last executing test programs: 2.249591196s ago: executing program 3 (id=11127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2d, 0x0, 0x0, 0x4, 0x8, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x700, 0x1, 0x800}}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_newneigh={0x34, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, r3, 0x8, 0xc0, 0x2}, [@NDA_MASTER={0x8, 0x9, 0x5}, @NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_MASTER={0x8, 0x9, 0x6}]}, 0x34}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) poll(&(0x7f00000000c0)=[{r0, 0x320}], 0x1, 0x80) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.24923125s ago: executing program 2 (id=11128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) syz_emit_ethernet(0x12e1, &(0x7f00000009c0)={@remote, @multicast, @void, {@mpls_uc={0x8847, {[{0x7fff}, {0x7, 0x0, 0x1}, {0xe438, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1}, {0x7, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7}, {0x3}], @ipv6=@generic={0xc, 0x6, "c483cb", 0x1287, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x87, 0x2, 0x1, 0xc, 0x0, [@remote]}, @routing={0x73, 0x12, 0x2, 0x6, 0x0, [@remote, @mcast1, @rand_addr=' \x01\x00', @empty, @mcast1, @rand_addr=' \x01\x00', @mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x37}]}, @hopopts={0x4, 0x20b, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x38, {0x3, 0xc, 0x4, 0x5, [0x4, 0xfffffffffffffff9, 0xf3b0, 0x8, 0x101, 0x3]}}, @generic={0xb, 0x1000, "d643351e0c38a19f9f13c0073dc66c19e7929952eceb66b4a19065a98779b50e34b295dd3a8d93b6aa6d9e00519ca326dfe29e2f321c7d39e7d03a840e8dfa81dac748c5e3f6f8eb896964d12b50a446c0e3bcd5ae7983a9db8394f2a59a42aff9e1f25ca3a4aafe8cad14c510166a37c42e07684548abf8692d354ff6ddd09e5dcc26ce13fd684d7b4c73e6712949484176d4e6660123101a3b902bfc8a15c03e21e0cdc0775a36c960e112e7bc8d8313a0d46a92383657d13c9c2b8b360c9c2da443aa4e2d8dffc7d0fd5a655dd0daa70fcfd59da7108620437cc8aa74965056135c558e80e16a08017ef89dbccec61599e0cf492284d6b15f00ddd0a49e1fe2c6e5de6de060251f084ad59b44eb6b2a9d1f5d1f22a6d45ee27ef876b5b9fdc627b0ae27507c627ce610879dac4b7a206611cd9179e0a4d502ad3025270227971be3d892e1976927c86a7b1b47997a2e5d5143920286e446655c276816d2f90e11349c2814ef55fa7bd13d4d03ec7f4b6743c21a9c8f5585874c67634dd23184cdeb57650da2fbb4d4fd959c2bad747943625d58852d5134f979bcbf4723d85e5b5e5b8a020e3861a744fb5895bac9992da782e9b23cdd02e77ccfa489a3421700260f22d2cdd09fc8a1e9d77bea06d1362819fef700ca6b137223d3ab03e7200184a79a3ce48464216f1e48b21b845429fb525bfe1cbd0fee49d73501beee57cda059a0800c14873292d90be56a3d3a5f7fe0518925313991a3f76917783bda6f59429110adcb9985f6fd4bf9609361f617f2d7b9b3366a45eb57362ffbcf5a236ff699b5703a4e0229b323b07bf4665846f575fa5a1afad721b35d4a3f6fbe647b5e7b33a225f8076c9aeed530ba8ba86320888fc890e6602458b703112131e0447d50ae5339c324889e040673b11423fc1d74e3478accee580c2297ad883bc10946545070b7ba99caa40c638ee3bc1b310cd50dace9bcf599e9959b44b4ab8b894b2694b1c88a16ad8de60ec167711f686c57cecb37fed41898c7a71a47d2f8043b1767457c16defae34d1df3455df5e7eaa9bd4dffc0f54c6ca95d7359a534f7bbcab535e51df1013093c385d18f2c373392d6d8dd51245d1d10178297e17e0acd0ddf88ed0137eb085539f21f4aa945f7e9a296cd0f154ea172e14ab7a6bd4ba672b923bc38e93d891305f610693af3b9191d8b229a4fdffa58c2cf5ebb4c36b3d6d51f792345acbdf849b5690ddec29a812207010877ffe34fa7d2f7e13c568b7104f24577f7e7c204027d328743aed6f73153283c7055adc5072e0bccf7fc8fff0b4c6e52366a7353bc11dbe58d059b48da35b71c17c032bbdf5d9df5f0b85a20c463a6648d33e6ec821a901cee4ea4e7b6ea3750d77e10dab94046355c76ce79faca7f0bfc69b5c3741c938a35555dc144b87a758f9bb92b70f552a1bc5071ecb7f6aea605f1a50264270c864db6e06e069337cc9ac0a5ba37059dd1b63b5a0560a777a6f20d3499fa1d54ce099809c50ea9f301745bbfb459211221cf51df34ce26fbef7e3496538e659ee1a210a7a48e7633ab81c1738bd1f34dde0a949439253212542c28eadfc2ff0abd3b2c873cfc07590ac73d16d4708490d9672053aa2feda086fe744bdcb03a34eef92e2e44243b5c8a624e1ef2ffd2d756f639478c676ba12b6624795d41fc946313ec71895a26474574eac7be932ccf4060eb80ceeb002dbe89b2ae07eb99e845591041e9e955490689e6eae9fea34c71616c9f523af0ad5bd87583164e6a5469317aeab1c184966e63088c4c70fd5755947baaad32fb73134034a71db954b26ed2c8257f98a1b2a440ef87404719d2980f98dd751fcf1e4e7a27a7b37c9e77bc39229328d097a54cbf8ad4dcb341f04cd245af700b8abfd2fb58a8dca89e7e0808b9fb9d81cee7f03cebddf4c7e70bd3d85eda5dd9749424acb2543610a3837a153d266a12038336b2493902615ae188c8093a66c5e90990f6d09350c790cf3a1e5e0af541fcfcb6d5a0e72c2668e1f13a9fa1e868e17446c8ec6223e8103c1249af5365178906f10a607c3b2d9fb7e19ac6c347a9d3498cf232e21073fc39ae02fb6da2d6ec08a4be6c0156dae37b259be58246db2ecc41ee4cebec67302b8f1f3763d0a5632d1eb1853b8a4459374b65c07af6fe30d7cdd9d65c495d4ce2e55a2fc484e3e9188ad472ef877a5649a2262ce9eae23f0640d727dc095ad735c1e7b380945f561ff6cd8a0160f3c2d3d333089c8ef350a2a1b6744d49f847cc25a23006f42885ff4f6eb48318d2fa3f3b587aa6b3933075ede1e1ed421bd36d598ab9cce1f011412ee4516c8c3cae7439b6704386128aaa7644e7e3331fb528ea21d1ce4810b9ea7debb584ec71dab19e8bfd92d81c3cec7beb6cf37592c5498302e144305e9b8cf6073b77341736ee46a6dde978972ade321af43f3e3b375df20d2203c04e02de11c90907539503d6a0ce56a59c90777307190949b2900ed17453ca2aa78138b92f900d3eebbf3f8621c867c3cb3c478e93422ae37d86d9bd4a38d74ad41c45754cb7a095ef752d8c43d0dbfdaf8410a8a13c837adb21639ba2b36715d33f2c468f27c110daada649962d8705ba840cb2f86c50a14fca472c054e1eb95e1389bf05aa43c0be46509c60a14cdd39f09b983f8416d13d6c846812047ef93f5446d5b5dc6821345bee6c7df1682eecb00f60bb558b05e82ab36bae5c4999141db7d66a0018c397751001fb30d041d9d3d08be6d693922c8bf0e2ba57879b13a6042d2866c860ba5d9e9921e2dc3f1da4f3bf38a85c7288d79ab00484cc48fb7c1b61907c53f6a1991cc025fc4889c8a95893d5e15d59cee3643ef4fed84ce7988d2d48a70136701a71000b14f5b29288f67f821bf23027fbfb51d0d11bccdb55423899f3bf66101c3eba5711fb1ff3a866d2687e9ab108ecaedb8f3e3d7ed49c8db5670e3ed955bf9c88378835adf1020c6d35dc12ae780ad83668ce9158ab1eb12a637ea7dbe6a9029292c6c814b88eea5799dc068c1e0a2935f79065d0c12308266db2749d4c93b6278f3eee68dc7e5b86addcb8727c0c90af543171fc8e43d0052d4656ebf9abfe879eb6f9d88c65bf588dde4e61bcde4136a32b37c56a5fd220fa9a5aac6527ca2b3b35fe3a2e441bf10f0a540a7c8ecbf724daafbe2f2ee621a38915e8ae364cd46675c7525a852791a5785f861657c107e1f7cb90998294d67f8a6549cba89402c9f290b16823850819b49b76c93663f502ed5825112d14ec86be9326475dea42f8adba9464053375528e32fea1487931c87915bb6ef687779c7285ed460cc34faae5e4d90e4b0f94ce7157f169639011dc01b2dc2f29bb3bfd421afd6eb791f9fecf915c95f2ad446d8e612462bf664ccb69109d31fd04370e3a71f6014c966c06d28d1555d2cbaa62f02d4fbeaf2f59daf754c1a808c5ebad6fed931f235527dddc372c819af6c9717ee7a6b640d704d5bd7057eb1625c402d09f0da70c7ba2d7f00970b505f712a4106c9719e98fdd30b92f3d8f751ad0cd782c89666afb48e98c099b6e3f8ea1762f8ffe1361a1fb31b00edb70125c9192bd3cf7fb2758bd37b239a563690e7aac131c92d4bb8b4f5a518da4576d51ad6fe11455d368cf85d7df2c76ca04ed4c95e3301bfee20eefc6c4f6b6117f66c4f1a685d497be089f2d1002de65c6895c59f9cb54d1aa4ab74d8331cb729c79583cd0a8c70bdb649c25d1b3446426a83e57f07241f9690861cb1a9c6cb1d82b47382cf47241a17abe5ec689044598d06cb6a9eb7ae2b02826aa445061b2e38733b8a1c9830f5a3866e10fa546c3b475fac7c01d659df859bef56e34e24b33c55a471959cd50b8d369ca9ed228e5d66dbea1095cbe17d04273323dc0ca93be2b65c518adb82bcf101f1b1e220bbceafbc7ad86eaa895f61a507a5b8997df3f44bce7cd1b88a912e940b22a889b412f6ae970e11ff8d63d5dfce86e77a3043689081506bf81b99fe7c684588bbce9735f60b8c3ec91e49e60f460879d5ca4b02591d6aaccdf514bb774658d17513c38100c3c512c9c2b59c6ea97f8a19b60fa9c08e7be4296fd66ad14aade349aeff8a4920dd74672fd6fd066897ef7c57279122ffcea17ba9fe4ab010f85af0072e54d7ed56a2a95babbd243377382f7facd106cde3c963187a5ffd30b8e1d5fadc17756a40f9233e79f6c146893ecd46f7fef733de1be8b1d2ff2588d87cac9d5f97833e8a93ebc8db6059ed3db3b0326e90d7cf813ff5e0bae3d4845c052169c5e698e55f3686c675a28eb1670dfca1381d5a9369a190acceb1ef72cb1880b32d508b63acf74d2c98116befd228173b166f46db90feec60551e035ecf2df2da9fc492e18819ed86b487c1780b3951a3103442dd9e44c52fbe0e74a8169220c9b33529bc165a9df41f347e8257469876398caa2c9784828c38316fe9cd09d05056e74491b0350175288b5076538838c0740a61473212d1adacdf5a845b5f4c1c95fc5a8132d05159daed472c5063cc07fd9a93f245a3fc254c35a00543a51e7bd83296966aa9068dcd15d4d563c5a90fb261ab3264cd79e0e4b3b91e61cd850fb18bd4763af23b7f52690bd732af47ca10040b05fdc1b7f5d087463655cdf819cf656c425e38de20e34d4e88c962205f92492212f1f7677c69fc109fabbb6a37f897c9d6a5400b70226a913666094d43ef72f50cf949cc48b9cebe05dcf4b674a1f24957716ce059748c41372adbd72ecd4610f47c53ac9a87c689835a3be51052dcaf1b3c48ce249163061a50b00024be0f03969dced53f12a33f913ae0faab7ce823a83e9711e662080ff6d1474a23c8f768a4fdb8509b7394e3960f0f46cff66a15ed760b311b83ac1552fe2119972eef19c53df0c576154233900dd5778f98fe5e69050f66a1b1aadf2f9f5d5b1e15a8c1028a9418dce89e6082b8ad64988a0b8278a6dbed50edfb1c50fdee14ac90e48b9327a6ac39ca1279f42222a6661ef7e151b8a72d63b304bacd6e753d94ead633500bc1514880e07df77aaf6cfc6717b3631c2525d1732b4299ce69026226ffdb97f28df1de6f57e379a302a69cdb62b18f90e51297b903bbfbb98d37150579b1da87674d9b4d5900ad3c5c45ad15563b602af32a124d0677e08156ed2d3dbd7018ccdce59cd670e5c122e1633d754962a09ddafb6d508e9311c9521c111ab3c3c4971af777046556df24c421d9e86bd8e0beeb3f1523350cfecf50b266f44937a4224b3aff1a08543bf52eeaccdc48ab202fcbe4d4aa83d48ad6a65bb11c332af5fd979baee32194ac296fbdb1f56a3a71479c0941683914b40ae17de8a2fb42c49b78799a20388f77a049faaaa8fb65be7379007717013eda57ee3a9400a2ea2705a4dc69995309fe628cf115d7816c9df9124f2e6e55b5d1cd13bf2f5e124a183086061a853c49b4575378b3edfb66069a3dfd54377b2f1618eaccc6a0e678bf4158eae31f0f4a11c9b1a7068a61cc1013659830d88bd1da1f6cabe7e637793d67927f841e5da6239bfb8ed5c4f7841558c84d17f767b74bda702542b07a565bfa5a23a53c0e8460167fc6be03641b352187747bf355ac81bafbe2ef2ff95045446b85c6ebacb8672ab4710543a36473ecf06fcc522012b4ec0553a8cbdfef48ef050b0787ea251f6bd151c8993fdb698d1f8dfda6e32865f3738376a96e1f3839a8277cd65bcf13c351a17452b8d8b8cfcc940d46459b8da8c9d12999b2c0a3af38ff15c94a914"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x4}, @pad1]}, @dstopts={0x6, 0xd, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x7f}, @generic={0x9, 0x18, "d47927bf01998699e8dbd3667c776a17f5148bf50ebce824"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @pad1, @calipso={0x7, 0x28, {0x1, 0x8, 0x7, 0x400, [0x0, 0x3, 0x2, 0x1]}}]}], "6a35aa6bc6fdad15a5e810d00b56209e7410cf1dcb8f7fa4dfd4d84cc37c53ea2ac6f12b1c50402e8ddf098f8456b697b486e7dc2cd539d49be07d1aeb2b3bc2140d28d364d37f145964f32d8f23e807d23ea725b861b0bee6187e26c8c5cf47274848692630dc24d2a155d7be2724ede1378cd5ab1e34a9e7485c8a5bd8a6cfb040abbbe059a8180bc8396ad6244d2e06f941d99a99dd577e30b8089f6cd550996d21b29bfb924ac09197f9080f929eb833b535750d182e35ffd1a5f346da516796db8073c95293d819d26a9150e180206bdad8ec8b58bd73f7353518eb8b94dd632d855e0e1d82f35881d2e23494bbaea20830c7ed72"}}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xaf, 0x6fa, 0xa9c, 0x30f]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0xfffffffb, @local, 0x400}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x4000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e24, 0x10, @mcast2, 0x6383}, @in6={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x5, @private2, 0x7}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x3}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xd8) 2.115411686s ago: executing program 2 (id=11130): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001400090527bd7000fddbdf25021f00ff", @ANYRES32=r3, @ANYBLOB="08000200e0005b02"], 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r1, &(0x7f0000000580)='s', 0x1, 0x4004040, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') openat$cgroup_ro(r0, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000480)="96bc14585c62", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @broadcast}}}], 0x20, 0x1000000}, 0x0) bind$unix(r4, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x61d0, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000640)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="c00000001300000426bd4a818b819eab40e19e8f607000fddbdf2500000000000000000000000000000000fe8800000000000000000000000001014e2100024e240000020080002f000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0800000000000000fd000000000000000200000000000000020000000000000005000000000000000100008000000000060000000000000008000000000000000000000001000000534b0000000000000300000000000000050000000000000007000000b66b6e00000002000000000008001d00f4ffffff"], 0xc0}, 0x1, 0x0, 0x0, 0x40040}, 0x20000040) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0xfff5, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee00}, {0xed9, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xfffffffffffffffa, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0xb7}}, 0xe8) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000280)={@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x3, 0x1, 0x4, 0x1, {0xa, 0x4e21, 0xa0, @mcast2}}}, {&(0x7f0000000480)=""/205, 0xcd}, &(0x7f0000000080), 0x44}, 0xa0) 2.045922605s ago: executing program 1 (id=11132): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) connect$rds(r0, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e00010000006ed06dbb2f8b58e9"], 0x14}}, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x701, 0x1}, 0xe) getsockopt(r2, 0x4, 0x3, &(0x7f00000005c0)=""/4096, &(0x7f0000000000)=0x1000) syz_emit_ethernet(0x201, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={r4, &(0x7f0000000100)='\xff\xff\xff\xff\xff\xff', 0x303600, &(0x7f0000000140)={@align=0x80, {0x3, 0x6, 0x8001, 0x4}}, 0x7, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x80}) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f00000000c0)=0x1d4f, 0x4) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000240)=0x4, 0x4) socket$rds(0x15, 0x5, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) (async) connect$rds(r0, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e00010000006ed06dbb2f8b58e9"], 0x14}}, 0x0) (async) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x701, 0x1}, 0xe) (async) getsockopt(r2, 0x4, 0x3, &(0x7f00000005c0)=""/4096, &(0x7f0000000000)=0x1000) (async) syz_emit_ethernet(0x201, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={r4, &(0x7f0000000100)='\xff\xff\xff\xff\xff\xff', 0x303600, &(0x7f0000000140)={@align=0x80, {0x3, 0x6, 0x8001, 0x4}}, 0x7, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x80}) (async) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f00000000c0)=0x1d4f, 0x4) (async) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000240)=0x4, 0x4) (async) 1.983919117s ago: executing program 0 (id=11133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'c'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000808000b400000000028000480240001800b0001007470726f7879000014000280080003400000000a08000140000000420900010073797a30"], 0xc4}}, 0x4008800) 1.874873093s ago: executing program 1 (id=11134): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000000)="3b9f31b362d9345c981059c3e2731d2a23c6e073", 0x14) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x6, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bind$bt_l2cap(r2, &(0x7f0000000980), 0xe) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0xf0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r1, &(0x7f0000001a80)=""/4043, 0xfcb, 0x40, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x10, @loopback, 0x3}, 0x1c) 1.797603563s ago: executing program 0 (id=11136): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0) (async) r1 = socket(0x6, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8948, &(0x7f0000000100)={'vlan0\x00', @ifru_names='veth1_to_team\x00'}) 1.665068647s ago: executing program 1 (id=11137): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x14}}, 0x98}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000002400)="800000800000210ee7decd7a0000", 0xe, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0x3}, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) clock_gettime(0x0, &(0x7f0000000140)) 1.630924234s ago: executing program 3 (id=11138): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000002500010324bd5f02ffdbdf25010000000400ae", @ANYRES32=r3, @ANYRESHEX=r0, @ANYRES16=r1], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000025c0)=""/4085, 0xff5}], 0x1}, 0x10000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r5, 0x0, &(0x7f0000001340)) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000800000000000000000000000105000000080000007fffffff01000085000000000000000001000000000000080000"], 0x0, 0x42}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r7], 0x50}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe1c, 0x5}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000400)={0x0, 0x401, 0x4, 0x0, 0x9, 0x5}, &(0x7f0000000540)=0x14) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000580)={r10, 0x1ff}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000d80)=0x5, 0x4) socket(0x1, 0x803, 0x0) 1.582541421s ago: executing program 0 (id=11139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0xfffffffffffffda4, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000058"}}}]}, 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18, 0x24000841}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/114, 0x72}], 0x4}, 0x3f}], 0x2, 0x60, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) socket$netlink(0x10, 0x3, 0xa) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r10 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000300)=0xe8) sendmsg$nl_generic(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x1f0, 0x30, 0x4, 0x70bd28, 0x25dfdbfd, {0xd}, [@typed={0x8, 0xcc, 0x0, 0x0, @uid=r10}, @typed={0x103, 0x2e, 0x0, 0x0, @binary="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"}, @typed={0x14, 0xf6, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xec, 0x0, 0x0, @uid=r11}, @nested={0xb2, 0x36, 0x0, 0x1, [@nested={0x4, 0x28}, @nested={0x4, 0x151}, @generic="69678491497a17e562850182191b2180db76fef6da65dc55bbc12bbc9923474812ecb8f953e2aa1effa98ac8d4bc3f4d8da71da7c7709c74c52be2740b0925eb157f164d4089a510bef309f0f66960f763f8f950cc34984ec416ee60f58a9376dad1709ab6572f6dee81fd42cdd568fa19b1195afb259980b74d9a5ac3d343422846bfbedc73364348edd333f0db369674e6f4ec9fe40e0228ed989fe7b8595b00dc", @nested={0x4, 0x46}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20004014}, 0x4) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r9, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r12, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000010428bd70000300000000000000", @ANYRES32=r12, @ANYBLOB="00000000051c0000340012800e00010069703665727370616e0000002000028004001200050016000100000008000100", @ANYRES32=r12], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000100000006700000008000300", @ANYRES32, @ANYBLOB="0c00990000000000540000000800c40018bc97000800c300070000000400c500"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1.573393288s ago: executing program 4 (id=11140): r0 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80000}]}}) socket(0x22, 0x2, 0x3) (async) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80000}]}}) (async) 1.470265241s ago: executing program 3 (id=11141): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7fff, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="c8", 0x1}], 0x1}, 0x8c0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x1000000, 0x4) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x1000000, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f00000000c0)={0xb938, 0x0, 0x5, 0x6, 0xd59e}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @broadcast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="f80000001a00010000000000fddbdf25ac1414aa000000000000000000000000000000000000000300070000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000008002300190d0000"], 0xf8}}, 0x20000000) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="f80000001a00010000000000fddbdf25ac1414aa000000000000000000000000000000000000000300070000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000008002300190d0000"], 0xf8}}, 0x20000000) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540217"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) 1.390501666s ago: executing program 4 (id=11142): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000500"/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00'}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r5, 0x0, 0x0) close(0x4) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x4c, r3, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x3, 0x4, 0x0, {0xff, 0x8, 0x0, 0x320, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x5000, 0x2}}, @NL80211_ATTR_SSID={0x6, 0x34, @random="26b3"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}}, 0x20004800) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0xd1ebc2b648c1484b) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x7800, 0x20, 0x1, 0x7, {{0x6, 0x4, 0x2, 0x1c, 0x18, 0x67, 0x0, 0xe, 0x29, 0x0, @remote, @multicast2, {[@rr={0x7, 0x3, 0x2f}]}}}}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000280)={@local, 0x0}, &(0x7f00000002c0)=0x14) getsockopt$inet6_mreq(r6, 0x29, 0x2d, &(0x7f0000000440)={@empty, 0x0}, &(0x7f0000000480)=0x14) sendmmsg$inet(r7, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="ec5317f74decb645fdef81f60b5406d4e7690bf5c16f1c6084178f4401802c761aed966677439fa9389095da43248f6fc533f7387c8ba79f53be971fddaed765eeccc2fedbecdb252bb4716060e3d353f19ee282d4b18385995c57c54d0a1a0d8b7c3a4f3918bdd973f49a133dd88a79cbc7d954cd545fe27db5075824a8a03b19238b1f62f834bf113874d9380bf46cab66dc46d0dd704c788151d4753b633418b5d504550a9e085dd5fb66ae217e92b2a46063dd632d510c1d9f7848bc313270e258cd99d729b67aea9e11f4c62c58a0132c68f8239feb0fff193bfeaba8ba82500668ce60a9332f0da24ec7e0af", 0xef}, {&(0x7f0000000080)}, {&(0x7f00000000c0)="aebe3eaf61a5e04f189fffa87463e16c007625", 0x13}], 0x3, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x88}}, {{&(0x7f0000000580)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000005c0)="1f90e93ffa2ca5accb1cc65c2328558697d8d0628bd81856e44571f22e5ee4672ddffe2ac9158b99cb2330332b8f605112421a249d34f1688c70c81cdd5e366a644c85b8c567bf3d36ea095788b15263ca88d13cbb6987b89aab9aae9d8ca938e1223120dd1edfd7462e0ce32f2e0e1ca5b37eb50cc020ff1f692d49ba39a27d922309059078e3d1a077932f113e19b89d9d0aed3b5ee2dcbd4885e2c213c1bc243999098e8e04f246bb13e81e219aa21f6c012ee4bebb93b21c20cffa3c793cbed4b97e544a2f373279ef13ed5a5f7313d9dc823537cf5c", 0xd8}, {&(0x7f00000006c0)="ad9e70fe4f236c61d396f41e348ee8a02b222d88170d0da0113b8822ac855d0130388476bd633f366848fcde20d421c7c2d2378d4c2c2665d0a90522661be87c4a74b26d5706c34feb50213e909a84efaa83c439278cbd4ec35dc04d072472c283f2c3ae3d00eaa708f16032cc546896f3d14fbf974e379f7657a7e993eeb96fa2b4df77a06ee4955cb9f6b8c0d057850da2389fe7106b9bfde7b772ac2ba6118a99378632c546ee97d997e083f753283e812f12db89868fb46b6dbf", 0xbc}, {&(0x7f0000000780)="c30cb062128ff400d222a2106338e65b50", 0x11}], 0x3}}], 0x2, 0x40000) setsockopt$inet_tcp_int(r7, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r7, &(0x7f0000000400)=[{{&(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000000300)="5dc97adf2cac46c5906e7effbcb84e6c6300284c86eca0ee8b94b58d766a7717eac52b47ceaad018750489f6b3bae52788cde41cbf16db1d85176053048d0820a0c5636f9e2c008a4539616cd1c82998427262e621f5eccc78a5af2c8a14d2f326607b75b192", 0x66}, {&(0x7f0000000140)}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="5b7ed2044982c117241785f36da80d593c5e3f48b76bd6adfd35d67549af8d8e7e7b6f60e99b079a635535e30c1e5a8a12f68aa7e446b312d8439eba32b602fafa05291f34caff87fbe278cea0a1fcb08e1f4aae5621422ae396b30bd749dbda4ac1746f51484a7f7961cb32e4545584bc811da912c01824c3c55745e3ac2a7b73b18c9183f91a751705616977f57d5bb1e8e549297ab6f555ccc18788d831e273ec3b8654b793eca9b490d31d22f7b71c9d685a7e04ecb1ec499dab2c7af919ca0a12a66c0c6186b2b33604c590a345f5857d80e6db3aa35c89bad8c13b9bfdb25e95fff85ec6264d", 0xe9}, {&(0x7f0000000380)="8fe51c5cd7209e4500316badf59aebd6c65be973aae476e78f0f7a22d425578f9a613cf71cd8cfc7c28b622947e988eb267acd5f339d088d4aafd2261ec9670245220a3ee986ec674e5541834793805274c4200f1f2522a918b87547ea1820b159f7b97bd6ffea359c572e55260a6b8b3e17", 0x72}, {&(0x7f0000001980)="c59ed8fe4bfb313a7c9c88ae0649d46520c86a33e660e6cd869a7419566f2545b7a5fd72cd5529119f3c1547db08c4e7abdb47bbb5f8a378c768d6b041626506547be1d7c35554a1f1c7ea797aec1b7ab6d6e4c6679e7b7d1c21e68873567932f328a7d8c3ec58739fb43adde378e8fe3edf42e872f2", 0x76}, {&(0x7f0000001a00)="10433638c8565fa6455177878d4c4920d71743486658af6a7e490c6cf983adc368d7aa72ff5b4d4206d38b05f0657b042015be8fa49d0cdfa9203b4ebf4bb2845376e57a0f0906e23144fbde8692bf60d5259c66d6983bec2174f6fb3428dbc9abb55a28152d453e42d105223241e5a2b8c5988838bfc1c99d3c", 0x7a}, {&(0x7f0000001a80)="85a35f37269732e015f9a90434b85e6f536dabfdd9334b71122bb60d5543d4f9f86610f2e5383c95c84fd481b2063b80c33b036aa79273e1811ccf5e894325e02d6cb0596fcc49d603ca11cb1012bb3df485f0960877ac", 0x57}], 0x8, &(0x7f0000001b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff0001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @broadcast}}}], 0xa0}}], 0x1, 0x2400c042) 1.233647911s ago: executing program 0 (id=11143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xfff3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe2e5}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x31}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc5}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 1.099793523s ago: executing program 4 (id=11144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a80140007000000000000000000000003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c00028006000100"/84], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="400000000a060104000000000000000003000005100008800c000780080009400000000105000100070000000900020073797a3100000000080009"], 0x40}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="00010000160001000000000000000000fe880000000000000000009b0661da8c1e72162a00000001017cfe4c25f71e88fc096d013e55743bf9110000000000010000dd000000000000", @ANYRES32=0x0, @ANYRES8=r3, @ANYBLOB="fe8000000000000000000000000000aa0002000032000000ffffffff00000000000000000000000000080000000000000000000000000000000000000800000000000000000000000800000000000000000000000000000000000000000000000f00000000000000ffffffffffffffff03000000000000000a00000000000000000000000000000000000000210000000000000028bd7000000000000a000000000000000000000000000000feffffff08002400fb7f0000", @ANYBLOB="2cd9717884fcb74463558070d4827013efab794c5750427492f7ce5ac47a4a7b78c09d6165d9ba10f11229528f63d0e9052ef6e0680d9c5419dcce59e1e28ead3fa1e9c9c1c66b1e653258edcee077adf6505e1eecd79a1def14f0ba948a8a59ed54f26d041b02b23a73f3bf3ec4c63cd4cd976c9ae3e8530a4abd000e6fea283084ae944411b43e99ae8e813c57decafe4a489cc7a88457937c494e526ba43bd656cc78d85e8b9031519e9be88b002d17b2bd453d70e49865", @ANYRESOCT=r7], 0x100}}, 0x0) 1.037576474s ago: executing program 0 (id=11145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x5, 0x0) sendfile(r1, r1, 0x0, 0xffffffffffffffff) close(r0) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r8, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) sendmmsg$inet(r5, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000043) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) sendmsg$inet(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="00a18932c8b066877a9a70eb", 0xc}, {&(0x7f0000000340)="16d109b6742a82f52de854c7fc9d8fa69c726c4e1fa39beeca7481ebd6b4aeb616cb66012ef73d856b2adb5c0d2a0b9125d8b3729f4d7d84c1aafefd45ff076f08ae44596ada95876f6ba15b09e724956f6c0cf6eaa9645d5596f8ad2b06bd2f913d9caa1fc4b526943b768b47a439c4c569f7a4ebae132a691be9ec9b5d", 0x7e}], 0x2, &(0x7f00000003c0)}, 0x4040040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x240040c0) 930.496445ms ago: executing program 2 (id=11146): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x700, 0x40, 0x7fff, 0x1, {{0x1d, 0x4, 0x3, 0x14, 0x74, 0x65, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0xa, [{@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x14}}, {@multicast1, 0xc6}, {@multicast2, 0xffffff98}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0x21, 0x3, 0x7, [{@rand_addr=0x64010102, 0x10}]}, @rr={0x7, 0x7, 0x8c, [@empty]}, @ssrr={0x89, 0x17, 0x56, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@loopback}, &(0x7f0000000200)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@loopback, 0x0}, &(0x7f0000000200)=0x14) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [{0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtaction={0x2248, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0x2234, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x8010000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x410000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x7ffffffc, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x1, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x891, 0x100, 0x80000021}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0x103, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0x5, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x4, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0xe98}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x2}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}, @m_vlan={0xb8, 0x13, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x625}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x9, 0x6, 0x1, 0x7fffffff}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4e, 0x6, "4d72bed3110208743c37d5e83984a130a235ce604de82b8c05a146d5b118146be6814667a7143b88ef2cd508d6e309a0bc89f3f874b1166d8209aa243aaa4256c48a053adc9dd150d07c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}, @m_skbedit={0x150, 0x3, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x1, 0x3, 0x0, 0x2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xc, 0x3732, 0x6, 0x4, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf7f, 0xc, 0x4, 0x80000001, 0x6}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0xc9, 0x6, "37b8e19a776822751b9da7bfd79f0555282ca284a0ebfabaeffc79d9b51a4588d1bd77e678e62eb0e55d24add635c50a299724ba91510155e3e979da7e05a98855765b576ce1e79dfdf87e8e47c7bc01d459cbc69a80fbb3cc95850785fe705b4bdeb20e80f79ff9dada3eafbf05f6177332123bd8038e373363d09e62a036709a9d9cde745fa98f9f2aa0ea0815b2d107c294c101a623f48a377d9c5596d476cb32c34b002f67e4e6bd767c89317924cdb09cd1969217dab8a72dc5fb3b62e21f639851a3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x1050, 0x1f, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0xd}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x188, 0x11, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0xffffecea, 0x0, 0x5c3, 0x3}, 0x4, r0}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffb31, 0x1, 0x10000000, 0x7}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xd70, 0xfffffffffffffff9, 0x10, 0x400}, 0x4, r4}}]}, {0xfc, 0x6, "670d14ffcbf134efaff2e5fee95867eebc7ac4659c5f666071c80aac718f5df59af7a3ded86c8f821eb2f9ea2afd59f8da43748fbb7a2ac9f941cb932ff645ae1b049c9ee26b212c85834a59105488f2da7e55b2a05db162b4170d49ec67e8b81860b49c2425d9141945d7a9b3961e7ad9abf14e09ce6418eacb2dc6cefc5e4be7ff9b18f5978da078e7f84660dd5aecbe80867aa9b350ec44eadc1d4eae4ab1571e39cfb43ed91477f1b6c4096f5ef470390a80c75f4052b24ff8a02a6b1ed31ca8b7ec5e8ff1130826947ab458c04bfcefb1ea234127eb7a6b4ee67244af305ebbbb7962cebd7fd0becce4eb5b2154ec2fc537181987ae"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x2248}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)={0x128, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @u32}, @typed={0x8, 0x10b, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0xc, 0xb2, 0x0, 0x0, @u64=0x9}, @nested={0xe1, 0x3f, 0x0, 0x1, [@nested={0x4, 0x127}, @generic="ffb84017de4be626085c717cd68df496d047cb5cbc438412a6bfb086c914273579dbb6ec5f516a86b4f4828ee6f66a7ae8fd2bf14ff9fb1b8681e8079580a55b0dbadcb1b50668132e84f1985324b05d06406eccd3c9bf09ae30443225d1808c25f22a46cfff0eb72e205dfb0f84a35c3ab4ae4d6042f21dbca8470f78ac356544e589f91a40b04df302b3fde069aa5423ccf24633529b00ec17c5f906bf06bd819e759d9e7a6def3c5669ea272b16a424fc824287321d6ee2c01e8724c73042ab24bb3ac11dae9c8fbaf9a5e0b5281138faf7593a7cce4f41"]}]}]}]}, @typed={0x4, 0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r6, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@default, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x160, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x120, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x78a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x287}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x49}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000884}, 0x50) (async) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x160, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x120, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x78a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x287}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x49}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000884}, 0x50) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 926.337022ms ago: executing program 3 (id=11147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1f, 0x0, 0x0, @fd=r1}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0xfffffffe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xfffffffffffffffb}]}}}]}, 0x40}}, 0x0) 858.021441ms ago: executing program 0 (id=11148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'veth1\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079109e000000000007"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x1c, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x7, 0x10, 0x7, 0x0, 0x3, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xfffffffc, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x8, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0xffc, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x9, 0x354d, 0x5, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x10009, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x7, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 814.312002ms ago: executing program 1 (id=11149): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0xe, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @exit, @alu={0x4, 0x0, 0x2, 0x9, 0x9, 0xc, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000140)='GPL\x00', 0x5, 0xf3, &(0x7f0000000180)=""/243, 0x41100, 0x21, '\x00', r1, @cgroup_skb, r2, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xa, 0x2, 0x593d}, 0x10, r3, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000006c0)=[{0x3, 0x5, 0x1, 0x6}], 0x10, 0x8}, 0x94) r5 = socket$inet(0x2, 0x4, 0x0) getsockopt(r5, 0x19f, 0x40, &(0x7f00000007c0)=""/62, &(0x7f0000000800)=0x3e) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x12, &(0x7f0000000840)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xca}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ldst={0x3, 0x3, 0x0, 0xa, 0x0, 0x100, 0x10}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @exit], &(0x7f0000000900)='GPL\x00', 0xc5e, 0x4b, &(0x7f0000000940)=""/75, 0x41000, 0xc, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000009c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0xa, 0x1000, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000b00)=[r0, r6, r0, r0], &(0x7f0000000b40)=[{0x4, 0x3, 0x8, 0x2}, {0x4, 0x3, 0xe, 0x5}, {0x1, 0x4, 0x2, 0x6}, {0x2, 0x4, 0x5, 0xc}, {0x4, 0x3, 0x4, 0x3}, {0x4, 0x2, 0x5, 0x3}, {0x5, 0x4, 0x2, 0x2}, {0x1, 0x3, 0xf, 0x7}], 0x10, 0x959a}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000c80), 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000d40)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000e40)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000e80)=0x0) (async) r10 = getgid() (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, &(0x7f0000000f00)=0xc) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f40)=@nat={'nat\x00', 0x1b, 0x5, 0x6a0, 0x358, 0x358, 0xffffffff, 0x268, 0x268, 0x5d0, 0x5d0, 0xffffffff, 0x5d0, 0x5d0, 0x5, &(0x7f0000000cc0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xff, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0x0, 0xff], 'nicvf0\x00', 'erspan0\x00', {}, {0xff}, 0x0, 0xf7, 0x0, 0x5}, 0x0, 0x208, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x2a, [0x7, 0x4], 0x8000, 0x30, 0x5, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, @loopback, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @mcast1, @private2, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, @local], 0xf}}, @common=@ipv6header={{0x28}, {0x10fe31f2af729115, 0x1e0, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [0xffffffff, 0x0, 0xffffffff, 0xffffffff], 0x4e22, 0x4e21, 0x4e20, 0x4e21, 0xfff, 0x4, 0xb0, 0x4, 0x27c}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@remote, @ipv6=@mcast2, @port=0x4e21, @gre_key=0x100}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0xcf}}, @common=@eui64={{0x28}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8eb3, 0x3}}}, {{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@frag={{0x30}, {[0x9, 0x3], 0x3, 0x4, 0x3}}, @common=@unspec=@owner={{0x38}, {r8, r9, r10, r11, 0x5, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @icmp_id=0x65, @gre_key=0x100}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x700) r12 = accept(r5, &(0x7f0000001640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000016c0)=0x80) (async) r13 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r13, 0x8933, &(0x7f0000001700)={'wg1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) close(r5) ioctl$sock_SIOCGPGRP(r13, 0x8904, &(0x7f0000001740)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001780)={r14, r9, r11}, 0xc) r15 = accept4(r12, &(0x7f00000017c0)=@nl, &(0x7f0000001840)=0x80, 0x80800) ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f0000001940)={'wg2\x00', &(0x7f0000001880)=@ethtool_regs={0x4, 0x4, 0x79, "20ade0444fc8c9e77b5d58ab6fb9a729119e24af43af432d609a963aa081a68faf02249353bb1167997a5507eb1b79da80f6cf4a123c006f3a158b2d7113a09780ffdbddba35012ed6e6d91dbb5cfcb48ade318dc7b2be6f6e1b636cd012568fccc995348f7b68a6571983b728deb416f427e88467b7e02a00"}}) (async) ioctl$TUNSETGROUP(r4, 0x400454ce, r10) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000001980)=@gcm_128={{0x303}, "b6f6472563ebfe10", "1c2524b857a0f57133b7b882e6c27c0c", "c8e7588d", "881fbeb8fe380a6a"}, 0x28) getsockopt$inet_mreqn(r13, 0x0, 0x23, &(0x7f00000019c0)={@dev, @remote, 0x0}, &(0x7f0000001a00)=0xc) connect$packet(r12, &(0x7f0000001a40)={0x11, 0xf6, r16, 0x1, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 755.679677ms ago: executing program 4 (id=11150): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="20a96e93ed94586efbc83c4f159a51f126501a7e12579bd8a342d4ca4bc8f3", 0x1f}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async, rerun: 32) socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32) 637.977989ms ago: executing program 2 (id=11151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000140)={0x3, 0x7}, 0xc) getpeername$l2tp6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000440)=0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xbdea46afeab7b972}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c}}, @TCA_RATE={0x6, 0x5, {0xc, 0xbc}}]}, 0xff35}, 0x1, 0x0, 0x0, 0x8848}, 0x80c0) 565.520927ms ago: executing program 3 (id=11152): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd0000ffff080088"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfefffffe}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="31c2d20cce26", 0x6}], 0x1}}], 0x1, 0x20080058) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r3) 530.087263ms ago: executing program 1 (id=11153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) accept4$packet(r2, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x2e4, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x20000801}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) socket(0x11, 0x800000003, 0x0) (async) accept4$packet(r2, 0x0, 0x0, 0x800) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x2e4, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x20000801}, 0x800) (async) 338.126373ms ago: executing program 4 (id=11154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x70, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x20010}, 0x8000) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) r5 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xa}, 0x8) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7004040000008900000008000300", @ANYRES32=r4, @ANYBLOB="1d800000"], 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) 337.791122ms ago: executing program 3 (id=11155): r0 = socket(0x1a, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010000009709266c00000200000008ffff00feffffff"], 0x1c}}, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000380)=""/191, &(0x7f0000000100)=0xbf) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r2, 0x0, 0x24000001) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r2, 0x0, 0x24000001) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, 0x0, 0x40001) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, 0x0, 0x4000) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, 0x0, 0x4000) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, 0x0, 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001640)={'bond0\x00', &(0x7f0000001580)=@ethtool_dump={0x3f, 0xae0c, 0x6}}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001640)={'bond0\x00', &(0x7f0000001580)=@ethtool_dump={0x3f, 0xae0c, 0x6}}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80000, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000140)={&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x55, @mcast1, 0x92}, 0x1c, &(0x7f0000000100), 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r5], 0x60}, 0x4c800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x20004000}, 0x4c0c0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x20004000}, 0x4c0c0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYRES64=r4], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000001c0), 0x4) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000400000000000000010000ce4637009500000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000400000000000000010000ce4637009500000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000100000000d15be0fbc7ff4d66861eeb46a899007c6c5cee007c7d41009729597b3a457dade4f22208b907bb8c9a607bb48f8b2a06b06ee167341d80e890bf084b2c67e9f074735148d76aed553e17f3da75916b4f917ccb7b8c8027efbbdbd645e939c0caae6723d731211efe99573133de94b5e6b4f7cb611a1f0920f0cfd7ce8047a151e6457d2de84acea6a9b2d708ab2eb7981cccf6e80259f9a13e304558658d2a0fd203"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r8}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000100000000d15be0fbc7ff4d66861eeb46a899007c6c5cee007c7d41009729597b3a457dade4f22208b907bb8c9a607bb48f8b2a06b06ee167341d80e890bf084b2c67e9f074735148d76aed553e17f3da75916b4f917ccb7b8c8027efbbdbd645e939c0caae6723d731211efe99573133de94b5e6b4f7cb611a1f0920f0cfd7ce8047a151e6457d2de84acea6a9b2d708ab2eb7981cccf6e80259f9a13e304558658d2a0fd203"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r8}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000200)={0x0, 0x12, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r10, 0x1, 0x0, 0x0, {{}, {}, {0x3}}}, 0x30}}, 0x0) 311.259063ms ago: executing program 1 (id=11156): setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @loopback}], 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="260a00000000000061117c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="00000008000000004f46a16ba2edfaaf72072066c800000043f325929600", 0x1e}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000a0007"], 0x10}}], 0x2, 0x20004086) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05042bbd2c00fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400fcffffff08000600", @ANYRES32=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 180.676484ms ago: executing program 2 (id=11157): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000010) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) (async, rerun: 32) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r3, 0x1) (async) ppoll(&(0x7f00000000c0)=[{r3, 0xc481}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x687e867ed1998c62, &(0x7f0000000300)=0x4011, 0x4) (async, rerun: 32) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000340)="07000000010000", 0x7) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x1fc}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000004a00010000000000000000000a00", @ANYBLOB="c387f644d082"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x2c, 0x2, 0x6) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e1f, @multicast1}, 0x3a) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (rerun: 32) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async, rerun: 64) sendmmsg$inet(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af", 0x110}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1", 0xa2}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="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", 0x146}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0fcbe09cd9e34c6b9d641ba6fb677edede912815299a3313b02b4af73d57a5d0a7c01e400c4782", 0xb1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600e7", 0xec}, {&(0x7f0000000040)="7542473782798be019c27ed30b", 0xd}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965475953e2a028f7dd4a6ed8b33465fd161cd8dce309f6be32236cf8e07a5506acb719304ebc71b2a3756cb0832d928d432d1506d368e2b001a8b392dad3dc2916376732339a20db54405b716ea85c9a4d8f232138345947e47c80f23fcac5422ee2fcf8bf7ef306ed29b3045ee6f25c76fbc9e85a5bdf3be0a386a5afc9b5b11cece3aeed4bf8daf0394e72f5775c4916db082e98ad", 0xc4}], 0x3}}], 0x3, 0x2090) (rerun: 64) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 74.086284ms ago: executing program 4 (id=11158): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xdffe}, 0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100), 0x10) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2) 0s ago: executing program 2 (id=11159): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x608000, &(0x7f0000000040)={@_ha_fsid={[0x80, 0x1]}, {0x8, 0x7, 0x6, 0x4}}, 0x2d66, &(0x7f0000000080), &(0x7f00000000c0)=0x2}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x10}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x38}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}]}, 0x54}}, 0x40040) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r0}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}}, 0x4800) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000440)={0x2, 'veth0_virt_wifi\x00', {0x383c}, 0x4}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x8, 0x10}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={r5, 0xb}, &(0x7f0000000540)=0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000580), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x4, 0xb, 0x1, @mcast2, @private2, 0x68, 0x20, 0x4, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x32}, @jmp={0x5, 0x1, 0x8, 0x0, 0x4, 0x206, 0x1}, @alu={0x0, 0x0, 0x7, 0x8, 0x6, 0x10, 0xffffffffffffffff}]}, &(0x7f0000000640)='GPL\x00', 0x5, 0xe6, &(0x7f0000000680)=""/230, 0x40f00, 0x59, '\x00', r6, @fallback=0x21, r0, 0x8, &(0x7f0000000840)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x3, 0x1, 0xfffffff9}, 0x10, 0xffffffffffffffff, r0, 0x3, 0x0, &(0x7f00000008c0)=[{0x5, 0x3, 0x0, 0xc}, {0x5, 0x3, 0x10, 0x5}, {0x2, 0x1, 0x7, 0xc}], 0x10, 0x3}, 0x94) connect$x25(r2, &(0x7f00000009c0), 0x12) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000a00)) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r7, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008080}, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000b80)=0xffffffffffffffff, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000bc0), 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'syztnl0\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffff8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000005) r10 = accept4$phonet_pipe(r0, &(0x7f0000000d80), &(0x7f0000000dc0)=0x10, 0x80000) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000f00)={r10, &(0x7f0000000e00)='{\x00', 0x40002, &(0x7f0000000e40)={@_ha_fsid={[0x2, 0x3]}, {0x9, 0xb, 0x800, 0xfffffffffffffff7}}, 0x5, &(0x7f0000000e80), &(0x7f0000000ec0)}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x7, '\x00', 0x0, r0, 0x4, 0x4, 0x2}, 0x50) sendmsg$can_bcm(r11, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x1d, r6}, 0x10, &(0x7f0000001080)={&(0x7f0000001000)={0x3, 0x600, 0x7, {0x0, 0xea60}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x1, 0x1}, 0x1, 0x0, 0x0, 0x0, "595d860ddbf58e81"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000884}, 0x8000) connect$phonet_pipe(r0, &(0x7f0000001100)={0x23, 0x5, 0x9, 0x2}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000012c0)={'filter\x00', 0x0, 0x4, 0xea, [0x3, 0x3ff, 0x9, 0x4, 0x6, 0x2], 0x5, &(0x7f0000001140)=[{}, {}, {}, {}, {}], &(0x7f00000011c0)=""/234}, &(0x7f0000001340)=0x78) ioctl(r12, 0x9, &(0x7f0000001380)="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") kernel console output (not intermixed with test programs): lmulticast mode [ 776.836625][ T6244] bridge_slave_1: entered promiscuous mode [ 776.845754][ T6340] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 776.855167][ T6347] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 776.882510][ T6340] syzkaller0: entered promiscuous mode [ 776.889034][ T6340] syzkaller0: entered allmulticast mode [ 776.929216][ T6340] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9090'. [ 776.942425][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9095'. [ 776.952553][ T6351] dvmrp0: entered allmulticast mode [ 776.960460][ T6357] hsr_slave_0: left promiscuous mode [ 776.966627][ T6357] hsr_slave_1: left promiscuous mode [ 776.985276][ T6354] vcan0: entered promiscuous mode [ 776.990505][ T6354] vcan0: entered allmulticast mode [ 777.039169][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9095'. [ 777.070669][ T6244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.084169][ T6244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.125345][T28429] block nbd8: Receive control failed (result -32) [ 777.212112][ T6244] team0: Port device team_slave_0 added [ 777.231858][ T6244] team0: Port device team_slave_1 added [ 777.277698][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.294466][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.338193][ T6244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.354299][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.363781][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.391745][ T6244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.403403][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9099'. [ 777.405192][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.413105][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9099'. [ 777.447071][T28429] Bluetooth: hci3: command tx timeout [ 777.454625][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.535485][ T6244] hsr_slave_0: entered promiscuous mode [ 777.545189][ T6244] hsr_slave_1: entered promiscuous mode [ 777.552328][ T6244] debugfs: 'hsr0' already exists in 'hsr' [ 777.558698][ T6244] Cannot create hsr debugfs directory [ 777.718465][ T6384] netlink: 'syz.1.9100': attribute type 1 has an invalid length. [ 777.749957][T28429] block nbd9: Receive control failed (result -32) [ 777.851343][ T6244] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.885608][ T6244] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 59377 - 0 [ 777.896157][ T6244] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 777.963267][ T6396] bond11: option packets_per_slave: invalid value (18446744073709551615) [ 777.978943][ T6396] bond11: option packets_per_slave: allowed values 0 - 65535 [ 777.994495][ T6396] bond11 (unregistering): Released all slaves [ 778.014854][ T6244] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.026622][ T6244] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 59377 - 0 [ 778.037629][ T6244] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 778.066496][ T6413] netlink: 'syz.2.9109': attribute type 19 has an invalid length. [ 778.115973][ T6244] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.150967][ T6244] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 59377 - 0 [ 778.171246][ T6244] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 778.364552][ T6412] syzkaller0: entered promiscuous mode [ 778.388871][ T6412] syzkaller0: entered allmulticast mode [ 778.524408][ T6244] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.590878][ T6244] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 59377 - 0 [ 778.623125][ T6244] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 778.859185][ T6444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9116'. [ 779.498517][T28429] Bluetooth: hci3: command tx timeout [ 780.779932][ T6463] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 780.795328][ T6244] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 780.819300][ T6467] netlink: 'syz.2.9123': attribute type 21 has an invalid length. [ 780.827661][ T6467] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9123'. [ 780.828618][ T6244] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 780.861294][ T9439] page_pool_release_retry() stalled pool shutdown: id 31, 1 inflight 664 sec [ 780.875713][ T6467] netlink: 'syz.2.9123': attribute type 5 has an invalid length. [ 780.899283][ T6244] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 780.913136][ T6461] syzkaller0: entered promiscuous mode [ 780.919525][ T6461] syzkaller0: entered allmulticast mode [ 780.954143][ T6244] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 781.116091][ T6490] xt_TPROXY: Can be used only with -p tcp or -p udp [ 781.179328][ T6244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.223287][ T6244] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.241644][ T6497] netlink: 'syz.3.9130': attribute type 1 has an invalid length. [ 781.312994][ T6497] bond8: entered promiscuous mode [ 781.320310][ T6497] 8021q: adding VLAN 0 to HW filter on device bond8 [ 781.330860][T15769] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.338091][T15769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.385673][ T6504] bond8: (slave bridge12): making interface the new active one [ 781.398281][ T6504] bridge12: entered promiscuous mode [ 781.415048][ T6504] bond8: (slave bridge12): Enslaving as an active interface with an up link [ 781.456652][T15770] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.463869][T15770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.574617][ T6511] macvtap1: entered allmulticast mode [ 781.580308][T28429] Bluetooth: hci3: command tx timeout [ 781.591195][ T6511] veth0_macvtap: entered allmulticast mode [ 781.627669][ T6244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 781.663302][ T6516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.911419][ T6524] __nla_validate_parse: 2 callbacks suppressed [ 781.911438][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9137'. [ 781.933525][ T6537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9139'. [ 782.019587][ T6546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9140'. [ 782.151368][ T6244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.283793][ T6244] veth0_vlan: entered promiscuous mode [ 782.351790][ T6244] veth1_vlan: entered promiscuous mode [ 782.380957][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9146'. [ 782.446084][ T6244] veth0_macvtap: entered promiscuous mode [ 782.514394][ T6244] veth1_macvtap: entered promiscuous mode [ 782.595041][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.664021][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.695705][T15767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.715553][T15770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.762510][T15770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.789728][T15770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.891535][ T6589] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9153'. [ 783.038666][T15755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.051892][T15755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.126521][ T6593] syzkaller1: entered promiscuous mode [ 783.133133][ T6593] syzkaller1: entered allmulticast mode [ 783.205463][T15767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.246787][T15767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.346718][ T6614] netlink: 'syz.3.9160': attribute type 1 has an invalid length. [ 783.399873][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9160'. [ 783.430784][ T6623] openvswitch: netlink: IP tunnel dst address not specified [ 783.442124][ T6623] Cannot find add_set index 0 as target [ 783.629729][ T6630] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 783.701257][ T6635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9167'. [ 783.782581][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 783.794918][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 783.805121][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 783.813691][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 783.822948][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 783.964673][ T6639] lo speed is unknown, defaulting to 1000 [ 784.309127][T15770] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 784.518395][ T6676] tipc: Enabling of bearer rejected, failed to enable media [ 784.526974][ T6681] netlink: 'syz.0.9176': attribute type 30 has an invalid length. [ 784.559385][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9177'. [ 784.605075][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9177'. [ 784.630358][ T6680] netlink: 6 bytes leftover after parsing attributes in process `syz.2.9177'. [ 784.664907][ T6639] wg1 speed is unknown, defaulting to 1000 [ 784.866433][T15755] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.879771][T15755] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.990351][T15755] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.014124][T15755] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.195357][T15755] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.206255][T15755] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.291562][T15755] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.303103][T15755] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.382000][ T6724] netlink: 'syz.0.9190': attribute type 11 has an invalid length. [ 785.516909][ T6639] chnl_net:caif_netlink_parms(): no params data found [ 785.673891][ T6639] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.697221][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.710774][ T6639] bridge_slave_0: entered allmulticast mode [ 785.719791][ T6639] bridge_slave_0: entered promiscuous mode [ 785.731465][ T6639] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.739665][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.747045][ T6639] bridge_slave_1: entered allmulticast mode [ 785.755376][ T6639] bridge_slave_1: entered promiscuous mode [ 785.808680][ T6639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.839126][ T6639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.899407][ T5835] Bluetooth: hci2: command tx timeout [ 785.951782][ T6639] team0: Port device team_slave_0 added [ 785.992287][ T6639] team0: Port device team_slave_1 added [ 786.097408][ T6639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.113607][ T6639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.163303][ T6639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.289054][ T6639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.296125][ T6639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.424485][ T6639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.541684][ T5935] IPVS: starting estimator thread 0... [ 786.558615][ T6771] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 786.638136][ T6774] IPVS: using max 35 ests per chain, 84000 per kthread [ 786.663192][ T6639] hsr_slave_0: entered promiscuous mode [ 786.671102][ T6639] hsr_slave_1: entered promiscuous mode [ 786.677829][ T6639] debugfs: 'hsr0' already exists in 'hsr' [ 786.696755][ T6639] Cannot create hsr debugfs directory [ 786.915581][T15766] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.006289][T15769] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.072210][T15769] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.197370][ T6795] netlink: 'syz.0.9203': attribute type 63 has an invalid length. [ 787.205567][ T6799] __nla_validate_parse: 5 callbacks suppressed [ 787.205588][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9205'. [ 787.229922][T15767] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.251014][T15755] bridge_slave_0: left allmulticast mode [ 787.256868][T15755] bridge_slave_0: left promiscuous mode [ 787.280685][T15755] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.571786][T15755] gretap0 (unregistering): left promiscuous mode [ 787.602692][T15755] bond6 (unregistering): (slave gretap2): Releasing active interface [ 787.712216][T15755] bond2 (unregistering): (slave bridge2): Releasing active interface [ 787.873771][T15755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.887052][T15755] bond_slave_0: left promiscuous mode [ 787.897121][T15755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.906690][T15755] bond_slave_1: left promiscuous mode [ 787.916034][T15755] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 787.925765][T15755] bridge_slave_1: left promiscuous mode [ 787.932756][T15755] bond0 (unregistering): Released all slaves [ 787.943101][T15755] bond1 (unregistering): Released all slaves [ 787.957421][T15755] bond2 (unregistering): Released all slaves [ 787.971327][T15755] bond3 (unregistering): Released all slaves [ 787.979324][ T5835] Bluetooth: hci2: command tx timeout [ 787.996452][T15755] bond4 (unregistering): Released all slaves [ 788.011366][T15755] bond5 (unregistering): Released all slaves [ 788.025424][T15755] bond6 (unregistering): Released all slaves [ 788.047875][T15755] bond7 (unregistering): Released all slaves [ 788.064361][T15755] bond8 (unregistering): Released all slaves [ 788.077552][T15755] bond9 (unregistering): Released all slaves [ 788.093111][T15755] bond10 (unregistering): Released all slaves [ 788.262454][ T6819] openvswitch: netlink: Actions may not be safe on all matching packets [ 788.306247][T15755] tipc: Left network mode [ 788.394878][ T6639] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.419537][ T6828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.492050][ T6830] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9212'. [ 788.671444][ T6639] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.805552][ T6857] netlink: 'syz.2.9217': attribute type 2 has an invalid length. [ 788.976549][ T6639] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.121323][ T6868] xt_nat: multiple ranges no longer supported [ 789.186818][ T6868] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 789.214270][ T6868] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 789.232909][ T6639] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.283664][ T5886] IPVS: starting estimator thread 0... [ 789.290008][ T6870] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 789.370714][ T6874] lo speed is unknown, defaulting to 1000 [ 789.389290][ T6882] IPVS: using max 34 ests per chain, 81600 per kthread [ 789.678896][ T6895] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9226'. [ 789.867605][ T6639] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 789.915327][ T6639] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 789.943536][ T6639] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 789.998118][ T6639] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 790.063110][ T5835] Bluetooth: hci2: command tx timeout [ 790.082828][ T6874] wg1 speed is unknown, defaulting to 1000 [ 790.407030][ T6939] netlink: 'syz.3.9236': attribute type 1 has an invalid length. [ 790.472681][ T6939] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 790.571384][T15755] hsr_slave_0: left promiscuous mode [ 790.615566][T15755] veth1_macvtap: left promiscuous mode [ 790.632059][T15755] veth1_vlan: left promiscuous mode [ 790.659178][T15755] veth0_vlan: left promiscuous mode [ 790.819579][T15755] pimreg (unregistering): left allmulticast mode [ 790.832553][T15755] pim6reg (unregistering): left allmulticast mode [ 791.383711][ T6639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.517506][ T6639] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.592934][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.600143][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.649545][T15767] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.656682][T15767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.827922][ T6991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9248'. [ 791.976821][T15755] IPVS: stop unused estimator thread 0... [ 792.089164][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9247'. [ 792.114041][ T6986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.138687][ T5835] Bluetooth: hci2: command tx timeout [ 792.265191][ T6986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.316142][ T6639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.521443][ T7021] syzkaller0: entered allmulticast mode [ 792.756029][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9253'. [ 792.765898][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9253'. [ 792.831973][ T6639] veth0_vlan: entered promiscuous mode [ 792.849554][ T6639] veth1_vlan: entered promiscuous mode [ 792.929626][ T6639] veth0_macvtap: entered promiscuous mode [ 792.956752][ T6639] veth1_macvtap: entered promiscuous mode [ 792.996928][ T6639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.014369][ T6639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.043308][T15755] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.052203][T15755] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.061903][T15755] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.071894][T15755] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.804374][ T6991] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 794.956191][T15755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.980826][T15755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.000382][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9258'. [ 795.064338][T15755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.072821][T15755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.137584][ T7054] netlink: 'syz.0.9260': attribute type 1 has an invalid length. [ 795.314846][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9262'. [ 795.356324][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9263'. [ 795.369014][ T7064] bridge_slave_1: left allmulticast mode [ 795.374699][ T7064] bridge_slave_1: left promiscuous mode [ 795.394094][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.406476][ T7069] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9264'. [ 795.407844][ T7064] bridge_slave_0: left allmulticast mode [ 795.434930][ T7064] bridge_slave_0: left promiscuous mode [ 795.459108][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.681046][ T7085] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 796.283891][ T7113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9272'. [ 798.295756][ T7074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 798.307037][ T7098] netlink: 1760 bytes leftover after parsing attributes in process `syz.4.9268'. [ 798.381089][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 798.581448][ T7134] netlink: 'syz.1.9279': attribute type 1 has an invalid length. [ 798.592368][ T7134] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9279'. [ 798.634580][ T7134] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9279'. [ 798.681879][ T7134] netlink: 'syz.1.9279': attribute type 1 has an invalid length. [ 798.718362][ T7134] netlink: 'syz.1.9279': attribute type 8 has an invalid length. [ 798.726131][ T7134] netlink: 606 bytes leftover after parsing attributes in process `syz.1.9279'. [ 798.762701][ T7141] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 799.064530][T28429] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 799.079477][T28429] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 799.089946][T28429] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 799.148127][T28429] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 799.156762][T28429] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 799.201864][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9289'. [ 799.266910][ T7177] netlink: 'syz.0.9290': attribute type 1 has an invalid length. [ 799.292784][ T7162] lo speed is unknown, defaulting to 1000 [ 799.355915][ T7177] bond2: entered promiscuous mode [ 799.361914][ T7177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 799.401571][ T7173] bond2: (slave bridge1): making interface the new active one [ 799.410579][ T7173] bridge1: entered promiscuous mode [ 799.417026][ T7173] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 799.437837][ T7184] : entered promiscuous mode [ 799.505025][ T7183] netlink: 'syz.1.9293': attribute type 1 has an invalid length. [ 799.505470][ T7177] netlink: 'syz.0.9290': attribute type 3 has an invalid length. [ 799.574295][ T7190] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 799.579159][ T7183] bond1: entered promiscuous mode [ 799.642067][ T7183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 799.700276][ T7189] macvtap1: entered allmulticast mode [ 799.810488][ T7162] wg1 speed is unknown, defaulting to 1000 [ 800.076243][T15762] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.097401][T15762] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.121022][ T7218] netlink: 'syz.4.9302': attribute type 1 has an invalid length. [ 800.295373][T15762] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.309254][T15762] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.442930][T15762] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.449423][ T7236] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9306'. [ 800.453733][T15762] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.565827][T15762] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.585102][T15762] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.593437][ T7241] netlink: 'syz.4.9309': attribute type 16 has an invalid length. [ 800.613401][ T7241] netlink: 'syz.4.9309': attribute type 17 has an invalid length. [ 800.635953][ T7244] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9310'. [ 800.654050][ T7244] netlink: 'syz.2.9310': attribute type 10 has an invalid length. [ 800.673366][ T7241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 800.746859][ T7244] team0 (unregistering): Port device team_slave_0 removed [ 800.789112][ T7244] team0 (unregistering): Port device team_slave_1 removed [ 800.825062][ T7162] chnl_net:caif_netlink_parms(): no params data found [ 800.898838][T15767] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.970275][T15767] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.036115][T15767] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.102550][T15767] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.163909][T15762] bridge_slave_1: left allmulticast mode [ 801.183110][ T5835] Bluetooth: hci5: command tx timeout [ 801.193875][T15762] bridge_slave_1: left promiscuous mode [ 801.209224][T15762] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.260690][T15762] bridge_slave_0: left allmulticast mode [ 801.282843][T15762] bridge_slave_0: left promiscuous mode [ 801.299242][T15762] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.342684][T15762] veth0_to_bond: left allmulticast mode [ 801.358720][T15762] veth0_to_bond: left promiscuous mode [ 801.365005][T15762] bridge5: port 2(veth0_to_bond) entered disabled state [ 801.400301][T15762] veth3: left allmulticast mode [ 801.405207][T15762] veth3: left promiscuous mode [ 801.420243][T15762] bridge5: port 1(veth3) entered disabled state [ 801.482946][T15762] tipc: Resetting bearer [ 801.792840][T15762] tipc: Disabling bearer [ 801.804865][T15762] gretap0 (unregistering): left promiscuous mode [ 801.849704][T15762] bond7 (unregistering): (slave gretap3): Releasing active interface [ 801.894875][T15762] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 802.251899][T15762] bond3 (unregistering): (slave bridge7): Releasing backup interface [ 802.260403][T15762] bridge7 (unregistering): left promiscuous mode [ 802.266798][T15762] bridge7 (unregistering): left allmulticast mode [ 802.482199][T15762] bond8 (unregistering): (slave bridge12): Releasing backup interface [ 802.491324][T15762] bridge12 (unregistering): left promiscuous mode [ 802.543289][T15762] bond0 (unregistering): left promiscuous mode [ 802.549762][T15762] bond_slave_0: left promiscuous mode [ 802.555273][T15762] bond_slave_1: left promiscuous mode [ 802.565332][T15762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.575985][T15762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.586176][T15762] bond0 (unregistering): Released all slaves [ 802.597280][T15762] bond1 (unregistering): (slave lo): Releasing backup interface [ 802.606287][T15762] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 802.621905][T15762] bond1 (unregistering): Released all slaves [ 802.635122][T15762] bond2 (unregistering): Released all slaves [ 802.654264][T15762] bond3 (unregistering): Released all slaves [ 802.667318][T15762] bond4 (unregistering): Released all slaves [ 802.686683][T15762] bond5 (unregistering): Released all slaves [ 802.700590][T15762] bond6 (unregistering): Released all slaves [ 802.714591][T15762] bond7 (unregistering): Released all slaves [ 802.730033][T15762] bond8 (unregistering): Released all slaves [ 802.744771][T15762] bond9 (unregistering): Released all slaves [ 802.757229][T15762] bond10 (unregistering): Released all slaves [ 802.895005][ T7162] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.915064][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.947866][ T7162] bridge_slave_0: entered allmulticast mode [ 802.963280][ T7162] bridge_slave_0: entered promiscuous mode [ 802.995352][T15762] 9: left promiscuous mode [ 803.039493][ T7298] netlink: 'syz.1.9318': attribute type 1 has an invalid length. [ 803.095288][ T7162] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.100901][ T7304] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9320'. [ 803.113214][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.142811][ T7162] bridge_slave_1: entered allmulticast mode [ 803.151509][ T7162] bridge_slave_1: entered promiscuous mode [ 803.205226][ T7298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 803.221002][T15762] : left promiscuous mode [ 803.241296][ T7162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.259099][ T5835] Bluetooth: hci5: command tx timeout [ 803.266041][ T7309] vlan2: entered promiscuous mode [ 803.271777][ T7309] bridge0: entered promiscuous mode [ 803.312944][ T7162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.327368][T15762] tipc: Disabling bearer [ 803.336370][T15762] tipc: Disabling bearer [ 803.348613][T15762] tipc: Left network mode [ 803.581181][T15762] IPVS: stopping backup sync thread 29850 ... [ 803.612720][ T7162] team0: Port device team_slave_0 added [ 803.623035][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9328'. [ 803.636632][ T7162] team0: Port device team_slave_1 added [ 803.646918][ T7329] openvswitch: netlink: Flow actions attr not present in new flow. [ 803.715461][ T7336] netlink: 'syz.4.9329': attribute type 1 has an invalid length. [ 803.793564][ T7338] netlink: 'syz.2.9330': attribute type 1 has an invalid length. [ 803.804716][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.825394][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.906054][ T7162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.026198][ T7352] netlink: 'syz.2.9332': attribute type 10 has an invalid length. [ 804.092815][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.118433][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.171343][ T7162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.186427][ T7359] IPv6: NLM_F_CREATE should be specified when creating new route [ 804.210208][ T7360] netlink: 348 bytes leftover after parsing attributes in process `syz.4.9334'. [ 804.655831][ T7162] hsr_slave_0: entered promiscuous mode [ 804.689767][ T7162] hsr_slave_1: entered promiscuous mode [ 804.717072][ T7162] debugfs: 'hsr0' already exists in 'hsr' [ 804.733007][ T7162] Cannot create hsr debugfs directory [ 805.343476][ T5835] Bluetooth: hci5: command tx timeout [ 805.465392][ T7405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9344'. [ 805.516435][ T7403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9343'. [ 805.807737][ T7412] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 805.834221][ T7412] bond1 (unregistering): Released all slaves [ 805.873505][ T7421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9345'. [ 806.146014][T15762] hsr_slave_0: left promiscuous mode [ 806.192906][T15762] veth1_macvtap: left promiscuous mode [ 806.203387][T15762] veth0_macvtap: left promiscuous mode [ 806.228903][T15762] veth1_vlan: left promiscuous mode [ 806.234218][T15762] veth0_vlan: left promiscuous mode [ 806.341699][ T7450] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9352'. [ 806.855469][ T7456] syzkaller1: entered promiscuous mode [ 806.862980][ T7456] syzkaller1: entered allmulticast mode [ 806.907448][ T7162] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.091898][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9357'. [ 807.254751][ T7162] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.419078][ T5835] Bluetooth: hci5: command tx timeout [ 807.431919][ T7496] netlink: 'syz.4.9362': attribute type 2 has an invalid length. [ 807.459241][ T7496] netlink: 'syz.4.9362': attribute type 8 has an invalid length. [ 807.467189][ T7496] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9362'. [ 807.501229][ T7162] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.584647][T15762] IPVS: stop unused estimator thread 0... [ 807.709169][ T7162] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.721586][ T7512] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9365'. [ 807.747749][ T7512] openvswitch: netlink: Flow key attr not present in new flow. [ 808.031240][ T7524] netlink: 'syz.4.9367': attribute type 24 has an invalid length. [ 808.135122][ T7162] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 808.167738][ T7162] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 808.213022][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9369'. [ 808.244366][ T7162] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 808.282496][ T7162] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 808.628529][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 808.656968][ T7162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.752136][ T7162] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.836202][T10220] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.843436][T10220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.893577][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.894216][ T7583] __nla_validate_parse: 2 callbacks suppressed [ 808.894232][ T7583] netlink: 216 bytes leftover after parsing attributes in process `syz.2.9379'. [ 808.900811][T10220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.937473][ T7583] netlink: 'syz.2.9379': attribute type 2 has an invalid length. [ 809.066227][ T7588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9379'. [ 809.663121][ T7624] netlink: 592 bytes leftover after parsing attributes in process `syz.2.9387'. [ 809.707150][ T7618] syzkaller0: entered promiscuous mode [ 809.713433][ T7618] syzkaller0: entered allmulticast mode [ 810.152749][ T7649] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9390'. [ 810.169730][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9390'. [ 810.384008][ T7665] netlink: 'syz.4.9392': attribute type 5 has an invalid length. [ 812.328371][ T7162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.584538][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9396'. [ 812.632844][ T7162] veth0_vlan: entered promiscuous mode [ 812.735964][ T7699] pim6reg: entered allmulticast mode [ 812.787425][ T7162] veth1_vlan: entered promiscuous mode [ 812.797280][ T7699] pim6reg: left allmulticast mode [ 812.839746][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9400'. [ 813.126406][ T7162] veth0_macvtap: entered promiscuous mode [ 813.151221][ T7162] veth1_macvtap: entered promiscuous mode [ 813.184840][ T7728] geneve2: entered promiscuous mode [ 813.221539][ T7162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.254557][ T7162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.298539][T15769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.317921][T15769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.355356][T15769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.377411][T15769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.481289][ T7747] netlink: 'syz.2.9407': attribute type 29 has an invalid length. [ 813.596316][ T7754] netlink: 'syz.2.9407': attribute type 29 has an invalid length. [ 813.633604][ T7757] netlink: 'syz.1.9408': attribute type 1 has an invalid length. [ 813.670922][ T7757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 813.707344][ T7757] bond3: (slave veth3): Enslaving as an active interface with a down link [ 813.740512][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 813.763392][ T7757] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 813.775501][ T7757] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 813.812786][ T7760] syzkaller0: entered promiscuous mode [ 813.818425][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 813.818490][ C1] lec:lec_tx_timeout: lec0 [ 813.834808][ T7760] syzkaller0: entered allmulticast mode [ 816.293600][ T7734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 816.384547][T15769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.415246][T15769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.444468][ T7774] xt_TCPMSS: Only works on TCP SYN packets [ 816.496954][ T7778] 8021q: VLANs not supported on tunl0 [ 816.535692][T15770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.565162][T15770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.586373][ T7780] bridge0: entered promiscuous mode [ 816.592218][ T7780] bridge0: entered allmulticast mode [ 816.655562][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9415'. [ 816.687089][ T7783] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 816.874747][ T7804] delete_channel: no stack [ 816.944964][T15770] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 817.483234][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9433'. [ 817.654546][ T7856] netlink: 'syz.3.9437': attribute type 39 has an invalid length. [ 817.714629][ T7859] netlink: 'syz.4.9438': attribute type 1 has an invalid length. [ 817.733011][ T7859] netlink: 476 bytes leftover after parsing attributes in process `syz.4.9438'. [ 817.754325][ T7859] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.9438'. [ 817.920209][ T7868] sctp: [Deprecated]: syz.4.9440 (pid 7868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 817.920209][ T7868] Use struct sctp_sack_info instead [ 817.938567][ T7868] sctp: [Deprecated]: syz.4.9440 (pid 7868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 817.938567][ T7868] Use struct sctp_sack_info instead [ 818.019151][ T7877] netlink: 'syz.2.9443': attribute type 1 has an invalid length. [ 818.027147][ T7877] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9443'. [ 818.036894][ T7877] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9443'. [ 818.075553][ T7877] netlink: 'syz.2.9443': attribute type 1 has an invalid length. [ 818.095668][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9445'. [ 818.096052][ T7877] netlink: 'syz.2.9443': attribute type 8 has an invalid length. [ 818.118542][ T7877] netlink: 606 bytes leftover after parsing attributes in process `syz.2.9443'. [ 818.168827][ T7877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9443'. [ 818.207267][ T7882] syzkaller0: entered promiscuous mode [ 818.236169][ T7882] syzkaller0: entered allmulticast mode [ 818.324502][ T7889] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.9446:7889 [ 818.324902][ T5905] IPVS: starting estimator thread 0... [ 818.353833][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9446'. [ 818.459146][ T7897] IPVS: using max 32 ests per chain, 76800 per kthread [ 819.450592][ T7916] netlink: 'syz.2.9450': attribute type 13 has an invalid length. [ 821.065790][ T7925] bridge_slave_1: left allmulticast mode [ 821.071551][ T7936] block nbd10: Unsupported socket: should be TCP or UNIX. [ 821.092381][ T7925] bridge_slave_1: left promiscuous mode [ 821.119039][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.144099][ T7925] bridge_slave_0: left allmulticast mode [ 821.163722][ T7925] bridge_slave_0: left promiscuous mode [ 821.177838][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.440273][ T7957] xt_time: unknown flags 0xf4 [ 821.503186][ T7968] netlink: 'syz.2.9458': attribute type 10 has an invalid length. [ 821.598791][ T7968] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 821.878517][ T7990] xt_hashlimit: size too large, truncated to 1048576 [ 822.033627][ T8001] xt_bpf: check failed: parse error [ 822.144310][ T8003] __nla_validate_parse: 6 callbacks suppressed [ 822.144330][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9473'. [ 822.357504][ T8003] team0: Port device team_slave_0 removed [ 822.432457][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9473'. [ 822.478940][ T8015] nbd10: detected capacity change from 0 to 63 [ 822.512606][ T5835] block nbd10: Receive control failed (result -32) [ 822.527026][ T7937] block nbd10: Dead connection, failed to find a fallback [ 822.950658][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9483'. [ 822.959795][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9483'. [ 822.970662][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9483'. [ 822.997066][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9483'. [ 823.043384][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9483'. [ 823.052700][ T8054] netlink: 'syz.2.9483': attribute type 11 has an invalid length. [ 823.052721][ T8054] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9483'. [ 823.091699][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9483'. [ 823.102283][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9483'. [ 823.610345][ T8098] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 823.646290][ T8093] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 823.849420][ T8113] openvswitch: netlink: Flow actions attr not present in new flow. [ 824.052323][ T8118] mac80211_hwsim hwsim108 wlan0: entered promiscuous mode [ 824.375819][ T8145] x9: renamed from bridge_slave_0 (while UP) [ 824.411809][ T8146] netlink: 'syz.1.9515': attribute type 8 has an invalid length. [ 824.513737][T11921] lec:lec_start_xmit: lec0:No lecd attached [ 824.564561][ T8159] Cannot find add_set index 3 as target [ 824.633142][ T8166] netlink: 'syz.3.9519': attribute type 14 has an invalid length. [ 824.671320][ T8167] netlink: 'syz.3.9519': attribute type 14 has an invalid length. [ 824.672826][ T8166] netlink: 'syz.3.9519': attribute type 13 has an invalid length. [ 824.730438][ T8167] netlink: 'syz.3.9519': attribute type 13 has an invalid length. [ 825.072675][ T8194] xt_connbytes: Forcing CT accounting to be enabled [ 825.171025][ T8199] netlink: 'syz.3.9529': attribute type 15 has an invalid length. [ 825.184184][ T8197] syz_tun: entered promiscuous mode [ 825.190338][ T8197] macvtap2: entered promiscuous mode [ 825.217694][T15776] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 825.226906][T15776] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 825.243377][T15769] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 825.284095][T15769] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 825.297632][ T8201] syzkaller0: entered promiscuous mode [ 825.307272][ T8201] syzkaller0: entered allmulticast mode [ 825.380612][ T8211] 0: reclassify loop, rule prio 0, protocol 800 [ 825.587319][ T8220] netlink: 'syz.3.9536': attribute type 4 has an invalid length. [ 825.634321][ T8220] bond1: entered promiscuous mode [ 825.913693][ T8244] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 826.106280][ T8258] syzkaller1: entered promiscuous mode [ 826.112107][ T8258] syzkaller1: entered allmulticast mode [ 826.137133][ T8258] gre1: entered promiscuous mode [ 826.143257][ T8258] gre1: entered allmulticast mode [ 826.585432][ T8268] bond3: (slave vlan0): Enslaving as a backup interface with an up link [ 826.652750][ T8271] xt_TCPMSS: Only works on TCP SYN packets [ 827.143998][ T8307] netlink: 'syz.1.9560': attribute type 1 has an invalid length. [ 827.383895][ T8324] __nla_validate_parse: 60 callbacks suppressed [ 827.383914][ T8324] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9565'. [ 827.949699][ T8361] netlink: 'syz.0.9572': attribute type 1 has an invalid length. [ 828.000406][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9572'. [ 828.003892][ T8361] bond4: entered promiscuous mode [ 828.010130][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9572'. [ 828.023937][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9574'. [ 828.056687][ T8361] 8021q: adding VLAN 0 to HW filter on device bond4 [ 828.157532][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9574'. [ 828.170347][ T8366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9574'. [ 828.298453][ T8387] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.9579'. [ 828.329290][ T8387] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.9579'. [ 828.343220][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9581'. [ 828.362370][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9581'. [ 828.551019][ T8406] netlink: 'syz.3.9590': attribute type 30 has an invalid length. [ 828.669890][ T8415] netlink: 'syz.1.9592': attribute type 1 has an invalid length. [ 828.880258][ T8426] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 829.266315][ T8452] bond2: option primary_reselect: invalid value (255) [ 829.286660][ T8452] bond2 (unregistering): Released all slaves [ 829.483003][ T8466] syzkaller0: entered promiscuous mode [ 829.490200][ T8466] syzkaller0: entered allmulticast mode [ 829.817971][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5300 ms [ 829.826095][ C1] lec:lec_tx_timeout: lec0 [ 830.224787][ T8505] syzkaller0: entered promiscuous mode [ 830.236071][ T8507] validate_nla: 2 callbacks suppressed [ 830.236088][ T8507] netlink: 'syz.1.9623': attribute type 1 has an invalid length. [ 830.250570][ T8505] syzkaller0: entered allmulticast mode [ 830.257534][ T8507] nbd: error processing sock list [ 830.307844][ T8508] bond6: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 830.325073][ T8508] bond6: entered promiscuous mode [ 830.330330][ T8508] bond6: entered allmulticast mode [ 830.335872][ T8508] 8021q: adding VLAN 0 to HW filter on device bond6 [ 830.533910][ T8519] syzkaller0: entered promiscuous mode [ 830.550622][ T8519] syzkaller0: entered allmulticast mode [ 830.594445][ T8524] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 830.610243][ T8524] bond2 (unregistering): Released all slaves [ 831.259376][ T8548] netlink: 'syz.1.9635': attribute type 2 has an invalid length. [ 832.920863][ T8568] lo: Caught tx_queue_len zero misconfig [ 833.049326][ T8573] xt_addrtype: ipv6 does not support BROADCAST matching [ 833.072864][ T8573] openvswitch: netlink: Key type 239 is out of range max 32 [ 833.130686][ T8578] __nla_validate_parse: 77 callbacks suppressed [ 833.130708][ T8578] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9639'. [ 833.194584][ T8578] tipc: Enabling of bearer rejected, failed to enable media [ 833.376816][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9644'. [ 833.476940][ T8591] bond0: entered promiscuous mode [ 833.519302][ T8591] bond_slave_0: entered promiscuous mode [ 833.528303][ T8591] bond_slave_1: entered promiscuous mode [ 833.554458][ T8591] batadv0: entered promiscuous mode [ 833.561120][ T8608] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9649'. [ 833.570709][ T8591] mac80211_hwsim hwsim101 wlan1: entered promiscuous mode [ 833.596741][ T8591] bond0: left promiscuous mode [ 833.615721][ T8591] bond_slave_0: left promiscuous mode [ 833.631475][ T8591] bond_slave_1: left promiscuous mode [ 833.637257][ T8591] batadv0: left promiscuous mode [ 833.642682][ T8591] mac80211_hwsim hwsim101 wlan1: left promiscuous mode [ 833.685997][ T8613] syzkaller0: entered promiscuous mode [ 833.694198][ T8613] syzkaller0: entered allmulticast mode [ 833.996352][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9657'. [ 834.026985][ T8644] netlink: 'syz.1.9657': attribute type 15 has an invalid length. [ 834.302744][ T8667] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9662'. [ 834.470863][ T8677] netlink: 'syz.0.9666': attribute type 33 has an invalid length. [ 834.494227][ T8681] netlink: 'syz.3.9667': attribute type 1 has an invalid length. [ 834.495889][ T8677] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9666'. [ 834.520096][ T8683] netlink: 'syz.1.9668': attribute type 1 has an invalid length. [ 834.534299][ T8677] netlink: 'syz.0.9666': attribute type 13 has an invalid length. [ 834.585038][ T8683] 8021q: adding VLAN 0 to HW filter on device bond7 [ 834.592797][ T8692] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9666'. [ 834.595361][ T8683] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9668'. [ 834.754696][ T8705] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 834.771389][ T8677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 834.790603][ T8707] netlink: 'syz.1.9672': attribute type 1 has an invalid length. [ 834.815845][ T8707] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9672'. [ 834.843949][ T8707] netlink: 658 bytes leftover after parsing attributes in process `syz.1.9672'. [ 835.444700][ T8754] netlink: 'syz.0.9687': attribute type 1 has an invalid length. [ 835.452847][ T8754] netlink: 'syz.0.9687': attribute type 3 has an invalid length. [ 835.768377][ T8772] syzkaller0: entered promiscuous mode [ 835.778798][ T8772] syzkaller0: entered allmulticast mode [ 836.107643][ T8797] netlink: 'syz.1.9702': attribute type 1 has an invalid length. [ 836.122089][ T8799] x_tables: duplicate underflow at hook 1 [ 836.301992][ T8797] 8021q: adding VLAN 0 to HW filter on device bond8 [ 836.360276][ T8807] bond8: (slave veth0_to_bond): making interface the new active one [ 836.372643][ T8807] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 836.383400][ T8808] tipc: Started in network mode [ 836.391883][ T8808] tipc: Node identity 3a1dd3936f2a, cluster identity 4711 [ 836.402188][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057f9d400: rx timeout, send abort [ 836.411896][ T8808] tipc: Enabled bearer , priority 0 [ 836.451432][ T8818] tipc: Started in network mode [ 836.456354][ T8818] tipc: Node identity 8a25d867615, cluster identity 4711 [ 836.471547][ T8818] tipc: Enabled bearer , priority 0 [ 836.570446][ T8802] syzkaller0: entered promiscuous mode [ 836.586167][ T8802] syzkaller0: entered allmulticast mode [ 836.599202][ T8802] tipc: Resetting bearer [ 836.694493][ T8825] syzkaller0: entered promiscuous mode [ 836.704237][ T8825] syzkaller0: entered allmulticast mode [ 836.714001][ T8825] tipc: Resetting bearer [ 836.728773][ T8818] tipc: New replicast peer: 255.255.255.255 [ 836.745481][ T8818] tipc: Enabled bearer , priority 10 [ 836.759334][ T8801] tipc: Resetting bearer [ 836.832525][ T8833] netlink: 'syz.1.9708': attribute type 10 has an invalid length. [ 836.902306][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022321400: rx timeout, send abort [ 836.910699][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057f9d400: abort rx timeout. Force session deactivation [ 837.416386][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022321400: abort rx timeout. Force session deactivation [ 837.658132][ T5835] Bluetooth: hci0: command 0x0405 tx timeout [ 838.790835][ T8801] tipc: Disabling bearer [ 838.815131][ T8833] team0: Port device dummy0 added [ 838.967757][T15766] tipc: Resetting bearer [ 839.001827][ T8816] tipc: Resetting bearer [ 839.482177][ T8865] netlink: 'syz.1.9716': attribute type 2 has an invalid length. [ 839.554682][ T8866] __nla_validate_parse: 4 callbacks suppressed [ 839.554703][ T8866] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9716'. [ 841.079747][ T8816] tipc: Disabling bearer [ 841.089842][ T5905] tipc: Node number set to 1429722003 [ 841.095524][ T9] tipc: Node number set to 3950368871 [ 841.121047][ T8859] syzkaller1: entered promiscuous mode [ 841.136867][ T8859] syzkaller1: entered allmulticast mode [ 841.169935][ T8865] v: entered promiscuous mode [ 841.178788][ T5935] page_pool_release_retry() stalled pool shutdown: id 31, 1 inflight 724 sec [ 841.263763][ T8866] team0: Port device dummy0 removed [ 841.528640][ T8897] sctp: [Deprecated]: syz.1.9725 (pid 8897) Use of int in maxseg socket option. [ 841.528640][ T8897] Use struct sctp_assoc_value instead [ 841.567125][ T8900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9727'. [ 841.717872][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9727'. [ 841.793194][ T8921] sctp: [Deprecated]: syz.3.9732 (pid 8921) Use of int in max_burst socket option. [ 841.793194][ T8921] Use struct sctp_assoc_value instead [ 841.913432][ T8928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 841.931351][ T8926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9733'. [ 841.973594][ T8916] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 842.020026][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9734'. [ 842.035213][ T8916] bond9 (unregistering): Released all slaves [ 842.067476][ T8932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.084828][ T8932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.094606][ T8932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.102577][ T8932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.241181][ T8948] lo: Caught tx_queue_len zero misconfig [ 842.262141][ T8944] bond0: Caught tx_queue_len zero misconfig [ 842.349441][ T8944] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9736'. [ 842.691789][ T8975] x_tables: duplicate underflow at hook 2 [ 842.854389][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9748'. [ 842.873616][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9748'. [ 842.882963][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9748'. [ 843.113278][ T8992] syzkaller0: entered promiscuous mode [ 843.122583][ T8992] syzkaller0: entered allmulticast mode [ 845.134007][ T8962] Set syz1 is full, maxelem 65536 reached [ 848.300445][T15766] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 861.900860][ T5835] Bluetooth: hci0: command 0x0405 tx timeout [ 861.927188][ T9010] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9750'. [ 862.331141][ T9033] netlink: 'syz.1.9760': attribute type 1 has an invalid length. [ 862.418994][ T9033] bond9: entered promiscuous mode [ 862.443029][ T9033] 8021q: adding VLAN 0 to HW filter on device bond9 [ 862.481311][ T9037] bond9: (slave bridge3): making interface the new active one [ 862.489488][ T9037] bridge3: entered promiscuous mode [ 862.495642][ T9037] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 862.612007][ T9056] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9769'. [ 862.632289][ T9056] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9769'. [ 862.753391][ T9069] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.9771'. [ 862.881250][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9774'. [ 862.949415][ T9082] xt_hashlimit: size too large, truncated to 1048576 [ 863.214881][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9778'. [ 863.364671][ T9110] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9782'. [ 863.382338][ T9110] syzkaller1: entered promiscuous mode [ 863.388390][ T9110] syzkaller1: entered allmulticast mode [ 863.397475][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9782'. [ 863.407853][ T9112] syzkaller0: entered promiscuous mode [ 863.413536][ T9112] syzkaller0: entered allmulticast mode [ 863.534171][ T9118] netlink: 294 bytes leftover after parsing attributes in process `syz.3.9786'. [ 863.549056][ T9118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.634390][ T9118] syzkaller0: entered promiscuous mode [ 863.643028][ T9118] syzkaller0: entered allmulticast mode [ 863.909404][ T9138] netlink: 'syz.2.9791': attribute type 1 has an invalid length. [ 865.555044][ T9138] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 865.747849][ T9149] bond10: option mode: invalid value (133) [ 865.800971][ T9149] bond10 (unregistering): Released all slaves [ 865.861704][ T9160] syzkaller0: entered promiscuous mode [ 865.867214][ T9160] syzkaller0: entered allmulticast mode [ 866.063564][ T9171] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9805'. [ 866.336947][ T9193] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 866.508489][ T9200] block nbd11: server does not support multiple connections per device. [ 866.521836][ T9200] block nbd11: shutting down sockets [ 866.761974][ T9217] xt_hashlimit: overflow, rate too high: 0 [ 866.882926][ T9225] netlink: 'syz.2.9822': attribute type 4 has an invalid length. [ 867.059420][ T9236] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9826'. [ 867.071762][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9825'. [ 867.162331][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9827'. [ 867.395140][ T9252] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 867.711752][ T9279] ip6t_srh: unknown srh match flags 5F28 [ 868.006048][ T9293] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9840'. [ 868.017186][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9840'. [ 868.026534][ T9293] netlink: 31 bytes leftover after parsing attributes in process `syz.2.9840'. [ 868.037119][ T9293] netlink: 'syz.2.9840': attribute type 2 has an invalid length. [ 868.045905][ T9293] netlink: 31 bytes leftover after parsing attributes in process `syz.2.9840'. [ 868.574230][ T9331] syzkaller0: entered promiscuous mode [ 868.588160][ T9331] syzkaller0: entered allmulticast mode [ 868.824372][ T9341] can: request_module (can-proto-0) failed. [ 869.271029][ T9377] netlink: 'syz.2.9859': attribute type 1 has an invalid length. [ 869.279252][ T9377] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9859'. [ 869.290276][ T9377] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9859'. [ 869.299853][ T9377] netlink: 'syz.2.9859': attribute type 1 has an invalid length. [ 869.310860][ T9377] netlink: 'syz.2.9859': attribute type 8 has an invalid length. [ 869.319306][ T9377] netlink: 606 bytes leftover after parsing attributes in process `syz.2.9859'. [ 869.390431][ T9388] netlink: 'syz.0.9862': attribute type 13 has an invalid length. [ 869.866752][ T9413] netlink: 'syz.3.9870': attribute type 7 has an invalid length. [ 870.001711][ T9409] veth0_to_bond: entered allmulticast mode [ 870.094556][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 870.130295][T15770] bond8: (slave veth0_to_bond): link status definitely down, disabling slave [ 870.163981][T15770] bond8: now running without any active interface! [ 870.264338][ T9428] netlink: 'syz.1.9873': attribute type 10 has an invalid length. [ 870.291793][ T9427] netlink: 'syz.1.9873': attribute type 10 has an invalid length. [ 870.324792][ T9433] nbd: must specify at least one socket [ 870.707413][ T9455] tipc: Started in network mode [ 870.735141][ T9455] tipc: Node identity ac141441, cluster identity 4711 [ 870.754094][ T9455] tipc: Enabled bearer , priority 10 [ 870.787423][ T9460] syzkaller0: entered promiscuous mode [ 870.794780][ T9460] syzkaller0: entered allmulticast mode [ 871.205660][ T9492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 871.267604][ T9501] syzkaller1: entered promiscuous mode [ 871.274761][ T9501] syzkaller1: entered allmulticast mode [ 871.293556][ T9503] macvlan2: entered promiscuous mode [ 871.299606][ T9503] macvlan2: entered allmulticast mode [ 871.809477][ T5935] tipc: Node number set to 2886997057 [ 872.076981][ T9553] netlink: 'syz.4.9910': attribute type 1 has an invalid length. [ 872.145837][ T9553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 872.165399][ T5935] IPVS: starting estimator thread 0... [ 872.183289][ T9560] netlink: 'syz.0.9913': attribute type 83 has an invalid length. [ 872.200163][ T9553] bond1: (slave veth0_to_bond): making interface the new active one [ 872.226992][ T9553] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 872.269261][ T9564] IPVS: using max 54 ests per chain, 129600 per kthread [ 872.271419][ T9569] tap0: tun_chr_ioctl cmd 1074025672 [ 872.281904][ T9569] tap0: ignored: set checksum disabled [ 872.289847][ T9569] tap0: tun_chr_ioctl cmd 1074041702 [ 872.299350][ T9553] xt_bpf: check failed: parse error [ 872.347430][ T9553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 872.365190][ T9553] bond1: (slave bond2): Enslaving as an active interface with a down link [ 872.412119][ T9574] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 872.425303][ T9572] syzkaller0: entered promiscuous mode [ 872.431306][ T9572] syzkaller0: entered allmulticast mode [ 872.437725][ T9553] IPVS: ip_vs_add_dest(): server weight less than zero [ 872.653919][ T9591] bridge3: entered promiscuous mode [ 872.677786][ T9591] bridge3: entered allmulticast mode [ 872.694677][ T9597] __nla_validate_parse: 5 callbacks suppressed [ 872.694698][ T9597] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.9922'. [ 872.962219][ T9615] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9930'. [ 873.010618][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9931'. [ 873.171425][ T9623] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9932'. [ 873.225358][ T9623] netlink: 'syz.0.9932': attribute type 1 has an invalid length. [ 873.237192][ T9632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9936'. [ 873.251695][ T9623] netlink: 228 bytes leftover after parsing attributes in process `syz.0.9932'. [ 873.469054][ T9642] netlink: 'syz.3.9938': attribute type 19 has an invalid length. [ 873.504382][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9938'. [ 873.759172][ T9655] netlink: 'syz.0.9942': attribute type 1 has an invalid length. [ 874.110057][ T9675] A٨: renamed from lo (while UP) [ 874.283793][T18721] IPVS: starting estimator thread 0... [ 874.302738][ T9687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9952'. [ 874.370493][ T9693] syzkaller0: entered promiscuous mode [ 874.378846][ T9689] IPVS: using max 33 ests per chain, 79200 per kthread [ 874.381111][ T9693] syzkaller0: entered allmulticast mode [ 874.491959][ T9704] netlink: 'syz.2.9955': attribute type 2 has an invalid length. [ 874.527573][ T9704] netlink: 'syz.2.9955': attribute type 83 has an invalid length. [ 874.611116][ T9711] syzkaller0: entered promiscuous mode [ 874.622957][ T9711] syzkaller0: entered allmulticast mode [ 874.674893][ T9714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9957'. [ 874.882510][ T9723] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 874.950502][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9961'. [ 874.993535][ T9729] syzkaller0: entered promiscuous mode [ 875.021086][ T9729] syzkaller0: entered allmulticast mode [ 875.046535][ T9729] 0: reclassify loop, rule prio 0, protocol 800 [ 875.229764][ T9739] ip6tnl0: Caught tx_queue_len zero misconfig [ 875.532210][ T9777] netlink: 'syz.0.9978': attribute type 1 has an invalid length. [ 875.626209][ T9777] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 875.653176][ T9777] bond5 (unregistering): Released all slaves [ 875.715905][ T9786] vlan2: entered promiscuous mode [ 875.722447][ T9786] vlan2: entered allmulticast mode [ 875.733984][ T9786] hsr_slave_1: entered allmulticast mode [ 875.818889][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5720 ms [ 875.826938][ C1] lec:lec_tx_timeout: lec0 [ 876.240338][ T9820] netlink: 'syz.2.9990': attribute type 30 has an invalid length. [ 876.287035][ T9820] netlink: 'syz.2.9990': attribute type 30 has an invalid length. [ 876.298942][T15755] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.326489][ T9824] netlink: 'syz.0.9991': attribute type 1 has an invalid length. [ 876.381862][ T9826] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 876.406910][ T9830] openvswitch: netlink: EtherType 50a is less than min 600 [ 876.414351][T15755] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.461727][ T9827] macvlan2: entered promiscuous mode [ 876.467179][ T9827] macvlan2: entered allmulticast mode [ 876.474452][ T9827] bond5: (slave macvlan2): Opening slave failed [ 876.493660][ T9832] netem: change failed [ 876.518916][T15755] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.564899][T15755] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.665924][ T9840] 8021q: VLANs not supported on lo [ 876.685725][ T9845] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 876.939843][ T9874] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 877.012629][ T9877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.057462][ T9879] netlink: 'syz.1.10009': attribute type 29 has an invalid length. [ 877.166773][ T9884] 8021q: adding VLAN 0 to HW filter on device bond3 [ 877.202720][ T9884] bond3: (slave batadv0): Opening slave failed [ 877.471662][ T9908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 877.576739][ T9917] SET target dimension over the limit! [ 877.703751][ T9917] chnl_net:caif_netlink_parms(): no params data found [ 877.722489][ T9925] __nla_validate_parse: 13 callbacks suppressed [ 877.722510][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10024'. [ 878.064626][ T9946] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10032'. [ 878.126479][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10035'. [ 878.142381][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10035'. [ 878.279191][ T9968] netlink: 'syz.0.10040': attribute type 11 has an invalid length. [ 878.296069][ T9968] validate_nla: 2 callbacks suppressed [ 878.296088][ T9968] netlink: 'syz.0.10040': attribute type 4 has an invalid length. [ 878.328230][ T9968] netlink: 'syz.0.10040': attribute type 5 has an invalid length. [ 878.336538][ T9968] netlink: 'syz.0.10040': attribute type 6 has an invalid length. [ 878.339410][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10039'. [ 878.353898][ T9968] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.10040'. [ 878.353994][ T9969] netlink: 'syz.0.10040': attribute type 11 has an invalid length. [ 878.354010][ T9969] netlink: 'syz.0.10040': attribute type 4 has an invalid length. [ 878.354021][ T9969] netlink: 'syz.0.10040': attribute type 5 has an invalid length. [ 878.354033][ T9969] netlink: 'syz.0.10040': attribute type 6 has an invalid length. [ 878.354045][ T9969] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.10040'. [ 878.532392][ T9964] bond4: option fail_over_mac: invalid value (16) [ 878.623756][ T9964] bond4 (unregistering): Released all slaves [ 878.700530][T28429] Bluetooth: hci3: command 0x0401 tx timeout [ 878.752871][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10050'. [ 879.053880][T10022] ip6t_REJECT: ECHOREPLY is not supported [ 879.111227][T10024] syzkaller0: entered promiscuous mode [ 879.127774][T10024] syzkaller0: entered allmulticast mode [ 879.457309][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10064'. [ 879.504720][T10049] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10064'. [ 880.149613][T10081] sctp: [Deprecated]: syz.4.10071 (pid 10081) Use of int in maxseg socket option. [ 880.149613][T10081] Use struct sctp_assoc_value instead [ 880.183643][T10081] vlan2: entered allmulticast mode [ 880.189810][T10081] mac80211_hwsim hwsim108 wlan0: entered allmulticast mode [ 880.304847][T15770] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 880.505596][T10105] gre0: Caught tx_queue_len zero misconfig [ 880.736398][T10118] Bluetooth: MGMT ver 1.23 [ 880.864763][T10120] ip6tnl0: Caught tx_queue_len zero misconfig [ 880.936499][T10129] netlink: 'syz.0.10084': attribute type 10 has an invalid length. [ 881.033399][T10129] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 881.154662][T10141] netdevsim netdevsim1 : renamed from netdevsim0 [ 881.361258][T10160] smc: net device team0 applied user defined pnetid SYZ2 [ 881.385177][T10160] xt_CT: You must specify a L4 protocol and not use inversions on it [ 881.594289][T10163] lo speed is unknown, defaulting to 1000 [ 881.702782][T10174] netlink: 'syz.0.10099': attribute type 16 has an invalid length. [ 881.711277][T10174] netlink: 'syz.0.10099': attribute type 17 has an invalid length. [ 881.758443][T10174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 881.839942][T10184] netlink: 'syz.3.10102': attribute type 1 has an invalid length. [ 881.926830][T10145] 8021q: VLANs not supported on lo [ 881.956042][T10184] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 882.066708][T10184] bond2: (slave bridge3): Enslaving as a backup interface with a down link [ 882.268317][T10163] wg1 speed is unknown, defaulting to 1000 [ 883.149941][T10210] bridge0: entered allmulticast mode [ 883.233561][T10225] veth0: entered promiscuous mode [ 883.263379][T10227] __nla_validate_parse: 22 callbacks suppressed [ 883.263400][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10111'. [ 883.369873][T10231] A link change request failed with some changes committed already. Interface 26A٨ may have been left with an inconsistent configuration, please check. [ 883.592526][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10117'. [ 883.615479][T10241] tipc: New replicast peer: 255.255.255.255 [ 883.636775][T10241] tipc: Enabled bearer , priority 10 [ 883.779360][T10259] IPv6: sit1: Disabled Multicast RS [ 883.931581][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10128'. [ 883.995925][T10278] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10130'. [ 884.166660][T10288] syzkaller0: entered promiscuous mode [ 884.174379][T10288] syzkaller0: entered allmulticast mode [ 884.186354][T10288] tc action pedit offset must be on 32 bit boundaries [ 886.634549][T10246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 886.860448][T10304] netlink: 'syz.2.10138': attribute type 2 has an invalid length. [ 886.869079][T10304] netlink: 188 bytes leftover after parsing attributes in process `syz.2.10138'. [ 886.913705][T10308] syzkaller1: entered promiscuous mode [ 886.920724][T10309] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 886.933389][T10308] syzkaller1: entered allmulticast mode [ 887.120719][T10328] netlink: 232 bytes leftover after parsing attributes in process `syz.4.10145'. [ 887.150146][T10326] netlink: 'syz.3.10144': attribute type 5 has an invalid length. [ 887.186254][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10146'. [ 887.411733][T10345] dvmrp1: entered allmulticast mode [ 887.420631][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10150'. [ 887.444162][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10150'. [ 887.501248][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 887.699922][T10364] syzkaller0: entered promiscuous mode [ 887.715418][T10364] syzkaller0: entered allmulticast mode [ 888.102310][ T30] audit: type=1107 audit(1773322263.933:9): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 888.165790][T10390] netlink: 388 bytes leftover after parsing attributes in process `syz.0.10162'. [ 888.506633][T28429] Bluetooth: hci5: link tx timeout [ 888.513768][T28429] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 888.581117][T11921] lec:lec_start_xmit: lec0:No lecd attached [ 888.854524][ T5835] Bluetooth: hci5: link tx timeout [ 888.859993][ T5835] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 888.874199][T10427] openvswitch: netlink: IPv4 tunnel dst address is zero [ 888.883215][ T5835] Bluetooth: hci5: link tx timeout [ 888.888567][ T5835] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 889.130389][T10446] netlink: 'syz.3.10176': attribute type 18 has an invalid length. [ 889.158285][T10446] __nla_validate_parse: 1 callbacks suppressed [ 889.158304][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10176'. [ 889.224269][T10446] netlink: 'syz.3.10176': attribute type 18 has an invalid length. [ 889.242347][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10176'. [ 889.281430][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10182'. [ 889.370305][T10460] macsec1: entered promiscuous mode [ 889.523142][T10476] netlink: 'syz.4.10187': attribute type 1 has an invalid length. [ 889.570483][T10476] netlink: 88 bytes leftover after parsing attributes in process `syz.4.10187'. [ 889.579057][T10485] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10187'. [ 889.607419][ T5835] Bluetooth: hci5: link tx timeout [ 889.613340][ T5835] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 889.645158][T10476] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10187'. [ 889.693727][T10498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10189'. [ 889.710881][T10476] netlink: 'syz.4.10187': attribute type 1 has an invalid length. [ 889.721082][T10476] netlink: 634 bytes leftover after parsing attributes in process `syz.4.10187'. [ 889.793161][T10485] netlink: 'syz.4.10187': attribute type 1 has an invalid length. [ 889.820155][T10485] netlink: 88 bytes leftover after parsing attributes in process `syz.4.10187'. [ 889.829678][ T5835] Bluetooth: hci5: link tx timeout [ 889.834842][ T5835] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 889.858127][T10485] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10187'. [ 889.878276][T10485] netlink: 'syz.4.10187': attribute type 1 has an invalid length. [ 889.959640][T10508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.057713][T10508] 8021q: adding VLAN 0 to HW filter on device bond4 [ 890.171251][T10508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.232898][T10524] 8021q: adding VLAN 0 to HW filter on device bond10 [ 890.240566][ T5835] Bluetooth: hci5: link tx timeout [ 890.245746][ T5835] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 890.322872][T10523] bond6: option min_links: invalid value (18446744073709551614) [ 890.359003][T10546] sctp: [Deprecated]: syz.2.10201 (pid 10546) Use of int in max_burst socket option deprecated. [ 890.359003][T10546] Use struct sctp_assoc_value instead [ 890.375432][T10523] bond6: option min_links: allowed values 0 - 2147483647 [ 890.390013][T10523] bond6 (unregistering): Released all slaves [ 890.424012][T10539] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 890.544712][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 890.715658][T10565] netlink: 'syz.1.10208': attribute type 7 has an invalid length. [ 890.881281][T10585] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 890.904712][T10585] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 892.858530][T28429] Bluetooth: hci5: command 0x0406 tx timeout [ 893.638828][T10562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 893.825367][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 893.833463][ C1] lec:lec_tx_timeout: lec0 [ 894.415396][T10658] "syz.1.10231" (10658) uses obsolete ecb(arc4) skcipher [ 894.613358][T10645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.766073][T10645] ip6erspan0: left promiscuous mode [ 894.771941][T10645] ip6erspan0: left allmulticast mode [ 894.817380][T10645] geneve2: left promiscuous mode [ 894.830891][T10645] veth0_macvtap: left allmulticast mode [ 894.836865][T10645] macvtap1: left allmulticast mode [ 894.849239][T10645] macvtap2: left promiscuous mode [ 894.872744][T10645] macvlan2: left promiscuous mode [ 894.877808][T10645] macvlan2: left allmulticast mode [ 894.889436][T10645] bridge3: left promiscuous mode [ 894.894400][T10645] bridge3: left allmulticast mode [ 894.905427][T10645] vlan2: left promiscuous mode [ 894.910824][T10645] vlan2: left allmulticast mode [ 894.915711][T10645] hsr_slave_1: left allmulticast mode [ 894.976851][ T2988] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.001714][ T2988] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.022640][ T2988] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.041207][T10677] __nla_validate_parse: 12 callbacks suppressed [ 895.041224][T10677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10234'. [ 895.059711][ T2988] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.121268][T10685] openvswitch: netlink: EtherType 50a is less than min 600 [ 895.137452][T10685] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10235'. [ 895.154678][ T2988] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.172654][ T2988] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.183321][ T2988] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.194161][ T2988] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.283449][T10666] tipc: Resetting bearer [ 895.306678][T10687] netlink: 'syz.2.10236': attribute type 10 has an invalid length. [ 895.367425][T10696] geneve2: entered promiscuous mode [ 895.399450][T10696] geneve2: entered allmulticast mode [ 895.422713][T15769] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 895.445229][T15769] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 895.485176][T15769] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 895.513089][T15769] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 895.615149][T10701] team0 (unregistering): Port device team_slave_0 removed [ 895.664960][T10701] team0 (unregistering): Port device team_slave_1 removed [ 895.745017][T10720] x_tables: duplicate underflow at hook 3 [ 896.100629][T10738] netlink: 'syz.3.10245': attribute type 2 has an invalid length. [ 896.208743][T10738] 9: entered promiscuous mode [ 896.226312][T10666] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 896.246257][T10666] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 896.306731][T10666] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 896.325328][T10666] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 896.339886][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10245'. [ 896.863400][T10760] openvswitch: netlink: Invalid VLAN frame [ 897.356318][T10782] netlink: 'syz.3.10249': attribute type 1 has an invalid length. [ 897.365783][T10782] netlink: 'syz.3.10249': attribute type 2 has an invalid length. [ 897.743536][T28429] Bluetooth: hci3: command 0x0401 tx timeout [ 897.760291][T10666] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 897.766554][T10666] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 897.826918][T10666] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 897.845435][T10666] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 897.890814][T10666] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 897.897338][T10666] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 898.527405][T10841] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10258'. [ 898.581185][T10840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 898.588488][T10840] IPv6: NLM_F_CREATE should be set when creating new route [ 898.596027][T10840] IPv6: NLM_F_CREATE should be set when creating new route [ 898.623053][T10840] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10259'. [ 898.703048][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10261'. [ 898.774840][T10855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10263'. [ 898.926693][T10855] xt_hashlimit: size too large, truncated to 1048576 [ 899.234531][T10886] netlink: 'syz.1.10271': attribute type 16 has an invalid length. [ 899.285316][T10886] netlink: 'syz.1.10271': attribute type 17 has an invalid length. [ 899.318108][T10886] netlink: 'syz.1.10271': attribute type 27 has an invalid length. [ 899.892098][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10277'. [ 900.018599][T10944] netlink: 'syz.3.10284': attribute type 1 has an invalid length. [ 900.037502][T10945] netlink: 'syz.3.10284': attribute type 1 has an invalid length. [ 900.176235][T10944] bond4: entered promiscuous mode [ 900.184143][T10944] 8021q: adding VLAN 0 to HW filter on device bond4 [ 900.196349][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10286'. [ 900.282886][T10963] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10288'. [ 900.311630][T10963] netlink: 'syz.0.10288': attribute type 1 has an invalid length. [ 900.420626][T10963] 8021q: adding VLAN 0 to HW filter on device bond6 [ 900.486333][T10970] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 900.519597][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10288'. [ 900.814465][T10990] netlink: 'syz.1.10295': attribute type 2 has an invalid length. [ 900.975384][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10299'. [ 901.104571][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10300'. [ 901.168972][ T5192] udevd[5192]: worker [7937] /devices/virtual/block/nbd10 is taking a long time [ 901.499363][ T10] page_pool_release_retry() stalled pool shutdown: id 31, 1 inflight 785 sec [ 901.505618][T11028] IPv6: NLM_F_CREATE should be specified when creating new route [ 901.516108][T11028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10305'. [ 901.592962][T11031] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10306'. [ 901.628714][T11031] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10306'. [ 901.641540][T11035] netlink: 348 bytes leftover after parsing attributes in process `syz.2.10308'. [ 901.659059][T11033] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 901.669746][T11033] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10307'. [ 901.865687][T11043] syzkaller0: entered promiscuous mode [ 901.910813][T11043] syzkaller0: entered allmulticast mode [ 902.115215][T11066] sctp: [Deprecated]: syz.2.10317 (pid 11066) Use of int in maxseg socket option. [ 902.115215][T11066] Use struct sctp_assoc_value instead [ 903.747656][T11125] netlink: 'syz.4.10330': attribute type 1 has an invalid length. [ 903.907831][T11175] sctp: [Deprecated]: syz.3.10342 (pid 11175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 903.907831][T11175] Use struct sctp_sack_info instead [ 904.633802][T11210] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 905.199556][T11236] syzkaller0: entered promiscuous mode [ 905.205084][T11236] syzkaller0: entered allmulticast mode [ 905.259289][T11236] __nla_validate_parse: 11 callbacks suppressed [ 905.259310][T11236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10358'. [ 905.386883][T11247] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10362'. [ 905.670587][T11264] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10365'. [ 905.713874][T11264] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10365'. [ 905.934524][T11280] syzkaller0: entered promiscuous mode [ 905.943285][T11280] syzkaller0: entered allmulticast mode [ 906.954513][T11348] x_tables: duplicate underflow at hook 1 [ 907.094876][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10390'. [ 907.142880][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10391'. [ 907.265212][T11364] vlan2: entered promiscuous mode [ 907.396153][T11371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10394'. [ 907.520099][T11336] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 907.532440][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10395'. [ 907.620348][T11382] netlink: 'syz.3.10395': attribute type 1 has an invalid length. [ 907.686670][T11383] netlink: 'syz.4.10394': attribute type 1 has an invalid length. [ 907.766371][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10394'. [ 907.851289][T11393] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.10394'. [ 908.236306][T11395] syzkaller0: entered promiscuous mode [ 908.301136][T11395] syzkaller0: entered allmulticast mode [ 908.949723][ T5835] block nbd11: Receive control failed (result -32) [ 909.285351][T11465] xt_hashlimit: size too large, truncated to 1048576 [ 909.793594][T11485] bond0: (slave gre0): Error: Device type is different from other slaves [ 909.829907][T11485] netlink: zone id is out of range [ 909.835068][T11485] netlink: zone id is out of range [ 909.858819][T11485] netlink: zone id is out of range [ 909.863993][T11485] netlink: zone id is out of range [ 909.890879][T11485] netlink: zone id is out of range [ 909.901989][T11485] netlink: zone id is out of range [ 909.917504][T11485] netlink: zone id is out of range [ 909.952073][T11485] netlink: zone id is out of range [ 909.957237][T11485] netlink: zone id is out of range [ 909.998286][T11485] netlink: zone id is out of range [ 910.217598][T11506] netlink: 'syz.4.10418': attribute type 12 has an invalid length. [ 911.019553][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 911.773688][T11529] bond7 (unregistering): Released all slaves [ 911.817767][T10220] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.835093][T10220] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.898473][T10220] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.948454][T10220] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.030388][T11549] macvtap0: entered promiscuous mode [ 912.070183][T11549] __nla_validate_parse: 8 callbacks suppressed [ 912.070202][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10428'. [ 912.213262][T11549] macvtap0 (unregistering): left promiscuous mode [ 912.420262][T11574] netlink: 'syz.2.10434': attribute type 1 has an invalid length. [ 912.503303][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10434'. [ 912.534341][T11574] bond3: entered promiscuous mode [ 912.542101][T11574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 912.549843][T11576] syzkaller1: entered promiscuous mode [ 912.556743][T11576] syzkaller1: entered allmulticast mode [ 912.574490][T11581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10436'. [ 912.580506][T11574] netlink: 'syz.2.10434': attribute type 5 has an invalid length. [ 912.583951][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10434'. [ 912.605780][T11574] bond3: (slave bridge4): making interface the new active one [ 912.630195][T11574] bridge4: entered promiscuous mode [ 912.636725][T11574] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 912.700275][T11581] 8021q: adding VLAN 0 to HW filter on device bond7 [ 912.866391][T11600] netlink: 'syz.0.10440': attribute type 8 has an invalid length. [ 913.142572][T11618] delete_channel: no stack [ 913.172973][T11618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10443'. [ 913.301127][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10446'. [ 913.701093][T11632] bond5: (slave vcan1): refused to change device type [ 913.884654][T11648] syzkaller0: entered promiscuous mode [ 914.242777][T11670] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10456'. [ 914.385447][T11679] "syz.0.10459" (11679) uses obsolete ecb(arc4) skcipher [ 914.484677][T11687] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10458'. [ 915.175407][T11723] ksmbd: Unknown IPC event: 3, ignore. [ 915.190693][T11724] netlink: 'syz.1.10468': attribute type 11 has an invalid length. [ 915.227569][T11724] netlink: 'syz.1.10468': attribute type 4 has an invalid length. [ 915.256819][T11724] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.10468'. [ 915.287005][T11729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10471'. [ 915.603393][T11732] syzkaller0: entered promiscuous mode [ 915.615080][T11754] netlink: 'syz.0.10475': attribute type 11 has an invalid length. [ 915.634129][T11732] syzkaller0: entered allmulticast mode [ 915.670357][T11753] netlink: 'syz.0.10475': attribute type 12 has an invalid length. [ 915.699636][T11753] netlink: 'syz.0.10475': attribute type 29 has an invalid length. [ 915.845720][T11767] Bluetooth: hci2: Opcode 0x0c1a failed: -22 [ 918.349366][T11773] ip6gre1: entered allmulticast mode [ 918.563836][T11822] bond11 (unregistering): Released all slaves [ 918.703416][T11833] netlink: 'syz.0.10484': attribute type 33 has an invalid length. [ 918.782837][T11833] __nla_validate_parse: 3 callbacks suppressed [ 918.782858][T11833] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10484'. [ 918.872176][T11833] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10484'. [ 918.910411][T11840] netlink: 308 bytes leftover after parsing attributes in process `syz.2.10486'. [ 918.932339][T11841] netlink: 'syz.1.10487': attribute type 3 has an invalid length. [ 918.956809][T11841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10487'. [ 918.978949][T11841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10487'. [ 919.034629][T11849] x_tables: duplicate underflow at hook 1 [ 919.060703][T11849] x_tables: duplicate underflow at hook 1 [ 919.172246][T11854] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10491'. [ 919.221968][T11859] netlink: 'syz.2.10492': attribute type 10 has an invalid length. [ 919.231960][T11859] bridge_slave_1: left allmulticast mode [ 919.245844][T11859] bridge_slave_1: left promiscuous mode [ 919.270742][T11859] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.333333][T11859] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 919.363904][T11862] netlink: 'syz.1.10493': attribute type 3 has an invalid length. [ 919.396126][T11862] netlink: 666 bytes leftover after parsing attributes in process `syz.1.10493'. [ 919.538320][T11882] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10497'. [ 919.652201][T11893] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10499'. [ 922.266820][T11862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 922.406904][T12018] xt_hashlimit: size too large, truncated to 1048576 [ 922.525304][T12031] net_ratelimit: 135 callbacks suppressed [ 922.525323][T12031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 922.704742][T12043] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20002 [ 922.743997][T12043] dvmrp6: entered allmulticast mode [ 922.907037][T12057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10522'. [ 922.931440][T12057] openvswitch: netlink: Flow actions attr not present in new flow. [ 923.485650][T12106] x_tables: unsorted underflow at hook 2 [ 923.544847][T12111] openvswitch: netlink: IP tunnel dst address not specified [ 923.639535][T12121] netlink: 'syz.0.10538': attribute type 5 has an invalid length. [ 923.884998][T12139] __nla_validate_parse: 7 callbacks suppressed [ 923.885016][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10543'. [ 923.914981][T12139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 923.971274][T12139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 923.981992][T12143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10545'. [ 924.009594][T12143] netlink: 'syz.1.10545': attribute type 32 has an invalid length. [ 924.019543][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10545'. [ 924.052143][T12143] bond11: option coupled_control: invalid value (3) [ 924.091201][T12143] bond11 (unregistering): Released all slaves [ 924.230976][T12165] netlink: 'syz.2.10549': attribute type 1 has an invalid length. [ 924.385703][T12165] 8021q: adding VLAN 0 to HW filter on device bond4 [ 924.427644][T12174] sctp: [Deprecated]: syz.0.10552 (pid 12174) Use of int in max_burst socket option deprecated. [ 924.427644][T12174] Use struct sctp_assoc_value instead [ 924.581803][T12187] bridge4: entered promiscuous mode [ 924.587160][T12187] bridge4: entered allmulticast mode [ 924.636675][T12187] team0: Port device bridge4 added [ 924.644410][T12191] bridge0: port 3(team0) entered blocking state [ 924.651852][T12191] bridge0: port 3(team0) entered disabled state [ 924.673735][T12191] team0: entered allmulticast mode [ 924.680531][T12191] team_slave_0: entered allmulticast mode [ 924.687006][T12191] team_slave_1: entered allmulticast mode [ 924.715403][T12191] team0: entered promiscuous mode [ 924.721095][T12198] netlink: 'syz.0.10558': attribute type 1 has an invalid length. [ 924.730047][T12191] team_slave_0: entered promiscuous mode [ 924.736043][T12191] team_slave_1: entered promiscuous mode [ 924.743630][T12191] bridge0: port 3(team0) entered blocking state [ 924.750552][T12191] bridge0: port 3(team0) entered forwarding state [ 924.776356][T12187] ip6gre2: entered promiscuous mode [ 924.783969][T12187] ip6gre2: entered allmulticast mode [ 924.791633][T12187] team0: Device ip6gre2 is of different type [ 924.900548][T12198] 8021q: adding VLAN 0 to HW filter on device bond8 [ 924.912738][T12207] netlink: 'syz.4.10562': attribute type 1 has an invalid length. [ 924.921725][T12207] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10562'. [ 924.932149][T12207] netlink: 'syz.4.10562': attribute type 1 has an invalid length. [ 924.942396][T12207] netlink: 'syz.4.10562': attribute type 8 has an invalid length. [ 924.950885][T12207] netlink: 606 bytes leftover after parsing attributes in process `syz.4.10562'. [ 924.961657][T12207] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10562'. [ 925.086726][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10565'. [ 925.327673][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10568'. [ 925.448993][T12237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10571'. [ 925.615332][T12250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10576'. [ 925.954694][T12277] ip6t_REJECT: ECHOREPLY is not supported [ 926.561879][T12302] netlink: 'syz.1.10588': attribute type 16 has an invalid length. [ 926.589016][T12304] netlink: zone id is out of range [ 926.594179][T12304] netlink: zone id is out of range [ 926.618044][T12304] netlink: zone id is out of range [ 926.623305][T12302] netlink: 'syz.1.10588': attribute type 17 has an invalid length. [ 926.632341][T12304] netlink: zone id is out of range [ 926.638248][T12304] netlink: zone id is out of range [ 926.653621][T12304] netlink: zone id is out of range [ 926.671362][T12304] netlink: zone id is out of range [ 926.856421][T12325] macsec1: entered promiscuous mode [ 926.888262][T12325] bridge0: entered promiscuous mode [ 926.893676][T12325] macsec1: entered allmulticast mode [ 926.928478][T12325] bridge0: entered allmulticast mode [ 926.935034][T12325] bridge0: port 1(macsec1) entered blocking state [ 926.960812][T12325] bridge0: port 1(macsec1) entered disabled state [ 927.001976][T12325] bridge0: left allmulticast mode [ 927.007079][T12325] bridge0: left promiscuous mode [ 927.553190][T12377] net_ratelimit: 55 callbacks suppressed [ 927.553214][T12377] A link change request failed with some changes committed already. Interface 26A٨ may have been left with an inconsistent configuration, please check. [ 927.565217][T12382] openvswitch: netlink: IP tunnel dst address not specified [ 928.060399][T12408] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 928.069792][T12418] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 928.335744][T12433] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 928.362248][T12431] netlink: 'syz.1.10621': attribute type 39 has an invalid length. [ 928.655905][T12447] syzkaller0: entered promiscuous mode [ 928.670065][T12447] syzkaller0: entered allmulticast mode [ 928.683158][T12453] netlink: 'syz.0.10625': attribute type 61 has an invalid length. [ 928.970526][T12474] __nla_validate_parse: 11 callbacks suppressed [ 928.970545][T12474] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10633'. [ 929.009318][T12474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10633'. [ 929.046307][T12474] validate_nla: 2 callbacks suppressed [ 929.046328][T12474] netlink: 'syz.0.10633': attribute type 1 has an invalid length. [ 929.064143][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10637'. [ 929.073509][T12474] veth0: entered promiscuous mode [ 929.127512][T12462] veth0: left promiscuous mode [ 929.331011][T12496] openvswitch: netlink: IP tunnel dst address not specified [ 929.380342][T12483] veth1_macvtap: renamed from veth0_vlan [ 929.554435][T12513] netlink: 'syz.0.10646': attribute type 1 has an invalid length. [ 929.585277][T12513] netlink: 228 bytes leftover after parsing attributes in process `syz.0.10646'. [ 929.596188][T12516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10645'. [ 929.630160][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10646'. [ 929.656237][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10645'. [ 929.675146][T12525] netlink: 212 bytes leftover after parsing attributes in process `syz.0.10646'. [ 929.743588][T12516] syzkaller1: entered promiscuous mode [ 929.763027][T12516] syzkaller1: entered allmulticast mode [ 930.110743][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10654'. [ 930.192630][T12556] syzkaller0: entered promiscuous mode [ 930.198574][T12556] syzkaller0: entered allmulticast mode [ 930.211423][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10656'. [ 930.354444][T12571] sctp: [Deprecated]: syz.1.10659 (pid 12571) Use of int in maxseg socket option. [ 930.354444][T12571] Use struct sctp_assoc_value instead [ 930.623158][T12587] xt_recent: Unsupported userspace flags (000000b1) [ 930.735249][ T5487] veth1_macvtap: left promiscuous mode [ 930.833158][ T5487] veth1_macvtap: entered promiscuous mode [ 931.119398][T12623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.523914][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 931.810693][T12652] netlink: 'syz.2.10677': attribute type 9 has an invalid length. [ 931.858405][T12649] xt_hashlimit: size too large, truncated to 1048576 [ 931.878786][T12652] netlink: 'syz.2.10677': attribute type 6 has an invalid length. [ 932.174656][T12667] bridge_slave_0: entered allmulticast mode [ 932.706513][T12674] erspan0: entered promiscuous mode [ 933.380242][T12713] netlink: 'syz.3.10688': attribute type 1 has an invalid length. [ 933.461650][T12713] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 933.463494][T12711] syzkaller0: entered promiscuous mode [ 933.488024][T12711] syzkaller0: entered allmulticast mode [ 934.038369][T12744] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 934.697655][T12782] __nla_validate_parse: 14 callbacks suppressed [ 934.697674][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10702'. [ 934.816953][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10704'. [ 934.850892][T12793] netlink: 'syz.0.10707': attribute type 14 has an invalid length. [ 934.869879][T12785] vlan4: entered allmulticast mode [ 934.870844][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10708'. [ 934.875069][T12785] bridge6: entered allmulticast mode [ 934.876934][T12785] bridge6: port 1(erspan0) entered blocking state [ 934.897655][T12785] bridge6: port 1(erspan0) entered disabled state [ 934.907202][T12785] erspan0: entered allmulticast mode [ 934.908919][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10707'. [ 934.916640][T12785] erspan0: entered promiscuous mode [ 935.005312][T12793] netlink: 'syz.0.10707': attribute type 14 has an invalid length. [ 935.014895][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10707'. [ 935.112756][T12808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10712'. [ 935.131070][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10712'. [ 935.146627][T12809] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10712'. [ 935.165282][T12809] netlink: 'syz.0.10712': attribute type 5 has an invalid length. [ 935.318467][T12822] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 935.345613][T12821] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 935.357250][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10714'. [ 935.371632][T12821] 8021q: adding VLAN 0 to HW filter on device bond10 [ 935.385962][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10716'. [ 935.552808][T12836] veth0: Caught tx_queue_len zero misconfig [ 936.339870][T12905] tipc: Enabled bearer , priority 0 [ 936.355413][T12908] ip6gre2: entered promiscuous mode [ 936.361615][T12908] ip6gre2: entered allmulticast mode [ 936.374957][T12908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 936.443987][T12914] netlink: 'syz.3.10741': attribute type 10 has an invalid length. [ 936.467171][T12906] syzkaller0: entered promiscuous mode [ 936.474141][T12906] syzkaller0: entered allmulticast mode [ 936.480995][T12906] tipc: Resetting bearer [ 936.497577][T12914] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 936.513471][T12912] tipc: Resetting bearer [ 936.626112][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 936.781420][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5250 ms [ 936.789497][ C1] lec:lec_tx_timeout: lec0 [ 938.640923][T12912] tipc: Disabling bearer [ 938.849384][T12953] syzkaller0: entered promiscuous mode [ 938.871160][T12953] syzkaller0: entered allmulticast mode [ 939.171345][T12974] netlink: 'syz.0.10758': attribute type 1 has an invalid length. [ 939.237486][T12974] netlink: 'syz.0.10758': attribute type 3 has an invalid length. [ 940.305653][T13023] __nla_validate_parse: 11 callbacks suppressed [ 940.305675][T13023] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10773'. [ 940.652289][T13046] netlink: 'syz.3.10780': attribute type 2 has an invalid length. [ 940.742011][T13051] openvswitch: netlink: Message has 1 unknown bytes. [ 940.757048][T13051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.776922][ T30] audit: type=1800 audit(1773322316.603:10): pid=13051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10781" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1758 res=0 errno=0 [ 941.023082][T13064] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 941.319975][T13090] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10791'. [ 941.624766][T13105] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 941.812311][T13122] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10802'. [ 941.849130][T13122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10802'. [ 941.880412][T13122] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.888145][T13122] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.254325][T13150] syzkaller0: entered promiscuous mode [ 942.265826][T13150] syzkaller0: entered allmulticast mode [ 942.421522][T13165] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 942.459308][T13165] siw: device registration error -23 [ 942.465609][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10817'. [ 942.537658][T13165] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10819'. [ 942.600230][T13165] siw: device registration error -23 [ 942.667285][T13176] netlink: 'syz.3.10821': attribute type 2 has an invalid length. [ 942.708083][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10821'. [ 942.939668][T13188] syzkaller0: entered promiscuous mode [ 942.947090][T13188] syzkaller0: entered allmulticast mode [ 942.966536][T13188] 0: reclassify loop, rule prio 0, protocol 800 [ 943.374303][T13216] netlink: 'syz.3.10837': attribute type 4 has an invalid length. [ 943.391523][T13216] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10837'. [ 943.581574][T13235] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 72 [ 943.892041][ T30] audit: type=1800 audit(1773322319.723:11): pid=13260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10847" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1714 res=0 errno=0 [ 944.027214][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10849'. [ 944.036904][T13267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10848'. [ 944.065068][T13267] netlink: 'syz.4.10848': attribute type 7 has an invalid length. [ 944.101176][ T30] audit: type=1107 audit(1773322319.933:12): pid=13271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 944.119122][T13279] netlink: 'syz.3.10852': attribute type 32 has an invalid length. [ 944.357310][T13279] bond5: option coupled_control: invalid value (119) [ 944.383670][T13279] bond5 (unregistering): Released all slaves [ 944.531597][T13303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.663239][T13310] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 944.676046][T13310] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 944.685565][T13310] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 945.072090][T13338] x_tables: duplicate underflow at hook 2 [ 945.111114][T13341] xt_hashlimit: overflow, try lower: 3/0 [ 945.140202][T13344] xt_hashlimit: overflow, try lower: 3/0 [ 945.444078][T15755] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.458279][T15755] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.467244][T15755] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.500272][T15755] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.644397][T13380] netlink: 'syz.3.10876': attribute type 10 has an invalid length. [ 945.677708][T13383] syzkaller0: entered promiscuous mode [ 945.694305][T13384] ksmbd: Unknown IPC event: 8, ignore. [ 945.706675][T13383] syzkaller0: entered allmulticast mode [ 945.727507][T13384] __nla_validate_parse: 6 callbacks suppressed [ 945.727524][T13384] netlink: 284 bytes leftover after parsing attributes in process `syz.2.10877'. [ 945.829260][T13397] netlink: 108 bytes leftover after parsing attributes in process `syz.3.10880'. [ 945.842644][T13390] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10878'. [ 945.890060][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10881'. [ 946.011763][T13405] syzkaller1: entered promiscuous mode [ 946.017354][T13405] syzkaller1: entered allmulticast mode [ 946.073281][T13410] sctp: [Deprecated]: syz.0.10885 (pid 13410) Use of int in maxseg socket option. [ 946.073281][T13410] Use struct sctp_assoc_value instead [ 946.134300][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10886'. [ 946.155969][T13414] syzkaller0: entered promiscuous mode [ 946.168081][T13414] syzkaller0: entered allmulticast mode [ 946.300684][T13426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10890'. [ 946.372197][T13430] netlink: 'syz.3.10892': attribute type 1 has an invalid length. [ 946.715940][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10900'. [ 947.067245][T13474] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10906'. [ 947.509071][T13507] dvmrp1: left allmulticast mode [ 947.516570][T13507] dvmrp6: left allmulticast mode [ 947.559448][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10919'. [ 947.582930][T13512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10919'. [ 947.686224][T13512] geneve3: entered promiscuous mode [ 947.738016][T13512] geneve3: entered allmulticast mode [ 947.791465][T13529] mac80211_hwsim hwsim100 wlan0: entered promiscuous mode [ 947.812696][T13528] mac80211_hwsim hwsim100 wlan0: left promiscuous mode [ 948.001898][T13549] syzkaller0: entered promiscuous mode [ 948.007443][T13549] syzkaller0: entered allmulticast mode [ 948.092474][T13545] syzkaller0: entered promiscuous mode [ 948.099231][T13545] syzkaller0: entered allmulticast mode [ 948.451694][T13577] lo speed is unknown, defaulting to 1000 [ 949.062965][T13615] x_tables: unsorted underflow at hook 2 [ 949.084641][T13577] wg1 speed is unknown, defaulting to 1000 [ 949.146917][T13625] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 949.165913][T13625] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 949.231358][T13625] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 949.274723][T13629] netlink: 'syz.2.10949': attribute type 9 has an invalid length. [ 949.757684][T13652] sctp: [Deprecated]: syz.2.10953 (pid 13652) Use of struct sctp_assoc_value in delayed_ack socket option. [ 949.757684][T13652] Use struct sctp_sack_info instead [ 950.141242][T13677] netlink: 'syz.1.10959': attribute type 6 has an invalid length. [ 950.742306][T13713] netlink: 'syz.1.10968': attribute type 13 has an invalid length. [ 950.779464][T13713] netlink: 'syz.1.10968': attribute type 58 has an invalid length. [ 950.796341][T13713] __nla_validate_parse: 2 callbacks suppressed [ 950.796362][T13713] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10968'. [ 950.844384][T13713] ifb1: refused to change device tx_queue_len [ 950.997093][T13733] xt_hashlimit: size too large, truncated to 1048576 [ 951.350451][T13740] sit0: Caught tx_queue_len zero misconfig [ 951.357503][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10974'. [ 951.385886][T13740] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 951.386883][T13743] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 951.453394][T13747] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 951.513214][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10977'. [ 951.549690][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10977'. [ 951.564642][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10978'. [ 951.573796][T13752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10978'. [ 951.584385][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10978'. [ 951.603569][T13752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10978'. [ 951.737696][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10985'. [ 951.996914][T13793] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.10990'. [ 952.146701][T13808] netlink: zone id is out of range [ 952.152288][T13808] netlink: zone id is out of range [ 952.158856][T13808] netlink: zone id is out of range [ 952.164210][T13808] netlink: zone id is out of range [ 952.171200][T13808] netlink: zone id is out of range [ 952.176828][T13808] netlink: zone id is out of range [ 952.182749][T13808] netlink: zone id is out of range [ 952.193036][T13808] netlink: zone id is out of range [ 952.196114][T13811] syzkaller0: entered promiscuous mode [ 952.210301][T13811] syzkaller0: entered allmulticast mode [ 952.358252][T13819] SET target dimension over the limit! [ 953.227205][T11921] lec:lec_start_xmit: lec0:No lecd attached [ 953.459321][T13890] can: request_module (can-proto-0) failed. [ 953.743229][T13918] netlink: 'syz.0.11027': attribute type 3 has an invalid length. [ 954.097371][T13941] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 954.311040][T13953] netlink: 'syz.1.11039': attribute type 11 has an invalid length. [ 954.596399][T13977] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 954.804855][T13985] syzkaller0: entered promiscuous mode [ 954.810559][T13985] syzkaller0: entered allmulticast mode [ 954.826963][T13992] netlink: 'syz.1.11051': attribute type 2 has an invalid length. [ 954.840508][T13991] syzkaller0: tun_net_xmit 1 [ 955.007191][ T2988] syzkaller0: tun_net_xmit 48 [ 955.134214][T14021] sctp: [Deprecated]: syz.4.11057 (pid 14021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 955.134214][T14021] Use struct sctp_sack_info instead [ 957.436926][T14060] __nla_validate_parse: 15 callbacks suppressed [ 957.436948][T14060] netlink: 260 bytes leftover after parsing attributes in process `syz.1.11069'. [ 957.582579][T15769] bridge_slave_1: left allmulticast mode [ 957.594435][T15769] bridge_slave_1: left promiscuous mode [ 957.610273][T15769] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.644923][T15769] bridge_slave_0: left allmulticast mode [ 957.661186][T15769] bridge_slave_0: left promiscuous mode [ 957.667609][T15769] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.775107][T14087] netlink: 88 bytes leftover after parsing attributes in process `syz.0.11076'. [ 957.956503][T15769] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 958.236872][T15769] dvmrp1 (unregistering): left allmulticast mode [ 958.247583][T15769] dvmrp0 (unregistering): left allmulticast mode [ 958.304909][T15769]  (unregistering): (slave bridge0): Releasing backup interface [ 958.470720][T14109] netlink: 'syz.4.11077': attribute type 10 has an invalid length. [ 958.532324][T15769] bond1 (unregistering): (slave bridge5): Releasing active interface [ 958.632351][T15769] bond2 (unregistering): (slave bridge7): Removing an active aggregator [ 958.641419][T15769] bond2 (unregistering): (slave bridge7): Releasing backup interface [ 958.743775][T15769]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.754423][T15769]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.764626][T15769]  (unregistering): Released all slaves [ 958.774636][T15769] bond0 (unregistering): Released all slaves [ 958.780887][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5550 ms [ 958.780911][ C1] lec:lec_tx_timeout: lec0 [ 958.807198][T15769] bond1 (unregistering): Released all slaves [ 958.820946][T15769] bond2 (unregistering): Released all slaves [ 958.836243][T15769] bond3 (unregistering): Released all slaves [ 958.853200][T15769] bond4 (unregistering): Released all slaves [ 958.898902][T14081] syzkaller0: entered promiscuous mode [ 958.904539][T14081] syzkaller0: entered allmulticast mode [ 958.949841][ T9] wg1 speed is unknown, defaulting to 1000 [ 958.955710][ T9] syz2: Port: 1 Link DOWN [ 959.324993][T14135] veth1_virt_wifi: entered allmulticast mode [ 959.413324][T14129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11082'. [ 959.447630][T14129] block nbd13: Unsupported socket: should be TCP or UNIX. [ 959.657455][T14157] mac80211_hwsim hwsim109 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 959.704856][T14157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11090'. [ 959.844050][T14169] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11091'. [ 959.894683][T14166] netlink: 'syz.2.11092': attribute type 10 has an invalid length. [ 960.258764][T14194] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11100'. [ 960.272797][T14191] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 960.279128][T14196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11101'. [ 960.306444][T14191] bond5 (unregistering): Released all slaves [ 960.382581][T14196] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 960.423174][T14190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11098'. [ 960.475023][T14202] policy can only be matched on NF_INET_PRE_ROUTING [ 960.475043][T14202] unable to load match [ 960.510797][T14203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11100'. [ 960.565088][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11100'. [ 960.625761][T14190] 8021q: adding VLAN 0 to HW filter on device bond11 [ 960.678297][T14204] syzkaller1: entered promiscuous mode [ 960.685764][T14204] syzkaller1: entered allmulticast mode [ 960.935075][T15769] hsr_slave_0: left promiscuous mode [ 960.993346][T15769] hsr_slave_1: left promiscuous mode [ 961.023270][T15769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.050477][T15769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.080966][T15769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.097534][T15769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.145727][T15769] team_slave_1: left promiscuous mode [ 961.151715][T15769] batadv1: left promiscuous mode [ 961.181991][T15769] veth1_macvtap: left promiscuous mode [ 961.205082][T15769] veth0_macvtap: left promiscuous mode [ 961.431192][T15769] team0 (unregistering): Port device batadv1 removed [ 961.465188][T15769] pimreg (unregistering): left allmulticast mode [ 961.787726][T15769] team0 (unregistering): Port device team_slave_1 removed [ 961.901011][ T5935] page_pool_release_retry() stalled pool shutdown: id 31, 1 inflight 845 sec [ 962.174570][T14291] net_ratelimit: 244 callbacks suppressed [ 962.174594][T14291] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 962.535389][T14314] netlink: 'syz.2.11120': attribute type 10 has an invalid length. [ 962.551689][T14319] netlink: 'syz.0.11121': attribute type 4 has an invalid length. [ 962.641486][T14321] netlink: 'syz.0.11121': attribute type 4 has an invalid length. [ 962.955380][T15769] IPVS: stop unused estimator thread 0... [ 963.079433][T14337] __nla_validate_parse: 2 callbacks suppressed [ 963.079451][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11122'. [ 963.469460][T14355] C: renamed from lo (while UP) [ 963.487651][T14355] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 963.851742][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11135'. [ 963.982683][T14394] netlink: 248 bytes leftover after parsing attributes in process `syz.0.11139'. [ 964.052547][T14390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11137'. [ 964.089687][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11139'. [ 964.109533][T14401] syzkaller0: entered promiscuous mode [ 964.109545][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11139'. [ 964.154437][T14401] syzkaller0: entered allmulticast mode [ 964.193000][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11141'. [ 964.203480][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11141'. [ 964.242357][T14404] openvswitch: netlink: Message has 592 unknown bytes. [ 964.264892][T14404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 964.356834][T14356] lec:lec_atm_close: lec0: Shut down! [ 964.380028][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11143'. [ 964.396876][T14418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11143'. [ 964.768931][T14434] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 965.016808][T14437] syzkaller0: entered promiscuous mode [ 965.038994][T14437] syzkaller0: entered allmulticast mode [ 965.203234][T14472] block nbd4: NBD_DISCONNECT [ 965.218805][T14472] block nbd4: Send disconnect failed -32 [ 965.224947][T14472] block nbd4: shutting down sockets [ 967.345808][ T31] INFO: task udevd:7937 blocked for more than 143 seconds. [ 967.356928][ T31] Not tainted syzkaller #0 [ 967.362311][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 967.371507][ T31] task:udevd state:D stack:23464 pid:7937 tgid:7937 ppid:5192 task_flags:0x400140 flags:0x00080000 [ 967.384028][ T31] Call Trace: [ 967.387334][ T31] [ 967.390543][ T31] __schedule+0x15dd/0x52d0 [ 967.395074][ T31] ? blk_mq_flush_plug_list+0x443/0x570 [ 967.401518][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 967.407645][ T31] ? __blk_flush_plug+0x416/0x4d0 [ 967.413234][ T31] ? __pfx___schedule+0x10/0x10 [ 967.419005][ T31] ? schedule+0x90/0x360 [ 967.423294][ T31] schedule+0x164/0x360 [ 967.427486][ T31] schedule_timeout+0x158/0x2c0 [ 967.432865][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 967.438660][ T31] ? __pfx_process_timeout+0x10/0x10 [ 967.443986][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 967.450261][ T31] ? prepare_to_wait_event+0x436/0x480 [ 967.455866][ T31] nbd_queue_rq+0x857/0x1100 [ 967.460889][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 967.465947][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 967.472629][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 967.478351][ T31] ? sbitmap_get+0x229/0x390 [ 967.483038][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 967.489412][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 967.495248][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 967.502341][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 967.509367][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 967.515393][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 967.521059][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 967.526193][ T31] blk_mq_dispatch_list+0xd16/0xe10 [ 967.531940][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 967.537242][ T31] ? blk_mq_dispatch_list+0x190/0xe10 [ 967.542782][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 967.548803][ T31] ? rcu_is_watching+0x15/0xb0 [ 967.553594][ T31] blk_mq_flush_plug_list+0x48d/0x570 [ 967.559431][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 967.564636][ T31] ? blk_mq_submit_bio+0xef8/0x2810 [ 967.569959][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 967.575874][ T31] __blk_flush_plug+0x3ed/0x4d0 [ 967.581203][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 967.586613][ T31] __submit_bio+0x28d/0x580 [ 967.592696][ T31] ? __pfx___submit_bio+0x10/0x10 [ 967.598152][ T31] ? bio_associate_blkg+0x6d/0x230 [ 967.603484][ T31] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 967.609637][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 967.615994][ T31] ? bio_alloc_bioset+0xbe2/0x11b0 [ 967.621723][ T31] block_read_full_folio+0x599/0x830 [ 967.627062][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 967.632624][ T31] filemap_read_folio+0x137/0x3b0 [ 967.637686][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 967.643434][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 967.649422][ T31] ? filemap_add_folio+0x356/0x530 [ 967.654543][ T31] do_read_cache_folio+0x358/0x590 [ 967.659829][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 967.665316][ T31] read_part_sector+0xb6/0x2b0 [ 967.670475][ T31] adfspart_check_ICS+0xa5/0xa40 [ 967.675449][ T31] ? snprintf+0xe8/0x140 [ 967.680720][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 967.687068][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 967.692788][ T31] bdev_disk_changed+0x7ba/0x1550 [ 967.697907][ T31] ? bdev_open+0xe0/0xd30 [ 967.702293][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 967.707803][ T31] blkdev_get_whole+0x380/0x510 [ 967.713696][ T31] bdev_open+0x31e/0xd30 [ 967.718052][ T31] blkdev_open+0x470/0x610 [ 967.722502][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 967.727436][ T31] do_dentry_open+0x785/0x14e0 [ 967.732385][ T31] vfs_open+0x3b/0x340 [ 967.736475][ T31] ? path_openat+0x2df0/0x3860 [ 967.742223][ T31] path_openat+0x2e08/0x3860 [ 967.746847][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 967.752355][ T31] ? stack_depot_save_flags+0x33/0x810 [ 967.757839][ T31] ? __pfx_path_openat+0x10/0x10 [ 967.762936][ T31] ? __x64_sys_openat+0x138/0x170 [ 967.768871][ T31] ? do_syscall_64+0x14d/0xf80 [ 967.773657][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.779799][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 967.784810][ T31] do_file_open+0x23e/0x4a0 [ 967.789487][ T31] ? __pfx_do_file_open+0x10/0x10 [ 967.794554][ T31] ? _raw_spin_unlock+0x28/0x50 [ 967.800132][ T31] ? alloc_fd+0x64b/0x6c0 [ 967.804482][ T31] do_sys_openat2+0x113/0x200 [ 967.809285][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 967.814764][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 967.820180][ T31] ? rcu_is_watching+0x15/0xb0 [ 967.824976][ T31] __x64_sys_openat+0x138/0x170 [ 967.830731][ T31] do_syscall_64+0x14d/0xf80 [ 967.835364][ T31] ? trace_irq_disable+0x3b/0x150 [ 967.840455][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.846546][ T31] ? clear_bhb_loop+0x40/0x90 [ 967.851362][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.857277][ T31] RIP: 0033:0x7fb6644a7407 [ 967.862271][ T31] RSP: 002b:00007ffea199c6d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 967.870968][ T31] RAX: ffffffffffffffda RBX: 00007fb664bc7880 RCX: 00007fb6644a7407 [ 967.879103][ T31] RDX: 00000000000a0800 RSI: 0000555dacd69520 RDI: ffffffffffffff9c [ 967.887087][ T31] RBP: 0000555dacd52910 R08: 0000000000000000 R09: 0000000000000000 [ 967.895724][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555dacd6ae00 [ 967.903816][ T31] R13: 0000555dacd60190 R14: 0000000000000000 R15: 0000555dacd6ae00 [ 967.911956][ T31] [ 967.915032][ T31] [ 967.915032][ T31] Showing all locks held in the system: [ 967.923600][ T31] 1 lock held by khungtaskd/31: [ 967.928531][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 967.938731][ T31] 2 locks held by getty/5580: [ 967.943422][ T31] #0: ffff888036d620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 967.954219][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 967.964664][ T31] 3 locks held by kworker/u8:25/10220: [ 967.970367][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 967.983716][ T31] #1: ffffc9001badfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 967.994897][ T31] #2: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 968.004079][ T31] 3 locks held by kworker/u8:44/15769: [ 968.010124][ T31] #0: ffff888031d01148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 968.021867][ T31] #1: ffffc900025efc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 968.034732][ T31] #2: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 968.044970][ T31] 3 locks held by udevd/7937: [ 968.049708][ T31] #0: ffff888026d2d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 968.059054][ T31] #1: ffff888024d13d98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 968.069106][ T31] #2: ffff888026e28180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 968.078229][ T31] 2 locks held by syz.0.11148/14432: [ 968.083546][ T31] #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 968.092754][ T31] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 968.104455][ T31] 1 lock held by syz.3.11155/14484: [ 968.109879][ T31] #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1e1/0x1ae0 [ 968.119079][ T31] 1 lock held by syz.3.11155/14485: [ 968.124271][ T31] #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1e1/0x1ae0 [ 968.133884][ T31] 3 locks held by syz.1.11156/14483: [ 968.139901][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 968.148301][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 968.157320][ T31] #2: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: team_nl_options_set_doit+0xb3/0xe50 [ 968.168220][ T31] 2 locks held by syz.4.11158/14497: [ 968.173550][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 968.181853][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 968.191276][ T31] 2 locks held by syz.2.11159/14500: [ 968.196558][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 968.205143][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 968.214269][ T31] 2 locks held by syz.2.11159/14501: [ 968.220277][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 968.229212][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 968.238311][ T31] 2 locks held by syz.2.11159/14504: [ 968.243734][ T31] #0: ffffffff8fbaed08 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x641/0x7f0 [ 968.253698][ T31] #1: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 968.263785][ T31] 2 locks held by syz.2.11159/14506: [ 968.269305][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 968.277524][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 968.287087][ T31] 2 locks held by syz.2.11159/14509: [ 968.292747][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 968.301225][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 968.310665][ T31] [ 968.313131][ T31] ============================================= [ 968.313131][ T31] [ 968.322746][ T31] NMI backtrace for cpu 0 [ 968.322765][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 968.322785][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 968.322795][ T31] Call Trace: [ 968.322803][ T31] [ 968.322812][ T31] dump_stack_lvl+0xe8/0x150 [ 968.322841][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 968.322864][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 968.322909][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 968.322930][ T31] sys_info+0x135/0x170 [ 968.322947][ T31] watchdog+0xfd9/0x1030 [ 968.322982][ T31] ? watchdog+0x21a/0x1030 [ 968.323012][ T31] kthread+0x388/0x470 [ 968.323042][ T31] ? __pfx_watchdog+0x10/0x10 [ 968.323063][ T31] ? __pfx_kthread+0x10/0x10 [ 968.323079][ T31] ret_from_fork+0x51e/0xb90 [ 968.323108][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 968.323126][ T31] ? __switch_to+0xc7d/0x1450 [ 968.323161][ T31] ? __pfx_kthread+0x10/0x10 [ 968.323178][ T31] ret_from_fork_asm+0x1a/0x30 [ 968.323214][ T31] [ 968.323258][ T31] Sending NMI from CPU 0 to CPUs 1: [ 968.435400][ C1] NMI backtrace for cpu 1 [ 968.435417][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 968.435435][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 968.435445][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 968.435473][ C1] Code: fe 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 90 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 968.435487][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 968.435502][ C1] RAX: 000000000035e6a1 RBX: ffffffff819a88ed RCX: 0000000080000001 [ 968.435513][ C1] RDX: 0000000000000001 RSI: ffffffff8def3ab4 RDI: ffffffff8c27b280 [ 968.435525][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 968.435536][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901198b0 [ 968.435547][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 0000000000000001 [ 968.435558][ C1] FS: 0000000000000000(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 968.435571][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 968.435581][ C1] CR2: 000055557d6d54e8 CR3: 0000000075a30000 CR4: 00000000003526f0 [ 968.435596][ C1] Call Trace: [ 968.435603][ C1] [ 968.435610][ C1] default_idle+0x9/0x20 [ 968.435626][ C1] default_idle_call+0x72/0xb0 [ 968.435644][ C1] do_idle+0x1bd/0x500 [ 968.435663][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 968.435687][ C1] ? __pfx_do_idle+0x10/0x10 [ 968.435710][ C1] cpu_startup_entry+0x43/0x60 [ 968.435730][ C1] start_secondary+0x101/0x110 [ 968.435748][ C1] common_startup_64+0x13e/0x147 [ 968.435771][ C1] [ 968.606403][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 968.613286][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 968.622505][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 968.632555][ T31] Call Trace: [ 968.635831][ T31] [ 968.638873][ T31] vpanic+0x56c/0xa60 [ 968.642878][ T31] ? __pfx___schedule+0x10/0x10 [ 968.647776][ T31] ? __pfx_vpanic+0x10/0x10 [ 968.652281][ T31] ? __pfx_console_unlock+0x10/0x10 [ 968.657490][ T31] panic+0xc5/0xd0 [ 968.661214][ T31] ? __pfx_panic+0x10/0x10 [ 968.665628][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 968.670997][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 968.677150][ T31] watchdog+0x1023/0x1030 [ 968.681484][ T31] ? watchdog+0x21a/0x1030 [ 968.685911][ T31] kthread+0x388/0x470 [ 968.689996][ T31] ? __pfx_watchdog+0x10/0x10 [ 968.694741][ T31] ? __pfx_kthread+0x10/0x10 [ 968.699339][ T31] ret_from_fork+0x51e/0xb90 [ 968.703951][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 968.709074][ T31] ? __switch_to+0xc7d/0x1450 [ 968.713754][ T31] ? __pfx_kthread+0x10/0x10 [ 968.718338][ T31] ret_from_fork_asm+0x1a/0x30 [ 968.723111][ T31] [ 968.726389][ T31] Kernel Offset: disabled [ 968.730714][ T31] Rebooting in 86400 seconds..