last executing test programs: 9.308681266s ago: executing program 0 (id=3946): unshare(0x22020600) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56441, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000020000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x10000080) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @none, 0x240}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6, 0x4, 0x0, 0xfffffffe}]}, 0x10) unshare(0x4040500) 2.822964774s ago: executing program 0 (id=4021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 2.795021065s ago: executing program 2 (id=4023): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}], 0x2c) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x9, 0x8) listen(r1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x400, 0x70bd2c, 0xd153, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044844}, 0x0) recvfrom(r4, &(0x7f0000000340)=""/75, 0x4b, 0x40000121, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000100)='veth1_to_bridge\x00') bind$inet(r6, 0x0, 0xfffffffffffffd14) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0xffffffffffffffb2, "cc8bb7ef7c0ea4b67039c0639e79fb6428c14618c88baaef81e1abef044bb19eeb"}, &(0x7f00000002c0)=0xffffffffffffff29) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000017c0)=ANY=[], 0xb0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, 0x0) r7 = socket$inet6(0xa, 0x6, 0x200101) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000001700)={@llc={0x1a, 0x1b, 0xc, 0x2, 0x8, 0x2, @remote}, {&(0x7f00000006c0)=""/4096, 0x1000}, &(0x7f00000016c0), 0x11}, 0xa0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xd, 0x0, 0x6}, 0x8) accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)) 2.710883916s ago: executing program 0 (id=4025): connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="05000000000000002e110000000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2df1fa7c3205bfedbe9116eb423cdacfa7e32fe02313615b2e1a38d522be18b000048b043ccc42646d25dfd73bb6d7535f7866907dc6751dfced1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35d9560ebe8efbc6f342a3e3173d466a0f06c54c3a4903ef31c4d4a01010000009f2f0517ccca0e1823a2971a50f713d4e21b9436f1ae0796f23526ec0fd97f734c783bcaecd4596f2e91af6565902716314c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b07789d99b3d0124f39dc092440010000000000000f7049db5cb19d7962fed44e00f39ed8c15a11fa798de504e2865cd81f2b77fdd76c67700000000000000db3947c8dc7b1b4c4554ffdca8b75d82706ba9cbeeffbc83fb05000000000000593d60abc9b3e67d127e9d5c4c560256f3d3759dcfeb820634fd4d419e0500000005b2d5a2008a600484511b6efaad206335a3ebf6b9e01446a6285f4665a7fe37da0049f8bf4064726dc32add75e0f435f28fbeda75cf971d54a9698cf7270f420edc858176070bfff7b09413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ecbe5cb0417d33d35faee6b2d905d30dfe64d05ac37ed015494d9d10e36e603129e9a726579ac7d672cacd581b7e2fc7a5758fcfb822de1dacc357341e000c604cc34c49914f1aa198a77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e00ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d173663570d884b0cb462e0b45853673df72dc813f7454ae62d79ac48034282f03040350f886e9644179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62ae63b29fe177745448ccc92577007c12cf90da9200df6bb669d5a57dd74df817eaa92000000000001b08b3ac52db204399eae4a2f105d4544d9a3000000000000001ff2e8afd7913007fe44950233feb5303b2617668a0e45846436ad643fb999180644298458d40002a06f4853d99af16764b8e59e04d02835f803f66307fbeef5b7e97b6d0ef2c62215c259c7796a158d662b1adfae1d24e109e52378b3f1f8ee8965dedd20abc5b7a73d9501bf3f5a2ae19d7ddf8daf3691d1879e225395c0925ec1fe4ca8fd6fc11c8db3cd0d7206531366a5f6150d9d1a6eab622821378f2827fac5c7f82dad8f4ed4367c3a4f20304432f0a154147c7af7569ff2ed248dafc1aa13afe3d17c8f2f720e1a12c4cd230f3f29a390b44a3bf66b5c8fc4a026fe6ea8edf871da290c4d9457fccdc6a8f5944e47f742cfd7b0c5f5b00fc0921c6951541f2dda75be07cb0097e25e4a30000346c782264139540c5f260495abee91019e816aabc7c9b1e3862de6c6cf6d5cdead6a42b519619ff9c2f5600d95d34d50667901373f32a1fc0b7299aadbcc96958dff4a229c8a78864ea0ae3289a04249d2f790745374fea0687a32b8c9731226a085c71f6b35f8db44f30ed778ca2cd4ebb7929ff7845e9bdfba5caf2cae0fbc83999790441bc991f5c8acb6ba3deb94f52f7a74c33ab7106054a8eb839ab2ff7acbcc8f875acc552ba92df8f649598f9eba605729db380c130e00"/1247], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f8ff00000000000000000000000000ffff00000000"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)={0x0, 0xa00, 0x20}, &(0x7f0000002380)=0x18) socket$packet(0x11, 0x2, 0x300) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000ab725374020000000300000000000000f64f9ce4142bfb5bdff457c6493c4409297ed4eb5ab0a6b28a008940ae6b4898b1caadbadde6a0f298859fbe38b76ecc1a7fa89574141f689d8711be136eb4cdcd0708a642bd94079f79a9ac7059b44714a811aa6f16e377ac445418", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r5, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000380)={r8, @in={{0x2, 0x0, @broadcast}}, 0x27c0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, r10, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) 2.629379638s ago: executing program 1 (id=4026): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000)={0x900}, 0x143}, 0x48) 2.628336581s ago: executing program 4 (id=4027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x7fefb, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76, 0x2000000}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x128, 0x1170, 0x1398, 0x128, 0x1170, 0x2b0, 0x1398, 0x1398, 0x2b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [0xffffffff], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x2, 0x9, 0x7}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x43c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000480), 0x0, 0x0, 0x0, 0x9, r2}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) writev(r3, &(0x7f0000003500)=[{&(0x7f00000035c0)='4', 0x1}], 0x1) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) unshare(0x22020400) sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000000140)="c0c13fc4fa1e1732b4", 0x9}, {&(0x7f00000002c0)="ede3a88c3cb119b7d88d2e3a0f3a95cb07a632d7502f64343a31ea678a36003e53bd9645a1dfc9d9b4643b1bad3cb3e6a82408e87bab80ab41a44c82a0ae66e79cacb892abd3703919e269d1aef80c17c15180bfdb6b5d5419d4f3c5008db9e915a2ddeae6ece8dec4e9653722dc723258a8eed8e73eb0acc2d67a073b888c802c5e00587e6cdc2f9a69a6bcac1d5a47c3383511b3e311dbfbeeef5107ee6788411d5862306a866aef033e8f571c1628412e269cc3f30bc8aa727eca6eda9ccd2227f910b2e6fe94b8b9a74eeb08d07cbabefc982d3a69f0ac925033cb0f3edf2080ff465af025377821de", 0xeb}, {&(0x7f00000003c0)="43a75e039949b4d51c16de2b93c8be5719d74adf1a2723b92a1a5dda680b43942526f777dfd83eb796356e76394365683a3129dcbb4c109c0db68d64ef06e1b0348f1305bd0300d5a49378f07cd4687b44208a004ceb30a75e45a92244ca17c4c8068a36f7948feb87bec33adc8f", 0x6e}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="087ab48b0334c6f422e483c3ea8e955b42a9dda1ff800dc3fa9cae194ed429e6a995b78b4947d36da80ee49a75bf341d17d09ab3f6", 0x35}, {&(0x7f0000001a80)="966ec2fdf45e3b0597afd574d3c0ab6ee9c4e91f8f8c5a19bf8ef814f62909eb4a11ad48525a843a46badb825b0949670d787e72437070a69de1921445d39211f88d4923bb2719f0f2f81fc9ad40ba2e759aba38756f467a147200c203728e55070131e8ee1e7ee90d3e9c13bdb2a58560817dfd4425dcd92fafcd19bffaa6252b6b8f7d401ed7daa0ea4ed8533f6962d918a0dcc60352628901f8262acfb036d2ccf57f5f8aa15dbfd73b1dae567579cdefe8f39aee280809c8d768ce8e20b39bd886418759f6d41ce550c74b9d38", 0xcf}, {&(0x7f0000001b80)="15ac6d2c03306e800ec903bb9856e2405ad2f630cd71f01c71ce9776e3565c434e9e76caca331861a3e470dbd32d2a833e9737c981774251d8a61e4e1fef7a04654c25ffa375a34d35c868fad47722a9d50f2274d637fc257fc8db2914c3fcaf4b40464932d933991a136fae918265dd71e6574df1343b858a6673a58107e05c035e0574fda0ca2b1e5a4bfd3357b1b52c4c4f242aa06f170e53676f1370fdec07d2c857fe77669da806", 0xaa}, {&(0x7f0000001c40)="0a7cb73f5f16fffaf7a02447b47512c80dd13ff36be11456ff60f92c39892d6ea542b75a1228330cc0441930b93f25995276d827dc80c036509e4c49a680c39179668c6b489ef7c9befba77875321adb432fa7adfd18544435b1c52ce31b50dd4a80b6db57aca17f0c3b0b54f1e6bce7d819da57d8832ffa6660cf01504190bcff232606790fbfde8a03a025e070cf3af5205e5fda5cef03bbe3f3f35f089864bf8ffca3bedad235acef58d839fd2eeef75ca66dc09eb8d018e0d9c67e48e8ec0f60abc899146f30", 0xc8}, {&(0x7f0000001d40)="24635b421c3a904978e7a58c6b0905d539814d39751876a359f8bd407a9450a09ff11af66c1d1c9bd4bbd8a93ee92e682b057d715a5e82aa34592d4d914531411f030fc971d583fb2a83cf86a698d832388d880824c19a1a63ae93fb0449f87fc3d97a435ce440fdf0cf816ead213344dc342bce7ba053a7c115faffa9448e3b6006582548f2fbe489af6e7bd0f86ec8c1376fd84007afbe25ed1cef2fe420009d7f2384b2b6622193a25bfe04080d34317ec096f3b9a40e5ab763258cb93d9cecafa7b60989ee0b1aa16737c8e852db08f36e9182d5cea79fe73353c320a134bb3ffd41f0ff6aa4a810", 0xea}], 0x9, &(0x7f0000001f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xea, 0x0, 0x4, [0xd, 0x484, 0x1]}, @end, @timestamp_prespec={0x44, 0x1c, 0x96, 0x3, 0xd, [{@empty, 0x8}, {@multicast2, 0x4}, {@private=0xa010101, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0xa8, 0x3, 0x3, [{@rand_addr=0x64010102, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@local, 0xbf1a}, {@empty, 0x6143b21a}, {@broadcast}]}, @timestamp_prespec={0x44, 0x2c, 0xa7, 0x3, 0x7, [{@local, 0xe8}, {@rand_addr=0x64010102, 0xaa41}, {@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff7}, {@empty, 0x8057}]}, @end, @timestamp_prespec={0x44, 0x24, 0x6, 0x3, 0x6, [{@empty, 0x6}, {@local, 0x114}, {@broadcast, 0x3d11}, {@rand_addr=0x64010102, 0x3}]}, @timestamp_addr={0x44, 0x1c, 0x24, 0x1, 0x3, [{@broadcast, 0xed}, {@rand_addr=0x64010102, 0x101}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x7}]}, @generic={0x89, 0x8, "c93434b249af"}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x138}, 0x40015) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) connect$rose(r4, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x21000000, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x40, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x8, @local, 0xd}, {0xa, 0x4e24, 0x34c, @private0, 0xf6}, 0x1, {[0x3, 0x3, 0x0, 0x40b, 0x1000, 0xfffffffb, 0x58, 0x4]}}, 0x5c) socket$inet_tcp(0x2, 0x1, 0x0) 2.371309017s ago: executing program 4 (id=4029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) close(0x3) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffbeb) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.364672414s ago: executing program 0 (id=4030): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100"/20, @ANYRES32=0x1, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0004000000000c00000040000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x7, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2a931f4e5d0566d1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r11, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r11, 0x89f4, &(0x7f0000000000)) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r12 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000100)={r12}) bind$xdp(r13, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(0x3) 2.205979053s ago: executing program 4 (id=4031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x7f, 0x60, 0xfd}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044064}, 0x24008004) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000080)=""/18, 0x12}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x7f, 0x60, 0xfd}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044064}, 0x24008004) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000080)=""/18, 0x12}) (async) 2.082827993s ago: executing program 3 (id=4032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1f0, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xc0, 0x6, "7d08fc58fc4700f3465fe59962466e7741e380fd7ea50ffbb6249dfae4396c670d4d6f262dcee9653a845cda6024a323e64d79e951d245d2810df8334218da0a816a70b068f412dfded04ba3cfb2c686840d25874ac5cff5695733163a09854dceb501822922e7de96e4e6041dcc2b8a62c8b9a728e78993955b1b32e8617e23649deff7734dfc7fa8bd62bd0948773351247c01bcef4079cacd6371fad954eb164f0559f166d9649d052ac59cdb73e0f0af476aa7d75397d86499cc"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xdb, 0x6, "d782ca03211aa30d455a6367e199da34709847595cf9b85b3c2051bbbff3c67f78aba1a0a34c87b88f258d4e0284e0468a5e5c09509a3d45371596efe45a32fa64bb7945b1b5893a5a36fe69704350e6eb86e4cf32320b6599ad3581d98563dcef8504873c52447a321a819c517a75bc3fd417c4bd7922796299d2c1633fca6b6904936b9f336b4421e1df2c940d00b048d9ae6f9d49224c9ae48ac51d127759e2e21757b714168d0a28213992b3c1905bb2928163e270e529213678482af814aad42d70a4f67da63b8bfc9372aad07418bf815becc7f4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000004) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private=0xfffffffc}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb11002600000000dfc082047d465c3d4a72d169000000020100"], 0x0, 0x26, 0x0, 0x2}, 0x28) r3 = socket(0x21, 0x4, 0x107) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000001000000060000000b00744e9844302d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) accept4$llc(r3, &(0x7f00000004c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000640)=0x10, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRESDEC=r0, @ANYBLOB="0000fdff0080229600000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x444f}, 0x94) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000006c0)=@req={0x0, 0x6, 0x7, 0xfac}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000400)=0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1303}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1}}}}}}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x29, 0x6, 0x2000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4894) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0xfffffffffffffe1b, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x5, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008881}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r9, 0x8000000000000002, {0x1, 0xf0}, 0xfd}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r4}, 0x8) close(0x4) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000000406050000000000000000000a0000080500010007000000050015000700000005000100070000000900020073797a31"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000804) 2.065191027s ago: executing program 0 (id=4033): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) close(r2) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x4}, 0x94) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000380)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000480)="746b9120a32aaf78043a9b07000000000000003c443fbdb0a39f311bb3898393be8bb50aed8baeb1c7256c1ce43927260e428999a79fbc41b3bfeb605ff7cacb0d459a9b1ba876741a9091215d15f18b1e3f4443de652c28644da7abc0ef8d38a71939ca9fa5a35148fcf7b51a2e15ee1ae4f82a98ca4429af39591f9118a381becddcce9b3b5280726f35b069", 0x8d}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r3, r4, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0xc9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.863922528s ago: executing program 2 (id=4034): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e, 0x800) bind$unix(r5, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x141, 0x1, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r7, &(0x7f0000000a40)=[{&(0x7f0000000080)=""/60, 0x3c}], 0x1, 0x0, 0x6cb) close(r1) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r8, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) 1.774658022s ago: executing program 4 (id=4035): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async, rerun: 32) sendto$inet(r0, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet6(0x10, 0x2, 0x4) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) close(0x3) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f00000004c0)=0x10) setsockopt(r3, 0x84, 0x7f, 0x0, 0x0) (async) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000080)={r4, 0x2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x4, 0x8, 0x208, 0xd, 0x81, 0x7, 0x6d4, 0x40, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={r5, 0x8}, &(0x7f0000000100)=0x8) (async) r6 = socket$inet6(0xa, 0x5, 0x0) (async) r7 = socket$inet(0x2, 0x1, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) (async) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 1.773910904s ago: executing program 3 (id=4036): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0xdb97e000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007}, [@printk={@i, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94) 1.596561212s ago: executing program 1 (id=4037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r3, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r5, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2c8, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc7, 0x3, "2e11287042865866b0a2af99f33e7e0df8541537f64d7841fa2234506d0cc2dc36377611e73632d133482cd28a4ab13ad74ade44d63a6027d7b1db25a47c36711d6a95c806727d506cda8a2a157aebc976831e19449c1010f09dce9b808669c9af11789680ad7faa5ee52c9cbf7345fe2fbcc2c264ac356fbe1a21a56c9d5f1866ba87989c9576786f31cfc88953796267ea9753860bd8172273a47152545ef7ca948f3de6d450682522d462a242f46e278467b05172414ba5470965af4c906b3788bf"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "6bdc7fe6f17b6451cb60add67eb8de2ce23564e37ca3"}}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9f7}]}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x7, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @mcast2, 0xffffffff}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xa05, @loopback, 0xfffffffe}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4bdc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd11}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd284}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400000000010104210000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414aa0c0002800500010000000000080007400000000020000680080001"], 0x84}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655125c}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000040)) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$can_j1939(r3, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r5, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) (async) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2c8, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc7, 0x3, "2e11287042865866b0a2af99f33e7e0df8541537f64d7841fa2234506d0cc2dc36377611e73632d133482cd28a4ab13ad74ade44d63a6027d7b1db25a47c36711d6a95c806727d506cda8a2a157aebc976831e19449c1010f09dce9b808669c9af11789680ad7faa5ee52c9cbf7345fe2fbcc2c264ac356fbe1a21a56c9d5f1866ba87989c9576786f31cfc88953796267ea9753860bd8172273a47152545ef7ca948f3de6d450682522d462a242f46e278467b05172414ba5470965af4c906b3788bf"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "6bdc7fe6f17b6451cb60add67eb8de2ce23564e37ca3"}}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9f7}]}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x7, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @mcast2, 0xffffffff}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xa05, @loopback, 0xfffffffe}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4bdc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd11}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd284}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400000000010104210000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414aa0c0002800500010000000000080007400000000020000680080001"], 0x84}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655125c}, 0x0) (async) 1.591654715s ago: executing program 4 (id=4038): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x405, 0x70bd2b, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7964, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0x8918, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0}, 0x48814) 1.523332696s ago: executing program 2 (id=4039): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x72, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x94) 1.522873158s ago: executing program 3 (id=4040): close(0xffffffffffffffff) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x3e8, 0xff6c, 0x0, &(0x7f0000000280)="4d6e2c45a2035a5c298ee68876d60934e3b7aaf7c62c98312586dd87", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r1 = socket$inet6(0xa, 0x1, 0x6) (async) close(0x3) r2 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) (rerun: 64) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f0000000180)={0xa, 0x4e24, 0x80000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8001}}], 0x18}, 0x440e0) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="15e90394"], 0xb) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x94) 1.33303914s ago: executing program 2 (id=4041): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r4], 0x2c}}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036c12e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x90) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003500010326bd7000fcffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x41882}, 0x4000) 1.281386328s ago: executing program 1 (id=4042): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x26, 0x2, 0x10001) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f000000c180)=[{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000c00)="ce6d1d368531f4aa", 0x8}], 0x1, &(0x7f0000001d80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008080}], 0x1, 0x8045) (async) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) recvmmsg(r4, &(0x7f0000003200)=[{{&(0x7f0000000380), 0x80, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/211, 0xd3}, {&(0x7f00000007c0)=""/251, 0xfb}], 0x2, &(0x7f0000000c40)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000001c40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003080)=[{&(0x7f0000001cc0)=""/80, 0x50}, {&(0x7f0000001dc0)=""/50, 0x32}, {&(0x7f0000001e00)=""/197, 0xc5}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/128, 0x80}, {&(0x7f0000002f80)=""/42, 0x2a}, {&(0x7f0000002fc0)=""/129, 0x81}], 0x7, &(0x7f0000003100)=""/238, 0xee}, 0x3}], 0x2, 0x40000000, &(0x7f0000003280)) (async) recvmmsg(r3, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000008c0)=""/173, 0xad}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe0000010000000084001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00000008000400", @ANYRES32, @ANYBLOB='\f\x00\t'], 0xbc}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) sendto$inet6(r5, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000002c0)={0x9, 0x8, 0x7, 0x5}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000feffffff18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000048500000086000000b7080000000000007baaf8ff00000000b5080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000f"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.105966593s ago: executing program 1 (id=4043): socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000010000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000010000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) close(r5) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0x3, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0x3, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x8000, 0x8, 0x5, 0xfffffffd, 0x3, 0xfffffffa, 0xc6e1, 0x101}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b002c, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) 1.10530337s ago: executing program 3 (id=4044): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x10, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xa00}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_PRIORITY={0x8, 0x6, 0x57d}, @RTA_MARK={0x8}]}, 0x34}}, 0x20040810) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 659.72802ms ago: executing program 3 (id=4045): recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000001a00), 0x0, 0x0, 0xffffffffffffffb2}, 0x2}], 0x1, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket$can_raw(0x1d, 0x3, 0x1) write$tcp_mem(r5, &(0x7f000000c180)={0x1000, 0x20, 0xc1}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000000)={r10, 0x6, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000002c0)={r10, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x6b, @empty, 0x5}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x82, &(0x7f0000000180)={r11, 0x8000}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0xa4, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x800}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x47}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x6, 0x3, 0x0, 0xfffffffb, 0x5ee, 0x7f, 0x6, 0x2684}}}}]}, 0xa4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0xf, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r13) getsockname$packet(r13, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xfff1, 0x5}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) 522.324978ms ago: executing program 0 (id=4046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b000000000000000005000000080003"], 0x1c}}, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010102, 0x4e25, 0x0, 'sed\x00', 0x3e, 0x3, 0x1e}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010102, 0x4e25, 0x0, 'sed\x00', 0x3e, 0x3, 0x1e}, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x2c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffffffff}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x100}]}, 0x2c}}, 0x40000) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x2c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffffffff}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x100}]}, 0x2c}}, 0x40000) 522.001848ms ago: executing program 1 (id=4047): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000090000000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000dcd707789439ec780000ffab69aad567c4c007801516c022bb119fad8dddbac9a238ad057b3be0fa8c96cb68020039bcc3106e407fd344c96813597e8fdaa66d86ef1b0e6fcbf74686fcb77a26885d2d59833853a7d0d937e4d9d7f17bf8da87a26557caa0b9c8aad5e8c71edd840300a48a0f517584aad6bd7e7c8ddd7824a1bf000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10) (async) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x8010, 0xffffffffffffffff, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa88a8320081003c0008004500002040000000032f9078ac14140ae05d5d08"], 0x36) (async) write$tun(r2, &(0x7f0000000180)={@val={0x0, 0x6005}, @val={0x1, 0x0, 0x392a, 0x101, 0x9, 0x5}, @ipv4=@igmp={{0x5, 0x4, 0x1, 0x21, 0x4e, 0x67, 0x0, 0x0, 0x2, 0x0, @loopback, @multicast2}, {0x17, 0x9, 0x0, @multicast2, "87e421c624ebcf45e02467459d3e56183ff8eabb8d477f17ae508bb4f97008e14b0545e3299065c21e812defd5372d945ca8"}}}, 0x5c) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) (async) getsockopt$inet6_opts(r4, 0x29, 0x1b, &(0x7f0000000200)=""/128, &(0x7f0000000280)=0x80) (async) close(0x3) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000300)=@int=0x5, 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=@tcp6, 0x2}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 467.7476ms ago: executing program 2 (id=4048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a840300000c0a010300000000000000000a0000060900020073797a31000000000900010073797a3100000000580303803c0200800c00018006000100d103000010000780090001006c617374"], 0x3ac}, 0x1, 0x0, 0x0, 0x8814}, 0x50) 363.251898ms ago: executing program 4 (id=4049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="09000000040000000bde0217220c946a00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYRES8=r1], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) getsockopt$inet6_tcp_int(r5, 0x6, 0x5, 0x0, &(0x7f00000009c0)) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="00f6146800"/20], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xfff2}, {0x0, 0xfff1}, {0x0, 0xd}}}, 0x24}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x25, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0xfffe}, 0x90) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) 95.331861ms ago: executing program 1 (id=4050): r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x6, 0x4) close(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'erspan0\x00', r1, 0x20, 0x7800, 0x1, 0x5, {{0x28, 0x4, 0x2, 0x3b, 0xa0, 0x68, 0x0, 0x81, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x1b, 0x71, [@loopback, @dev={0xac, 0x14, 0x14, 0x38}, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2a}, @local]}, @timestamp_prespec={0x44, 0xc, 0x6, 0x3, 0x4, [{@multicast1, 0x3}]}, @end, @timestamp={0x44, 0x10, 0xeb, 0x0, 0x0, [0x401, 0x7, 0xfffffffe]}, @timestamp_prespec={0x44, 0xc, 0x46, 0x3, 0xa, [{@empty, 0x7}]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0xdc, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x7, 0xc, "fb1f9653aefec9ce9e3a"}, @cipso={0x86, 0x25, 0x3, [{0x1, 0x4, "1777"}, {0x2, 0xe, "7320e798567d5ae555975557"}, {0x0, 0xd, "f3624129085867cac6730f"}]}, @ra={0x94, 0x4}]}}}}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={@local, 0x1, 0x0, 0x50, 0x0, [{@initdev}, {@empty}, {@loopback}, {}, {}]}}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r5, 0x40106e80, &(0x7f0000000380)={0xea, 0x1}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) readv(r7, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/236, 0xec}, {&(0x7f0000000540)=""/121, 0x79}], 0x3) sendmmsg$inet6(r4, &(0x7f00000007c0)=[{{&(0x7f0000000600)={0xa, 0x4e23, 0x80, @loopback, 0x2}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000640)="37fb57a6aa29401a1c675fe7d80ee7439243d03b2bb3966f5d33c862e7724b4106acaba81c693c04a80a8adc7ce145db62c20c8b24fc6d5692dbc5766141fd", 0x3f}, {&(0x7f0000000680)="60769ec50c2ee2ff2f087e7afcbb603a73839868d39f66a7f2", 0x19}], 0x2, &(0x7f0000000700)=[@rthdr={{0x88, 0x29, 0x39, {0x32, 0xe, 0x2, 0x9, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0xc}, @mcast2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fff}}], 0xa0}}], 0x1, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000800)=0x1, 0x4) r8 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000840), 0x10) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f0000000980)={'ip_vti0\x00', r1, 0xa0, 0x7, 0x0, 0x4, {{0x27, 0x4, 0x1, 0x1f, 0x9c, 0x64, 0x0, 0x8, 0x17, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp_prespec={0x44, 0xc, 0x29, 0x3, 0xb, [{@broadcast, 0x4}]}, @generic={0xc1, 0xa, "3a5912ad268671ee"}, @cipso={0x86, 0x2d, 0x0, [{0x1, 0x9, "b36cbbb7293be7"}, {0x2, 0xa, "8e518c7b3b14ddeb"}, {0x1bd3cc8dafa5a41b, 0x12, "249b2415e3f840f52be5a10aad6dd3e7"}, {0x1, 0x2}]}, @cipso={0x86, 0x42, 0x3, [{0x5, 0xd, "a86715bd5258ae7be8f180"}, {0x1, 0xe, "f2130523ee42003962080021"}, {0x5, 0x11, "286ba0f141b5380645934f9faef983"}, {0x6, 0xe, "e62affbcc2dc4dd8338b6353"}, {0x1, 0x2}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000a80)={'syztnl0\x00', r1, 0x29, 0x7, 0xb238, 0xc6, {{0x46, 0x4, 0x2, 0x3b, 0x118, 0x64, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x55, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x20}, 0x6}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0xe0, 0x3, 0xf, [{@private=0xa010101, 0x2}, {@multicast2, 0x40}, {@loopback, 0xfb}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x8}, {@private=0xa010100, 0xb}]}, @timestamp={0x44, 0x24, 0xa3, 0x0, 0x5, [0x3, 0x9, 0x1, 0xff, 0x3, 0x2, 0x5, 0x3]}, @timestamp_addr={0x44, 0x34, 0xee, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x81}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@multicast1, 0xce}, {@remote, 0x8}, {@private=0xa010100, 0xfffffff3}, {@broadcast, 0x4}]}, @timestamp_prespec={0x44, 0x3c, 0x39, 0x3, 0x3, [{@multicast1, 0x9282}, {@rand_addr=0x64010102, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0xa88b}, {@loopback, 0xbcb0}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x4}, {@local, 0x1}, {@private=0xa010101, 0x6a}]}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x20, 0x3, [{0x6, 0xd, "38132be823a4a1f55859d0"}, {0x5, 0x6, "899e7bfc"}, {0x6, 0x7, "fb8d0123f2"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000c40)={@empty, @dev, 0x0}, &(0x7f0000000c80)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000f40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x28040108}, 0xc, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x230, r9, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x850}, 0x20000000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001040)={'dvmrp1\x00', &(0x7f0000000f80)=@ethtool_rx_ntuple={0x35, {0xb, @tcp_ip4_spec={@multicast2, @rand_addr=0x64010102, 0x4e22, 0x4e20, 0x9d}, @usr_ip4_spec={@remote, @empty, 0x4, 0xe, 0x1, 0x4}, 0x7, 0x1000, 0x8000000000000000, 0xc9, 0xfffffffffffffffe}}}) r14 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r14, 0x119, 0x1, &(0x7f0000001080)=0xdb, 0x4) splice(r2, &(0x7f00000010c0)=0x3, r7, &(0x7f0000001100)=0x4, 0x5, 0x1) 81.905997ms ago: executing program 2 (id=4051): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x82e, 0x805, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x40005, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 0s ago: executing program 3 (id=4052): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) vmsplice(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000340)="92eafd52cb1523c430af57280603cb5aa57c4a8f266bfc5533580a3612ab43ffee422d668d32b01dfe12f4c8c67eebd990f76ce32d715c94e1193c0cd3f09c7151f228c5152f4debaa27694e523e9dc2e132b205ac2da6a39bbdfd4f533109569851e1393c5be42431646b5ca34f51b352fcd9eb22001319528a859c2195660c4db10ad19acf95b2283d43bcc709e4432399", 0x92}], 0x1, 0x1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}, 0x1, 0x0, 0x0, 0x24000880}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x8807, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000500)=0x6, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x1, 0x9}, {0x0, 0x9}, {0xf, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r3}) getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="643805009e400900140035006d6163766c616e31000000000000000008000a00", @ANYRES32=r12, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x416c}, 0x8000) kernel console output (not intermixed with test programs): TASK> [ 473.932268][T14937] dump_stack_lvl+0xe8/0x150 [ 473.932303][T14937] should_fail_ex+0x412/0x560 [ 473.933428][T14937] _copy_from_iter+0x1d3/0x1670 [ 473.933468][T14937] ? rcu_is_watching+0x15/0xb0 [ 473.933503][T14937] ? __pfx__copy_from_iter+0x10/0x10 [ 473.933542][T14937] ? netlink_sendmsg+0x650/0xb40 [ 473.933566][T14937] ? skb_put+0x11b/0x210 [ 473.933597][T14937] netlink_sendmsg+0x6c0/0xb40 [ 473.933636][T14937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.933669][T14937] ? aa_sock_msg_perm+0xf1/0x1b0 [ 473.933698][T14937] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.933733][T14937] ____sys_sendmsg+0x972/0x9f0 [ 473.933763][T14937] ? __might_fault+0xaf/0x130 [ 473.933799][T14937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.933839][T14937] ? import_iovec+0x73/0xa0 [ 473.933864][T14937] ___sys_sendmsg+0x2a5/0x360 [ 473.933893][T14937] ? __lock_acquire+0x6b5/0x2cf0 [ 473.933925][T14937] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.933995][T14937] ? __fget_files+0x2a/0x420 [ 473.934020][T14937] ? __fget_files+0x3a0/0x420 [ 473.934056][T14937] __x64_sys_sendmsg+0x1bd/0x2a0 [ 473.934090][T14937] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.934132][T14937] ? __pfx_ksys_write+0x10/0x10 [ 473.934173][T14937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.934195][T14937] do_syscall_64+0x15f/0xf80 [ 473.934220][T14937] ? trace_irq_disable+0x3b/0x140 [ 473.934243][T14937] ? clear_bhb_loop+0x40/0x90 [ 473.934269][T14937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.934290][T14937] RIP: 0033:0x7f58a459c819 [ 473.934311][T14937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.934338][T14937] RSP: 002b:00007f58a551d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.934363][T14937] RAX: ffffffffffffffda RBX: 00007f58a4815fa0 RCX: 00007f58a459c819 [ 473.934378][T14937] RDX: 0000000020000010 RSI: 0000200000000540 RDI: 0000000000000003 [ 473.934392][T14937] RBP: 00007f58a551d090 R08: 0000000000000000 R09: 0000000000000000 [ 473.934404][T14937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.934416][T14937] R13: 00007f58a4816038 R14: 00007f58a4815fa0 R15: 00007ffca87b84e8 [ 473.934451][T14937] [ 474.353185][T14947] tap0: tun_chr_ioctl cmd 1074025676 [ 474.362135][T14947] tap0: owner set to 0 [ 474.505589][T14960] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2573'. [ 474.743873][T14967] smc: net device wlan0 applied user defined pnetid SYZ0 [ 474.762990][T14968] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2576'. [ 474.808001][T14968] netlink: 'syz.4.2576': attribute type 1 has an invalid length. [ 474.839055][T14982] No such timeout policy "syz1" [ 474.874590][T14968] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2576'. [ 474.980066][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2582'. [ 474.991036][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2582'. [ 475.003089][T14988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2582'. [ 475.003720][T14984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2581'. [ 475.013257][T14988] bridge0: entered allmulticast mode [ 475.303626][T14999] tap0: tun_chr_ioctl cmd 1074025676 [ 475.309587][T14999] tap0: owner set to 0 [ 475.538671][T15005] netlink: 'syz.2.2590': attribute type 1 has an invalid length. [ 475.607804][T15005] team0: Port device syz_tun added [ 475.672107][T15007] netlink: 'syz.4.2591': attribute type 3 has an invalid length. [ 475.874490][T15015] wg1 speed is unknown, defaulting to 1000 [ 475.907371][T15015] lo speed is unknown, defaulting to 1000 [ 476.116614][T15029] No such timeout policy "syz1" [ 476.122405][T15026] tap0: tun_chr_ioctl cmd 1074025676 [ 476.128521][T15026] tap0: owner set to 0 [ 476.401054][T15041] netlink: 'syz.2.2606': attribute type 3 has an invalid length. [ 477.082618][T15065] No such timeout policy "syz1" [ 477.836436][T15091] nbd: socks must be embedded in a SOCK_ITEM attr [ 477.844618][T15095] nbd: nbd64 already in use [ 477.853731][T14663] block nbd64: NBD_DISCONNECT [ 478.187388][T15116] syzkaller0: entered promiscuous mode [ 478.230447][T15116] syzkaller0: entered allmulticast mode [ 478.517858][T14663] udevd[14663]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 478.779836][T15133] tap0: tun_chr_ioctl cmd 1074025676 [ 478.785981][T15133] tap0: owner set to 0 [ 479.019685][T15154] __nla_validate_parse: 14 callbacks suppressed [ 479.019712][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 479.121000][T15158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2642'. [ 479.170847][T15161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.435880][T15173] netlink: 'syz.2.2649': attribute type 3 has an invalid length. [ 479.464148][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'. [ 479.645019][T15184] Timeout policy `syz1' can only be used by L3 protocol number 1536 [ 479.700187][T15187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2652'. [ 479.906499][T15191] SET target dimension over the limit! [ 479.982381][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'. [ 480.165125][T15195] netlink: 'syz.4.2647': attribute type 2 has an invalid length. [ 480.179662][T15195] netlink: 'syz.4.2647': attribute type 2 has an invalid length. [ 480.219653][T15172] macsec1: entered promiscuous mode [ 480.549921][T15206] wg1 speed is unknown, defaulting to 1000 [ 480.572706][T15206] lo speed is unknown, defaulting to 1000 [ 480.737066][T15210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2659'. [ 480.899867][T15210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2659'. [ 481.134570][T15223] sctp: [Deprecated]: syz.0.2662 (pid 15223) Use of int in maxseg socket option. [ 481.134570][T15223] Use struct sctp_assoc_value instead [ 481.159996][T15222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2661'. [ 481.455050][T15226] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2663'. [ 482.034254][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2672'. [ 482.256331][T15261] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 482.813065][T15275] wg1 speed is unknown, defaulting to 1000 [ 482.829911][T15275] lo speed is unknown, defaulting to 1000 [ 483.045570][T15281] netlink: 'syz.1.2682': attribute type 14 has an invalid length. [ 483.089134][T15281] netlink: 'syz.1.2682': attribute type 13 has an invalid length. [ 483.370386][T15286] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 484.073179][T15317] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 484.252608][T15317] bond14 (unregistering): Released all slaves [ 484.292566][T15322] tap0: tun_chr_ioctl cmd 1074025676 [ 484.298281][T15322] tap0: owner set to 0 [ 484.475901][T15328] No such timeout policy "syz1" [ 484.800889][T15338] __nla_validate_parse: 11 callbacks suppressed [ 484.800915][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2702'. [ 485.049496][T15348] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2706'. [ 485.049541][T15346] netlink: 'syz.4.2707': attribute type 21 has an invalid length. [ 485.049561][T15346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2707'. [ 485.194962][T15354] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 485.295929][T15361] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2708'. [ 485.309579][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2708'. [ 485.435443][T15367] netlink: 'syz.1.2711': attribute type 5 has an invalid length. [ 486.428801][T15385] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2716'. [ 486.557633][T15389] netlink: 'syz.1.2719': attribute type 13 has an invalid length. [ 486.923625][T15405] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2724'. [ 486.954410][T15406] ip6gre0: Caught tx_queue_len zero misconfig [ 486.965916][T15406] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 486.980648][T15408] tap0: tun_chr_ioctl cmd 1074025676 [ 487.001486][T15408] tap0: owner set to 0 [ 487.078471][T15410] wg1 speed is unknown, defaulting to 1000 [ 487.101831][T15410] lo speed is unknown, defaulting to 1000 [ 487.291288][T15420] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2730'. [ 487.361866][T15420] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2730'. [ 488.035725][T15441] netlink: 'syz.2.2737': attribute type 12 has an invalid length. [ 488.063575][T15441] netlink: 'syz.2.2737': attribute type 29 has an invalid length. [ 488.092605][T15441] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2737'. [ 488.143939][T15441] netlink: 'syz.2.2737': attribute type 1 has an invalid length. [ 488.392200][T15455] netlink: 'syz.0.2741': attribute type 2 has an invalid length. [ 488.938213][T15480] syzkaller1: entered promiscuous mode [ 488.952700][T15480] syzkaller1: entered allmulticast mode [ 489.358360][T15496] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 489.381894][T15496] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 489.417556][T15499] ip6tnl0: Caught tx_queue_len zero misconfig [ 489.602477][T15507] wg1 speed is unknown, defaulting to 1000 [ 489.650821][T15507] lo speed is unknown, defaulting to 1000 [ 489.725902][T15518] netlink: 'syz.2.2758': attribute type 4 has an invalid length. [ 490.291194][T15532] __nla_validate_parse: 2 callbacks suppressed [ 490.291216][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2763'. [ 490.378669][T15535] No such timeout policy "syz1" [ 490.782798][T15553] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 490.872753][T15556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2771'. [ 490.909089][T15566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2773'. [ 490.999895][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2775'. [ 491.011608][T15562] wg1 speed is unknown, defaulting to 1000 [ 491.092204][T15569] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 491.176812][T15562] lo speed is unknown, defaulting to 1000 [ 491.349885][T15581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2777'. [ 491.393468][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2777'. [ 491.415915][T15585] syzkaller0: entered promiscuous mode [ 491.432578][T15585] syzkaller0: entered allmulticast mode [ 491.454897][T15577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.912573][T15612] netlink: 'syz.0.2786': attribute type 4 has an invalid length. [ 491.998906][T15612] netlink: 'syz.0.2786': attribute type 4 has an invalid length. [ 492.176178][T15619] netlink: 'syz.0.2786': attribute type 4 has an invalid length. [ 492.476408][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2792'. [ 492.511664][T15636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 492.519098][T15636] IPv6: NLM_F_CREATE should be set when creating new route [ 492.534157][T15630] syzkaller1: entered promiscuous mode [ 492.545440][T15630] syzkaller1: entered allmulticast mode [ 492.624317][T15642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.861650][T15655] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2797'. [ 492.884846][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2797'. [ 492.911692][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2797'. [ 493.006436][T15657] tap0: tun_chr_ioctl cmd 1074025676 [ 493.029669][T15657] tap0: owner set to 0 [ 493.401640][T15677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 493.977709][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 493.992294][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 494.003412][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 494.020711][T15692] tap0: tun_chr_ioctl cmd 1074025676 [ 494.028002][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 494.037269][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 494.047519][T15692] tap0: owner set to 0 [ 494.105280][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 494.119007][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 494.129774][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 494.154669][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 494.166882][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 494.346396][T15704] No such timeout policy "syz1" [ 494.477808][ T5830] syz_tun (unregistering): left allmulticast mode [ 494.513281][ T5830] team0: Port device syz_tun removed [ 494.544043][T15709] ipt_ECN: cannot use operation on non-tcp rule [ 494.601780][T15713] netlink: 'syz.4.2817': attribute type 1 has an invalid length. [ 494.656875][ T130] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.714295][T15691] wg1 speed is unknown, defaulting to 1000 [ 494.902012][T15709] bond6: (slave bridge6): Enslaving as a backup interface with an up link [ 494.932356][T15714] macvlan2: entered promiscuous mode [ 494.942524][T15714] macvlan2: entered allmulticast mode [ 494.950289][T15714] bond6: entered promiscuous mode [ 494.955613][T15714] bridge6: entered promiscuous mode [ 494.971400][T15714] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 494.981377][T15714] bond6: left promiscuous mode [ 494.993313][T15714] bridge6: left promiscuous mode [ 495.033291][T15691] lo speed is unknown, defaulting to 1000 [ 495.057638][ T130] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.219985][ T130] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.325058][T15723] __nla_validate_parse: 5 callbacks suppressed [ 495.325080][T15723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2821'. [ 495.360988][ T130] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.822404][T15749] tap0: tun_chr_ioctl cmd 1074025676 [ 495.855102][T15749] tap0: owner set to 0 [ 495.906965][T15756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'. [ 495.993551][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2830'. [ 496.011897][ T1094] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.021396][T15691] chnl_net:caif_netlink_parms(): no params data found [ 496.089350][T15751] wg1 speed is unknown, defaulting to 1000 [ 496.118821][T15758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2830'. [ 496.177990][T15751] lo speed is unknown, defaulting to 1000 [ 496.179148][ T1094] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.245394][ T5831] Bluetooth: hci5: command tx timeout [ 496.351786][T15763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2832'. [ 496.412383][ T130] hsr0: left allmulticast mode [ 496.419174][ T130] hsr_slave_0: left allmulticast mode [ 496.433625][ T130] hsr_slave_1: left allmulticast mode [ 496.452243][ T130] bridge0: port 3(hsr0) entered disabled state [ 496.471730][T15766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2832'. [ 496.485893][ T130] bridge_slave_1: left allmulticast mode [ 496.502242][ T130] bridge_slave_1: left promiscuous mode [ 496.518483][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.543038][ T130] bridge_slave_0: left allmulticast mode [ 496.561254][ T130] bridge_slave_0: left promiscuous mode [ 496.573976][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.651283][ T130] dvmrp1: left allmulticast mode [ 497.077237][ T130] bond7 (unregistering): (slave gretap1): Releasing active interface [ 497.396014][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.407970][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.418288][ T130] bond0 (unregistering): Released all slaves [ 497.432542][ T130] bond1 (unregistering): (slave veth3): Releasing active interface [ 497.441523][ T130] batadv1: entered promiscuous mode [ 497.450131][ T130] bond1 (unregistering): (slave batadv1): Releasing active interface [ 497.460956][ T130] bond1 (unregistering): Released all slaves [ 497.481662][ T130] bond2 (unregistering): Released all slaves [ 497.497583][ T130] bond3 (unregistering): Released all slaves [ 497.515523][ T130] bond4 (unregistering): Released all slaves [ 497.535370][ T130] bond5 (unregistering): Released all slaves [ 497.553957][ T130] bond6 (unregistering): (slave macvlan2): Releasing backup interface [ 497.563786][ T130] veth0_to_bond: left allmulticast mode [ 497.574438][ T130] bond6 (unregistering): Released all slaves [ 497.591630][ T130] bond7 (unregistering): Released all slaves [ 497.608147][ T130] bond8 (unregistering): Released all slaves [ 497.638794][T11096] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.647418][T11096] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.665930][T15763] macvlan2: entered allmulticast mode [ 497.705239][T15777] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 497.856133][T15781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2839'. [ 497.949917][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2841'. [ 497.962999][ T130] m1Ie5nè‹Ò: left promiscuous mode [ 498.068581][T15783] tap0: tun_chr_ioctl cmd 1074025676 [ 498.095916][T15783] tap0: owner set to 0 [ 498.136087][T15691] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.144564][T15691] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.154128][T15691] bridge_slave_0: entered allmulticast mode [ 498.163414][T15691] bridge_slave_0: entered promiscuous mode [ 498.173873][ T130] tipc: Disabling bearer [ 498.181337][ T130] tipc: Left network mode [ 498.198381][T15691] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.214456][T15691] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.246096][T15691] bridge_slave_1: entered allmulticast mode [ 498.256059][T15691] bridge_slave_1: entered promiscuous mode [ 498.324444][ T5831] Bluetooth: hci5: command tx timeout [ 498.354058][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 498.426518][T15691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.484085][T15691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.693651][T15691] team0: Port device team_slave_0 added [ 498.727703][T15691] team0: Port device team_slave_1 added [ 498.920194][T15691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.924416][T15813] Timeout policy `syz1' can only be used by L3 protocol number 1536 [ 498.943288][T15691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.983603][T15691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.048468][T15691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.061504][T15691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.127258][T15691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.292776][T15815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2849'. [ 499.698234][T15691] hsr_slave_0: entered promiscuous mode [ 499.733084][T15691] hsr_slave_1: entered promiscuous mode [ 499.766708][T15691] debugfs: 'hsr0' already exists in 'hsr' [ 499.786318][T15691] Cannot create hsr debugfs directory [ 500.117819][T15842] syzkaller1: entered promiscuous mode [ 500.132883][T15842] syzkaller1: entered allmulticast mode [ 500.198070][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 500.205639][T15857] tap0: tun_chr_ioctl cmd 1074025676 [ 500.212103][T15857] tap0: owner set to 0 [ 500.316896][T15867] netlink: 'syz.1.2859': attribute type 1 has an invalid length. [ 500.399359][ T5831] Bluetooth: hci5: command tx timeout [ 500.433009][T15867] 8021q: adding VLAN 0 to HW filter on device bond20 [ 500.992423][ T130] hsr_slave_0: left promiscuous mode [ 501.024551][ T130] hsr_slave_1: left promiscuous mode [ 501.038691][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.062006][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.132062][ T130] team0 (unregistering): Port device 76žÿ removed [ 502.164261][ T130] team0 (unregistering): Port device team_slave_0 removed [ 502.434671][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 502.451531][T15934] tap0: tun_chr_ioctl cmd 1074025676 [ 502.468318][T15934] tap0: owner set to 0 [ 502.482658][ T5831] Bluetooth: hci5: command tx timeout [ 502.615105][T15691] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.871830][T15691] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.936016][T15954] netlink: 'syz.0.2876': attribute type 1 has an invalid length. [ 502.960314][T15954] netlink: 'syz.0.2876': attribute type 4 has an invalid length. [ 503.003867][T15954] __nla_validate_parse: 2 callbacks suppressed [ 503.003888][T15954] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2876'. [ 503.218845][T15972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2880'. [ 503.411413][T15691] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.586821][ T130] IPVS: stop unused estimator thread 0... [ 503.813615][T15691] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.864064][T15999] Timeout policy `syz1' can only be used by L3 protocol number 1536 [ 504.721317][T16022] wg1 speed is unknown, defaulting to 1000 [ 504.744726][T15691] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 504.825002][T15691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 504.849654][T16022] lo speed is unknown, defaulting to 1000 [ 504.850323][T15691] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 504.881948][T16034] No such timeout policy "syz1" [ 504.891628][T15691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.911311][T15691] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 504.954460][T15691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.024131][T15691] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 505.084137][T15691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.148575][T16047] Timeout policy `syz1' can only be used by L3 protocol number 1536 [ 505.191517][T16057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2900'. [ 505.430401][T15691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.492227][T15691] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.529189][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.536584][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.672140][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 505.782584][T16082] tipc: Can't bind to reserved service type 2 [ 505.877700][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.885030][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.190443][T16095] bond21: option lacp_active: invalid value (8) [ 506.287298][T16095] bond21 (unregistering): Released all slaves [ 506.432767][T16116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'. [ 506.489183][T16116] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2911'. [ 506.955850][T16126] netlink: 'syz.4.2912': attribute type 2 has an invalid length. [ 507.033937][T16126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.588680][T16146] vcan0: tx drop: invalid sa for name 0x2000000000000000 [ 507.629580][T15691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.876326][T15691] veth0_vlan: entered promiscuous mode [ 507.926784][T15691] veth1_vlan: entered promiscuous mode [ 507.974338][T16164] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2920'. [ 508.082299][T15691] veth0_macvtap: entered promiscuous mode [ 508.113388][T15691] veth1_macvtap: entered promiscuous mode [ 508.213599][T15691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.277681][T15691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.351153][T11092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.390655][T11092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.429787][T11092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.489365][T11092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.554241][T16186] atomic_op ffff8880550a8198 conn xmit_atomic 0000000000000000 [ 508.817288][T16195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2929'. [ 508.885343][T16195] macvlan2: entered allmulticast mode [ 508.931469][T16200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2929'. [ 509.004244][T11096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.047016][T11096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.113011][T16201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.183427][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.216921][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.297547][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2933'. [ 509.545324][T16215] 8021q: adding VLAN 0 to HW filter on device .` [ 509.594918][T16215] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.635418][T16215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.248042][T16249] netlink: 'syz.3.2939': attribute type 10 has an invalid length. [ 510.333657][T16249] team0: Port device dummy0 added [ 510.358384][T16249] veth0: entered promiscuous mode [ 510.388825][T16249] bond0: entered promiscuous mode [ 510.418636][T16249] veth11: entered promiscuous mode [ 510.446155][T16249] batadv4: entered promiscuous mode [ 510.536641][T16257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2941'. [ 510.643499][T16261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2941'. [ 510.656008][T16257] macvlan2: entered allmulticast mode [ 510.731365][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2942'. [ 510.745101][T16248] bond0: left promiscuous mode [ 510.757924][T16248] veth11: left promiscuous mode [ 510.775345][T16248] batadv4: left promiscuous mode [ 510.786471][T16248] veth0: left promiscuous mode [ 511.232314][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2945'. [ 511.494137][T16278] wg1 speed is unknown, defaulting to 1000 [ 511.587301][T16278] lo speed is unknown, defaulting to 1000 [ 511.610133][T16279] wg1 speed is unknown, defaulting to 1000 [ 511.634100][T16279] lo speed is unknown, defaulting to 1000 [ 511.868671][T16294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2950'. [ 513.253107][T16359] openvswitch: netlink: EtherType 50a is less than min 600 [ 513.286294][T16359] ip6tnl0: Caught tx_queue_len zero misconfig [ 513.377426][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2963'. [ 513.409354][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2963'. [ 514.007982][T16380] wg1 speed is unknown, defaulting to 1000 [ 514.045104][T16383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2969'. [ 514.082496][T16385] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 514.131585][T16380] lo speed is unknown, defaulting to 1000 [ 514.854824][T16405] netlink: 'syz.0.2977': attribute type 21 has an invalid length. [ 514.884810][T16405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2977'. [ 515.014257][T16413] atomic_op ffff888067755198 conn xmit_atomic 0000000000000000 [ 515.725974][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 515.737547][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 515.760233][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 515.775396][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 515.784155][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 515.907826][T16434] wg1 speed is unknown, defaulting to 1000 [ 515.958261][T16434] lo speed is unknown, defaulting to 1000 [ 516.038777][T16451] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000 [ 516.153162][T16453] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 516.184364][T16453] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 516.508091][T16455] wg1 speed is unknown, defaulting to 1000 [ 516.566597][T16455] lo speed is unknown, defaulting to 1000 [ 516.887780][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2996'. [ 516.919159][T16481] openvswitch: netlink: Missing key (keys=40, expected=80) [ 517.219888][T16499] x_tables: duplicate underflow at hook 1 [ 517.319083][T16434] chnl_net:caif_netlink_parms(): no params data found [ 517.560392][T16512] netlink: 268 bytes leftover after parsing attributes in process `syz.3.3001'. [ 517.589136][T13496] IPVS: starting estimator thread 0... [ 517.596976][T16512] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3001'. [ 517.625823][T16517] IPVS: set_ctl: invalid protocol: 136 100.0.1.1:20001 [ 517.629078][T16512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3001'. [ 517.699342][T16514] IPVS: using max 28 ests per chain, 67200 per kthread [ 517.825963][T16508] wg1 speed is unknown, defaulting to 1000 [ 517.839613][ T5837] Bluetooth: hci2: command tx timeout [ 517.945744][T16508] lo speed is unknown, defaulting to 1000 [ 517.955855][T16522] FAULT_INJECTION: forcing a failure. [ 517.955855][T16522] name failslab, interval 1, probability 0, space 0, times 0 [ 517.981314][T16434] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.998254][T16434] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.000093][T16522] CPU: 0 UID: 0 PID: 16522 Comm: syz.4.3004 Not tainted syzkaller #0 PREEMPT(full) [ 518.000119][T16522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 518.000131][T16522] Call Trace: [ 518.000138][T16522] [ 518.000146][T16522] dump_stack_lvl+0xe8/0x150 [ 518.000181][T16522] should_fail_ex+0x412/0x560 [ 518.000213][T16522] should_failslab+0xa8/0x100 [ 518.000236][T16522] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 518.000263][T16522] ? __alloc_skb+0x186/0x7d0 [ 518.000289][T16522] ? __alloc_skb+0x1d0/0x7d0 [ 518.000311][T16522] ? __local_bh_enable_ip+0xd0/0x130 [ 518.000341][T16522] __alloc_skb+0x1d0/0x7d0 [ 518.000366][T16522] ? netlink_ack_tlv_len+0x6c/0x210 [ 518.000395][T16522] netlink_ack+0x146/0xa50 [ 518.000419][T16522] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 518.000442][T16522] ? ref_tracker_free+0x693/0x840 [ 518.000473][T16522] ? __pfx_ref_tracker_free+0x10/0x10 [ 518.000511][T16522] netlink_rcv_skb+0x2b6/0x4b0 [ 518.000538][T16522] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 518.000564][T16522] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.000603][T16522] ? netlink_deliver_tap+0x2e/0x1b0 [ 518.000628][T16522] ? netlink_deliver_tap+0x2e/0x1b0 [ 518.000660][T16522] netlink_unicast+0x75c/0x8e0 [ 518.000694][T16522] netlink_sendmsg+0x813/0xb40 [ 518.000730][T16522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.000760][T16522] ? aa_sock_msg_perm+0xf1/0x1b0 [ 518.000786][T16522] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 518.000817][T16522] ____sys_sendmsg+0x972/0x9f0 [ 518.000845][T16522] ? __might_fault+0xaf/0x130 [ 518.000885][T16522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.000921][T16522] ? import_iovec+0x73/0xa0 [ 518.000944][T16522] ___sys_sendmsg+0x2a5/0x360 [ 518.000969][T16522] ? __lock_acquire+0x6b5/0x2cf0 [ 518.000997][T16522] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.001065][T16522] ? __fget_files+0x2a/0x420 [ 518.001087][T16522] ? __fget_files+0x3a0/0x420 [ 518.001119][T16522] __x64_sys_sendmsg+0x1bd/0x2a0 [ 518.001150][T16522] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.001187][T16522] ? __pfx_ksys_write+0x10/0x10 [ 518.001223][T16522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.001243][T16522] do_syscall_64+0x15f/0xf80 [ 518.001265][T16522] ? trace_irq_disable+0x3b/0x140 [ 518.001285][T16522] ? clear_bhb_loop+0x40/0x90 [ 518.001307][T16522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.001325][T16522] RIP: 0033:0x7f9de679c819 [ 518.001343][T16522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.001359][T16522] RSP: 002b:00007f9de76af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.001379][T16522] RAX: ffffffffffffffda RBX: 00007f9de6a15fa0 RCX: 00007f9de679c819 [ 518.001393][T16522] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 518.001404][T16522] RBP: 00007f9de76af090 R08: 0000000000000000 R09: 0000000000000000 [ 518.001415][T16522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 518.001426][T16522] R13: 00007f9de6a16038 R14: 00007f9de6a15fa0 R15: 00007ffccca39f98 [ 518.001457][T16522] [ 518.398345][T16434] bridge_slave_0: entered allmulticast mode [ 518.408762][T16434] bridge_slave_0: entered promiscuous mode [ 518.443599][T16434] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.460658][T16434] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.482755][T16434] bridge_slave_1: entered allmulticast mode [ 518.506150][T16434] bridge_slave_1: entered promiscuous mode [ 518.806045][T16434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.836264][T16434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.904145][T16434] team0: Port device team_slave_0 added [ 518.940222][T16434] team0: Port device team_slave_1 added [ 519.042317][T16434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.051637][T16434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.139489][T16434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.166700][T16434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.183243][T16434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.217914][T16434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.314167][T16561] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 519.490871][T16434] hsr_slave_0: entered promiscuous mode [ 519.531651][T16434] hsr_slave_1: entered promiscuous mode [ 519.552349][T16434] debugfs: 'hsr0' already exists in 'hsr' [ 519.564905][T16434] Cannot create hsr debugfs directory [ 519.929111][ T5837] Bluetooth: hci2: command tx timeout [ 520.148389][T16619] Timeout policy `syz1' can only be used by L3 protocol number 1536 [ 520.526811][T16629] pimreg: entered allmulticast mode [ 520.697305][T16641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3033'. [ 520.792571][T16643] wg1 speed is unknown, defaulting to 1000 [ 520.812697][T16643] lo speed is unknown, defaulting to 1000 [ 520.900622][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3036'. [ 521.098576][T16648] delete_channel: no stack [ 521.273446][T16661] No such timeout policy "syz1" [ 521.806712][T16434] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 521.862520][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 521.903072][T16434] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 521.911466][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3046'. [ 521.926918][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 521.954904][T16434] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 521.981168][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 521.995365][T16434] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 522.003004][ T5837] Bluetooth: hci2: command tx timeout [ 522.019634][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 522.296936][T16434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.388194][T16707] wg1 speed is unknown, defaulting to 1000 [ 522.397571][T16716] ip6tnl5: entered promiscuous mode [ 522.416737][T16707] lo speed is unknown, defaulting to 1000 [ 522.423742][T16709] netlink: 'syz.4.3052': attribute type 2 has an invalid length. [ 522.462208][T16434] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.664959][T11094] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.672317][T11094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.698407][T16727] Timeout policy `syz1' can only be used by L3 protocol number 1536 [ 522.727652][T11094] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.734966][T11094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.867508][T16730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3059'. [ 523.212032][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3063'. [ 523.289387][T16742] wg1 speed is unknown, defaulting to 1000 [ 523.337482][T16742] lo speed is unknown, defaulting to 1000 [ 523.365729][T16749] sctp: [Deprecated]: syz.2.3065 (pid 16749) Use of int in max_burst socket option. [ 523.365729][T16749] Use struct sctp_assoc_value instead [ 524.080650][ T5837] Bluetooth: hci2: command tx timeout [ 524.342091][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3073'. [ 524.562234][T16774] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3072'. [ 524.656153][T16434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.849129][T16434] veth0_vlan: entered promiscuous mode [ 524.863254][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3076'. [ 524.938135][T16787] tap0: tun_chr_ioctl cmd 1074025676 [ 524.954998][T16787] tap0: owner set to 0 [ 524.967025][T16434] veth1_vlan: entered promiscuous mode [ 525.089643][T16434] veth0_macvtap: entered promiscuous mode [ 525.102018][T16434] veth1_macvtap: entered promiscuous mode [ 525.103523][T16795] netlink: 'syz.0.3078': attribute type 21 has an invalid length. [ 525.149280][T16795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3078'. [ 525.165510][T16434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.190540][T16434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.210459][T16583] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.233379][T16583] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.263505][T16583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.306711][T16583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.378074][T16799] 8021q: adding VLAN 0 to HW filter on device bond5 [ 525.562389][T16802] bond5: (slave veth13): Enslaving as an active interface with an up link [ 525.630547][T16799] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 525.651265][T16799] bond5: (slave batadv5): Enslaving as an active interface with an up link [ 525.693544][T16810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3083'. [ 525.712031][T16804] bond5 (unregistering): (slave veth13): Releasing backup interface [ 525.725294][T16804] bond5 (unregistering): (slave batadv5): Releasing backup interface [ 525.740356][T16804] bond5 (unregistering): Released all slaves [ 525.833496][T16811] syzkaller0: entered promiscuous mode [ 525.849154][T16811] syzkaller0: entered allmulticast mode [ 525.902822][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.916921][T16808] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3081'. [ 525.938320][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.182461][T16583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.206925][T16583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.467956][T16835] tap0: tun_chr_ioctl cmd 1074025676 [ 526.504574][T16835] tap0: owner set to 0 [ 527.556780][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 527.569424][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 527.585053][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 527.610832][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 527.624444][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 527.693314][T16859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3094'. [ 527.793603][ T9899] lo speed is unknown, defaulting to 1000 [ 527.810273][ T9899] syz2: Port: 1 Link DOWN [ 527.875110][T16854] vlan6: entered allmulticast mode [ 527.894374][T16854] bridge_slave_0: entered allmulticast mode [ 527.901953][T16854] bridge0: port 1(vlan6) entered blocking state [ 527.908573][T16854] bridge0: port 1(vlan6) entered disabled state [ 527.921373][T16854] vlan6: entered promiscuous mode [ 527.926586][T16854] bridge_slave_0: entered promiscuous mode [ 527.938617][T16583] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.957477][T16583] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.991329][T16583] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.023953][T16583] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.053659][T16866] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3097'. [ 528.058087][T16852] wg1 speed is unknown, defaulting to 1000 [ 528.101143][T16852] lo speed is unknown, defaulting to 1000 [ 528.142251][T16871] netlink: 'syz.4.3099': attribute type 21 has an invalid length. [ 528.162759][T16871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3099'. [ 528.648609][T16852] chnl_net:caif_netlink_parms(): no params data found [ 528.844182][T16883] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.920398][T16883] bridge_slave_0 (unregistering): left allmulticast mode [ 528.949074][T16883] bridge_slave_0 (unregistering): left promiscuous mode [ 528.971409][T16883] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.166527][T16923] wg1 speed is unknown, defaulting to 1000 [ 529.195578][T16923] lo speed is unknown, defaulting to 1000 [ 529.196549][T16852] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.209463][T16852] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.229428][T16852] bridge_slave_0: entered allmulticast mode [ 529.247900][T16852] bridge_slave_0: entered promiscuous mode [ 529.298370][T16852] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.325294][T16852] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.349462][T16852] bridge_slave_1: entered allmulticast mode [ 529.361366][T16852] bridge_slave_1: entered promiscuous mode [ 529.570080][T16852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.626746][T16938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3107'. [ 529.647713][T16852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.680451][ T5831] Bluetooth: hci1: command tx timeout [ 529.729707][T16944] No such timeout policy "syz1" [ 529.856967][T16852] team0: Port device team_slave_0 added [ 529.893506][T16852] team0: Port device team_slave_1 added [ 530.093834][T16952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3112'. [ 530.222163][T16957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3112'. [ 530.228389][T16952] macvlan2: entered allmulticast mode [ 530.348774][T16852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.365551][T16852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.406023][T16852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.439724][T16852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.459259][T16852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.501159][T16852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.567716][T16962] netlink: 'syz.2.3115': attribute type 21 has an invalid length. [ 530.588797][T16962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3115'. [ 530.682333][T16852] hsr_slave_0: entered promiscuous mode [ 530.695842][T16852] hsr_slave_1: entered promiscuous mode [ 530.707349][T16852] debugfs: 'hsr0' already exists in 'hsr' [ 530.724646][T16852] Cannot create hsr debugfs directory [ 530.792328][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3118'. [ 530.901792][T16974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3119'. [ 530.925367][T16971] hsr0: entered promiscuous mode [ 530.933931][T16977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3120'. [ 530.951993][T16971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3118'. [ 531.213915][T16981] No such timeout policy "syz1" [ 531.341871][T16982] tun0: tun_chr_ioctl cmd 1074025675 [ 531.351640][T16982] tun0: persist enabled [ 531.385856][T16982] tun0: tun_chr_ioctl cmd 1074025675 [ 531.409199][T16982] tun0: persist disabled [ 531.532155][T16983] tun0: tun_chr_ioctl cmd 1074025673 [ 531.700755][T16995] 8021q: adding VLAN 0 to HW filter on device bond5 [ 531.761424][ T5831] Bluetooth: hci1: command tx timeout [ 531.811771][T16999] bond5: (slave veth15): Enslaving as an active interface with an up link [ 531.838323][T17011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3130'. [ 531.873906][T17004] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 531.886993][T17004] bond5: (slave batadv6): Enslaving as an active interface with an up link [ 531.910406][T16995] bond5 (unregistering): (slave veth15): Releasing backup interface [ 531.928617][T16995] bond5 (unregistering): (slave batadv6): Releasing backup interface [ 531.941401][T16995] bond5 (unregistering): Released all slaves [ 532.211747][T17019] syzkaller0: entered promiscuous mode [ 532.227859][T17019] syzkaller0: entered allmulticast mode [ 532.330225][T17023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3135'. [ 532.649669][T17034] tap0: tun_chr_ioctl cmd 1074025676 [ 532.660095][T17034] tap0: owner set to 0 [ 532.937566][T16852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 532.977733][T16852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.004123][T16852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 533.029432][T16852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.052658][T16852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 533.098020][T16852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 533.116616][T16852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 533.132439][T16852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.146625][T17042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3140'. [ 533.334706][T17052] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 533.351849][T16852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.362240][T17052] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 533.368462][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3145'. [ 533.385499][T17052] netlink: 'syz.2.3142': attribute type 3 has an invalid length. [ 533.394188][T17054] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3143'. [ 533.442650][T16852] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.492724][T17061] batman_adv: batadv0: Adding interface: ipvlan2 [ 533.513186][T17061] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.578149][T17061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.605216][T17061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.615799][T17061] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 533.684669][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.691978][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.701444][T17067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3147'. [ 533.705186][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.718213][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.839776][ T5831] Bluetooth: hci1: command tx timeout [ 534.607306][T16852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.777532][T16852] veth0_vlan: entered promiscuous mode [ 534.831363][T16852] veth1_vlan: entered promiscuous mode [ 534.885358][T16852] veth0_macvtap: entered promiscuous mode [ 534.906765][T16852] veth1_macvtap: entered promiscuous mode [ 534.941827][T17108] No such timeout policy "syz1" [ 534.945336][T16852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.968380][T16852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.014990][T16582] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.020783][T17110] Timeout policy `syz1' can only be used by L3 protocol number 1536 [ 535.062805][T16582] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.106047][T16582] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.143077][T16582] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.348624][T16577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.363449][T16577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.450219][T17128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3165'. [ 535.462618][T16578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.477653][T16578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.779349][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3167'. [ 535.925332][ T5831] Bluetooth: hci1: command tx timeout [ 536.105514][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 536.116383][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 536.130568][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 536.155125][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 536.168711][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 536.286326][T17154] No such timeout policy "syz1" [ 536.394215][T17155] syzkaller1: entered promiscuous mode [ 536.421352][T17155] syzkaller1: entered allmulticast mode [ 536.422713][T17160] xt_hashlimit: size too large, truncated to 1048576 [ 536.459660][T17148] wg1 speed is unknown, defaulting to 1000 [ 536.677407][T17148] lo speed is unknown, defaulting to 1000 [ 536.829094][T17169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3178'. [ 536.875038][T17169] netlink: 'syz.2.3178': attribute type 13 has an invalid length. [ 537.110967][T17195] netlink: 'syz.0.3183': attribute type 1 has an invalid length. [ 537.135064][T17197] netlink: 'syz.1.3184': attribute type 1 has an invalid length. [ 537.161363][T17169] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.169315][T17169] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.258082][T17169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.274528][T17169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.472880][T17199] team0: Port device veth3 added [ 537.511828][T17201] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 537.522672][T17201] team0: Port device batadv1 added [ 537.556941][T17203] team0 (unregistering): Port device team_slave_0 removed [ 537.568188][T17203] team0 (unregistering): Port device team_slave_1 removed [ 537.578098][T17203] team0 (unregistering): Port device veth3 removed [ 537.593315][T17203] team0 (unregistering): Port device batadv1 removed [ 537.625944][T16577] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.635370][T16577] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.687475][T16577] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.710650][T16577] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.863307][T17209] No such timeout policy "syz1" [ 537.901846][T17207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3185'. [ 538.007438][T17212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3187'. [ 538.022359][T17207] macvlan2: entered allmulticast mode [ 538.043447][T17219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3185'. [ 538.104137][T17148] chnl_net:caif_netlink_parms(): no params data found [ 538.147311][T17217] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 538.156334][T17220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3187'. [ 538.200461][T17212] macvlan2: entered allmulticast mode [ 538.239421][ T5831] Bluetooth: hci3: command tx timeout [ 538.304815][T17221] wg1 speed is unknown, defaulting to 1000 [ 538.335220][T17221] lo speed is unknown, defaulting to 1000 [ 538.454464][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3192'. [ 538.506465][T17238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3194'. [ 538.525950][T17148] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.535907][T17148] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.543971][T17148] bridge_slave_0: entered allmulticast mode [ 538.554910][T17148] bridge_slave_0: entered promiscuous mode [ 538.621377][T17148] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.637415][T17148] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.657335][T17148] bridge_slave_1: entered allmulticast mode [ 538.678373][T17148] bridge_slave_1: entered promiscuous mode [ 538.693950][T17238] netlink: 'syz.2.3194': attribute type 3 has an invalid length. [ 538.787764][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3193'. [ 538.804263][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3193'. [ 538.814159][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3193'. [ 538.907858][T17245] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.915682][T17245] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.983803][T17245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.000371][T17245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.231147][T17253] No such timeout policy "syz1" [ 539.250359][T17190] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.277482][T17190] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.317040][T17148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.334020][T17190] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.361100][T17148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.393308][T17190] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.466763][T17148] team0: Port device team_slave_0 added [ 539.493074][T17148] team0: Port device team_slave_1 added [ 539.572965][T17148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.589717][T17148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.648012][T17148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.669808][T17263] tap0: tun_chr_ioctl cmd 1074025676 [ 539.683703][T17263] tap0: owner set to 0 [ 539.694353][T17148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.708991][T17148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.769278][T17148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.910217][T17265] xt_CT: No such helper "syz0" [ 539.937549][T17148] hsr_slave_0: entered promiscuous mode [ 539.954226][T17148] hsr_slave_1: entered promiscuous mode [ 539.973854][T17148] debugfs: 'hsr0' already exists in 'hsr' [ 540.001567][T17148] Cannot create hsr debugfs directory [ 540.152766][T17276] "syz.1.3206" (17276) uses obsolete ecb(arc4) skcipher [ 540.262045][T17278] macvlan2: entered allmulticast mode [ 540.320882][ T5831] Bluetooth: hci3: command tx timeout [ 540.512243][T17289] netlink: 'syz.2.3211': attribute type 21 has an invalid length. [ 540.641549][T17285] wg1 speed is unknown, defaulting to 1000 [ 540.985590][T17285] lo speed is unknown, defaulting to 1000 [ 541.002169][T17301] tap0: tun_chr_ioctl cmd 1074025676 [ 541.021410][T17301] tap0: owner set to 0 [ 541.765182][T17314] netlink: 'syz.0.3219': attribute type 3 has an invalid length. [ 541.862159][T17318] netlink: 'syz.1.3221': attribute type 21 has an invalid length. [ 541.870822][T17318] __nla_validate_parse: 152 callbacks suppressed [ 541.870845][T17318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3221'. [ 541.884022][T17148] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 541.905071][T17148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.924914][T17148] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 541.967071][T17148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.989999][T17148] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 542.022006][T17148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 542.047045][T17148] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 542.076877][T17148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.100886][T17325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3223'. [ 542.226044][T17331] 8021q: VLANs not supported on vxcan0 [ 542.321446][T17341] bridge_slave_0: left allmulticast mode [ 542.328802][T17341] bridge_slave_0: left promiscuous mode [ 542.335928][T17341] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.361320][T17341] bridge_slave_1: left allmulticast mode [ 542.385562][T17341] bridge_slave_1: left promiscuous mode [ 542.399313][ T5831] Bluetooth: hci3: command tx timeout [ 542.409760][T17341] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.453404][T17341] bond0: (slave bond_slave_0): Releasing backup interface [ 542.488080][T17341] bond0: (slave bond_slave_1): Releasing backup interface [ 542.518168][T17341] team0: Port device team_slave_0 removed [ 542.555129][T17341] team0: Port device team_slave_1 removed [ 542.575689][T17341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.604779][T17341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.638539][T17341] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 542.686657][T17346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3228'. [ 542.968093][T17358] No such timeout policy "syz1" [ 542.975073][T17148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.035565][T17148] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.069085][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.076356][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.123944][T17190] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.131400][T17190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.432102][T17378] Cannot find del_set index 2 as target [ 543.568363][T17379] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3235'. [ 543.595691][T17379] netlink: 'syz.2.3235': attribute type 10 has an invalid length. [ 543.622051][T17379] team0: Port device vxcan1 added [ 543.662612][T17386] netlink: 'syz.4.3240': attribute type 11 has an invalid length. [ 543.732351][T17148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.872689][T17148] veth0_vlan: entered promiscuous mode [ 543.878414][T17390] No such timeout policy "syz1" [ 543.891204][T17392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3243'. [ 543.902930][T17148] veth1_vlan: entered promiscuous mode [ 543.967009][T17148] veth0_macvtap: entered promiscuous mode [ 543.987237][T17148] veth1_macvtap: entered promiscuous mode [ 544.020064][T17396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3245'. [ 544.057665][T17396] openvswitch: netlink: Flow actions attr not present in new flow. [ 544.064632][T17148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.103389][T17148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.131778][T11105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.165100][T11105] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.237056][T11105] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.296974][T11105] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.479122][ T5831] Bluetooth: hci3: command tx timeout [ 544.551396][T11105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.594001][T11105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.641210][T17421] batadv0: entered promiscuous mode [ 544.650590][T17421] vlan2: entered promiscuous mode [ 544.705103][T17428] No such timeout policy "syz1" [ 544.804448][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.829399][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.918342][T17433] No such timeout policy "syz1" [ 545.162575][T17440] netlink: 'syz.2.3257': attribute type 1 has an invalid length. [ 545.211911][T17440] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3257'. [ 545.216565][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3257'. [ 545.246121][T17412] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3249'. [ 545.253826][T17442] siw: device registration error -23 [ 545.274335][T17412] netlink: 'syz.4.3249': attribute type 33 has an invalid length. [ 545.303602][T17412] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3249'. [ 545.352870][T17412] `: renamed from team0 [ 545.514120][T17442] wg1 speed is unknown, defaulting to 1000 [ 545.541497][T17442] lo speed is unknown, defaulting to 1000 [ 545.622182][T17454] macvlan2: entered allmulticast mode [ 545.944173][T17466] tipc: Failed to remove unknown binding: 66,0,0/0:1345598821/1345598823 [ 545.979842][T17466] tipc: Failed to remove unknown binding: 66,0,0/0:1345598821/1345598822 [ 545.998455][T17466] tipc: Failed to remove unknown binding: 66,0,0/0:1345598821/1345598823 [ 546.027915][T17466] tipc: Failed to remove unknown binding: 66,0,0/0:1345598821/1345598822 [ 546.066104][T17462] syzkaller0: entered promiscuous mode [ 546.087848][T17462] syzkaller0: entered allmulticast mode [ 546.156004][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 546.180276][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 546.192290][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 546.213754][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 546.227038][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 546.454397][T17472] wg1 speed is unknown, defaulting to 1000 [ 546.467477][T17472] lo speed is unknown, defaulting to 1000 [ 546.860738][T17493] No such timeout policy "syz1" [ 547.015668][T17499] x_tables: duplicate underflow at hook 2 [ 547.063182][T17506] netlink: 'syz.0.3281': attribute type 21 has an invalid length. [ 547.071458][T17506] __nla_validate_parse: 2 callbacks suppressed [ 547.071480][T17506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3281'. [ 547.479258][T17516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3283'. [ 547.523514][T17472] chnl_net:caif_netlink_parms(): no params data found [ 547.744699][T17530] netlink: 'syz.3.3288': attribute type 3 has an invalid length. [ 547.856834][T17535] No such timeout policy "syz1" [ 548.024136][T17472] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.031914][T17472] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.039585][T17472] bridge_slave_0: entered allmulticast mode [ 548.048109][T17472] bridge_slave_0: entered promiscuous mode [ 548.061478][T17472] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.068827][T17472] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.076845][T17472] bridge_slave_1: entered allmulticast mode [ 548.088712][T17472] bridge_slave_1: entered promiscuous mode [ 548.199866][T17472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.222781][T17472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.322012][ T5837] Bluetooth: hci4: command tx timeout [ 548.372800][ T1104] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.467030][T17472] team0: Port device team_slave_0 added [ 548.477183][T17472] team0: Port device team_slave_1 added [ 548.516303][T16582] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.588491][T17472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.599686][T17472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.654062][T17472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.670862][T17472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.678822][T17472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.706527][T17472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.852246][T16574] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.897698][ T5837] block nbd1: Receive control failed (result -32) [ 548.897698][ T5831] block nbd1: Receive control failed (result -32) [ 548.992881][T11105] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.045685][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3298'. [ 549.092664][ T12] vlan6: left promiscuous mode [ 549.101468][ T12] bridge_slave_0: left promiscuous mode [ 549.113034][ T12] bridge0: port 1(vlan6) entered disabled state [ 549.222759][ T12] pimreg: left allmulticast mode [ 549.744435][T17590] x_tables: duplicate underflow at hook 1 [ 549.865764][ T12] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 549.956733][ T12] bond0 (unregistering): Released all slaves [ 549.967994][ T12] bond1 (unregistering): Released all slaves [ 549.983017][ T12] bond2 (unregistering): Released all slaves [ 550.006205][ T12] bond3 (unregistering): Released all slaves [ 550.027904][ T12] bond4 (unregistering): Released all slaves [ 550.052285][ T12] bond5 (unregistering): (slave veth13): Releasing active interface [ 550.065216][ T12] bond5 (unregistering): (slave batadv3): Releasing active interface [ 550.074518][ T12] bond5 (unregistering): Released all slaves [ 550.092207][ T12] bond6 (unregistering): Released all slaves [ 550.121440][T17472] hsr_slave_0: entered promiscuous mode [ 550.129189][T17472] hsr_slave_1: entered promiscuous mode [ 550.136461][T17472] debugfs: 'hsr0' already exists in 'hsr' [ 550.143107][T17472] Cannot create hsr debugfs directory [ 550.226251][T17578] tipc: Enabling of bearer rejected, failed to enable media [ 550.398171][T17601] x_tables: duplicate underflow at hook 2 [ 550.405260][ T5831] Bluetooth: hci4: command tx timeout [ 550.536584][T17607] xt_bpf: check failed: parse error [ 550.933397][T17609] wg1 speed is unknown, defaulting to 1000 [ 551.033067][T17609] lo speed is unknown, defaulting to 1000 [ 551.098449][T17472] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.506829][T17472] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.641081][T17628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3308'. [ 551.664963][ T12] hsr_slave_0: left promiscuous mode [ 551.673535][ T12] hsr_slave_1: left promiscuous mode [ 552.380319][T17645] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 552.483557][ T5837] Bluetooth: hci4: command tx timeout [ 552.862366][T17472] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.100945][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 553.307502][T17472] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.407403][T17643] wg1 speed is unknown, defaulting to 1000 [ 553.914775][T17663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3318'. [ 554.016239][T17666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3318'. [ 554.094036][T17663] macvlan2: entered allmulticast mode [ 554.162116][ T12] IPVS: stop unused estimator thread 0... [ 554.192772][T17472] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 554.271496][T17472] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 554.300419][T17472] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 554.333875][T17472] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.362176][T17472] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 554.388809][T17472] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 554.560759][ T5837] Bluetooth: hci4: command 0x0419 tx timeout [ 554.600732][T17472] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 554.636458][T17472] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.918807][T17696] No such timeout policy "syz1" [ 555.259728][T17702] netlink: 'syz.0.3326': attribute type 15 has an invalid length. [ 555.350819][T17704] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3327'. [ 556.317099][T17612] Set syz1 is full, maxelem 65536 reached [ 556.646120][ T5831] Bluetooth: hci4: command 0x0419 tx timeout [ 559.005333][T17679] syzkaller0: entered promiscuous mode [ 559.011099][T17679] syzkaller0: entered allmulticast mode [ 559.080105][T17709] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 559.357849][T17735] No such timeout policy "syz1" [ 559.373830][T17472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.459773][T17472] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.496939][T16574] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.504229][T16574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.619925][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.627266][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.736797][T17742] lo: entered allmulticast mode [ 559.749555][T17742] tunl0: entered allmulticast mode [ 559.763484][T17742] gre0: entered allmulticast mode [ 559.772953][T17742] gretap0: entered allmulticast mode [ 559.781437][T17742] erspan0: entered allmulticast mode [ 559.791746][T17742] ip_vti0: entered allmulticast mode [ 559.802803][T17742] ip6_vti0: entered allmulticast mode [ 559.809656][T17742] sit0: entered allmulticast mode [ 559.814934][T17742] ip6tnl0: entered allmulticast mode [ 559.820810][T17742] ip6gre0: entered allmulticast mode [ 559.826234][T17742] syz_tun: entered allmulticast mode [ 559.832807][T17742] ip6gretap0: entered allmulticast mode [ 559.838603][T17742] bridge0: entered allmulticast mode [ 559.845873][T17742] vcan0: entered allmulticast mode [ 559.851600][T17742] bond0: entered allmulticast mode [ 559.856981][T17742] bond_slave_0: entered allmulticast mode [ 559.863354][T17742] bond_slave_1: entered allmulticast mode [ 559.870334][T17742] dummy0: entered allmulticast mode [ 559.877009][T17742] nlmon0: entered allmulticast mode [ 559.883694][T17742] caif0: entered allmulticast mode [ 559.889554][T17742] batadv0: entered allmulticast mode [ 559.895239][T17742] vxcan0: entered allmulticast mode [ 559.901743][T17742] vxcan1: entered allmulticast mode [ 559.907316][T17742] veth0: entered allmulticast mode [ 559.913247][T17742] veth1: entered allmulticast mode [ 559.920268][T17742] wg0: entered allmulticast mode [ 559.925704][T17742] wg1: entered allmulticast mode [ 559.935252][T17742] wg2: entered allmulticast mode [ 559.941312][T17742] veth0_to_bridge: entered allmulticast mode [ 559.947763][T17742] veth1_to_bridge: entered allmulticast mode [ 559.954874][T17742] veth0_to_bond: entered allmulticast mode [ 559.961728][T17742] veth1_to_bond: entered allmulticast mode [ 559.968133][T17742] veth0_to_team: entered allmulticast mode [ 559.974723][T17742] team_slave_0: entered allmulticast mode [ 559.982519][T17742] veth1_to_team: entered allmulticast mode [ 559.991664][T17742] team_slave_1: entered allmulticast mode [ 559.997657][T17742] veth0_to_batadv: entered allmulticast mode [ 560.005344][T17742] batadv_slave_0: entered allmulticast mode [ 560.020667][T17742] veth1_to_batadv: entered allmulticast mode [ 560.027342][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3341'. [ 560.027441][T17742] batadv_slave_1: entered allmulticast mode [ 560.039978][T17763] nbd: illegal input index 131072 [ 560.046312][T17742] xfrm0: entered allmulticast mode [ 560.057982][T17742] veth0_to_hsr: entered allmulticast mode [ 560.064936][T17742] hsr_slave_0: entered allmulticast mode [ 560.070963][T17742] veth1_to_hsr: entered allmulticast mode [ 560.076851][T17742] hsr_slave_1: entered allmulticast mode [ 560.091899][T17752] vlan2: entered promiscuous mode [ 560.097082][T17752] batadv0: entered promiscuous mode [ 560.151044][T17756] siw: device registration error -23 [ 560.286168][T17768] nbd: nbd0 already in use [ 560.342733][T17770] netlink: 'syz.3.3343': attribute type 3 has an invalid length. [ 560.374900][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3344'. [ 560.424544][T17773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 560.501052][T17773] macsec1: entered allmulticast mode [ 560.523586][T17780] No such timeout policy "syz1" [ 560.539816][T17773] bond1: entered allmulticast mode [ 560.581560][T17773] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 560.640917][T17777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3344'. [ 560.696782][T17773] bond1: left allmulticast mode [ 560.750284][T17789] netlink: 'syz.3.3349': attribute type 2 has an invalid length. [ 560.900669][T17789] bond1 (unregistering): Released all slaves [ 561.049436][T17802] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3352'. [ 561.092468][T17472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.194032][T17808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3354'. [ 561.342342][T17812] netlink: 'syz.1.3355': attribute type 3 has an invalid length. [ 561.710404][T17822] xt_CT: No such helper "syz0" [ 561.762505][T17827] No such timeout policy "syz1" [ 561.965861][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3360'. [ 562.007553][T17472] veth0_vlan: entered promiscuous mode [ 562.035702][T17472] veth1_vlan: entered promiscuous mode [ 562.104495][T17472] veth0_macvtap: entered promiscuous mode [ 562.128104][T17472] veth1_macvtap: entered promiscuous mode [ 562.147512][ T5825] IPVS: starting estimator thread 0... [ 562.206581][T17472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.243342][T17472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.259361][T17839] IPVS: using max 29 ests per chain, 69600 per kthread [ 562.284876][T16577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.302093][T17845] openvswitch: netlink: IP tunnel dst address not specified [ 562.311867][T17846] openvswitch: netlink: IP tunnel dst address not specified [ 562.313661][T16577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.339466][T17845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3364'. [ 562.353231][T16577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.364942][T16577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.562089][T17847] geneve0: entered promiscuous mode [ 562.650474][T17856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3365'. [ 562.662990][T17851] wg1 speed is unknown, defaulting to 1000 [ 562.703104][T17190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.723106][T17190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.736550][T17828] delete_channel: no stack [ 563.008801][T16577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.032755][T17866] 8021q: VLANs not supported on gre0 [ 563.034671][T17865] netlink: 'syz.2.3366': attribute type 3 has an invalid length. [ 563.046932][T16577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.267478][T17873] No such timeout policy "syz1" [ 563.461872][T17880] bond1: option arp_interval: invalid value (18446744073709551615) [ 563.470349][T17880] bond1: option arp_interval: allowed values 0 - 2147483647 [ 563.479935][T17880] bond1 (unregistering): Released all slaves [ 563.510703][T17883] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3370'. [ 563.652445][T17888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3371'. [ 563.823516][T17900] sctp: [Deprecated]: syz.3.3373 (pid 17900) Use of int in maxseg socket option. [ 563.823516][T17900] Use struct sctp_assoc_value instead [ 563.868664][T17888] gre1: entered promiscuous mode [ 564.237139][T17915] 8021q: VLANs not supported on gre0 [ 564.340272][T17921] netlink: 'syz.0.3380': attribute type 1 has an invalid length. [ 564.528786][T17926] bond1: (slave bridge2): making interface the new active one [ 564.550400][T17926] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 564.731400][T17937] syzkaller1: entered promiscuous mode [ 564.737293][T17937] syzkaller1: entered allmulticast mode [ 564.924005][T17939] No such timeout policy "syz1" [ 565.103953][T17950] __nla_validate_parse: 4 callbacks suppressed [ 565.104342][T17950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3386'. [ 565.322087][T17964] vlan2: entered promiscuous mode [ 565.327433][T17964] batadv0: entered promiscuous mode [ 565.402989][T17969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3394'. [ 565.427790][T17969] netlink: 'syz.1.3394': attribute type 6 has an invalid length. [ 565.508341][T17971] wg1 speed is unknown, defaulting to 1000 [ 565.635681][T17973] tipc: Started in network mode [ 565.642450][T17973] tipc: Node identity ac14140f, cluster identity 4711 [ 565.650066][T17973] tipc: New replicast peer: 255.255.255.255 [ 565.657258][T17973] tipc: Enabled bearer , priority 10 [ 565.689213][T17976] tap0: tun_chr_ioctl cmd 1074025676 [ 565.706260][T17976] tap0: owner set to 0 [ 566.717858][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3404'. [ 566.807809][T16913] tipc: Node number set to 2886997007 [ 567.138250][T18022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3412'. [ 567.287390][T18031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3412'. [ 567.363644][T18035] Bluetooth: MGMT ver 1.23 [ 567.391502][T18035] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3416'. [ 567.401385][T18035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3416'. [ 567.577405][T18025] macvlan2: entered allmulticast mode [ 567.592660][T18032] tap0: tun_chr_ioctl cmd 1074025676 [ 567.598370][T18032] tap0: owner set to 0 [ 567.961424][T18053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3423'. [ 568.139109][T18056] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3424'. [ 568.262783][T18064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3426'. [ 569.126836][T16912] IPVS: starting estimator thread 0... [ 569.222289][T18124] IPVS: using max 25 ests per chain, 60000 per kthread [ 572.304306][T18131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.718799][T18186] __nla_validate_parse: 5 callbacks suppressed [ 572.754808][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3462'. [ 572.776640][T18193] No such timeout policy "syz1" [ 572.901665][T18191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3462'. [ 573.204453][T18209] syzkaller1: entered promiscuous mode [ 573.223817][T18209] syzkaller1: entered allmulticast mode [ 573.505776][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3470'. [ 573.528051][T18223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3470'. [ 573.613802][T18223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3470'. [ 573.678521][T18210] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.883737][T18221] wg1 speed is unknown, defaulting to 1000 [ 574.058515][T18236] No such timeout policy "syz1" [ 574.100590][T18210] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.408680][T18240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3473'. [ 574.451255][T18210] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.492468][T18245] No such timeout policy "syz1" [ 574.625659][T18248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.723830][T18210] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.194441][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3482'. [ 575.324999][T16582] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.357630][T16582] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.416519][T16582] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.438693][T16582] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.452619][T18271] wg1 speed is unknown, defaulting to 1000 [ 575.618452][T16574] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.665523][T18296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3486'. [ 575.800196][T16582] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.895184][T16574] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.030364][T17190] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.030819][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3490'. [ 576.353057][T18318] wg1 speed is unknown, defaulting to 1000 [ 577.098350][T18344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.219335][T18363] x_tables: duplicate underflow at hook 1 [ 577.328007][T18366] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 577.380813][T18368] FAULT_INJECTION: forcing a failure. [ 577.380813][T18368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.418982][T18368] CPU: 0 UID: 0 PID: 18368 Comm: syz.0.3508 Not tainted syzkaller #0 PREEMPT(full) [ 577.419014][T18368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 577.419026][T18368] Call Trace: [ 577.419033][T18368] [ 577.419042][T18368] dump_stack_lvl+0xe8/0x150 [ 577.419087][T18368] should_fail_ex+0x412/0x560 [ 577.419123][T18368] _copy_from_iter+0x1d3/0x1670 [ 577.419155][T18368] ? rcu_is_watching+0x15/0xb0 [ 577.419196][T18368] ? __pfx__copy_from_iter+0x10/0x10 [ 577.419233][T18368] ? netlink_sendmsg+0x650/0xb40 [ 577.419260][T18368] ? skb_put+0x11b/0x210 [ 577.419292][T18368] netlink_sendmsg+0x6c0/0xb40 [ 577.419328][T18368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.419361][T18368] ? aa_sock_msg_perm+0xf1/0x1b0 [ 577.419390][T18368] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 577.419424][T18368] ____sys_sendmsg+0x972/0x9f0 [ 577.419454][T18368] ? __might_fault+0xaf/0x130 [ 577.419489][T18368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.419529][T18368] ? import_iovec+0x73/0xa0 [ 577.419554][T18368] ___sys_sendmsg+0x2a5/0x360 [ 577.419582][T18368] ? __lock_acquire+0x6b5/0x2cf0 [ 577.419614][T18368] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.419683][T18368] ? __fget_files+0x2a/0x420 [ 577.419706][T18368] ? __fget_files+0x3a0/0x420 [ 577.419743][T18368] __x64_sys_sendmsg+0x1bd/0x2a0 [ 577.419777][T18368] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.419817][T18368] ? __pfx_ksys_write+0x10/0x10 [ 577.419856][T18368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.419878][T18368] do_syscall_64+0x15f/0xf80 [ 577.419900][T18368] ? trace_irq_disable+0x3b/0x140 [ 577.419923][T18368] ? clear_bhb_loop+0x40/0x90 [ 577.419948][T18368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.419968][T18368] RIP: 0033:0x7f8ac359c819 [ 577.419989][T18368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.420006][T18368] RSP: 002b:00007f8ac4513028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.420030][T18368] RAX: ffffffffffffffda RBX: 00007f8ac3815fa0 RCX: 00007f8ac359c819 [ 577.420045][T18368] RDX: 0000000000040060 RSI: 0000200000000340 RDI: 0000000000000009 [ 577.420058][T18368] RBP: 00007f8ac4513090 R08: 0000000000000000 R09: 0000000000000000 [ 577.420079][T18368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.420091][T18368] R13: 00007f8ac3816038 R14: 00007f8ac3815fa0 R15: 00007ffeb4c1d868 [ 577.420126][T18368] [ 577.707292][T18365] tap0: tun_chr_ioctl cmd 1074025676 [ 577.718232][T18365] tap0: owner set to 0 [ 577.804939][T18344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.925339][T18375] netlink: 'syz.0.3509': attribute type 1 has an invalid length. [ 578.043987][T18375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 578.147166][T18385] No such timeout policy "syz1" [ 578.147618][T18344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.211445][T18379] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 578.237472][T18379] bond2: (slave batadv2): making interface the new active one [ 578.254739][T18379] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 578.293638][T18382] bond2 (unregistering): (slave batadv2): Releasing active interface [ 578.303890][T18392] No such timeout policy "syz1" [ 578.316644][T18382] bond2 (unregistering): Released all slaves [ 578.432962][T18344] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.552082][T18397] geneve1: entered promiscuous mode [ 578.555130][T18393] delete_channel: no stack [ 578.562449][T18397] geneve1: entered allmulticast mode [ 578.611309][T18402] ip6gre1: entered promiscuous mode [ 578.616777][T18402] ip6gre1: entered allmulticast mode [ 578.919322][T18411] IPVS: set_ctl: invalid protocol: 8 172.30.0.4:20001 [ 578.926370][ T1104] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.956629][T18414] netlink: 'syz.0.3521': attribute type 1 has an invalid length. [ 578.995898][T17190] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.088769][T18424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3521'. [ 579.266689][T18431] xt_hashlimit: size too large, truncated to 1048576 [ 579.296583][T16577] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.351451][T18422] bond2: (slave geneve2): making interface the new active one [ 579.382142][T18422] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 579.415592][T18424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 579.519476][T18430] gretap1: entered promiscuous mode [ 579.555649][T18430] batman_adv: batadv0: Adding interface: gretap1 [ 579.562655][T18430] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 579.592861][T18430] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 579.700423][T11105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 579.725897][T11105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 579.756534][T11105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 579.861071][T11105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 579.890801][T11105] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.711706][T18504] wg1 speed is unknown, defaulting to 1000 [ 581.816482][T18502] xt_CT: No such helper "syz1" [ 581.933409][T18510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3546'. [ 582.215318][T18526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3548'. [ 582.570522][T18536] No such timeout policy "syz1" [ 582.869445][T18546] netlink: 'syz.0.3560': attribute type 2 has an invalid length. [ 582.995875][T18544] block nbd2: server does not support multiple connections per device. [ 583.020908][T18544] block nbd2: shutting down sockets [ 583.054651][T18554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3563'. [ 583.088128][T18544] bridge0: port 1(vlan2) entered blocking state [ 583.101591][T18544] bridge0: port 1(vlan2) entered disabled state [ 583.108194][T18544] vlan2: entered allmulticast mode [ 583.114169][T18544] geneve0: entered allmulticast mode [ 583.158121][T18552] Bluetooth: MGMT ver 1.23 [ 583.839446][T18590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3572'. [ 584.062081][T18598] dummy0: entered promiscuous mode [ 584.079737][T18598] macsec1: entered allmulticast mode [ 584.095052][T18598] dummy0: entered allmulticast mode [ 584.125417][T18598] dummy0: left allmulticast mode [ 584.142697][T18598] dummy0: left promiscuous mode [ 584.165806][T18605] netlink: 'syz.0.3576': attribute type 1 has an invalid length. [ 584.175769][T18605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3576'. [ 584.376245][T18616] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20000 [ 584.446145][T18619] sctp: [Deprecated]: syz.3.3580 (pid 18619) Use of int in max_burst socket option. [ 584.446145][T18619] Use struct sctp_assoc_value instead [ 584.590687][T18617] wg1 speed is unknown, defaulting to 1000 [ 584.785264][T18633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3584'. [ 585.042190][T18650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3586'. [ 585.059274][T18649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3587'. [ 585.170433][T18659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3589'. [ 585.301712][T18644] vlan2: entered allmulticast mode [ 585.307116][T18644] bridge1: entered allmulticast mode [ 585.404208][T18649] bridge1: port 1(bond1) entered blocking state [ 585.411377][T18649] bridge1: port 1(bond1) entered disabled state [ 585.418186][T18649] bond1: entered allmulticast mode [ 585.450313][T18649] bond1: entered promiscuous mode [ 585.457551][T18670] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3592'. [ 585.478793][T18671] No such timeout policy "syz1" [ 585.600295][T18673] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.742119][T18673] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.813780][T18681] syzkaller1: entered promiscuous mode [ 585.851879][T18681] syzkaller1: entered allmulticast mode [ 585.898062][T18673] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.005332][T18673] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.118634][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3600'. [ 586.248920][T18699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3602'. [ 586.280430][T18699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3602'. [ 586.381138][T16582] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.478352][T16574] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.588242][T16574] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.875688][T16574] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.933650][T18721] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3608'. [ 587.314091][T18735] netlink: 'syz.4.3611': attribute type 1 has an invalid length. [ 587.407619][T18730] IPVS: persistence engine module ip_vs_pe_… not found [ 587.495228][T18735] bond1: entered promiscuous mode [ 587.509494][T18735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 587.636860][T18747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.864861][T18756] wg1 speed is unknown, defaulting to 1000 [ 588.014168][T18770] No such timeout policy "syz1" [ 588.306176][T18774] wg1 speed is unknown, defaulting to 1000 [ 588.585813][T18781] ÿ: renamed from bond_slave_0 [ 588.854711][T18792] tap0: tun_chr_ioctl cmd 1074025676 [ 588.871873][T18792] tap0: owner set to 0 [ 589.374849][T18808] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.382488][T18808] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.470709][T18823] __nla_validate_parse: 7 callbacks suppressed [ 589.470730][T18823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3637'. [ 589.487859][T18808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.503882][T18808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.643525][T18808] bond1: left promiscuous mode [ 589.656722][T18819] tap0: tun_chr_ioctl cmd 1074025676 [ 589.681531][T18819] tap0: owner set to 0 [ 589.747862][T17190] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.782880][T18829] No such timeout policy "syz1" [ 589.823455][T18831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3640'. [ 589.835678][T17190] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.892669][T18816] wg1 speed is unknown, defaulting to 1000 [ 589.980034][T17190] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.989932][T17190] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.467211][T18860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3649'. [ 590.470549][T18844] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.667011][T18844] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.725353][T18865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3650'. [ 590.816706][T18844] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.943215][T18844] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.046949][T18858] wg1 speed is unknown, defaulting to 1000 [ 591.053059][T18871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3651'. [ 591.093286][T18873] No such timeout policy "syz1" [ 591.310291][T18876] sctp: [Deprecated]: syz.0.3653 (pid 18876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.310291][T18876] Use struct sctp_sack_info instead [ 591.347236][T18876] sctp: [Deprecated]: syz.0.3653 (pid 18876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.347236][T18876] Use struct sctp_sack_info instead [ 591.481931][T18878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.485374][T18880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 591.621947][T16574] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.776496][T16575] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.814741][T17186] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.852941][T17186] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.984422][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3659'. [ 592.207410][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3662'. [ 592.653292][T18917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3667'. [ 592.675717][T18917] gretap0: entered promiscuous mode [ 592.690523][T18917] gretap0: left promiscuous mode [ 592.856186][T18929] No such timeout policy "syz1" [ 592.875546][T18917] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3667'. [ 594.086408][T18950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 594.907524][T19009] No such timeout policy "syz1" [ 594.916949][T19004] wg1 speed is unknown, defaulting to 1000 [ 595.006468][T19014] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:21 [ 595.038108][T19017] __nla_validate_parse: 6 callbacks suppressed [ 595.038130][T19017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3702'. [ 595.102025][T19011] wg1 speed is unknown, defaulting to 1000 [ 595.125063][T19019] sit2: entered allmulticast mode [ 595.155962][T19024] netlink: 'syz.2.3702': attribute type 49 has an invalid length. [ 595.206698][T19025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3704'. [ 595.309678][T19025] 8021q: VLANs not supported on ip6_vti0 [ 595.474917][T19027] syzkaller1: entered promiscuous mode [ 595.480911][T19027] syzkaller1: entered allmulticast mode [ 596.132931][T19057] No such timeout policy "syz1" [ 596.335591][T19064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3716'. [ 596.358650][T19064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3716'. [ 596.400222][T19070] wg1 speed is unknown, defaulting to 1000 [ 596.515427][T19078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3721'. [ 596.643541][T19080] netlink: 'syz.4.3720': attribute type 4 has an invalid length. [ 596.796885][T19093] netlink: 'syz.0.3725': attribute type 1 has an invalid length. [ 596.877180][T19076] syzkaller0: entered promiscuous mode [ 597.145826][T19101] erspan1: entered promiscuous mode [ 597.167679][T19101] erspan1: entered allmulticast mode [ 597.200687][T19098] syzkaller0: entered promiscuous mode [ 597.223250][T19098] syzkaller0: entered allmulticast mode [ 597.261355][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3727'. [ 597.316510][T19103] wg1 speed is unknown, defaulting to 1000 [ 597.550911][T19108] netlink: 'syz.4.3728': attribute type 5 has an invalid length. [ 597.603713][T19124] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3732'. [ 601.111123][T19127] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.583882][T19127] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.665116][T19138] tipc: Failed to remove unknown binding: 66,1,1/0:2966819456/2966819458 [ 601.682471][T19138] tipc: Failed to remove unknown binding: 66,1,1/0:2966819456/2966819458 [ 601.689231][T19127] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.693033][T19138] tipc: Failed to remove unknown binding: 66,1,1/0:2966819456/2966819458 [ 601.777694][T19127] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.819449][T19143] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3740'. [ 601.991536][T19151] netlink: 'syz.4.3743': attribute type 1 has an invalid length. [ 602.004787][T19146] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 602.025810][T19146] bond3 (unregistering): Released all slaves [ 602.224291][T19149] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 602.226354][T17183] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.344465][T18838] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.396119][T18838] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.454653][T16574] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.600149][T19166] No such timeout policy "syz1" [ 602.616572][T19165] netlink: 'syz.2.3746': attribute type 1 has an invalid length. [ 602.798406][T19168] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 602.819741][T19174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3749'. [ 602.847147][T19169] ip6tnl2: entered promiscuous mode [ 602.855610][T19169] ip6tnl2: entered allmulticast mode [ 603.167663][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3753'. [ 603.349652][T19200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3756'. [ 603.411184][T19204] No such timeout policy "syz1" [ 603.446327][T19197] ip6gretap0: entered promiscuous mode [ 604.101588][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3760'. [ 604.145388][T19218] netlink: 'syz.2.3760': attribute type 25 has an invalid length. [ 604.183606][T19218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3760'. [ 604.978979][T19254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3769'. [ 605.048073][T19232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.083802][T19232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.109061][T19232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 605.128238][T19232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.160068][T19232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.178653][T19232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.203142][T19258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3772'. [ 605.235500][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3772'. [ 605.344365][T19245] wg1 speed is unknown, defaulting to 1000 [ 606.571723][T19301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3783'. [ 606.634983][T19297] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.677596][T19308] No such timeout policy "syz1" [ 606.865931][ T29] audit: type=1107 audit(1776708700.493:11): pid=19313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 606.893025][T19297] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.967317][T19312] syzkaller1: entered promiscuous mode [ 606.980386][T19312] syzkaller1: entered allmulticast mode [ 607.076406][T19297] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.185110][T19297] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.351636][T19333] wg1 speed is unknown, defaulting to 1000 [ 607.498293][T19340] netlink: 'syz.2.3796': attribute type 3 has an invalid length. [ 607.665633][T19342] bond2: option resend_igmp: invalid value (2878) [ 607.694075][T19342] bond2: option resend_igmp: allowed values 0 - 255 [ 607.705406][T19342] bond2 (unregistering): Released all slaves [ 607.804904][T19338] syzkaller0: entered promiscuous mode [ 607.820762][T19338] syzkaller0: entered allmulticast mode [ 607.886085][T17183] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.020007][T16575] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.132443][T17183] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.438547][ T48] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.465538][T19369] netlink: 'syz.4.3802': attribute type 1 has an invalid length. [ 608.492652][T19369] __nla_validate_parse: 1 callbacks suppressed [ 608.492672][T19369] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3802'. [ 608.572943][T19371] netlink: 'syz.2.3804': attribute type 1 has an invalid length. [ 608.827632][T19371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3804'. [ 609.000463][T19373] bond2: (slave veth5): Enslaving as an active interface with a down link [ 609.173549][T19375] bond2: (slave veth7): Enslaving as an active interface with a down link [ 609.411047][T19371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 609.876235][T19404] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3808'. [ 609.917205][T19404] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3808'. [ 610.053768][T19394] syzkaller0: entered promiscuous mode [ 610.059617][T19394] syzkaller0: entered allmulticast mode [ 610.215257][T19408] No such timeout policy "syz1" [ 610.336496][T19412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.615078][T19421] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3814'. [ 614.736394][T19441] syzkaller0: entered promiscuous mode [ 614.742116][T19441] syzkaller0: entered allmulticast mode [ 614.776390][T19460] No such timeout policy "syz1" [ 614.857425][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3822'. [ 615.181219][T19475] netlink: 'syz.4.3826': attribute type 2 has an invalid length. [ 615.201260][T19475] netlink: 'syz.4.3826': attribute type 2 has an invalid length. [ 618.075371][T19478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.344039][T19504] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 619.412899][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'. [ 622.613546][T19517] No such timeout policy "syz1" [ 622.758565][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3836'. [ 622.953730][T19529] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.992176][T19529] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 623.067204][T19532] gre1: entered promiscuous mode [ 623.087941][T19536] netlink: 'syz.1.3841': attribute type 39 has an invalid length. [ 623.333167][T19529] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.360150][T19529] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 623.792243][T19529] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.815587][T19529] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 623.956139][T19553] wg1 speed is unknown, defaulting to 1000 [ 624.035799][T19529] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.059007][T19529] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 624.112567][T19552] wg1 speed is unknown, defaulting to 1000 [ 624.244393][T19557] No such timeout policy "syz1" [ 624.263248][T19559] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 624.277374][T19559] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 624.364366][T19562] No such timeout policy "syz1" [ 624.545214][ T48] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.567643][ T48] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 624.667505][T18838] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.680655][T18838] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 624.723173][T19569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3851'. [ 624.735171][T18838] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.750449][T18838] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 624.802307][T17193] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.819987][T17193] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 624.981065][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3852'. [ 625.206902][T19575] ip6gre1: entered promiscuous mode [ 625.226017][T19575] ip6gre1: entered allmulticast mode [ 625.467521][T19592] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3860'. [ 625.489753][T19575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 626.071545][T19606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3866'. [ 626.287872][T19608] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3867'. [ 626.328304][T19615] No such timeout policy "syz1" [ 626.504699][T19624] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 626.649305][T19633] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3874'. [ 626.726838][T19626] delete_channel: no stack [ 626.745702][T19637] siw: device registration error -23 [ 626.887094][T19642] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3877'. [ 626.934026][T19644] netlink: 'syz.4.3878': attribute type 1 has an invalid length. [ 626.962760][T19644] IPv6: NLM_F_CREATE should be specified when creating new route [ 626.991146][T19644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 626.998524][T19644] IPv6: NLM_F_CREATE should be set when creating new route [ 627.005982][T19644] IPv6: NLM_F_CREATE should be set when creating new route [ 627.013369][T19644] IPv6: NLM_F_CREATE should be set when creating new route [ 627.053465][T19645] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3878'. [ 627.210679][T19647] netlink: 'syz.2.3879': attribute type 13 has an invalid length. [ 627.420470][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3880'. [ 627.721612][T19658] netlink: 'syz.0.3882': attribute type 1 has an invalid length. [ 627.761827][T19658] netlink: 'syz.0.3882': attribute type 1 has an invalid length. [ 627.794070][T19658] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.3882'. [ 627.816248][T19662] No such timeout policy "syz1" [ 627.820893][T19663] netlink: 'syz.0.3882': attribute type 1 has an invalid length. [ 628.005939][T19671] netlink: 'syz.1.3887': attribute type 3 has an invalid length. [ 628.021378][T19671] netlink: 772 bytes leftover after parsing attributes in process `syz.1.3887'. [ 628.033294][T19671] netlink: 'syz.1.3887': attribute type 3 has an invalid length. [ 628.041521][T19671] netlink: 772 bytes leftover after parsing attributes in process `syz.1.3887'. [ 628.139081][T19673] netlink: 'syz.1.3887': attribute type 30 has an invalid length. [ 628.160213][T19673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3887'. [ 628.286204][T19673] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 628.305264][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3889'. [ 628.308242][T19673] bond2 (unregistering): Released all slaves [ 628.380962][T19680] vlan3: entered allmulticast mode [ 628.387361][T19680] macvtap0: entered allmulticast mode [ 628.648108][T19690] siw: device registration error -23 [ 628.888981][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3893'. [ 629.135254][T19697] batman_adv: batadv0: Adding interface: ipvlan2 [ 629.152900][T19697] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 629.181499][T19709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3897'. [ 629.195845][T19697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.207601][T19697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.218748][T19697] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 629.269309][T19709] bond0: Unable to set down delay as MII monitoring is disabled [ 629.344936][T19717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3900'. [ 629.372799][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 629.437382][T19719] vlan3: entered allmulticast mode [ 629.454153][T19725] Cannot find add_set index 2 as target [ 629.455779][T19719] macvtap0: entered allmulticast mode [ 629.479180][T19719] veth0_macvtap: entered allmulticast mode [ 629.488153][T19725] netlink: 'syz.4.3903': attribute type 62 has an invalid length. [ 629.523186][T19728] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3905'. [ 629.544971][T19728] netlink: 'syz.2.3905': attribute type 10 has an invalid length. [ 629.564423][T19728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 629.576659][T19728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 629.588351][T19728] hsr0: entered promiscuous mode [ 629.595990][T19728] bridge0: port 2(hsr0) entered blocking state [ 629.606209][T19728] bridge0: port 2(hsr0) entered disabled state [ 629.613660][T19728] hsr0: entered allmulticast mode [ 629.629150][T19728] hsr_slave_0: entered allmulticast mode [ 629.642289][T19728] hsr_slave_1: entered allmulticast mode [ 629.654710][T19728] vlan2: entered promiscuous mode [ 629.666073][T19728] geneve0: entered promiscuous mode [ 629.691526][T19734] netlink: 'syz.4.3907': attribute type 1 has an invalid length. [ 629.695726][T19729] netlink: 'syz.2.3905': attribute type 27 has an invalid length. [ 629.813472][T19731] netlink: 'syz.3.3906': attribute type 1 has an invalid length. [ 630.008325][T19739] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 630.021516][T19739] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 630.027984][T19742] IPVS: length: 225 != 24 [ 630.397663][T19761] xt_l2tp: wrong L2TP version: 0 [ 630.758396][T19771] erspan0: entered promiscuous mode [ 630.785241][T19771] macsec2: entered promiscuous mode [ 630.794634][T19771] erspan0: left promiscuous mode [ 631.348224][T19792] netlink: 'syz.1.3924': attribute type 1 has an invalid length. [ 631.356322][T19792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.689116][T19802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.463320][T19824] pimreg9: entered allmulticast mode [ 632.908306][T19852] __nla_validate_parse: 5 callbacks suppressed [ 632.908326][T19852] netlink: 212048 bytes leftover after parsing attributes in process `syz.4.3938'. [ 633.064969][T19858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3942'. [ 633.170736][T19862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3943'. [ 633.189030][T19862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3943'. [ 633.277550][T19870] No such timeout policy "syz1" [ 633.353930][T19873] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3947'. [ 633.447782][T19875] tipc: Started in network mode [ 633.453053][T19875] tipc: Node identity fa1b87154a32, cluster identity 4711 [ 633.464460][T19875] tipc: Enabled bearer , priority 0 [ 633.472966][T19875] syzkaller0: entered promiscuous mode [ 633.479417][T19875] syzkaller0: entered allmulticast mode [ 633.520527][T19877] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3948'. [ 633.557466][T19875] tipc: Resetting bearer [ 633.808640][T19886] bond2: option arp_all_targets: invalid value (129) [ 633.828071][T19886] bond2 (unregistering): Released all slaves [ 633.876146][T19890] netlink: 203 bytes leftover after parsing attributes in process `syz.1.3952'. [ 633.949369][T19890] netlink: 203 bytes leftover after parsing attributes in process `syz.1.3952'. [ 634.115848][T19896] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3956'. [ 634.157340][T19898] No such timeout policy "syz1" [ 634.559090][T16914] tipc: Node number set to 2955511573 [ 634.904722][T19929] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3967'. [ 634.925106][T19930] netlink: 'syz.3.3966': attribute type 1 has an invalid length. [ 635.046313][T19933] bond4: (slave bridge3): making interface the new active one [ 635.080345][T19933] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 635.335525][T19940] geneve1: entered promiscuous mode [ 635.347493][T19940] geneve1: entered allmulticast mode [ 635.532687][T19945] netem: unknown loss type 11 [ 635.557979][T19945] netem: change failed [ 635.574197][T19951] netlink: 'syz.2.3973': attribute type 1 has an invalid length. [ 635.576637][T19947] netlink: 'syz.2.3973': attribute type 1 has an invalid length. [ 635.642204][T19951] 8021q: adding VLAN 0 to HW filter on device bond3 [ 635.692375][T19947] 8021q: adding VLAN 0 to HW filter on device bond4 [ 635.734892][T19958] bond0: entered promiscuous mode [ 635.755158][T19958] bond_slave_0: entered promiscuous mode [ 635.775254][T19958] bond_slave_1: entered promiscuous mode [ 635.810029][T19958] debugfs: 'hsr0' already exists in 'hsr' [ 635.831835][T19958] Cannot create hsr debugfs directory [ 635.860688][T19958] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 635.883661][T19958] bond0: left promiscuous mode [ 635.899013][T19958] bond_slave_0: left promiscuous mode [ 635.904922][T19958] bond_slave_1: left promiscuous mode [ 636.549273][T19987] netlink: 'syz.1.3983': attribute type 1 has an invalid length. [ 636.576147][T19987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.048794][T20002] netlink: 'syz.4.3987': attribute type 3 has an invalid length. [ 638.062796][T20042] __nla_validate_parse: 9 callbacks suppressed [ 638.062819][T20042] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3998'. [ 638.111345][T20042] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3998'. [ 638.136362][T20047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4001'. [ 638.278363][T20052] block nbd2: Unsupported socket: should be TCP or UNIX. [ 638.338706][T20057] x_tables: duplicate underflow at hook 3 [ 638.903633][T20078] netlink: 'syz.3.4012': attribute type 1 has an invalid length. [ 638.925577][T20081] No such timeout policy "syz1" [ 639.014954][T20086] netlink: 'syz.1.4015': attribute type 30 has an invalid length. [ 639.039993][T20086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4015'. [ 639.049747][T20078] 8021q: adding VLAN 0 to HW filter on device bond5 [ 639.102198][T20080] bond5: (slave veth3): Enslaving as an active interface with a down link [ 639.199943][T20090] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.207579][T20090] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.291126][T20090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.303861][T20090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.358432][T20090] veth0_macvtap: left allmulticast mode [ 639.403105][T20090] vlan2: left allmulticast mode [ 639.408133][T20090] bridge1: left allmulticast mode [ 639.415181][T20090] sit2: left allmulticast mode [ 639.444227][T20090] vlan3: left allmulticast mode [ 639.449557][T20090] macvtap0: left allmulticast mode [ 639.461106][T20089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4016'. [ 639.499562][T20086] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 639.515090][T20086] bond2 (unregistering): Released all slaves [ 639.550029][T20078] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 639.559451][T20078] bond5: (slave batadv1): making interface the new active one [ 639.567956][T20078] batadv1: entered promiscuous mode [ 639.574603][T20078] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 639.603860][T19875] tipc: Resetting bearer [ 639.658026][T19875] tipc: Disabling bearer [ 639.690162][T17183] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.719025][T17183] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.747733][T17183] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.772587][T17183] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.780707][T20105] xt_TCPMSS: Only works on TCP SYN packets [ 639.942612][T20119] 8021q: VLANs not supported on sit0 [ 640.552355][T20140] netlink: 'syz.4.4031': attribute type 1 has an invalid length. [ 640.615130][T20142] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4032'. [ 640.863997][T20150] tipc: Failed to remove unknown binding: 66,0,0/0:3314690930/3314690931 [ 640.890352][T20150] tipc: Failed to remove unknown binding: 66,0,0/0:3314690930/3314690931 [ 641.116895][T20161] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 641.151076][T20161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4037'. [ 641.238638][T20165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.274828][T20165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.329841][T20165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 641.363122][T20179] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4041'. [ 641.368168][T20165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.525843][T20191] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 641.554493][T16915] IPVS: starting estimator thread 0... [ 641.579436][T20191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.646001][T20165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.651311][T20197] IPVS: using max 27 ests per chain, 64800 per kthread [ 641.683316][T20165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.869553][T20194] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 642.354434][T20223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4045'. [ 642.357157][T20231] netlink: 540 bytes leftover after parsing attributes in process `syz.2.4048'. [ 642.598401][T20241] [ 642.600880][T20241] ====================================================== [ 642.608169][T20241] WARNING: possible circular locking dependency detected [ 642.615196][T20241] syzkaller #0 Not tainted [ 642.619957][T20241] ------------------------------------------------------ [ 642.627071][T20241] syz.2.4051/20241 is trying to acquire lock: [ 642.633197][T20241] ffffffff8ff4be18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 642.642563][T20241] [ 642.642563][T20241] but task is already holding lock: [ 642.649936][T20241] ffff888028aa7570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 642.659390][T20241] [ 642.659390][T20241] which lock already depends on the new lock. [ 642.659390][T20241] [ 642.669802][T20241] [ 642.669802][T20241] the existing dependency chain (in reverse order) is: [ 642.678834][T20241] [ 642.678834][T20241] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 642.686944][T20241] _raw_spin_lock_bh+0x36/0x50 [ 642.692260][T20241] nr_rt_device_down+0x153/0x860 [ 642.697819][T20241] nr_device_event+0x137/0x150 [ 642.703213][T20241] notifier_call_chain+0x1ad/0x3d0 [ 642.708945][T20241] netif_close_many+0x2ae/0x420 [ 642.714444][T20241] netif_close+0x160/0x220 [ 642.719421][T20241] dev_close+0x10a/0x220 [ 642.724212][T20241] bpq_device_event+0x377/0x6a0 [ 642.729713][T20241] notifier_call_chain+0x1ad/0x3d0 [ 642.735356][T20241] __dev_notify_flags+0x16d/0x310 [ 642.741189][T20241] netif_change_flags+0xe8/0x1a0 [ 642.746702][T20241] dev_change_flags+0x130/0x260 [ 642.752134][T20241] dev_ioctl+0x7b4/0x1150 [ 642.757096][T20241] sock_do_ioctl+0x23e/0x320 [ 642.762420][T20241] sock_ioctl+0x5c6/0x7f0 [ 642.767293][T20241] __se_sys_ioctl+0xfc/0x170 [ 642.772425][T20241] do_syscall_64+0x15f/0xf80 [ 642.777598][T20241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.784118][T20241] [ 642.784118][T20241] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 642.791975][T20241] _raw_spin_lock_bh+0x36/0x50 [ 642.797483][T20241] nr_rt_device_down+0xbe/0x860 [ 642.802897][T20241] nr_device_event+0x137/0x150 [ 642.808303][T20241] notifier_call_chain+0x1ad/0x3d0 [ 642.814030][T20241] netif_close_many+0x2ae/0x420 [ 642.819437][T20241] netif_close+0x160/0x220 [ 642.824475][T20241] dev_close+0x10a/0x220 [ 642.829252][T20241] bpq_device_event+0x377/0x6a0 [ 642.834896][T20241] notifier_call_chain+0x1ad/0x3d0 [ 642.840787][T20241] __dev_notify_flags+0x16d/0x310 [ 642.846354][T20241] netif_change_flags+0xe8/0x1a0 [ 642.851828][T20241] dev_change_flags+0x130/0x260 [ 642.857218][T20241] dev_ioctl+0x7b4/0x1150 [ 642.862086][T20241] sock_do_ioctl+0x23e/0x320 [ 642.867286][T20241] sock_ioctl+0x5c6/0x7f0 [ 642.872151][T20241] __se_sys_ioctl+0xfc/0x170 [ 642.877358][T20241] do_syscall_64+0x15f/0xf80 [ 642.882654][T20241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.889088][T20241] [ 642.889088][T20241] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 642.897006][T20241] __lock_acquire+0x15a5/0x2cf0 [ 642.902494][T20241] lock_acquire+0x106/0x350 [ 642.907615][T20241] _raw_spin_lock_bh+0x36/0x50 [ 642.912992][T20241] nr_remove_neigh+0x25/0xe0 [ 642.918202][T20241] nr_add_node+0x1e41/0x2630 [ 642.923506][T20241] nr_rt_ioctl+0xe59/0xf90 [ 642.928469][T20241] sock_do_ioctl+0x101/0x320 [ 642.933861][T20241] sock_ioctl+0x5c6/0x7f0 [ 642.938745][T20241] __se_sys_ioctl+0xfc/0x170 [ 642.943863][T20241] do_syscall_64+0x15f/0xf80 [ 642.948991][T20241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.955422][T20241] [ 642.955422][T20241] other info that might help us debug this: [ 642.955422][T20241] [ 642.965868][T20241] Chain exists of: [ 642.965868][T20241] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 642.965868][T20241] [ 642.979737][T20241] Possible unsafe locking scenario: [ 642.979737][T20241] [ 642.987294][T20241] CPU0 CPU1 [ 642.992668][T20241] ---- ---- [ 642.998038][T20241] lock(&nr_node->node_lock); [ 643.002810][T20241] lock(nr_node_list_lock); [ 643.009930][T20241] lock(&nr_node->node_lock); [ 643.017496][T20241] lock(nr_neigh_list_lock); [ 643.022219][T20241] [ 643.022219][T20241] *** DEADLOCK *** [ 643.022219][T20241] [ 643.030642][T20241] 1 lock held by syz.2.4051/20241: [ 643.035778][T20241] #0: ffff888028aa7570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 643.045851][T20241] [ 643.045851][T20241] stack backtrace: [ 643.051850][T20241] CPU: 0 UID: 0 PID: 20241 Comm: syz.2.4051 Not tainted syzkaller #0 PREEMPT(full) [ 643.051874][T20241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 643.051885][T20241] Call Trace: [ 643.051892][T20241] [ 643.051900][T20241] dump_stack_lvl+0xe8/0x150 [ 643.051928][T20241] print_circular_bug+0x2e1/0x300 [ 643.051956][T20241] check_noncircular+0x12e/0x150 [ 643.051983][T20241] __lock_acquire+0x15a5/0x2cf0 [ 643.052012][T20241] ? __lock_acquire+0x6b5/0x2cf0 [ 643.052034][T20241] ? nr_remove_neigh+0x25/0xe0 [ 643.052057][T20241] lock_acquire+0x106/0x350 [ 643.052076][T20241] ? nr_remove_neigh+0x25/0xe0 [ 643.052100][T20241] ? do_raw_spin_lock+0x12b/0x2f0 [ 643.052118][T20241] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 643.052135][T20241] ? nr_remove_neigh+0x25/0xe0 [ 643.052157][T20241] _raw_spin_lock_bh+0x36/0x50 [ 643.052174][T20241] ? nr_remove_neigh+0x25/0xe0 [ 643.052196][T20241] nr_remove_neigh+0x25/0xe0 [ 643.052220][T20241] nr_add_node+0x1e41/0x2630 [ 643.052248][T20241] ? nr_call_to_digi+0x126/0x1b0 [ 643.052272][T20241] nr_rt_ioctl+0xe59/0xf90 [ 643.052297][T20241] ? kasan_quarantine_put+0xbb/0x1f0 [ 643.052321][T20241] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 643.052346][T20241] ? apparmor_capable+0x126/0x170 [ 643.052365][T20241] ? capable+0x88/0xe0 [ 643.052386][T20241] ? nr_ioctl+0x1b1/0x3b0 [ 643.052406][T20241] sock_do_ioctl+0x101/0x320 [ 643.052426][T20241] ? __pfx_sock_do_ioctl+0x10/0x10 [ 643.052441][T20241] ? do_futex+0x333/0x420 [ 643.052477][T20241] sock_ioctl+0x5c6/0x7f0 [ 643.052494][T20241] ? __pfx_sock_ioctl+0x10/0x10 [ 643.052510][T20241] ? __fget_files+0x2a/0x420 [ 643.052529][T20241] ? __fget_files+0x3a0/0x420 [ 643.052548][T20241] ? __fget_files+0x2a/0x420 [ 643.052569][T20241] ? bpf_lsm_file_ioctl+0x9/0x20 [ 643.052585][T20241] ? __pfx_sock_ioctl+0x10/0x10 [ 643.052601][T20241] __se_sys_ioctl+0xfc/0x170 [ 643.052615][T20241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.052632][T20241] do_syscall_64+0x15f/0xf80 [ 643.052650][T20241] ? trace_irq_disable+0x3b/0x140 [ 643.052667][T20241] ? clear_bhb_loop+0x40/0x90 [ 643.052684][T20241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.052700][T20241] RIP: 0033:0x7f33c4b9c819 [ 643.052716][T20241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.052731][T20241] RSP: 002b:00007f33c5a70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.052750][T20241] RAX: ffffffffffffffda RBX: 00007f33c4e15fa0 RCX: 00007f33c4b9c819 [ 643.052763][T20241] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000004 [ 643.052774][T20241] RBP: 00007f33c4c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 643.052784][T20241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.052794][T20241] R13: 00007f33c4e16038 R14: 00007f33c4e15fa0 R15: 00007ffd78a35a18 [ 643.052813][T20241] [ 643.487164][T20253] netlink: 'syz.3.4052': attribute type 1 has an invalid length. [ 643.499543][T16915] IPVS: starting estimator thread 0... [ 643.609019][T20255] IPVS: using max 75 ests per chain, 180000 per kthread [ 647.439071][ T5831] Bluetooth: hci2: command 0x0406 tx timeout