr0' already exists in 'hsr' [ 556.350447][T17652] Cannot create hsr debugfs directory [ 556.487730][T17707] lo speed is unknown, defaulting to 1000 [ 556.515159][ T5833] Bluetooth: hci3: command tx timeout [ 556.733773][T17652] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.743921][T17652] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.756742][T17652] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 557.006232][T17652] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.044625][T17652] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.054459][T17652] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 557.168649][T17652] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.179918][T17652] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.190424][T17652] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 557.284241][T17652] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.303965][T17652] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.333718][T17652] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 557.403752][T17733] dummy0: entered promiscuous mode [ 557.410795][T17733] macvlan1: entered promiscuous mode [ 557.418411][T17733] hsr2: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 557.428943][T17733] hsr2: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network [ 557.443961][T17733] hsr2: entered allmulticast mode [ 557.449990][T17733] dummy0: entered allmulticast mode [ 557.469015][T17733] macvlan1: entered allmulticast mode [ 557.531248][T17735] netlink: 'syz.3.2996': attribute type 3 has an invalid length. [ 557.602763][T17738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2997'. [ 557.645693][T17735] block nbd3: NBD_DISCONNECT [ 557.684160][T17735] siw: device registration error -23 [ 557.729504][T17735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 557.813389][T17652] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 557.898710][T17746] pim6reg: entered allmulticast mode [ 557.908649][T17652] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 557.941432][T17742] pim6reg: left allmulticast mode [ 558.217866][T17652] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 558.229930][T17652] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 558.374429][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3004'. [ 558.412233][T17652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.438445][T17652] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.438451][T17778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3004'. [ 558.465648][ T8597] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.472987][ T8597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.501015][ T8597] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.508278][ T8597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.594664][ T5833] Bluetooth: hci3: command tx timeout [ 559.231372][T17652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.309670][T17809] lo speed is unknown, defaulting to 1000 [ 559.350068][T17811] __nla_validate_parse: 1 callbacks suppressed [ 559.350090][T17811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3010'. [ 559.385268][T17811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3010'. [ 559.405935][T17652] veth0_vlan: entered promiscuous mode [ 559.446506][T17652] veth1_vlan: entered promiscuous mode [ 559.518462][T17652] veth0_macvtap: entered promiscuous mode [ 559.550928][T17652] veth1_macvtap: entered promiscuous mode [ 559.686008][T17652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.721866][T17652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.773294][T10250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.783131][T10250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.807750][T10250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.828908][T10250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.952269][T17832] netlink: 211792 bytes leftover after parsing attributes in process `syz.1.3016'. [ 560.002274][T17835] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 560.110050][T10250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.133228][T10250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.250815][T17839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3019'. [ 560.262386][T17839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3019'. [ 560.290551][T12193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.295563][T17841] mac80211_hwsim hwsim2 wlan0: Caught tx_queue_len zero misconfig [ 560.303549][T12193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.407078][T17844] openvswitch: netlink: ufid size 5796 bytes exceeds the range (1, 16) [ 560.426059][T17844] openvswitch: netlink: Message has 16 unknown bytes. [ 560.671890][T17864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3023'. [ 560.684993][ T5833] Bluetooth: hci3: command tx timeout [ 560.791976][T17874] netlink: 'syz.3.3025': attribute type 2 has an invalid length. [ 560.809454][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3025'. [ 560.823649][T17874] netlink: 'syz.3.3025': attribute type 2 has an invalid length. [ 560.834440][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3025'. [ 560.893569][T17874] netlink: 'syz.3.3025': attribute type 2 has an invalid length. [ 560.966211][T17874] l24): entered promiscuous mode [ 560.989694][T17876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 561.034560][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 561.042713][ C1] lec:lec_tx_timeout: lec0 [ 561.047519][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 561.664442][T17917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3032'. [ 561.718353][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 561.730491][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 561.740538][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 561.750885][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 561.774285][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 562.764740][ T51] Bluetooth: hci3: command tx timeout [ 563.263473][T17918] lo speed is unknown, defaulting to 1000 [ 563.442328][T17933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3037'. [ 563.462587][T17932] ªªªªª;: renamed from bond0 (while UP) [ 563.874844][ T51] Bluetooth: hci0: command tx timeout [ 564.435629][T17944] geneve1: entered promiscuous mode [ 564.815524][T17958] netlink: 'syz.3.3043': attribute type 9 has an invalid length. [ 564.844793][T17953] lo speed is unknown, defaulting to 1000 [ 565.246765][T17918] chnl_net:caif_netlink_parms(): no params data found [ 565.603668][T17918] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.611492][T17918] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.619204][T17918] bridge_slave_0: entered allmulticast mode [ 565.629351][T17918] bridge_slave_0: entered promiscuous mode [ 565.638979][T17918] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.647086][T17918] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.655079][T17918] bridge_slave_1: entered allmulticast mode [ 565.663291][T17918] bridge_slave_1: entered promiscuous mode [ 565.681384][T17986] __nla_validate_parse: 2 callbacks suppressed [ 565.681403][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3049'. [ 565.718215][T17918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.728130][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3049'. [ 565.752367][T17918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.869721][T17918] team0: Port device team_slave_0 added [ 565.878830][T17918] team0: Port device team_slave_1 added [ 565.908355][T17993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3052'. [ 565.946992][T17996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3053'. [ 565.956414][ T51] Bluetooth: hci0: command tx timeout [ 566.039330][T17918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.057040][T17918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.083209][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 566.083242][ C1] lec:lec_tx_timeout: lec0 [ 566.098007][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 566.177899][T17918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.222351][T17918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.251766][T17918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.450327][T17918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.726991][T18010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3057'. [ 566.782498][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3057'. [ 566.921675][T18012] netlink: 'syz.1.3057': attribute type 1 has an invalid length. [ 566.930125][T18012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3057'. [ 567.016406][T18019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3056'. [ 567.117145][T17918] hsr_slave_0: entered promiscuous mode [ 567.127873][T17918] hsr_slave_1: entered promiscuous mode [ 567.150889][T17918] debugfs: 'hsr0' already exists in 'hsr' [ 567.165169][T17918] Cannot create hsr debugfs directory [ 567.171245][T18018] netlink: 'syz.4.3058': attribute type 3 has an invalid length. [ 567.255990][T18018] block nbd4: NBD_DISCONNECT [ 567.397144][T18024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3059'. [ 567.434920][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3059'. [ 567.449088][T18018] siw: device registration error -23 [ 567.614437][T18018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 568.040845][ T51] Bluetooth: hci0: command tx timeout [ 568.108926][T18036] lo speed is unknown, defaulting to 1000 [ 568.469779][T17918] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 568.531232][T17918] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 568.556474][T17918] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 568.588114][T17918] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 568.962208][T18077] tipc: Enabled bearer , priority 0 [ 569.003899][T18078] syzkaller0: entered promiscuous mode [ 569.020747][T18078] syzkaller0: entered allmulticast mode [ 569.114029][T18076] tipc: Resetting bearer [ 569.186074][T18076] tipc: Disabling bearer [ 569.475497][T17918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.516917][T17918] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.587944][T12199] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.595233][T12199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.626730][T12199] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.633963][T12199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.746857][T18084] lo speed is unknown, defaulting to 1000 [ 570.133678][ T51] Bluetooth: hci0: command tx timeout [ 570.515764][T17918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.637896][T17918] veth0_vlan: entered promiscuous mode [ 570.703279][T17918] veth1_vlan: entered promiscuous mode [ 570.741988][T18105] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 570.903831][T17918] veth0_macvtap: entered promiscuous mode [ 570.955811][T17918] veth1_macvtap: entered promiscuous mode [ 571.130181][T17918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.166188][T17957] Set syz1 is full, maxelem 65536 reached [ 571.172308][T17918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.209121][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.228428][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.264191][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.289036][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.510065][T18114] __nla_validate_parse: 7 callbacks suppressed [ 571.510087][T18114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3078'. [ 571.529016][T10249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.545757][T10249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.649794][T10249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.677409][T10249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.867578][T18134] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20001 [ 571.874675][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 571.874709][ C1] lec:lec_tx_timeout: lec0 [ 571.880700][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 571.968678][T18122] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.976577][T18122] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.052246][T18139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3086'. [ 572.086844][T18139] openvswitch: netlink: Flow actions attr not present in new flow. [ 572.234127][T18122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.271373][T18122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.339316][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 572.354402][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 572.365263][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 572.375327][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 572.385310][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 572.581416][T10250] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.591119][T18147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3089'. [ 572.615619][T10250] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.632523][T10250] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.718330][ T5838] team0: Port device syz_tun removed [ 572.739855][T10250] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.772136][T18153] tipc: Enabling of bearer rejected, failed to enable media [ 572.832547][T18145] lo speed is unknown, defaulting to 1000 [ 573.212176][T18179] xt_NFQUEUE: number of total queues is 0 [ 573.241164][T18179] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3097'. [ 573.251107][T18179] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3097'. [ 573.276922][T18179] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 573.958953][T18145] chnl_net:caif_netlink_parms(): no params data found [ 574.212206][T18145] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.219889][T18145] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.236486][T18145] bridge_slave_0: entered allmulticast mode [ 574.245118][T18145] bridge_slave_0: entered promiscuous mode [ 574.257188][T18145] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.264710][T18145] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.272016][T18145] bridge_slave_1: entered allmulticast mode [ 574.303718][T18145] bridge_slave_1: entered promiscuous mode [ 574.441594][T18215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3106'. [ 574.447782][ T5833] Bluetooth: hci1: command tx timeout [ 574.470404][T18215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3106'. [ 574.534729][T18215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3106'. [ 574.546000][T18215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3106'. [ 574.564347][T18215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3106'. [ 574.652446][T18145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.691633][T18237] netlink: 'syz.2.3110': attribute type 3 has an invalid length. [ 574.706359][T18145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.738318][T18237] nbd: nbd2 already in use [ 574.748888][T18237] block nbd2: NBD_DISCONNECT [ 574.777088][T18237] block nbd2: Send disconnect failed -32 [ 574.794402][T18237] block nbd2: shutting down sockets [ 574.816645][T18145] team0: Port device team_slave_0 added [ 574.828523][T18242] siw: device registration error -23 [ 574.829928][T18145] team0: Port device team_slave_1 added [ 574.909923][T12198] batman_adv: batadv0: Interface deactivated: gretap1 [ 575.190472][T18248] netlink: 'syz.0.3113': attribute type 21 has an invalid length. [ 575.241000][T12198] batman_adv: batadv0: Removing interface: gretap1 [ 575.334358][T12198] bridge0 (unregistering): left allmulticast mode [ 575.367969][T12198] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 575.376358][T12198] bridge1 (unregistering): left promiscuous mode [ 575.499774][T12198] team0: Port device bridge4 removed [ 575.713593][T12198] bond0 (unregistering): Released all slaves [ 575.733612][T12198] bond1 (unregistering): Released all slaves [ 575.766107][T12198] bond2 (unregistering): Released all slaves [ 575.788250][T12198] bond3 (unregistering): Released all slaves [ 575.818206][T12198] bond4 (unregistering): Released all slaves [ 575.838836][T12198] bond5 (unregistering): Released all slaves [ 575.860580][T12198] bond6 (unregistering): Released all slaves [ 575.883980][T12198] bond7 (unregistering): Released all slaves [ 575.929017][T18237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.997396][T18145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.004419][T18145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.136266][T18145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.175901][T18145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.199249][T18145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.284938][T18145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.367849][T12198] !: left promiscuous mode [ 576.521932][ T5833] Bluetooth: hci1: command tx timeout [ 576.547318][T12198] : left promiscuous mode [ 576.611165][T18145] hsr_slave_0: entered promiscuous mode [ 576.618236][T18145] hsr_slave_1: entered promiscuous mode [ 576.628078][T18145] debugfs: 'hsr0' already exists in 'hsr' [ 576.633935][T18145] Cannot create hsr debugfs directory [ 576.707471][T12198] tipc: Left network mode [ 576.894665][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 576.902806][ C1] lec:lec_tx_timeout: lec0 [ 576.908032][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 576.926989][T12198] IPVS: stopping backup sync thread 6974 ... [ 576.935431][T18294] __nla_validate_parse: 145 callbacks suppressed [ 576.935450][T18294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'. [ 577.161205][T18292] lo speed is unknown, defaulting to 1000 [ 577.281793][T18145] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.349030][T18302] syzkaller0: entered promiscuous mode [ 577.366378][T18302] syzkaller0: entered allmulticast mode [ 577.713014][T18145] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.774859][T18310] lo speed is unknown, defaulting to 1000 [ 577.851084][T18145] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.088866][T18145] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.594720][ T5833] Bluetooth: hci1: command tx timeout [ 578.622679][T18333] netlink: 'syz.3.3137': attribute type 1 has an invalid length. [ 578.644666][T18333] netlink: 'syz.3.3137': attribute type 2 has an invalid length. [ 578.674661][T18333] netlink: 'syz.3.3137': attribute type 1 has an invalid length. [ 578.700681][T18333] netlink: 'syz.3.3137': attribute type 3 has an invalid length. [ 578.708658][T18333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3137'. [ 578.803393][T18334] tipc: Enabling of bearer rejected, failed to enable media [ 578.979318][T18145] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 579.094692][T18145] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 579.287162][T18145] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 579.358750][T18345] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 579.370749][T18345] bond1 (unregistering): Released all slaves [ 579.482567][T18145] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 579.558247][T18357] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 579.572860][T18357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3143'. [ 580.048495][T18374] block nbd0: NBD_DISCONNECT [ 580.059718][T18365] netlink: 'syz.0.3145': attribute type 3 has an invalid length. [ 580.210356][T18365] siw: device registration error -23 [ 580.239149][T18365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 580.398741][ T980] IPVS: starting estimator thread 0... [ 580.514986][T18380] IPVS: using max 27 ests per chain, 64800 per kthread [ 580.674780][ T5833] Bluetooth: hci1: command tx timeout [ 580.876662][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3149'. [ 580.943697][T18145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.033528][T12198] batman_adv: batadv0: Removing interface: macvtap1 [ 581.054174][T12198] hsr0: left allmulticast mode [ 581.069768][T12198] veth0_macvtap: left promiscuous mode [ 581.083762][T12198] veth1_vlan: left promiscuous mode [ 581.090822][T12198] veth0_vlan: left promiscuous mode [ 581.914613][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 581.922820][ C1] lec:lec_tx_timeout: lec0 [ 581.927801][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 582.096789][T18400] sch_tbf: peakrate 4294967283 is lower than or equals to rate 6829859379779001161 ! [ 582.220894][T18145] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.293226][T12199] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.300488][T12199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.338234][T12199] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.345550][T12199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.904682][T18441] netlink: 'syz.2.3156': attribute type 1 has an invalid length. [ 582.945958][T18441] netlink: 'syz.2.3156': attribute type 3 has an invalid length. [ 582.968703][T18441] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3156'. [ 583.530128][T18460] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3160'. [ 583.562788][T18462] macvlan0: entered promiscuous mode [ 583.574773][T18462] macvlan0: entered allmulticast mode [ 583.612664][T18462] veth1_vlan: entered allmulticast mode [ 583.634208][T18462] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 583.683084][T18465] veth1_macvtap: left promiscuous mode [ 583.694529][T18465] macsec0: entered promiscuous mode [ 583.729549][T18460] xt_TCPMSS: Only works on TCP SYN packets [ 583.740330][T18145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.787291][T12198] IPVS: stop unused estimator thread 0... [ 583.813476][T18465] gre0: entered promiscuous mode [ 583.823582][T18465] gre0: entered allmulticast mode [ 583.832528][T18466] lo speed is unknown, defaulting to 1000 [ 584.293250][T18487] netlink: 'syz.3.3165': attribute type 3 has an invalid length. [ 585.064340][T18145] veth0_vlan: entered promiscuous mode [ 585.126378][T18519] macsec1: entered promiscuous mode [ 585.131669][T18519] macsec1: entered allmulticast mode [ 585.178528][T18145] veth1_vlan: entered promiscuous mode [ 585.341773][T18145] veth0_macvtap: entered promiscuous mode [ 585.377314][T18145] veth1_macvtap: entered promiscuous mode [ 585.442220][T18145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.504247][T18145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.550727][ T8597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.585056][ T8597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.641753][T18534] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3173'. [ 585.680063][ T8597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.705801][ T8597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.045370][T18547] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3176'. [ 586.051813][ T8597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.116890][ T8597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.241895][T12199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.257358][T12199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.346249][T18561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.839637][T18592] netlink: 'syz.4.3186': attribute type 1 has an invalid length. [ 586.934506][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 586.942631][ C1] lec:lec_tx_timeout: lec0 [ 586.947293][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 587.128113][T18598] netlink: zone id is out of range [ 587.133507][T18598] netlink: zone id is out of range [ 587.141919][T18600] syzkaller1: entered promiscuous mode [ 587.148441][T18600] syzkaller1: entered allmulticast mode [ 587.149640][T18598] netlink: zone id is out of range [ 587.162256][T18600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3189'. [ 587.190688][T18598] netlink: zone id is out of range [ 587.199332][T18598] netlink: zone id is out of range [ 587.206217][T18598] netlink: zone id is out of range [ 587.211661][T18598] netlink: zone id is out of range [ 587.218216][T18598] netlink: zone id is out of range [ 587.233011][T18598] netlink: zone id is out of range [ 587.849251][T18625] : entered promiscuous mode [ 588.446999][T18637] x_tables: duplicate underflow at hook 1 [ 588.644690][T18645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3198'. [ 588.808670][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 588.819144][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 588.829088][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 588.847983][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 588.856108][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 589.075977][T18662] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3201'. [ 589.092861][T18653] lo speed is unknown, defaulting to 1000 [ 589.315781][T18668] 8021q: VLANs not supported on nlmon0 [ 589.381818][T12198] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.540832][T18678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3204'. [ 589.588144][T12198] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.911664][T12198] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.214217][T18699] xt_hashlimit: overflow, try lower: 64/16140901064495857664 [ 590.237040][T18700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3209'. [ 590.314922][T18700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3209'. [ 590.324107][T18700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3209'. [ 590.348310][T12198] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.513988][T18692] lo speed is unknown, defaulting to 1000 [ 590.706940][T18713] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3212'. [ 590.739635][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3212'. [ 590.924692][ T51] Bluetooth: hci4: command tx timeout [ 591.713784][T12198] dummy0: left allmulticast mode [ 591.756415][T12198] dummy0: left promiscuous mode [ 591.762516][T12198] bridge0: port 3(dummy0) entered disabled state [ 591.870148][T12198] bridge_slave_1: left promiscuous mode [ 591.914400][T12198] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.954513][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 591.962585][ C1] lec:lec_tx_timeout: lec0 [ 591.968483][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 592.011506][T12198] ¾x9ÿ: left allmulticast mode [ 592.021285][T12198] ¾x9ÿ: left promiscuous mode [ 592.050746][T12198] bridge0: port 1(1¾x9ÿ) entered disabled state [ 592.205035][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3220'. [ 592.257609][T18762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3220'. [ 592.556814][T12198] bond14 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 592.573498][T12198] bond14 (unregistering): (slave ip6gretap1): Releasing backup interface [ 592.924286][T12198] bond10 (unregistering): (slave vti1): Releasing backup interface [ 592.995644][ T51] Bluetooth: hci4: command tx timeout [ 593.167391][T12198] `: Port device geneve0 removed [ 593.214037][T12198] bridge0 (unregistering): left allmulticast mode [ 593.511603][T12198] bond15 (unregistering): (slave bridge4): Releasing active interface [ 593.525733][T12198] bond15 (unregistering): (slave bridge4): the permanent HWaddr of slave - a2:44:b5:2a:7d:5d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 593.600150][T12198] bond15 (unregistering): (slave bridge5): Releasing active interface [ 593.698271][T12198] bond0 (unregistering): (slave 30): Releasing backup interface [ 593.709360][T12198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.721510][T12198] bond0 (unregistering): Released all slaves [ 593.750417][T12198] bond1 (unregistering): Released all slaves [ 593.772004][T12198] bond2 (unregistering): Released all slaves [ 593.803552][T12198] bond3 (unregistering): Released all slaves [ 593.822632][T12198] bond4 (unregistering): Released all slaves [ 593.851304][T12198] bond5 (unregistering): Released all slaves [ 593.877945][T12198] bond6 (unregistering): (slave vcan1): Releasing backup interface [ 593.896129][T12198] bond6 (unregistering): Released all slaves [ 593.923555][T12198] bond7 (unregistering): Released all slaves [ 593.942623][T12198] bond8 (unregistering): Released all slaves [ 593.962228][T12198] bond9 (unregistering): Released all slaves [ 593.991657][T12198] bond10 (unregistering): Released all slaves [ 594.010639][T12198] bond11 (unregistering): Released all slaves [ 594.037996][T12198] bond12 (unregistering): Released all slaves [ 594.059549][T12198] bond13 (unregistering): Released all slaves [ 594.081933][T12198] bond14 (unregistering): Released all slaves [ 594.110001][T12198] bond15 (unregistering): Released all slaves [ 594.128969][T12198] bond16 (unregistering): Released all slaves [ 594.156554][T12198] bond17 (unregistering): Released all slaves [ 594.177041][T12198] bond18 (unregistering): Released all slaves [ 594.561051][T18653] chnl_net:caif_netlink_parms(): no params data found [ 594.810500][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'. [ 594.957452][T18806] netlink: 'syz.3.3225': attribute type 2 has an invalid length. [ 595.040167][T18806] netlink: 'syz.3.3225': attribute type 9 has an invalid length. [ 595.094628][ T51] Bluetooth: hci4: command tx timeout [ 595.116999][T18806] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3225'. [ 595.223835][T18812] xt_CT: No such helper "snmp_trap" [ 595.834199][T18836] netlink: 'syz.0.3230': attribute type 3 has an invalid length. [ 595.891009][T18847] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3232'. [ 595.917295][T18846] sctp: [Deprecated]: syz.3.3232 (pid 18846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 595.917295][T18846] Use struct sctp_sack_info instead [ 596.012822][T18653] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.033272][T18653] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.051028][T18653] bridge_slave_0: entered allmulticast mode [ 596.059548][T18653] bridge_slave_0: entered promiscuous mode [ 596.069840][T18653] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.077657][T18653] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.085274][T18653] bridge_slave_1: entered allmulticast mode [ 596.093502][T18653] bridge_slave_1: entered promiscuous mode [ 596.155951][T18836] siw: device registration error -23 [ 596.165341][T12198] mÿ±: left promiscuous mode [ 596.324399][T18836] net_ratelimit: 45 callbacks suppressed [ 596.324411][T18836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.377927][T18653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.408869][T18653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.479118][T12198] tipc: Disabling bearer [ 596.522172][T12198] tipc: Left network mode [ 596.610506][T18653] team0: Port device team_slave_0 added [ 596.620760][T18653] team0: Port device team_slave_1 added [ 596.664677][T18864] lo speed is unknown, defaulting to 1000 [ 596.726672][T18653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.733778][T18653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.779768][T18880] netlink: 'syz.3.3240': attribute type 1 has an invalid length. [ 596.797627][T18880] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3240'. [ 596.885926][T18653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.938529][T18653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.956383][T18653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.994520][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 597.002740][ C1] lec:lec_tx_timeout: lec0 [ 597.008976][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 597.028710][T18653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.154649][ T51] Bluetooth: hci4: command tx timeout [ 597.344390][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3243'. [ 597.546226][T18902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3245'. [ 597.672326][T18653] hsr_slave_0: entered promiscuous mode [ 597.681535][T18905] netlink: 'syz.4.3244': attribute type 3 has an invalid length. [ 597.692164][T18653] hsr_slave_1: entered promiscuous mode [ 597.701785][T18905] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3244'. [ 597.707366][T18653] debugfs: 'hsr0' already exists in 'hsr' [ 597.734366][T18653] Cannot create hsr debugfs directory [ 597.765781][T18908] x_tables: duplicate underflow at hook 2 [ 597.779660][T18908] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3245'. [ 598.041077][T18918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.080740][T18915] netlink: 'syz.4.3247': attribute type 3 has an invalid length. [ 598.171867][T18915] block nbd4: NBD_DISCONNECT [ 598.387787][T18915] siw: device registration error -23 [ 598.514840][T18915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 598.691696][T18936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.706117][T18936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.240437][T18952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3256'. [ 599.266430][T18952] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 599.343621][T18957] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3257'. [ 599.418888][T18950] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 599.501697][T18955] syzkaller0: entered promiscuous mode [ 599.513990][T18955] syzkaller0: entered allmulticast mode [ 599.566498][T18950] tipc: Started in network mode [ 599.571446][T18950] tipc: Node identity 72523dcb6181, cluster identity 4711 [ 599.611048][T18950] tipc: Enabled bearer , priority 0 [ 600.110060][T12198] hsr_slave_0: left promiscuous mode [ 600.185894][T12198] hsr_slave_1: left promiscuous mode [ 600.206522][T12198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.238621][T12198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.258885][T12198] batman_adv: batadv0: Removing interface: ipvlan3 [ 600.395010][T12198] pim6reg99999999 (unregistering): left allmulticast mode [ 600.708298][T12198] ` (unregistering): Port device team_slave_1 removed [ 600.728260][T12198] ` (unregistering): Port device C removed [ 600.887677][T18978] tipc: Resetting bearer [ 600.907614][T18949] tipc: Resetting bearer [ 600.936849][T18949] tipc: Disabling bearer [ 600.956548][ T5936] tipc: Node number set to 332611019 [ 601.271174][T18998] netlink: 'syz.2.3262': attribute type 1 has an invalid length. [ 601.381716][T19011] __nla_validate_parse: 2 callbacks suppressed [ 601.381737][T19011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3261'. [ 601.413871][T19010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3262'. [ 601.478412][T18998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 601.502723][T18653] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 601.518512][T19017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3265'. [ 601.549435][T19005] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 601.575833][T19005] bond1: (slave batadv1): making interface the new active one [ 601.596027][T19005] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 601.624064][T19004] lo speed is unknown, defaulting to 1000 [ 601.716641][T19010] bond1 (unregistering): (slave batadv1): Releasing active interface [ 601.743715][T19010] bond1 (unregistering): Released all slaves [ 601.847102][T18653] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 602.024510][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 602.032766][ C1] lec:lec_tx_timeout: lec0 [ 602.038020][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 602.110355][T18653] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 602.245870][T18653] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 602.551377][T12198] IPVS: stop unused estimator thread 0... [ 602.642927][T19055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3268'. [ 602.662993][T19055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3268'. [ 602.680439][T19055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3268'. [ 602.699712][T19058] netlink: 'syz.2.3268': attribute type 1 has an invalid length. [ 602.708021][T19058] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3268'. [ 603.049445][T18653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.125916][T18653] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.148379][T19082] netlink: 'syz.3.3276': attribute type 3 has an invalid length. [ 603.181017][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.188294][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.224240][T19084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3275'. [ 603.259406][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.266679][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.288099][T19085] block nbd3: NBD_DISCONNECT [ 603.307740][T19082] siw: device registration error -23 [ 603.478957][T19082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.502648][T19082] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.524577][T19082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.983553][T19108] netlink: 'syz.2.3279': attribute type 1 has an invalid length. [ 604.101808][T19109] tipc: Started in network mode [ 604.115294][T19109] tipc: Node identity 32a562f9a7c2, cluster identity 4711 [ 604.133320][T19109] tipc: Enabled bearer , priority 0 [ 604.156671][T19117] syzkaller0: entered promiscuous mode [ 604.163628][T19117] syzkaller0: entered allmulticast mode [ 604.239045][T19109] tipc: Resetting bearer [ 604.349304][T19109] tipc: Disabling bearer [ 604.457923][T18653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.615916][T18653] veth0_vlan: entered promiscuous mode [ 604.647439][T18653] veth1_vlan: entered promiscuous mode [ 604.712013][T18653] veth0_macvtap: entered promiscuous mode [ 604.732929][T18653] veth1_macvtap: entered promiscuous mode [ 604.754636][T19140] netlink: 93 bytes leftover after parsing attributes in process `syz.4.3282'. [ 604.839941][T18653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.002942][T18653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.060949][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.090764][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.125411][T10250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.152495][T10250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.349955][T19150] netlink: 'syz.2.3286': attribute type 3 has an invalid length. [ 605.424918][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.454638][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.525299][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.533194][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.535696][T19150] siw: device registration error -23 [ 605.571353][T19156] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3288'. [ 605.612839][T19150] gre0: left promiscuous mode [ 605.617860][T19150] gre0: left allmulticast mode [ 605.640999][T19150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.704055][T19160] bridge1: entered promiscuous mode [ 605.787010][T19165] tun0: tun_chr_ioctl cmd 1074025675 [ 605.792409][T19165] tun0: persist enabled [ 605.896486][T19161] lo speed is unknown, defaulting to 1000 [ 606.481797][T19194] __nla_validate_parse: 3 callbacks suppressed [ 606.481817][T19194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3298'. [ 606.561512][T19194] netlink: 'syz.0.3298': attribute type 1 has an invalid length. [ 606.622103][T19195] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3297'. [ 606.804325][T19207] x_tables: duplicate underflow at hook 3 [ 606.888423][T19196] bond1: (slave geneve2): making interface the new active one [ 606.930953][T19196] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 607.020383][ T58] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 607.044560][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 607.052687][ C1] lec:lec_tx_timeout: lec0 [ 607.057753][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 607.067171][ T58] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 607.104814][ T58] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 607.140598][ T58] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 607.360061][T19221] netlink: 'syz.4.3302': attribute type 3 has an invalid length. [ 607.392050][T19221] siw: device registration error -23 [ 607.445902][T19221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 607.664169][T19244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3309'. [ 607.689991][T19244] 8021q: VLANs not supported on sit0 [ 607.720605][T19242] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 607.735556][T19244] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3309'. [ 607.797357][T19242] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 607.962578][T19254] lo speed is unknown, defaulting to 1000 [ 608.282111][T19269] openvswitch: netlink: Multiple metadata blocks provided [ 608.330592][T19251] lo speed is unknown, defaulting to 1000 [ 608.507124][T19246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.562264][T19278] netlink: 'syz.0.3319': attribute type 3 has an invalid length. [ 608.592596][T19278] block nbd0: NBD_DISCONNECT [ 608.700758][T19280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 608.793710][T19282] pim6reg1: entered promiscuous mode [ 608.799625][T19282] pim6reg1: entered allmulticast mode [ 608.832642][T19265] lo speed is unknown, defaulting to 1000 [ 609.073975][T19278] siw: device registration error -23 [ 609.463097][T19298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3322'. [ 609.786661][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3324'. [ 609.918702][T19306] block nbd0: Unsupported socket: should be TCP or UNIX. [ 610.273650][T19320] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3326'. [ 610.319075][T19321] netlink: 'syz.3.3329': attribute type 33 has an invalid length. [ 610.333407][T19321] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3329'. [ 610.360273][T19321] `: renamed from team0 (while UP) [ 610.470189][T19330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3332'. [ 610.678736][T19342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3335'. [ 610.713254][T19342] veth1_macvtap: entered promiscuous mode [ 610.734931][T19342] macsec0: left promiscuous mode [ 610.788164][T19346] netlink: 'syz.4.3339': attribute type 3 has an invalid length. [ 610.900210][T19346] block nbd4: NBD_DISCONNECT [ 610.933837][T19346] siw: device registration error -23 [ 610.957608][T19346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.180049][T19365] lo speed is unknown, defaulting to 1000 [ 611.323284][T19369] netlink: 'syz.4.3343': attribute type 11 has an invalid length. [ 611.481856][T19373] dvmrp0: entered allmulticast mode [ 611.512788][T19373] __nla_validate_parse: 2 callbacks suppressed [ 611.512812][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3345'. [ 611.586479][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3345'. [ 611.602042][T19373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3345'. [ 612.416629][T19416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3356'. [ 612.769154][T19426] x_tables: ip_tables: osf match: only valid for protocol 6 [ 612.779509][T19419] lo speed is unknown, defaulting to 1000 [ 612.834581][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 612.842716][ C1] lec:lec_tx_timeout: lec0 [ 612.847548][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 613.230575][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3362'. [ 613.266238][T19438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3362'. [ 613.674972][T19451] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3364'. [ 613.708313][T19451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.748257][T19451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.766749][T19451] bond0 (unregistering): Released all slaves [ 614.139650][T19463] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3368'. [ 614.327996][T19468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.343480][T19469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.575714][T19475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3371'. [ 614.648648][T19479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3373'. [ 614.692164][T19479] 8021q: VLANs not supported on ip6_vti0 [ 614.853701][T19484] lo speed is unknown, defaulting to 1000 [ 614.905854][T19492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.329727][T19502] netlink: 'syz.2.3378': attribute type 3 has an invalid length. [ 615.400861][T19502] block nbd2: NBD_DISCONNECT [ 615.439188][T19498] lo speed is unknown, defaulting to 1000 [ 615.503991][T19503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.823827][T19502] siw: device registration error -23 [ 616.069903][T19515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.072465][T19534] __nla_validate_parse: 4 callbacks suppressed [ 617.072486][T19534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3388'. [ 617.176149][T19540] netlink: 'syz.3.3391': attribute type 3 has an invalid length. [ 617.370991][T19540] siw: device registration error -23 [ 617.409302][T19540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 617.602640][T19544] tipc: Enabled bearer , priority 0 [ 617.628566][T19544] mac80211_hwsim hwsim57 syzkaller0: entered promiscuous mode [ 617.654103][T19544] mac80211_hwsim hwsim57 syzkaller0: entered allmulticast mode [ 617.726409][T19544] tipc: Resetting bearer [ 617.853766][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3395'. [ 617.874515][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 617.882844][ C1] lec:lec_tx_timeout: lec0 [ 617.887672][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 617.948457][T19555] netlink: zone id is out of range [ 618.072320][T19550] lo speed is unknown, defaulting to 1000 [ 618.234117][T19566] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3400'. [ 618.593911][T19572] lo speed is unknown, defaulting to 1000 [ 618.609876][T19580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3403'. [ 619.165310][T19590] netlink: 'syz.4.3405': attribute type 23 has an invalid length. [ 619.179529][T19591] netlink: 'syz.4.3405': attribute type 23 has an invalid length. [ 619.189144][T19589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.741468][T19598] syzkaller0: entered allmulticast mode [ 619.862767][T19598] syzkaller0 (unregistering): left allmulticast mode [ 620.167677][T19607] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3410'. [ 620.201887][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3412'. [ 620.229056][T19615] openvswitch: netlink: Flow key attr not present in new flow. [ 620.574603][T19621] netlink: 'syz.2.3413': attribute type 1 has an invalid length. [ 620.614628][T19621] netlink: 'syz.2.3413': attribute type 1 has an invalid length. [ 620.708541][T19621] tipc: Enabled bearer , priority 10 [ 620.912734][T19635] netlink: 'syz.3.3417': attribute type 11 has an invalid length. [ 621.474137][T19663] syzkaller0: entered promiscuous mode [ 621.508362][T19663] syzkaller0: entered allmulticast mode [ 621.593285][T19663] netlink: 'syz.4.3423': attribute type 13 has an invalid length. [ 621.836168][T19674] tipc: Started in network mode [ 621.841434][T19674] tipc: Node identity caca2a8eb694, cluster identity 4711 [ 621.858893][T19682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3424'. [ 621.890062][T19674] tipc: Enabled bearer , priority 0 [ 622.029895][T19654] tipc: Resetting bearer [ 622.124098][T19654] tipc: Disabling bearer [ 622.409915][T19710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3431'. [ 622.664123][T19717] netlink: 'syz.0.3435': attribute type 11 has an invalid length. [ 622.699084][T19717] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3435'. [ 622.766196][T19717] netlink: 'syz.0.3435': attribute type 11 has an invalid length. [ 622.795170][T19717] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3435'. [ 622.894526][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 622.902612][ C1] lec:lec_tx_timeout: lec0 [ 622.907599][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 623.854990][T19771] lo speed is unknown, defaulting to 1000 [ 623.898739][T19775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3449'. [ 623.945045][T19776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3448'. [ 626.068113][T19751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 626.329589][T19814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'. [ 626.709837][T19829] ip6gre1: entered promiscuous mode [ 626.948698][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'. [ 627.290464][T19846] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.303924][T19846] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.446478][T19855] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3468'. [ 627.522717][T19857] netlink: 'syz.1.3469': attribute type 5 has an invalid length. [ 627.534052][T19857] netlink: 'syz.1.3469': attribute type 2 has an invalid length. [ 627.542504][T19857] tipc: Started in network mode [ 627.547910][T19857] tipc: Node identity 1340008, cluster identity 4711 [ 627.568329][T19857] tipc: Node number set to 20185096 [ 627.878417][T19870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3471'. [ 627.914496][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 627.922643][ C1] lec:lec_tx_timeout: lec0 [ 627.927468][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 628.092616][T19882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'. [ 628.377727][T19896] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3480'. [ 628.485437][T19901] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3481'. [ 628.541116][T19902] netlink: 'syz.4.3482': attribute type 10 has an invalid length. [ 628.589815][T19902] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 628.688645][T19912] netlink: 360 bytes leftover after parsing attributes in process `syz.3.3484'. [ 628.711010][T19911] netlink: 'syz.0.3485': attribute type 4 has an invalid length. [ 628.803467][T19943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3484'. [ 628.846348][T19946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3486'. [ 628.883254][T19948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3487'. [ 629.126707][T19959] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3491'. [ 629.400076][T19971] netlink: 'syz.4.3494': attribute type 3 has an invalid length. [ 629.515944][T19971] dvmrp0: left allmulticast mode [ 629.569961][T19981] siw: device registration error -23 [ 629.587926][T19975] netlink: 'syz.2.3495': attribute type 3 has an invalid length. [ 629.625533][T19981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.899009][T19989] block nbd0: not configured, cannot reconfigure [ 630.015395][ T5936] IPVS: starting estimator thread 0... [ 630.107694][T20000] IPVS: using max 31 ests per chain, 74400 per kthread [ 630.265335][T20003] syzkaller0: entered promiscuous mode [ 630.277455][T20003] syzkaller0: entered allmulticast mode [ 632.621432][T20017] netlink: 'syz.2.3508': attribute type 3 has an invalid length. [ 632.633118][T20026] tipc: Enabling of bearer rejected, failed to enable media [ 632.743379][T20049] __nla_validate_parse: 5 callbacks suppressed [ 632.743400][T20049] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3512'. [ 632.788485][T20050] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3512'. [ 632.934496][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 632.942709][ C1] lec:lec_tx_timeout: lec0 [ 632.947744][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 633.026774][T20053] lo speed is unknown, defaulting to 1000 [ 633.428123][T20093] netlink: 'syz.4.3524': attribute type 1 has an invalid length. [ 633.461521][T20093] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3524'. [ 633.493493][T20087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3523'. [ 633.519434][T20093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3524'. [ 633.790467][T20096] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3524'. [ 633.903009][T20098] bridge2: entered allmulticast mode [ 634.145867][ T51] block nbd0: Receive control failed (result -32) [ 634.291483][T20063] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 634.370392][T20103] netlink: 'syz.4.3525': attribute type 3 has an invalid length. [ 634.603164][T20103] siw: device registration error -23 [ 634.625431][T20103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 635.032526][T20125] ip6gretap0: entered promiscuous mode [ 635.283149][T20136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.318244][T20136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3532'. [ 635.478130][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3534'. [ 635.605735][T20148] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.613723][T20148] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.758101][T20148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.778574][T20148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.904836][T20148] tipc: Resetting bearer [ 635.959298][T12206] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.984839][T12206] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.012999][T12206] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.034027][T12206] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.117682][T20164] netlink: 'syz.2.3541': attribute type 10 has an invalid length. [ 636.134856][T20164] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3541'. [ 636.168476][T20169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3540'. [ 636.223421][T20164] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 636.738738][T20192] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 636.935350][T20200] lo: entered allmulticast mode [ 636.941279][T20200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.017328][T20208] netlink: 'syz.0.3550': attribute type 33 has an invalid length. [ 637.362513][T20221] netlink: 'syz.4.3554': attribute type 4 has an invalid length. [ 637.606209][T20227] netlink: 'syz.1.3556': attribute type 10 has an invalid length. [ 637.954539][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 637.963521][ C1] lec:lec_tx_timeout: lec0 [ 637.968954][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 638.013515][T20251] lo speed is unknown, defaulting to 1000 [ 638.953875][T20269] lo speed is unknown, defaulting to 1000 [ 639.256769][T20275] __nla_validate_parse: 15 callbacks suppressed [ 639.256791][T20275] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3564'. [ 639.416476][T20266] lo speed is unknown, defaulting to 1000 [ 639.441115][T20304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3570'. [ 639.540624][T20304] netlink: 'syz.1.3570': attribute type 10 has an invalid length. [ 639.573693][T20304] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3570'. [ 640.371438][T20312] netlink: 'syz.1.3572': attribute type 61 has an invalid length. [ 640.382268][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3573'. [ 640.404669][T20312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3572'. [ 640.688569][T20321] team_slave_0: entered promiscuous mode [ 640.694508][T20321] team_slave_1: entered promiscuous mode [ 640.714958][T20321] vlan2: entered promiscuous mode [ 640.720351][T20321] team0: entered promiscuous mode [ 641.019650][T20334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3578'. [ 641.186637][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3582'. [ 641.225282][T20346] tipc: Enabled bearer , priority 0 [ 641.238994][T20346] syzkaller0: entered promiscuous mode [ 641.254512][T20346] syzkaller0: entered allmulticast mode [ 641.308766][T20354] ip6gretap1: entered promiscuous mode [ 641.350270][T20346] tipc: Resetting bearer [ 641.382180][T20344] tipc: Resetting bearer [ 641.470964][T20344] tipc: Disabling bearer [ 641.492810][T20367] tipc: Failed to obtain node identity [ 641.501330][T20367] tipc: Enabling of bearer rejected, failed to enable media [ 641.679173][T20377] Cannot find add_set index 2 as target [ 641.738399][T20382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3593'. [ 641.784556][T20387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3591'. [ 641.795727][T20379] lo speed is unknown, defaulting to 1000 [ 641.804120][T20386] syzkaller0: entered promiscuous mode [ 641.809955][T20386] syzkaller0: entered allmulticast mode [ 642.012690][T20382] bond1: option tlb_dynamic_lb: invalid value (5) [ 642.037047][T20382] bond1 (unregistering): Released all slaves [ 642.045875][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3595'. [ 642.108721][T20395] netlink: 'syz.3.3595': attribute type 2 has an invalid length. [ 642.528961][T20400] netlink: ct family unspecified [ 642.540375][T20400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.550186][T20414] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 642.648113][T20421] sctp: [Deprecated]: syz.0.3603 (pid 20421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.648113][T20421] Use struct sctp_sack_info instead [ 642.810273][T20428] netlink: 'syz.1.3605': attribute type 10 has an invalid length. [ 642.907014][T20428] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 642.924914][T20428] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 642.986301][T20428] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 642.994477][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 643.002590][ C1] lec:lec_tx_timeout: lec0 [ 643.107851][T20440] sctp: [Deprecated]: syz.3.3609 (pid 20440) Use of int in max_burst socket option deprecated. [ 643.107851][T20440] Use struct sctp_assoc_value instead [ 643.244028][T20444] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 643.248724][T20447] netlink: 'syz.3.3609': attribute type 3 has an invalid length. [ 643.606364][ T51] Bluetooth: hci4: link tx timeout [ 643.614100][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 643.628273][ T51] Bluetooth: hci4: link tx timeout [ 643.633559][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.651083][T20466] Bluetooth: hci4: link tx timeout [ 643.656772][T20466] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 643.659196][T20460] sctp: [Deprecated]: syz.3.3614 (pid 20460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 643.659196][T20460] Use struct sctp_sack_info instead [ 643.665093][T20466] Bluetooth: hci4: link tx timeout [ 643.665129][T20466] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.730918][T20460] sctp: [Deprecated]: syz.3.3614 (pid 20460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 643.730918][T20460] Use struct sctp_sack_info instead [ 643.860426][T20475] netlink: 'syz.0.3616': attribute type 8 has an invalid length. [ 644.081475][T20485] lo speed is unknown, defaulting to 1000 [ 644.376294][T20499] sctp: [Deprecated]: syz.1.3625 (pid 20499) Use of int in max_burst socket option deprecated. [ 644.376294][T20499] Use struct sctp_assoc_value instead [ 644.610116][T20503] lo speed is unknown, defaulting to 1000 [ 644.728729][T20507] __nla_validate_parse: 3 callbacks suppressed [ 644.728762][T20507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3628'. [ 644.796818][T20507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3628'. [ 644.840371][T20509] xt_CT: No such helper "snmp_trap" [ 644.841970][T20507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3628'. [ 644.868851][T20511] netlink: 'syz.4.3628': attribute type 1 has an invalid length. [ 644.905846][T20511] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3628'. [ 645.342289][T20522] IPVS: length: 132 != 8 [ 645.384023][T20522] pimreg: entered allmulticast mode [ 645.394211][T20522] pimreg: left allmulticast mode [ 645.421178][T20526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3632'. [ 645.541671][T20531] netlink: 'syz.2.3634': attribute type 3 has an invalid length. [ 645.643563][T20517] lo speed is unknown, defaulting to 1000 [ 645.708511][T20533] syzkaller0: entered promiscuous mode [ 645.714144][T20533] syzkaller0: entered allmulticast mode [ 645.732472][T20466] Bluetooth: hci4: command 0x0406 tx timeout [ 646.188616][T20550] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3640'. [ 646.226029][T20536] lo speed is unknown, defaulting to 1000 [ 646.540052][T20557] bond2: option arp_interval: invalid value (18446744073709551615) [ 646.559065][T20557] bond2: option arp_interval: allowed values 0 - 2147483647 [ 646.584814][T20557] bond2 (unregistering): Released all slaves [ 646.809174][T20560] tipc: New replicast peer: 255.255.255.255 [ 646.816887][T20560] tipc: Enabled bearer , priority 10 [ 646.878573][T20553] tipc: Resetting bearer [ 647.080361][T20565] netlink: 'syz.2.3642': attribute type 3 has an invalid length. [ 647.237829][T20565] siw: device registration error -23 [ 647.376337][T20565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.409341][T20565] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.455073][T20565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 647.805284][T20466] Bluetooth: hci4: command 0x0406 tx timeout [ 648.225129][T20599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.467578][T20605] netlink: 'syz.4.3654': attribute type 3 has an invalid length. [ 648.530657][T20605] block nbd4: NBD_DISCONNECT [ 648.559272][T20605] siw: device registration error -23 [ 648.616867][T20605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.714908][T20623] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3657'. [ 648.765948][T20618] lo speed is unknown, defaulting to 1000 [ 649.034806][T20644] netlink: 'syz.4.3663': attribute type 3 has an invalid length. [ 649.053457][T20644] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3663'. [ 649.103308][T20642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3661'. [ 649.114889][T20641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3661'. [ 649.238953][T20652] netlink: 'syz.2.3665': attribute type 2 has an invalid length. [ 649.267123][T20652] netlink: 'syz.2.3665': attribute type 9 has an invalid length. [ 649.432664][T20660] lo speed is unknown, defaulting to 1000 [ 649.484373][T20664] netlink: 'syz.3.3668': attribute type 3 has an invalid length. [ 649.575684][T20664] block nbd3: NBD_DISCONNECT [ 649.641612][T20665] lo: left allmulticast mode [ 649.653636][T20665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 649.714033][T20664] siw: device registration error -23 [ 650.105388][T20667] __nla_validate_parse: 2 callbacks suppressed [ 650.105409][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3669'. [ 650.150395][T20672] lo speed is unknown, defaulting to 1000 [ 650.192274][T20667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3669'. [ 650.211623][T20675] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN PTI [ 650.223958][T20675] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 650.232518][T20675] CPU: 1 UID: 0 PID: 20675 Comm: syz.1.3672 Not tainted syzkaller #0 PREEMPT(full) [ 650.241942][T20675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 650.252051][T20675] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 650.258970][T20675] Code: c3 31 ff 89 c6 e8 b6 9b c7 f7 85 db 74 5b e8 6d 97 c7 f7 eb 05 e8 66 97 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 650.271071][T20676] netlink: 296 bytes leftover after parsing attributes in process `syz.3.3669'. [ 650.279504][T20675] RSP: 0018:ffffc9000b53f5e0 EFLAGS: 00010202 [ 650.279536][T20675] RAX: 0000000000000007 RBX: 0000000000000039 RCX: 0000000000080000 [ 650.279552][T20675] RDX: ffffc9000efab000 RSI: 00000000000026f7 RDI: 00000000000026f8 [ 650.279566][T20675] RBP: 0000000080000000 R08: ffff888041b79e40 R09: 0000000000000003 [ 650.279579][T20675] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 650.279593][T20675] R13: 0000000000000000 R14: ffff88802239b358 R15: ffffffffffffffff [ 650.279609][T20675] FS: 00007fe407b3d6c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 650.279626][T20675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.279639][T20675] CR2: 000000110c360585 CR3: 0000000078fd0000 CR4: 00000000003526f0 [ 650.279658][T20675] Call Trace: [ 650.279667][T20675] [ 650.368465][T20675] ? ip_route_output_key_hash+0xd8/0x2a0 [ 650.374235][T20675] ip_route_output_key_hash+0x18d/0x2a0 [ 650.379945][T20675] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 650.386444][T20675] ? crng_fast_key_erasure+0x196/0x270 [ 650.392043][T20675] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 650.398008][T20675] ip_route_output_flow+0x2a/0x150 [ 650.403201][T20675] sctp_v4_get_dst+0x3f8/0x12b0 [ 650.408194][T20675] ? crng_make_state+0x2c5/0x600 [ 650.413193][T20675] ? lockdep_hardirqs_on+0x7a/0x110 [ 650.418495][T20675] ? crng_make_state+0x36a/0x600 [ 650.423469][T20675] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 650.428873][T20675] ? _get_random_bytes+0x1e7/0x260 [ 650.434029][T20675] ? dst_release+0x72/0x1b0 [ 650.438566][T20675] sctp_transport_route+0x118/0x2f0 [ 650.443918][T20675] sctp_assoc_add_peer+0x650/0x13b0 [ 650.449176][T20675] sctp_connect_new_asoc+0x329/0x6b0 [ 650.454623][T20675] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 650.460651][T20675] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 650.466516][T20675] __sctp_connect+0x5cb/0xdc0 [ 650.471240][T20675] ? __pfx___sctp_connect+0x10/0x10 [ 650.476572][T20675] ? security_sctp_bind_connect+0x7e/0x2c0 [ 650.482608][T20675] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 650.488561][T20675] sctp_getsockopt_connectx3+0x227/0x360 [ 650.494248][T20675] ? lock_sock_nested+0x6a/0x100 [ 650.500233][T20675] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 650.506761][T20675] ? __local_bh_enable_ip+0xd0/0x130 [ 650.512120][T20675] sctp_getsockopt+0x984/0xb90 [ 650.517046][T20675] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 650.522983][T20675] do_sock_getsockopt+0x2d3/0x3f0 [ 650.528450][T20675] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 650.534208][T20675] ? __fget_files+0x3a0/0x420 [ 650.538918][T20675] ? __fget_files+0x2a/0x420 [ 650.543580][T20675] __x64_sys_getsockopt+0x1a4/0x240 [ 650.548823][T20675] do_syscall_64+0x14d/0xf80 [ 650.553451][T20675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.559539][T20675] ? trace_irq_disable+0x37/0x100 [ 650.564595][T20675] ? clear_bhb_loop+0x40/0x90 [ 650.569304][T20675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.575266][T20675] RIP: 0033:0x7fe406b9c629 [ 650.579978][T20675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.599966][T20675] RSP: 002b:00007fe407b3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 650.608695][T20675] RAX: ffffffffffffffda RBX: 00007fe406e15fa0 RCX: 00007fe406b9c629 [ 650.617247][T20675] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000009 [ 650.625484][T20675] RBP: 00007fe406c32b39 R08: 0000200000000180 R09: 0000000000000000 [ 650.633764][T20675] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.641956][T20675] R13: 00007fe406e16038 R14: 00007fe406e15fa0 R15: 00007ffd91c9c878 [ 650.650004][T20675] [ 650.653267][T20675] Modules linked in: [ 650.658736][T20675] ---[ end trace 0000000000000000 ]--- [ 650.675000][T20676] netlink: 'syz.3.3669': attribute type 5 has an invalid length. [ 650.684636][T20675] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 650.691618][T20675] Code: c3 31 ff 89 c6 e8 b6 9b c7 f7 85 db 74 5b e8 6d 97 c7 f7 eb 05 e8 66 97 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 650.693884][T20676] netlink: 3581 bytes leftover after parsing attributes in process `syz.3.3669'. [ 650.711656][T20675] RSP: 0018:ffffc9000b53f5e0 EFLAGS: 00010202 [ 650.727523][T20675] RAX: 0000000000000007 RBX: 0000000000000039 RCX: 0000000000080000 [ 650.735573][T20675] RDX: ffffc9000efab000 RSI: 00000000000026f7 RDI: 00000000000026f8 [ 650.744483][T20675] RBP: 0000000080000000 R08: ffff888041b79e40 R09: 0000000000000003 [ 650.752509][T20675] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 650.760611][T20675] R13: 0000000000000000 R14: ffff88802239b358 R15: ffffffffffffffff [ 650.768686][T20675] FS: 00007fe407b3d6c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 650.839827][T20675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.873012][T20675] CR2: 00007fe407b1bff8 CR3: 0000000078fd0000 CR4: 00000000003526f0 [ 650.911628][T20675] Kernel panic - not syncing: Fatal exception [ 650.918497][T20675] Kernel Offset: disabled [ 650.922849][T20675] Rebooting in 86400 seconds..