last executing test programs: 5.330469815s ago: executing program 2 (id=1675): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000140)={0x2}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x11, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80040000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x200cc814) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000040)={r5, 0x0, 0x3, 0x3, 0xd, 0xe, [0x40, 0x5, 0x3, 0xd, 0xffffffff, 0x4]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x27, &(0x7f0000000140)=0x32, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[], 0xec}}, 0x4004041) 5.180765463s ago: executing program 0 (id=1678): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x3}, 0x15, 0x3, 'nq\x00', 0x23, 0x4, 0x72}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x20, 0xff, 0x7, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x10, 0x8, 0x9, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000fff0005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xac, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0xdccd56d2e6746fef}, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@newtaction={0x1e0c, 0x30, 0x1, 0x0, 0x0, {}, [{0x1df8, 0x1, [@m_pedit={0x1df4, 0xc, 0x0, 0x0, {{0xa}, {0x1cec, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x100, 0x3, 0x5, 0x6, 0x9}, 0x90, 0x1}, [{0x1, 0x2, 0x9, 0xf, 0x1, 0xb97}, {0xfffffff8, 0x1ff, 0x1ff, 0x3, 0x9, 0x7ff}, {0x400, 0x5, 0x8, 0x347, 0x1, 0x9}, {0xe, 0x8, 0x2231, 0x1, 0x145c0d89, 0x6}, {0x8, 0x3, 0x58, 0x8000, 0x49, 0x8001}, {0xffffff11, 0x80000000, 0x400, 0x14, 0x73, 0x1}, {0x120, 0x5, 0x5, 0x4, 0x8000, 0x1ff}, {0x5, 0xffff, 0x3, 0x101, 0x80000000, 0xd}, {0x8, 0x3, 0x1, 0x7121, 0x9, 0x4000}, {0x2, 0xf60e, 0x6, 0x4, 0xe538, 0x3}, {0x2, 0x3, 0x80, 0x2, 0x5a, 0x81}, {0x4, 0x0, 0x24, 0x8, 0xe}, {0x6, 0x1, 0x4, 0x16b, 0x3, 0x2}, {0x0, 0x1, 0xffff4748, 0x3d, 0xc4, 0x9}, {0x401, 0x26, 0x8, 0xe2, 0xfffff000, 0xfa3}, {0xd, 0x1ff, 0x10001, 0xffff, 0x5, 0x3}, {0x800, 0x0, 0x4, 0x5, 0x4, 0x5}, {0x0, 0x10a, 0x4, 0x5, 0x8}, {0xe, 0x1, 0xfffffffa, 0x1, 0x4, 0x6}, {0xfffffff1, 0x9, 0x3, 0x1, 0x2}, {0xda08, 0xfffffffd, 0x1, 0x5, 0x80000000, 0x3}, {0x100, 0x1000, 0x6, 0x1, 0x4, 0xffffffff}, {0x5, 0x9, 0x0, 0x850, 0x6, 0x200}, {0x1, 0x10001, 0x1, 0x5, 0x1}, {0x1, 0x3, 0x400000, 0x8, 0x0, 0xfffffff9}, {0x526, 0x4, 0x1b9, 0x71, 0x2, 0x6}, {0x3f, 0x1, 0x377, 0xe6, 0x400, 0xffffffff}, {0x0, 0x3, 0x4, 0x4, 0xfecc, 0x7ef0504a}, {0x0, 0x8, 0x795, 0x619, 0xffffffff, 0x7}, {0x5, 0x8000, 0x40, 0x3, 0x2, 0x80000000}, {0x200, 0x2, 0x6, 0x80000000, 0x2, 0x3800000}, {0xb, 0x1, 0x32c5, 0x7, 0x6, 0xfffffffe}, {0x98, 0x40, 0x8, 0x36ec, 0x9}, {0x3, 0x3, 0x401, 0x3ed, 0x626f, 0x6}, {0x4, 0x5, 0x5, 0xe, 0x9, 0x100}, {0x0, 0x55, 0x8, 0x9, 0xffffffff, 0x1}, {0xaa, 0x5, 0x7f, 0x10, 0x6, 0x2}, {0x458, 0x8001, 0x8, 0x5, 0x5, 0x3}, {0x1, 0x15, 0xad, 0xfffffffa, 0x1}, {0x7, 0xb, 0x80000001, 0x5, 0x2f3, 0x6}, {0x3, 0x2, 0x9, 0x2, 0x2, 0x1}, {0x101, 0x5, 0x3, 0xfffeffff, 0x7, 0x3ff}, {0x8, 0xd697, 0x2, 0x5, 0xd6, 0xfffffffe}, {0x0, 0xffffffff, 0x5, 0x0, 0x67, 0x1}, {0x8, 0x9, 0x6, 0x1, 0x9, 0x40}, {0x1, 0x3, 0x1, 0xaac6, 0x7f}, {0x3, 0x5, 0x2, 0x0, 0x4, 0x400}, {0x532, 0x8, 0x0, 0x1ff, 0x2, 0x7}, {0x0, 0xc, 0x75d, 0x8, 0x9, 0x6b6}, {0x7, 0x2, 0x0, 0x6b3e, 0x0, 0x6}, {0xa, 0x8, 0x5, 0x8, 0xf, 0x2}, {0x3ecaf0a8, 0x9, 0x4c, 0x8001, 0x0, 0x5}, {0xfffffff7, 0x5, 0x9, 0x8e, 0x6, 0x80000000}, {0x4, 0x8, 0x7, 0x9, 0x0, 0x8}, {0x5, 0xdc0, 0x7fff, 0x8, 0x6, 0x9}, {0xff, 0xffffffff, 0xdbb, 0x7d, 0x7, 0x6ccb}, {0x8, 0xffffff27, 0x4, 0x4, 0xfffffff7}, {0x2, 0x94e8, 0x1, 0x200, 0x1}, {0x4c6a, 0xfffffffc, 0x200, 0x4, 0xe, 0x6}, {0x9, 0x6c, 0x2, 0x3, 0x1e1, 0x9}, {0xe6f, 0x3, 0x2, 0x3, 0x3ff, 0x97}, {0x6, 0x3, 0x9, 0x2, 0x8, 0x4}, {0xfffffffa, 0x9, 0x6, 0x1, 0x0, 0x3}, {0x7, 0x25, 0x91, 0x61, 0x40, 0x6}, {0xfffffffd, 0x1, 0x10, 0x1, 0x7, 0x5}, {0x2, 0x3, 0x5, 0x644b, 0x8, 0x7}, {0x4, 0x8000, 0x3, 0xe57, 0x7ff, 0x2}, {0x6, 0x7, 0x6c8, 0x4, 0xdfc, 0xe}, {0x80, 0x7, 0x4, 0x8ad, 0xd23, 0x4}, {0x7, 0x3, 0xffffffff, 0x7ff, 0x8001, 0x2}, {0x6, 0x8, 0x4, 0xb, 0x8, 0x10}, {0x7, 0xffff, 0x2, 0x3, 0x1000, 0x9}, {0x5, 0x8, 0x9, 0x8, 0x6, 0x9b}, {0xc4, 0x4d21, 0xffff80b7, 0x566, 0x400, 0x39b2452a}, {0x9, 0x7fff, 0x8001, 0x1, 0x3ff, 0x7ff}, {0xe2, 0x1, 0x3, 0x825, 0x2, 0x6}, {0x1497, 0x3, 0x5, 0x9, 0xffff6d38, 0x351}, {0x2, 0x7, 0x7, 0x4aa, 0x7, 0xffff}, {0x4c, 0x10, 0x1ff, 0x54, 0x7, 0xf}, {0x1, 0x5, 0x0, 0x200, 0xf, 0x2}, {0xd8000, 0x5, 0x3, 0x0, 0x16, 0x2}, {0x7, 0x9, 0x0, 0x2, 0xf7cc, 0x52}, {0x3, 0x6361, 0x1, 0x3, 0xd4, 0x7fffffff}, {0x870, 0x1, 0x6, 0x4, 0x2, 0x2}, {0x7, 0xfffffffa, 0x4, 0xd, 0x8, 0x401}, {0x6, 0xa, 0x0, 0xfffffff8, 0xc8a, 0x9}, {0x184a, 0x7, 0xb, 0x4, 0x2, 0x4}, {0x6, 0x200, 0x101, 0x4, 0x7, 0x1}, {0xfffffffd, 0x1, 0x0, 0x3, 0x7, 0x100}, {0xf, 0x30, 0x2, 0xfffffffb, 0xfffffffb, 0x7}, {0x10001, 0xd18, 0x100, 0x5, 0xfffffffe, 0x5}, {0xfffff5e9, 0x9, 0x3ee4, 0x7317bd11, 0x8, 0x10000}, {0x4, 0x800, 0x9, 0x3, 0x0, 0x6}, {0x1, 0x6, 0x1, 0x3, 0x1, 0x101}, {0x8, 0x5033, 0x9, 0x0, 0x400, 0x6}, {0x5, 0x0, 0x0, 0x6, 0x4, 0x5}, {0x13, 0xe9, 0x100, 0x4, 0x7fff, 0x1}, {0x4, 0xd7, 0x0, 0x3, 0x8001, 0xf8}, {0x6, 0x5, 0xacd, 0xfffffffb, 0x1, 0x5}, {0xffffff80, 0x1, 0x1, 0x1, 0xb, 0x2}, {0x5300, 0x7, 0x2, 0x2, 0x0, 0x24}, {0x10001, 0x8, 0x9ba, 0x2, 0xdd4, 0x7ff}, {0x6, 0x5, 0x6, 0x100000, 0x6656, 0x3}, {0x3, 0x2, 0xfffffff8, 0x6, 0x3, 0x4}, {0xffff, 0x78fe, 0x7, 0x10001, 0x8, 0x4}, {0xf980, 0x10001, 0xa8, 0xffffff01, 0x6, 0x10000}, {0x2, 0xc4f, 0x7, 0x0, 0x7, 0x43}, {0x2, 0x1, 0x7f, 0xffff, 0x8000, 0x200}, {0x10001, 0xc49, 0xd5f5, 0x4, 0x92a3, 0x7}, {0x6, 0x7, 0xf, 0x6981b8be, 0x900000, 0x8}, {0xa, 0x5cc, 0xd3c, 0x9, 0x80000000, 0x7f}, {0x8, 0x4, 0x6, 0x1, 0xc, 0x8}, {0xac, 0x5, 0xa, 0x5, 0x38c1, 0xa7}, {0x8000, 0x2, 0x1ff, 0xffff, 0x2, 0x6}, {0xfffffffc, 0x9, 0x80000000, 0x0, 0x8}, {0x7fff, 0x9, 0x9bf9, 0x6, 0x8, 0xc7d5}, {0x4, 0x2000, 0x4, 0x1, 0x4, 0x5}, {0x2, 0x6, 0x9, 0x8000, 0xb93, 0x3ff}, {0x7, 0x2, 0x8d1b, 0xff, 0x8, 0xb}, {0x2, 0x6, 0x4, 0x1000, 0xd1, 0x7}, {0x0, 0x0, 0x7f, 0x6, 0x8, 0x4}, {0x2, 0xfffffb61, 0xfffffffc, 0x4, 0x4, 0x8}, {0xe, 0x1, 0xe, 0x7, 0x7, 0x8}, {0x6, 0x8, 0xa, 0x9, 0x81, 0x6}, {0x3, 0x1, 0x1, 0xffffffff, 0x1ff, 0x3}, {0x7, 0x6, 0x3, 0x100, 0x8001, 0x6}, {0x3bb0, 0x3, 0x1, 0xf, 0x0, 0x6}, {0x3, 0x80000000, 0x1, 0x6, 0xfffffff4, 0x8}], [{}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x5}, {0x3}, {0x5}, {}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x5}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4}, {}, {0x7, 0x1}, {0x3, 0x1}, {0x5}]}}, @TCA_PEDIT_KEYS_EX={0xa8, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xff, 0x4, 0x20000000, 0x1c5a, 0x2}, 0x1, 0xff}, [{0x71, 0x2, 0x8, 0xd, 0x8, 0xc}, {0x894e, 0x2, 0x4, 0x10000, 0xfffffffe, 0x52}, {0x5, 0x0, 0x80000001, 0x4, 0x3, 0xffffff33}, {0x4, 0x5, 0x101, 0x7, 0x4c3a, 0x8001}, {0xffff, 0x8, 0xa27, 0x4, 0x5, 0x7}, {0x2, 0x2, 0x3, 0x5, 0xf, 0x10}, {0x241, 0x9b, 0xb, 0xa7, 0xfffffff8, 0x8}, {0x9, 0x80000000, 0x9, 0x3, 0xffffffff, 0x401}, {0x6, 0xb1, 0x11f, 0x6, 0x6, 0x6}, {0x40, 0x0, 0x1, 0x6, 0x8}, {0x5, 0x8001, 0x80, 0x0, 0x7ff, 0x52b36444}, {0xd, 0x1, 0x4, 0xfffffff8, 0x9, 0x3}, {0x1, 0x8, 0x9, 0x7, 0x2, 0x8}, {0x200, 0x33, 0x6, 0x2, 0xd, 0x43}, {0x1, 0x47, 0x0, 0x7, 0x7, 0x8001}, {0x7, 0x4, 0xfffffffa, 0x401, 0x4, 0xf}, {0xfff, 0x0, 0x40, 0x3, 0x2, 0x10}, {0x7f, 0xa74, 0xfffffffd, 0x7, 0x9, 0x9}, {0x400000, 0x9, 0x3, 0x5, 0x7, 0x6}, {0x1, 0x0, 0xdd3b, 0x9, 0xffffff80, 0x1}, {0x10001, 0xffffffff, 0x5, 0xd7, 0xfce8, 0xf}, {0x7, 0xfffeffff, 0x8, 0x7, 0x9, 0x10001}, {0x59c, 0x5, 0x7, 0x5, 0xbb0, 0x2}, {0x7, 0x3, 0x7, 0x6, 0x2}, {0x52, 0x2, 0xc, 0x9, 0xc12, 0xffffffff}, {0x7, 0x8, 0x4, 0x6f9f0e6, 0x0, 0x6}, {0x80000000, 0x1e00000, 0x479, 0x9, 0x5, 0x81}, {0x6, 0x3, 0xffffffff, 0x200, 0xfffffffb, 0x13}, {0x6, 0xe, 0x4, 0xffffff41, 0x7, 0x4}, {0x4, 0x6, 0x7, 0x5, 0x7, 0x5}, {0xc, 0x7, 0x1f43, 0x800, 0x1200, 0x964c}, {0x9a0, 0x4, 0xa, 0xf2e9, 0x80000000, 0x1}, {0xffff0000, 0x5, 0x1000, 0x3ff, 0x7fffffff, 0x1}, {0xc8fb, 0x8b800000, 0x2, 0xbe, 0xff, 0x7}, {0x2, 0xffff, 0x6, 0x1ff, 0xe0, 0x401}, {0xfff, 0x0, 0x6, 0x3, 0x3, 0x6}, {0x6, 0xd5db, 0x0, 0x2479e874, 0x2, 0x7}, {0x4, 0x7, 0x7, 0x1ff, 0x6, 0x5}, {0x1, 0x48000, 0x6, 0x3, 0x1, 0x7fff}, {0x2, 0x1c0, 0x7, 0x7fff, 0x1, 0x7f}, {0x0, 0x10000, 0x40, 0xac3e, 0x7f}, {0x1, 0x3, 0x6, 0x5, 0x4, 0x8}, {0x4, 0x3ff, 0x3, 0x0, 0x0, 0x4}, {0x2185, 0x2, 0x0, 0x0, 0x80, 0x5}, {0xffffffff, 0x3, 0x0, 0xfffffffa, 0x4, 0x5}, {0x0, 0xfff, 0x7, 0x200, 0x1, 0x3e3}, {0xffffff95, 0x6, 0x9, 0x4f36, 0x5, 0xb}, {0xfffffff7, 0x8001, 0x9f, 0x80, 0x5fb7ed89, 0x3}, {0x7, 0xfffffffe, 0x5d9, 0x67a, 0x7, 0xfffff419}, {0x3ff, 0x1ffe, 0xff, 0x5, 0xfffffffc, 0x7fff}, {0x9, 0x1, 0x2, 0x26, 0x1c86, 0x6}, {0x80000001, 0x9, 0xffff, 0xc, 0x1000, 0x5}, {0x96, 0x5, 0xcc8, 0x7, 0x7b1, 0xa}, {0x13, 0x0, 0xfffffffd, 0x2, 0x7, 0x7}, {0x3, 0x401, 0x0, 0x7fff, 0x7, 0x5}, {0x100, 0xfffffff9, 0x7, 0x8000, 0xa, 0x7}, {0x1, 0x2, 0x7, 0x80000000, 0xcd, 0x2}, {0x1, 0x5d5, 0x3, 0xad, 0x8, 0x4673}, {0x400, 0x3, 0x0, 0xffff, 0x9, 0xe}, {0xfff, 0x47d5, 0x6, 0x2, 0x454f6afb, 0xf}, {0x1c00, 0x101, 0x1, 0x5, 0x8, 0x4}, {0x8, 0x2, 0x7d01, 0x64, 0x6, 0xfffffff9}, {0x2, 0x3, 0xfffffffa, 0x9, 0x2, 0x2}, {0x9, 0x1000, 0x9, 0xeadc, 0x4e3, 0x3}, {0x2, 0x3, 0x15d, 0x3, 0xc, 0xfffffff6}, {0x8, 0x1000, 0x5, 0xdc, 0x81, 0x2}, {0x4, 0x8c1, 0x7, 0xcab6, 0x1, 0x1}, {0x80000001, 0x7, 0x0, 0x4, 0xc7bf, 0x234}, {0x0, 0x0, 0x40, 0xa4, 0x8, 0xe0000000}, {0xfffffff9, 0x5, 0x401, 0xa, 0xfffffeff, 0x3}, {0x1000, 0x0, 0xffffff81, 0x4, 0x4, 0x2}, {0x7, 0x40, 0xcf0, 0x1, 0x3, 0x5}, {0x7fffffff, 0x8, 0x1bb, 0x3, 0x80000001, 0x5}, {0x80, 0x6, 0x81, 0x0, 0xf3f7, 0xfffffffe}, {0x4, 0x8, 0x700, 0xfffffffa, 0x8001, 0x1}, {0xd989, 0x6, 0xc55, 0x6, 0x6, 0x9}, {0x0, 0x7, 0x4, 0x7, 0xffffffff, 0xc9}, {0xffffffff, 0x8, 0x58a072b0, 0x80000001, 0xa, 0x6f36}, {0x101, 0x7, 0x4, 0x2, 0x8, 0x7ff}, {0x1, 0x1, 0x3be9, 0x4, 0x3abb, 0xd}, {0x80, 0x8e4, 0x7, 0x3, 0x8, 0xffffffff}, {0x1000, 0x401, 0xaa, 0x6, 0x7, 0x4}, {0xceb3, 0x0, 0x7, 0x1, 0x80000001, 0x800}, {0xac, 0x2, 0x4, 0x80000001, 0xa471dba, 0x5}, {0x8, 0x3, 0x9b35, 0x2, 0x80000000, 0x4}, {0x0, 0x4, 0x6cc5, 0x4, 0x6, 0x3f7}, {0x0, 0x9, 0x3, 0x6, 0x609, 0x1}, {0x7f, 0xfffffff9, 0x6, 0x4, 0x6, 0x6}, {0x8001, 0x40, 0x800, 0x8, 0x3, 0x1}, {0x186, 0xa, 0x2, 0x7, 0xff, 0xff}, {0x10000, 0x3, 0x5, 0x401, 0x9, 0x3}, {0xfffffffe, 0x0, 0x6, 0xffffff6c, 0x7, 0xdcb}, {0x3, 0x4, 0x40, 0x8, 0x1, 0x6}, {0x8001, 0x7f, 0x4, 0x9, 0xbca, 0x10001}, {0xffffffff, 0x3, 0x6, 0xfffffffc, 0x5, 0x5}, {0x4, 0x5, 0x9, 0x5, 0x5, 0x6}, {0x7fffffff, 0xb7f0, 0x12, 0x5, 0x0, 0x5e47}, {0x8, 0x9, 0x8001, 0x9, 0x1000000}, {0xdccb, 0x6, 0x693, 0x7f, 0x2, 0x10}, {0x5, 0xfffffff3, 0x5, 0x2, 0x80, 0x2}, {0x3, 0x1, 0x7, 0x4, 0x4, 0xd}, {0xd, 0x6, 0x4, 0x6, 0xe, 0xb}, {0x2, 0xfffffffe, 0x2b, 0x5, 0x54, 0x7}, {0x0, 0x8, 0x3, 0x4, 0x0, 0x5}, {0x7, 0x9117, 0x8, 0x2, 0x1}, {0x100, 0x1, 0x81, 0x4, 0x1ef, 0x10001}, {0x3, 0x72, 0x3, 0x7, 0x950, 0x37608e3}, {0x4, 0x3, 0x3, 0x5, 0x30}, {0x80, 0x6, 0x7fff, 0x101, 0x800}, {0x10001, 0x6, 0x3, 0x31, 0x4a, 0xf}, {0x8, 0x0, 0x4, 0x1, 0x8, 0x38a0}, {0x5, 0x10, 0x6, 0x7, 0x8, 0x8}, {0x5, 0x7f, 0x2e, 0x7, 0x34b808e3}, {0x7, 0x2, 0x2, 0x1, 0x80, 0x2}, {0x2, 0x3, 0xf, 0x8, 0x7b272e17, 0x7}, {0x6, 0xffff, 0x5, 0x3, 0x3, 0x6}, {0x0, 0x7ff, 0x40, 0x8, 0x4}, {0x9, 0x6, 0xe6, 0xfffffff9, 0x4, 0xffffffff}, {0x94f, 0x4, 0x1, 0x1, 0xb80c, 0xffffffff}, {0x1, 0x4, 0x2, 0x6, 0x100, 0xd}, {0x5, 0x7, 0x10, 0xfff, 0x200, 0x8}, {0x1800, 0x8, 0x4, 0x3c06, 0x9, 0x7}, {0xc1a, 0x8, 0x0, 0x2, 0x0, 0x7f}, {0x7ff, 0x1ff, 0xa, 0x4, 0x9, 0x6}, {0x0, 0x9, 0x3, 0x8d, 0x0, 0x18c}, {0x7, 0x8, 0x7f, 0xfffffffc, 0x456b, 0x68}, {0xffff, 0xfffffff7, 0x5, 0x5, 0x2, 0x10}, {0xfffffff7, 0x6, 0x6696, 0x9400000, 0x5532, 0x1}], [{0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0xcb438d295bf775b5}, {}, {0x2}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x5}, {0x7, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x3, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x5}, {0x5}, {}, {0x3}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0xd7e8a46e415c1777}, {0x5}, {0x3}, {0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {}, {0x2}, {0x4}, {0x2}, {0x3, 0x1}, {0x3}, {0x2}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x5}, {}, {0xbfce538592f565f5}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x5, 0x1}]}}]}, {0xdf, 0x6, "d2ff94fc52d80caaabc7a50408ef808bdcbed3c00bb701c4fdcc291185b8906d71700a9752ff179d24124afc2851c44b41aae8761a51843eee4fc4913b736b2c2f5fb1db0f67448d48bd43a3778410e86abee7a3111a2c453e42634e2ccfec3ca57e205e82fe0c5a1cebc6111a4f91d0bdbe32295d1aa66fbbeb23ea99c849d62b9e72d6317325827b15d1c48ea44a981028be5fd0f727a06987d0ac47fbead5ceb2685b53fc84cd603a53f79a1170ca9daea7f09efb934f93cb2a40207641e93bb1f1c24556fc594ce199968b6326a34068c9aaf449290e7c360c"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1e0c}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r10) sendmsg$alg(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0200000000000000094100000e1800634fe95701e107069ef8881800006fd969623a00007468315f766c616e000000fbdf7d5b87ca2cef3db3c61891b540034df30b98dcf8478b7396b6be9f401680f338daf39a1e14a545515711d913a80d38bbbe662399e97882af2b22730bb404b6c6680cb63c35959667c518958e9d8986a85c4d847a127583b45554e299b94486fe91cfa150db5b31dd4c621c3b85bca5d11b195be73ca29230d7efdebd60d3ffd038f164a3705619c02e1afa1a22293793f1000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x404c0d0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe0400010000002008661e0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 5.013642018s ago: executing program 2 (id=1681): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg(r0, 0x0, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x240280d1) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) mmap(&(0x7f0000a90000/0x1000)=nil, 0x1000, 0xb635773f07ebbeef, 0x2010, 0xffffffffffffffff, 0x215eb000) r4 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2f, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c6012c", 0x7}, {&(0x7f0000000180)="9e91d91a92dc7c8f06c24fbe79d9284d0c66c92c658bb539e2ffb332c99223a7df", 0x21}], 0x2, 0x0, 0x0, 0xfffffff5}, 0x20008b88) 4.553404267s ago: executing program 3 (id=1683): r0 = socket(0x21, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x52, 0x1, 0x0, 0x25dfdbff, {0x1c}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000fff8000002000005580004802c000180090001006d657461000000001c00028008000240000000090800014000000008080001400000001028000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) 4.477286314s ago: executing program 0 (id=1685): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7d51}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x101) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x81, 0x2e}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20040080) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x2f4, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}]}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2833}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x954}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff8c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb9fb}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xe2f5, @private1, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010101}}}}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbd47}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @empty, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffff, @mcast1, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x80) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x200, r4, 0x515, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9353}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b13294d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe0}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x569e}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb5f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x43e00}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3946}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4e0}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff6}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x456}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbab}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4004001}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000b00)={'wg0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b80)=0x14) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0x58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x9c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x40, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x34, 0x5, "7a251a85ea7182a25072c3919a9eb83fc6e0c8cfc9fa691f9548ef6a1c5a1829f93bdade3b307e77aeabff26a648fb9a"}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000dc0)={'veth0_to_bond\x00', 0x1000}) (async, rerun: 32) r8 = socket(0x10, 0x3, 0x1) (rerun: 32) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e40), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x48, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xe}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x8080) (async) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0x9c, r10, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x700}, @WGDEVICE_A_PEERS={0x60, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0aeaa6739880407920a95a975638f971b301ef6df9d361e394958f28651a64af"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ba9f0868bd210141ae8f7eefed3542550e66fd89481778b070e0eaa258017d4d"}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200008e1}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r11, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r12, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x114}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0xc801) (async, rerun: 32) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x44, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffeffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x44}}, 0xc810) (async, rerun: 32) r13 = accept$inet(r8, &(0x7f00000013c0)={0x2, 0x0, @empty}, &(0x7f0000001400)=0x10) getpeername$inet(r13, &(0x7f0000001440)={0x2, 0x0, @empty}, &(0x7f0000001480)=0x10) (async) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000014c0)={r6, 0x1, 0x6, @local}, 0x10) close(r1) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), r8) 4.331894773s ago: executing program 3 (id=1687): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000086000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500200000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r0, 0xa1) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x400002) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYRES8=r3, @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x4004) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000000)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071121f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xff}}, 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x3, 0x2, [0x3, 0x101]}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={r10, 0x7f}, 0x8) 4.181192593s ago: executing program 4 (id=1688): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r3, 0x0, 0xb, &(0x7f0000000040)=""/202, &(0x7f0000000400)=0xca) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8a41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000900)=@newqdisc={0x1b8, 0x24, 0xd0f, 0x70bd2d, 0x1, {0x60, 0x0, 0x0, r6, {0x8, 0x2}, {0xffff, 0x4}, {0x4}}, [@TCA_STAB={0xec, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0xd, 0x1, 0xa, 0x2, 0x7, 0x0, 0x3}}, {0xa, 0x2, [0x4f86, 0x7, 0x7ba]}}, {{0x1c, 0x1, {0x57, 0x4, 0x8, 0xbd, 0x2, 0x18aa, 0x5d55908c, 0x3}}, {0xa, 0x2, [0x96d, 0x6, 0x800]}}, {{0x1c, 0x1, {0x14, 0x3, 0x8, 0x1, 0x1, 0x2, 0x7, 0x3}}, {0xa, 0x2, [0x3, 0xfff9, 0xfd1e]}}, {{0x1c, 0x1, {0x7, 0x7, 0x81, 0x0, 0x0, 0x5, 0xe, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0xff, 0x80, 0xffff, 0x8, 0x0, 0xffffffff, 0x8, 0x2}}, {0x8, 0x2, [0x9, 0x8]}}, {{0x1c, 0x1, {0x7, 0x1, 0xa, 0x5, 0x0, 0x5fd9, 0xb, 0x4}}, {0xc, 0x2, [0x2, 0x8, 0xff, 0x5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffff80, 0x3c, 0x1, 0xfffffffa, 0x8, 0x1d4, 0x81, 0x0, 0x4e5}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x7, 0x8, 0x0, 0x7, 0x9, 0x1}}, {0x6, 0x2, [0xfffe]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1000}, @qdisc_kind_options=@q_taprio={{0xb}, {0x18, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x400000}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0x10, 0x8}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000093108f0000060000083cea6928d30cd9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) ioctl$TUNSETLINK(r4, 0x400454cd, 0x325) 4.129787086s ago: executing program 0 (id=1689): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async, rerun: 32) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @any, 0x8000, 0x1}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f00000003c0)) (async, rerun: 32) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) (async, rerun: 32) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x0, 0x2) syz_emit_ethernet(0x212, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @val={@val={0x88a8, 0x4, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0xc, 0x6, "f7d3c5", 0x1d4, 0x6, 0x1, @mcast2, @private2, {[@srh={0x16, 0x2, 0x4, 0x1, 0x8, 0x20, 0x9, [@loopback]}, @hopopts={0x2, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0xc, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x66}, @hopopts={0x16, 0x1f, '\x00', [@ra={0x5, 0x2, 0xfffd}, @generic={0x81, 0xc9, "154238462b986c8c71de20e76b607f49db2cfc29286014434f0bc4ac1ca79ec5605df6473bad4112a9be6c80a81dcd563a2ef10afee1b3f0e8357818fa9807d7e5ba47907dfda36606ad7069d5bdc7d767a4d44673beab38954504134f748800199be2441f53c4ae7c886a54c92094f923fb8624faf1ddf2a45111eead2f816b3530f0bef66ad6549423232813fa4b94d97b266ed89edc44f54fcd4831304767f9a9a60d7b696dde6474a84791d73e26c6ba0285644ae36e1fb90531565cc20c53de1aebc28de69e33"}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x6, [0xffff, 0x0]}}, @enc_lim={0x4, 0x1, 0xff}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], {{0x4e21, 0x4e23, r1, r2, 0x0, 0x0, 0xd, 0x1, 0x2cb, 0x0, 0x5, {[@timestamp={0x8, 0xa, 0x6}, @sack={0x5, 0x12, [0x9, 0xf1, 0x8, 0x1]}, @nop]}}, {"6458b2caa5966fe8c99b2c5e8825055f02cd7e72c1e000a528dbeec63fa981398060abb76af8287f189b84c6739e20531e908110543b2720d3c3ebde6b0e565b0314eca2d4f4c5b08c080c6c0e2e3db9036a0c4108151889b8fa3d57411cb94b15a831a6b2481be204868230d37dceb4"}}}}}}}, 0x0) (async) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x7) 4.104679315s ago: executing program 1 (id=1690): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, 0x0, 0x5c) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 3.918099225s ago: executing program 3 (id=1691): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000088000000b7030000000800008500000010000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x28, 0x14, &(0x7f0000000040)="008dff8a8e84e79da6c6c1dc04fd8fb1a58b7356268a287ca506a1b028e439acda3dd4ec10ff6000", &(0x7f00000000c0)=""/20, 0x2eff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000}, 0x4a) 3.857780396s ago: executing program 2 (id=1692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @loopback}, {0x0, 0x4, @empty}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x6c}}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) 3.750207082s ago: executing program 4 (id=1693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1}}], 0x1, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x14f) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0xe, 0x10}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xf}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0x100, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r6) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) 3.748827606s ago: executing program 0 (id=1694): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x48, 0x30, 0x51b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x48}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) 3.738189542s ago: executing program 1 (id=1695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0xc, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x10) 3.585201878s ago: executing program 3 (id=1696): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmmsg$sock(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000001c0)={0x21, 0x0, 0x2, 0x3}, 0x8) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3}, 0x8) 3.583688381s ago: executing program 2 (id=1697): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025647a31010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) 3.533138618s ago: executing program 0 (id=1698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xfe7e, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x0, 0x1, 0x7f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x0, 0x9a, 0xaf68666999ecc71a}, @NL80211_ATTR_SOCKET_OWNER, @NL80211_ATTR_SOCKET_OWNER, @NL80211_ATTR_USER_REG_HINT_TYPE, @NL80211_ATTR_SOCKET_OWNER, @NL80211_ATTR_REG_RULES={0x0, 0x22, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x6}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x0, 0x2, 0x6d}, @NL80211_ATTR_DFS_CAC_TIME={0x0, 0x7, 0x2}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x0, 0x6, 0xffffff6b}, @NL80211_ATTR_POWER_RULE_MAX_EIRP, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x0, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x0, 0x4, 0x3}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x2c}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x0, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x5}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x0, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x0, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x7fffffff}]}]}, @NL80211_ATTR_REG_ALPHA2={0x0, 0x21, 'b\x00'}]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8014) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x40, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 3.484046349s ago: executing program 1 (id=1699): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x38b, 0x9}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000002c0)=@dstopts={0x3a}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, ';o\'.'}, &(0x7f0000000040)=0x28) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x38b, 0x9}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000002c0)=@dstopts={0x3a}, 0x8) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, ';o\'.'}, &(0x7f0000000040)=0x28) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) 3.425763367s ago: executing program 4 (id=1700): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1418, 0x1}, 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="340000006800010000000000fddbdf25020000000000000006000700010000000c000880050004000100000008000500", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x440a}, 0x4040414) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3dd57cb1750009001000030400006399fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000c0240400"], 0x3c}, 0x1, 0xba01}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x41f5c5da43b9481, 0x7838, 0x2, 0x0, {{0x1a, 0x4, 0x3, 0x37, 0x68, 0x2, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @end, @generic={0x89, 0x11, "6778553d24db1e163a12001fcd1364"}, @ssrr={0x89, 0x27, 0x98, [@empty, @remote, @local, @rand_addr=0x64010102, @private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x0, 0xd, "5068aa3e250c63354d7462"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r4 = getpid() sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@setlink={0x30, 0x13, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x8, 0x20101}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3c58b13b}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x5) 3.4014029s ago: executing program 2 (id=1701): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x35, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x5], 0x0, 0x4, 0x1, 0x1, 0xffffffffffffffff}}, 0x40) 3.390899181s ago: executing program 3 (id=1702): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) getsockopt$MRT6(r0, 0x29, 0xd1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x5c}}, 0x0) 3.268996939s ago: executing program 0 (id=1703): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000040)=0x9, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbe}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 3.228939307s ago: executing program 1 (id=1704): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0xf8, 0x4, 0x64, 0x8, 0x0, 0xb, 0x1, 0x34, 0x7, 0x8, 0x87, 0x4, 0x0, 0x8}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @loopback}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r2, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000640)={0x0, 0x80000000}, &(0x7f0000000680)=0x8) 3.183743858s ago: executing program 2 (id=1705): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000001f00)=""/4062, &(0x7f00000001c0)=0xfde) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="150a00000000000061096400000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x2, 0x10, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}}, @calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x5, [0x5, 0x2ffa, 0xb, 0x7, 0x8, 0x2, 0x8, 0x1762cf36, 0x0]}}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x3}, @pad1]}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x400d050}, 0x240c881c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40880) close(r1) 3.09349752s ago: executing program 3 (id=1706): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x1, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0x1, 0x3, 0x2, 0x9, 0x81, 0x7, 0x8, 0x5, 0x10001, 0x8f7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x8, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x3, 0xa, 0x3, 0xffffffff, 0x8, 0x9, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x206, 0x5f, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x4, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0xafb, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0xa, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f0000002100)=[{{&(0x7f0000000100)=@x25={0x9, @remote}, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000600)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000680)=""/49, 0x31}, {&(0x7f00000006c0)=""/57, 0x39}], 0x2, &(0x7f0000001100)=""/4096, 0x1000}, 0xfffffff7}], 0x2, 0x10041, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$kcm(0x29, 0xa, 0x0) setsockopt$inet6_int(r0, 0x29, 0x34, &(0x7f0000000000)=0x8001, 0x4) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81a07e, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) socket$nl_route(0x10, 0x3, 0x0) 3.092985676s ago: executing program 4 (id=1707): getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x100}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000001c0)={r0, 0x1}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be4248cdc138408ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c590bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ae0ff1f0006d758e60803dc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.032623341s ago: executing program 1 (id=1708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c841}, 0x1000) recvmmsg(r4, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}], 0x1}, 0x3f}], 0x1, 0x60, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x40}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000280)={r5, 0x1}, 0x8) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{}, "bd88818314ff7d84", "877dab43c700000500", '\x00', "0100"}, 0x28) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48040000f40320002abd7000ffdbdf2504000000020000003500000000010000010001000000010009000000050000009f27000001000000ffffffff05000000040000000f000000080000000100000009000000ffffffffff0f000004000000010000000900000007000000000000000e000000ffffff7f2b7300060000007858db8527913404000000510400000600000002000000010000007d0000000d000000c20000000300000080000000ff000000020000005501000007000000650b0000080000000200000000000080000000800a000000920000000300000005000000ff00000002000000ea000000030000000800000001000000050000000a000000000000005a02000001000000f9ffffff0700000003000000ff7f000007000000b9e90000ffffffff04000000ff070000ad0000000100000009000000f5ffffff01000000050000001000000008000000b703000001000080a7000000ff00000000000000810000007b7d0000050000000a0000000800000000100000050000004d0000000500000000000000090000000100000009000000ff07000043a200006d0e000012bb00000200000085040000fcffffffffffffff00000000ffffffff09000000020000000afba14186b800000000000000000000040000000500000003000000f30000000600000008000000090000000104000002000000ff0300000200000007000000feffffff060000000000008006000000100000000800000000000000120300001000000005000000080000000700000000000000feffffff0600000081000000f7ffffffd62500000400000006000000ffff00000500000002000000940c000012000000030000000002000038770000ee000000aa02000001000000000000080100000007000000d8020000ec0000000900000003000000770000007f0000000500000000000088010000000e000000000000000800000007000000c37f0000641c0000c80000000300000003000000ff00000008000000060000006000000001000000c70e0000050000007a09000000020000020000000600000005000000050000000300000000000100df000000ff01000006000000c1d1d829010000000400000004000000090000000000000002000000010000008a1d0000020000000a0000000f0000006700000003000000030000000f000000060000004e0f00000600000008000000470500005f00000007000000fbffffff01000000ffffff7f070000000400000006000000000000000104000009000000010000000101000095070000090000000500000007000000060000000b00000007000000060000002900000003000000ff0f0000030000007f000000050000000800000002000000ff070000050000000000002403000000060000000200000008000000f6ffffff0800000002000000ac0b00000500000006000000000400002600000073797a30005b5e5b0073797a300073797a300000230029260073797a3000232d0073"], 0x448}, 0x1, 0x0, 0x0, 0x4881}, 0x10) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="14200000200000000000000000000000000000003a2dc3666eee5448b2886ddd1584bf26017daf9059911b304df9b57f333f5899256253e67c53e5751d2e0a1eab38b5971ba3ea46c33d669703425d2699dfb336e6b2a6fff783121b0077e3d1ecc80867f565220b148b94795c0028c09a526e7c4e3e983fee7ca7163c011ecc9ddcbd0756b0826c32a140b3a3c0f12962112647cecc03cd8b2e3283a73e74599b4beab63f8b7f882efeca3bd31aa3946b3983"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x428}, {r1, 0x9000}, {r0, 0x2020}, {r1, 0xa005}, {r1, 0x1090}, {r0, 0x4100}, {r6, 0x4281}, {r0, 0x1020}, {r0, 0x2}], 0x9, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0) 2.969732567s ago: executing program 4 (id=1709): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x20, 0x72, 0x333, 0x6, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}}, 0x20000010) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.821285568s ago: executing program 1 (id=1710): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=0x1000) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) (async) sendto$packet(r0, &(0x7f0000000100)="e8b7", 0x2, 0x90, &(0x7f0000000200)={0x11, 0xf8, r2, 0x1, 0x0, 0x6, @random="fd58dd6223b2"}, 0x14) 0s ago: executing program 4 (id=1711): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000340)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x80) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x1, 0x100, 0x9}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getpeername(r3, 0x0, &(0x7f0000000100)) connect$unix(r0, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e21}, 0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts. [ 61.427629][ T5613] cgroup: Unknown subsys name 'net' [ 61.558518][ T5613] cgroup: Unknown subsys name 'cpuset' [ 61.567185][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.886730][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.341263][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.350461][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.360271][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.360842][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.376429][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.386891][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.386956][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.395184][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.402687][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.410361][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.417965][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.424262][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.430979][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.440707][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.451842][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.459906][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.468537][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.469178][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.475799][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.483300][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.498331][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.506314][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.515004][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.516540][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.524377][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.060957][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.068255][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.076341][ T5629] bridge_slave_0: entered allmulticast mode [ 68.084518][ T5629] bridge_slave_0: entered promiscuous mode [ 68.124452][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.131733][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.139131][ T5629] bridge_slave_1: entered allmulticast mode [ 68.146170][ T5629] bridge_slave_1: entered promiscuous mode [ 68.211025][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.218288][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.225746][ T5625] bridge_slave_0: entered allmulticast mode [ 68.232643][ T5625] bridge_slave_0: entered promiscuous mode [ 68.247874][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.255112][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.262299][ T5626] bridge_slave_0: entered allmulticast mode [ 68.269252][ T5626] bridge_slave_0: entered promiscuous mode [ 68.287057][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.294212][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.301436][ T5625] bridge_slave_1: entered allmulticast mode [ 68.308460][ T5625] bridge_slave_1: entered promiscuous mode [ 68.318045][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.327324][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.334420][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.342174][ T5626] bridge_slave_1: entered allmulticast mode [ 68.349275][ T5626] bridge_slave_1: entered promiscuous mode [ 68.390636][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.413440][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.420706][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.428309][ T5628] bridge_slave_0: entered allmulticast mode [ 68.435330][ T5628] bridge_slave_0: entered promiscuous mode [ 68.475521][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.482710][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.489970][ T5628] bridge_slave_1: entered allmulticast mode [ 68.496933][ T5628] bridge_slave_1: entered promiscuous mode [ 68.506299][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.526557][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.554292][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.556507][ T5642] Bluetooth: hci0: command tx timeout [ 68.564130][ T4946] Bluetooth: hci1: command tx timeout [ 68.569644][ T5636] Bluetooth: hci4: command tx timeout [ 68.575305][ T5635] Bluetooth: hci2: command tx timeout [ 68.594430][ T5629] team0: Port device team_slave_0 added [ 68.602082][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.611404][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.618850][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.626140][ T5627] bridge_slave_0: entered allmulticast mode [ 68.633009][ T5627] bridge_slave_0: entered promiscuous mode [ 68.637243][ T5635] Bluetooth: hci3: command tx timeout [ 68.661708][ T5629] team0: Port device team_slave_1 added [ 68.679878][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.687076][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.694198][ T5627] bridge_slave_1: entered allmulticast mode [ 68.701677][ T5627] bridge_slave_1: entered promiscuous mode [ 68.710777][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.722295][ T5625] team0: Port device team_slave_0 added [ 68.754991][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.765913][ T5625] team0: Port device team_slave_1 added [ 68.781583][ T5626] team0: Port device team_slave_0 added [ 68.812979][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.820067][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.846202][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.859758][ T5626] team0: Port device team_slave_1 added [ 68.878803][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.904903][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.911998][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.938274][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.959160][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.969748][ T5628] team0: Port device team_slave_0 added [ 68.976032][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.982984][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.008920][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.027906][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.034877][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.060969][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.081549][ T5628] team0: Port device team_slave_1 added [ 69.087860][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.094817][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.120987][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.133975][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.141165][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.167080][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.208055][ T5627] team0: Port device team_slave_0 added [ 69.242078][ T5627] team0: Port device team_slave_1 added [ 69.248515][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.255564][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.281596][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.314454][ T5629] hsr_slave_0: entered promiscuous mode [ 69.320738][ T5629] hsr_slave_1: entered promiscuous mode [ 69.336773][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.343786][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.370035][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.405706][ T5626] hsr_slave_0: entered promiscuous mode [ 69.411903][ T5626] hsr_slave_1: entered promiscuous mode [ 69.418152][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 69.423932][ T5626] Cannot create hsr debugfs directory [ 69.448669][ T5625] hsr_slave_0: entered promiscuous mode [ 69.455514][ T5625] hsr_slave_1: entered promiscuous mode [ 69.461478][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 69.467419][ T5625] Cannot create hsr debugfs directory [ 69.475882][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.482840][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.508817][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.521219][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.528481][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.554543][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.671001][ T5628] hsr_slave_0: entered promiscuous mode [ 69.677190][ T5628] hsr_slave_1: entered promiscuous mode [ 69.683151][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 69.689007][ T5628] Cannot create hsr debugfs directory [ 69.727353][ T5627] hsr_slave_0: entered promiscuous mode [ 69.733570][ T5627] hsr_slave_1: entered promiscuous mode [ 69.740033][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 69.745817][ T5627] Cannot create hsr debugfs directory [ 70.144114][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.155887][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.163922][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.174074][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.183278][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.192934][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.208416][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.217859][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.273550][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.283644][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.291607][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.301335][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.311702][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.321744][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.329669][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.339066][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.426562][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.437288][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.449722][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.459360][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.467817][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.477535][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.490476][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.500483][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.582525][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.592662][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.611213][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.620700][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.628687][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.635764][ T5635] Bluetooth: hci4: command tx timeout [ 70.635792][ T5635] Bluetooth: hci0: command tx timeout [ 70.635811][ T5635] Bluetooth: hci2: command tx timeout [ 70.635830][ T5635] Bluetooth: hci1: command tx timeout [ 70.661222][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.668941][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.679360][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.691203][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.715925][ T4946] Bluetooth: hci3: command tx timeout [ 70.767407][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.791356][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.809540][ T5627] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.820139][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.829111][ T5627] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.838221][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.849813][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.857283][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.876172][ T5627] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.885632][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.902227][ T5627] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.911822][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.924178][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.931345][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.947445][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.990148][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.997308][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.044489][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.051634][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.098594][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.152251][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.198401][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.205612][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.250025][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.257217][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.278799][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.286978][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.298804][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.394625][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.407190][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.447924][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.455136][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.517547][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.531691][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.538866][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.591774][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.598990][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.624953][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.632124][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.884302][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.062101][ T5625] veth0_vlan: entered promiscuous mode [ 72.109345][ T5625] veth1_vlan: entered promiscuous mode [ 72.226924][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.245047][ T5625] veth0_macvtap: entered promiscuous mode [ 72.270971][ T5625] veth1_macvtap: entered promiscuous mode [ 72.342563][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.388604][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.438488][ T5629] veth0_vlan: entered promiscuous mode [ 72.447466][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.460545][ T1022] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.498389][ T1022] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.529057][ T1022] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.563412][ T5629] veth1_vlan: entered promiscuous mode [ 72.592784][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.720266][ T4946] Bluetooth: hci1: command tx timeout [ 72.720316][ T5642] Bluetooth: hci4: command tx timeout [ 72.731652][ T5635] Bluetooth: hci2: command tx timeout [ 72.740035][ T5636] Bluetooth: hci0: command tx timeout [ 72.777223][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.793519][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.800372][ T5629] veth0_macvtap: entered promiscuous mode [ 72.807370][ T5642] Bluetooth: hci3: command tx timeout [ 72.847169][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.857287][ T5629] veth1_macvtap: entered promiscuous mode [ 72.894610][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.896232][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.905967][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.950374][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.972461][ T5626] veth0_vlan: entered promiscuous mode [ 72.996296][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.032823][ T5626] veth1_vlan: entered promiscuous mode [ 73.044726][ T3312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.052518][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.078410][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.109930][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.133928][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.166165][ T5628] veth0_vlan: entered promiscuous mode [ 73.241140][ T5628] veth1_vlan: entered promiscuous mode [ 73.353542][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.372773][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.384475][ T5626] veth0_macvtap: entered promiscuous mode [ 73.417899][ T5626] veth1_macvtap: entered promiscuous mode [ 73.429811][ T3336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.438007][ T3336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.458539][ T5628] veth0_macvtap: entered promiscuous mode [ 73.489386][ T5628] veth1_macvtap: entered promiscuous mode [ 73.497670][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.533633][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.561160][ T5627] veth0_vlan: entered promiscuous mode [ 73.573192][ T3312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.602172][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.611354][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.627649][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.647547][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.663803][ T5627] veth1_vlan: entered promiscuous mode [ 73.677981][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.712657][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.725994][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.737731][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.771269][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.850878][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.863227][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.888090][ T5627] veth0_macvtap: entered promiscuous mode [ 73.919244][ T5831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7'. [ 73.927349][ T5627] veth1_macvtap: entered promiscuous mode [ 73.969311][ T3312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.979350][ T3312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.994628][ T3312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.020125][ T3312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.040208][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.059446][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.146220][ T3312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.163854][ T1162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.173833][ T3312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.197138][ T1162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.255485][ T1162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.312513][ T1162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.342701][ T5845] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10'. [ 74.410168][ T5849] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.11'. [ 74.564132][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.582226][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.726347][ T5856] nbd: must specify at least one socket [ 74.796734][ T5642] Bluetooth: hci2: command tx timeout [ 74.796855][ T5635] Bluetooth: hci1: command tx timeout [ 74.802209][ T5636] Bluetooth: hci4: command tx timeout [ 74.802232][ T5636] Bluetooth: hci0: command tx timeout [ 74.817185][ T5866] vlan2: entered allmulticast mode [ 74.875410][ T5635] Bluetooth: hci3: command tx timeout [ 74.914127][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.917508][ T1162] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.928614][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.944348][ T5869] batadv0: entered promiscuous mode [ 74.953214][ T5869] macsec1: entered promiscuous mode [ 74.961403][ T5869] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 74.971341][ T5869] batadv0: left promiscuous mode [ 74.989727][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 75.530585][ T5895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 75.539643][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 75.548497][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 75.566515][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 75.609688][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.622812][ T5895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 75.649455][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.738640][ T5895] Zero length message leads to an empty skb [ 75.740217][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.983310][ T5922] netlink: 348 bytes leftover after parsing attributes in process `syz.1.33'. [ 76.003643][ T5921] xt_hashlimit: size too large, truncated to 1048576 [ 76.307099][ T5944] xt_l2tp: wrong L2TP version: 0 [ 76.738209][ T24] cfg80211: failed to load regulatory.db [ 77.456220][ T5992] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.048918][ T6032] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 78.141463][ T6050] xt_TPROXY: Can be used only with -p tcp or -p udp [ 78.142678][ T6052] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 78.262040][ T6060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.449988][ T6069] netlink: 'syz.0.68': attribute type 21 has an invalid length. [ 78.669871][ T6081] syz.0.74 uses obsolete (PF_INET,SOCK_PACKET) [ 78.680507][ T6084] netlink: 'syz.2.73': attribute type 8 has an invalid length. [ 78.775614][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.784979][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.807684][ T6087] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 78.832392][ T6091] netlink: 'syz.4.78': attribute type 1 has an invalid length. [ 79.051357][ T6107] __nla_validate_parse: 12 callbacks suppressed [ 79.051373][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 79.104173][ T6107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.370602][ T6116] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 79.391496][ T6121] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 79.404894][ T6116] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 79.416173][ T6116] gretap2: entered promiscuous mode [ 79.421544][ T6116] gretap2: entered allmulticast mode [ 79.713127][ T6126] pim6reg: entered allmulticast mode [ 79.740118][ T6127] erspan0: entered promiscuous mode [ 79.762717][ T6127] erspan0: entered allmulticast mode [ 79.968120][ T6140] erspan0: left promiscuous mode [ 80.645097][ T5850] IPVS: starting estimator thread 0... [ 80.723696][ T6168] syzkaller0: entered promiscuous mode [ 80.740450][ T6168] syzkaller0: entered allmulticast mode [ 80.768696][ T6184] IPVS: using max 43 ests per chain, 103200 per kthread [ 82.227241][ T6205] netlink: 81 bytes leftover after parsing attributes in process `syz.0.108'. [ 82.465886][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.110'. [ 82.507202][ T6222] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 82.541234][ T6226] netlink: 'syz.0.112': attribute type 1 has an invalid length. [ 82.717793][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.114'. [ 83.067998][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.118'. [ 83.094741][ T6240] warning: `syz.4.116' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.266255][ T6259] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.122'. [ 83.279966][ T6259] IPVS: length: 90 != 6168 [ 83.287263][ T5750] syzkaller0: tun_net_xmit 76 [ 83.405966][ T5750] syzkaller0: tun_net_xmit 76 [ 83.448487][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 83.475230][ T9] syzkaller0: tun_net_xmit 76 [ 83.502736][ T6250] syzkaller0: delete flow: hash 1775087745 index 1 [ 83.593284][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 83.647549][ T6280] netlink: 128 bytes leftover after parsing attributes in process `syz.4.127'. [ 84.680405][ T6307] netlink: 207504 bytes leftover after parsing attributes in process `syz.1.132'. [ 85.296218][ T6254] syzkaller1: entered promiscuous mode [ 85.301912][ T6254] syzkaller1: entered allmulticast mode [ 85.340629][ T6278] : entered promiscuous mode [ 85.359582][ T6309] xt_policy: too many policy elements [ 85.492251][ T6313] pimreg11: entered allmulticast mode [ 85.657215][ T6320] team0: No ports can be present during mode change [ 85.693788][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 86.304513][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.148'. [ 86.392396][ T6369] netlink: 144 bytes leftover after parsing attributes in process `syz.0.150'. [ 86.514613][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 86.801324][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 87.039648][ T6425] netlink: 14 bytes leftover after parsing attributes in process `syz.2.163'. [ 87.053645][ T6425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.067100][ T6425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.080232][ T6425] bond0 (unregistering): Released all slaves [ 89.635225][ T6409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.649849][ T6393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.156'. [ 89.800710][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'. [ 89.942671][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 90.091470][ T6458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.387234][ T6484] netlink: 'syz.4.179': attribute type 1 has an invalid length. [ 90.519660][ T6484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.470435][ T6486] bond1: (slave veth3): Enslaving as an active interface with a down link [ 93.501105][ T6489] bond1: (slave veth0_to_bond): making interface the new active one [ 93.511032][ T6489] veth0_to_bond: entered promiscuous mode [ 93.517317][ T6489] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 94.034646][ T6539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.194'. [ 94.166189][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 94.506141][ T6571] netlink: 'syz.0.199': attribute type 4 has an invalid length. [ 94.509396][ T6568] xt_CT: No such helper "pptp" [ 97.002671][ T6538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.220062][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 97.229656][ T6602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.207'. [ 97.255986][ T6602] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.256831][ T6606] netlink: 'syz.3.209': attribute type 1 has an invalid length. [ 97.263900][ T6602] IPv6: Can't replace route, no match found [ 97.277901][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 97.287541][ T6595] netlink: 'syz.2.205': attribute type 14 has an invalid length. [ 97.301489][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 97.492495][ T6620] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 97.511559][ T6620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.580993][ T6630] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 97.622047][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 97.707828][ T6635] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.215'. [ 97.769515][ T6635] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 97.811377][ T6635] 0ªX¹¦Dö»: entered allmulticast mode [ 97.832258][ T6647] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20002 [ 98.258442][ T6679] netlink: 64 bytes leftover after parsing attributes in process `syz.1.221'. [ 98.491156][ T6688] tipc: Started in network mode [ 98.502620][ T6688] tipc: Node identity 925bd70810d7, cluster identity 4711 [ 98.522279][ T6688] tipc: Enabled bearer , priority 0 [ 98.654126][ T6688] syzkaller0: entered promiscuous mode [ 98.660141][ T6688] syzkaller0: entered allmulticast mode [ 98.689196][ T6688] tipc: Resetting bearer [ 98.706159][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 98.802670][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 99.188127][ T6734] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 99.216836][ T6734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.224883][ T6737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.244'. [ 99.290805][ T6737] veth3: entered promiscuous mode [ 99.299559][ T6687] tipc: Resetting bearer [ 100.388537][ T6687] tipc: Disabling bearer [ 100.425961][ T9] tipc: Node number set to 2190268168 [ 100.578605][ T6757] openvswitch: netlink: IP tunnel dst address not specified [ 100.653896][ T6767] netlink: 'syz.1.249': attribute type 28 has an invalid length. [ 100.695832][ T6767] netlink: 'syz.1.249': attribute type 3 has an invalid length. [ 100.914632][ T6788] syz_tun: entered allmulticast mode [ 101.007412][ T6788] netlink: 'syz.0.255': attribute type 7 has an invalid length. [ 101.059973][ T6788] netlink: 'syz.0.255': attribute type 7 has an invalid length. [ 101.526347][ T6829] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 101.542629][ T6833] No such timeout policy "syz0" [ 102.172252][ T6867] vlan2: entered allmulticast mode [ 102.220986][ T6867] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 102.547157][ T6894] __nla_validate_parse: 13 callbacks suppressed [ 102.547173][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.283'. [ 103.331310][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.4.295'. [ 103.372359][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 103.492864][ T6944] netlink: 'syz.0.297': attribute type 12 has an invalid length. [ 103.533428][ T6944] netlink: 'syz.0.297': attribute type 29 has an invalid length. [ 103.551985][ T6944] netlink: 148 bytes leftover after parsing attributes in process `syz.0.297'. [ 103.562077][ T6944] netlink: 'syz.0.297': attribute type 1 has an invalid length. [ 103.570175][ T6944] netlink: 'syz.0.297': attribute type 2 has an invalid length. [ 103.661891][ T6956] sctp: [Deprecated]: syz.3.299 (pid 6956) Use of int in maxseg socket option. [ 103.661891][ T6956] Use struct sctp_assoc_value instead [ 103.730067][ T6960] Cannot find del_set index 4 as target [ 103.979886][ T6971] IPVS: ip_vs_add_dest(): server weight less than zero [ 103.987592][ T5814] IPVS: starting estimator thread 0... [ 104.058263][ T5814] IPVS: starting estimator thread 0... [ 104.072621][ T6977] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 104.127135][ T6976] IPVS: using max 35 ests per chain, 84000 per kthread [ 104.199543][ T6980] IPVS: using max 39 ests per chain, 93600 per kthread [ 104.534515][ T7000] netlink: 'syz.3.315': attribute type 2 has an invalid length. [ 104.571004][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 104.745091][ T3336] veth0_to_bond: left promiscuous mode [ 104.797821][ T7016] Cannot find set identified by id 65535 to match [ 105.013058][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.322'. [ 105.051751][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.322'. [ 105.070591][ T7029] netlink: 'syz.0.323': attribute type 25 has an invalid length. [ 105.139847][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.325'. [ 105.149165][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.325'. [ 105.270482][ T7039] gretap0: entered promiscuous mode [ 105.307478][ T7039] gretap0: left promiscuous mode [ 105.516432][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 105.583262][ T7064] netlink: 'syz.1.328': attribute type 4 has an invalid length. [ 106.130306][ T7090] netlink: 'syz.4.338': attribute type 10 has an invalid length. [ 106.381999][ T7102] veth0: entered promiscuous mode [ 106.514229][ T30] audit: type=1804 audit(1778914093.931:2): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.343" name="/newroot/74/cgroup.controllers" dev="tmpfs" ino=396 res=1 errno=0 [ 106.540053][ T30] audit: type=1800 audit(1778914093.931:3): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.343" name="cgroup.controllers" dev="tmpfs" ino=396 res=0 errno=0 [ 106.593865][ T30] audit: type=1804 audit(1778914093.981:4): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.343" name="/newroot/74/cgroup.controllers" dev="tmpfs" ino=396 res=1 errno=0 [ 106.889455][ T7128] macvlan0: entered promiscuous mode [ 106.971844][ T7133] netlink: 'syz.0.349': attribute type 2 has an invalid length. [ 107.032490][ T7140] nbd: socks must be embedded in a SOCK_ITEM attr [ 107.033652][ T7133] netlink: 'syz.0.349': attribute type 8 has an invalid length. [ 107.188439][ T7141] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 107.292314][ T7130] macvlan2: entered allmulticast mode [ 107.315364][ T7130] hsr0: entered allmulticast mode [ 107.331274][ T7130] hsr_slave_0: entered allmulticast mode [ 107.358032][ T7130] hsr_slave_1: entered allmulticast mode [ 107.369343][ T7130] hsr0: entered promiscuous mode [ 107.723472][ T7155] syzkaller0: entered promiscuous mode [ 107.743172][ T7155] syzkaller0: entered allmulticast mode [ 109.627210][ T7242] __nla_validate_parse: 13 callbacks suppressed [ 109.627239][ T7242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.365'. [ 110.640424][ T7252] netlink: 108 bytes leftover after parsing attributes in process `syz.3.366'. [ 110.799091][ T7258] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 110.891139][ T7267] netlink: 640 bytes leftover after parsing attributes in process `syz.1.370'. [ 110.908994][ T7267] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 111.064515][ T7273] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 111.089930][ T7275] xt_bpf: check failed: parse error [ 111.169158][ T7279] validate_nla: 1 callbacks suppressed [ 111.169174][ T7279] netlink: 'syz.2.373': attribute type 10 has an invalid length. [ 111.206985][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.244831][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.265169][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.303203][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.415636][ T7286] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 111.832568][ T7302] IPv6: sit2: Disabled Multicast RS [ 112.280503][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 112.895455][ T7359] netlink: 76 bytes leftover after parsing attributes in process `syz.3.395'. [ 113.228215][ T7373] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 113.365981][ T7381] netlink: 72 bytes leftover after parsing attributes in process `syz.2.400'. [ 113.703833][ T7397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.407'. [ 113.993025][ T7407] netlink: 'syz.1.411': attribute type 10 has an invalid length. [ 114.022018][ T7407] macvlan1: entered promiscuous mode [ 114.033688][ T7407] macvlan1: entered allmulticast mode [ 114.076231][ T7407] veth1_vlan: entered allmulticast mode [ 114.118320][ T7407] team0: Port device macvlan1 added [ 114.205362][ T7418] xt_TCPMSS: Only works on TCP SYN packets [ 114.465769][ T7429] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20001 [ 114.758156][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'. [ 115.065451][ T7455] netlink: 52 bytes leftover after parsing attributes in process `syz.1.423'. [ 115.102028][ T7455] netlink: 52 bytes leftover after parsing attributes in process `syz.1.423'. [ 115.257484][ T7466] netlink: 44 bytes leftover after parsing attributes in process `syz.3.425'. [ 115.332848][ T7458] bond0 (unregistering): Released all slaves [ 115.670431][ T7466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.215597][ T7490] netlink: 'syz.2.431': attribute type 3 has an invalid length. [ 116.283836][ T7490] netlink: 224 bytes leftover after parsing attributes in process `syz.2.431'. [ 116.603167][ T7503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.667023][ T7506] vxcan0: tx address claim with different name [ 116.702748][ T7501] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 116.751183][ T7501] bond2 (unregistering): Released all slaves [ 117.010558][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 117.080759][ T7519] netlink: 196 bytes leftover after parsing attributes in process `syz.2.440'. [ 117.346487][ T7539] netlink: 'syz.0.445': attribute type 39 has an invalid length. [ 117.370252][ T7540] openvswitch: netlink: Flow actions attr not present in new flow. [ 117.739892][ T7552] Cannot find add_set index 0 as target [ 117.861860][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'. [ 117.871239][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 117.880648][ T7557] netlink: 'syz.4.449': attribute type 14 has an invalid length. [ 117.888738][ T7557] netlink: 'syz.4.449': attribute type 13 has an invalid length. [ 118.913976][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 118.966935][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.975588][ T7553] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.137810][ T7553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.152790][ T7553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.493068][ T7590] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.531596][ T7590] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.534845][ T7599] netlink: 'syz.4.455': attribute type 7 has an invalid length. [ 119.564539][ T7599] netlink: 'syz.4.455': attribute type 8 has an invalid length. [ 119.619112][ T30] audit: type=1107 audit(1778914107.031:5): pid=7598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 119.621755][ T7227] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.723357][ T7227] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.736014][ T7227] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.780350][ T7227] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.160133][ T7632] __nla_validate_parse: 3 callbacks suppressed [ 120.160149][ T7632] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.463'. [ 120.201252][ T7632] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.463'. [ 120.234953][ T7640] openvswitch: netlink: IPv4 tun info is not correct [ 120.450415][ T7648] netlink: 248 bytes leftover after parsing attributes in process `syz.2.468'. [ 121.062096][ T7688] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 121.064075][ T7685] syzkaller0: entered promiscuous mode [ 121.076437][ T7685] syzkaller0: entered allmulticast mode [ 121.287980][ T7697] dvmrp0: entered allmulticast mode [ 121.309327][ T7703] syzkaller1: entered promiscuous mode [ 121.316386][ T7703] syzkaller1: entered allmulticast mode [ 121.336289][ T7703] netlink: 252 bytes leftover after parsing attributes in process `syz.1.483'. [ 121.538641][ T7709] netlink: 'syz.2.484': attribute type 1 has an invalid length. [ 122.140282][ T7738] openvswitch: netlink: IPv6 tunnel dst address is zero [ 122.334528][ T7751] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 122.380963][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 122.470916][ T7759] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 122.533043][ T7755] syzkaller0: entered promiscuous mode [ 122.558087][ T7755] syzkaller0: entered allmulticast mode [ 122.712745][ T7770] netlink: 60 bytes leftover after parsing attributes in process `syz.4.494'. [ 122.746036][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.494'. [ 122.765576][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.494'. [ 122.817767][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'. [ 122.866132][ T7782] tipc: Can't bind to reserved service type 1 [ 123.107097][ T7797] netlink: 32 bytes leftover after parsing attributes in process `syz.3.502'. [ 123.125848][ T5635] Bluetooth: hci3: command tx timeout [ 125.571489][ T7931] __nla_validate_parse: 9 callbacks suppressed [ 125.571507][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'. [ 125.668833][ T7934] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 125.693082][ T7942] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 125.708089][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 125.718029][ T7934] netlink: 'syz.0.541': attribute type 4 has an invalid length. [ 125.733491][ T7942] netlink: 'syz.0.541': attribute type 4 has an invalid length. [ 125.736913][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 125.742094][ T7934] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.541'. [ 125.762368][ T7942] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.541'. [ 125.776620][ T7944] netlink: 'syz.3.540': attribute type 12 has an invalid length. [ 125.805112][ T7944] netlink: 'syz.3.540': attribute type 11 has an invalid length. [ 125.912491][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'. [ 125.926321][ T7953] netlink: 'syz.0.543': attribute type 3 has an invalid length. [ 125.929008][ T7956] xfrm1: entered promiscuous mode [ 125.942481][ T7956] xfrm1: entered allmulticast mode [ 125.949081][ T7953] netlink: 224 bytes leftover after parsing attributes in process `syz.0.543'. [ 126.358191][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 126.499151][ T7987] syzkaller0: entered promiscuous mode [ 126.519028][ T7987] syzkaller0: entered allmulticast mode [ 126.972898][ T8010] netlink: 'syz.3.558': attribute type 1 has an invalid length. [ 127.243387][ T8010] bond1: entered promiscuous mode [ 127.246387][ T8024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.558'. [ 127.275419][ T8010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.311884][ T8024] bond1: entered allmulticast mode [ 127.349745][ T8028] xt_HMARK: spi-set and port-set can't be combined [ 127.390779][ T8030] syzkaller0: entered promiscuous mode [ 127.417260][ T8030] syzkaller0: entered allmulticast mode [ 127.446673][ T8034] TC_ACT_REPEAT abuse ? [ 127.630397][ T8043] block nbd0: Unsupported socket: should be TCP or UNIX. [ 127.676301][ T8045] netlink: 'syz.1.564': attribute type 5 has an invalid length. [ 128.263433][ T8077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.303070][ T8076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.570'. [ 128.377898][ T8071] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 128.390234][ T8071] bond2 (unregistering): Released all slaves [ 128.470235][ T8073] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 128.484455][ T8073] bond2 (unregistering): Released all slaves [ 128.660130][ T8094] netlink: 'syz.2.569': attribute type 8 has an invalid length. [ 128.711721][ T8087] syzkaller0: entered promiscuous mode [ 128.718138][ T8087] syzkaller0: entered allmulticast mode [ 128.833793][ T8109] netlink: 'syz.1.574': attribute type 11 has an invalid length. [ 130.242080][ T8133] bridge2: entered promiscuous mode [ 130.254195][ T8133] bridge2: entered allmulticast mode [ 130.714852][ T8164] __nla_validate_parse: 7 callbacks suppressed [ 130.714870][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 130.733197][ T8163] netlink: 96 bytes leftover after parsing attributes in process `syz.0.589'. [ 130.747085][ T8163] 8021q: VLANs not supported on ip_vti0 [ 130.772177][ T8168] netlink: 64 bytes leftover after parsing attributes in process `syz.4.592'. [ 130.908305][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'. [ 131.084017][ T8185] netlink: 44 bytes leftover after parsing attributes in process `syz.2.598'. [ 131.171189][ T8190] trusted_key: syz.2.600 sent an empty control message without MSG_MORE. [ 131.317858][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.603'. [ 131.470934][ T8200] bond0: entered allmulticast mode [ 131.614639][ T8200] veth1: entered allmulticast mode [ 131.674256][ T8200] bond0: (slave veth1): Enslaving as an active interface with an up link [ 131.696417][ T8201] bond0 (unregistering): (slave veth1): Releasing backup interface [ 131.708412][ T8201] bond0 (unregistering): Released all slaves [ 131.731787][ T8213] ip6gre1: entered allmulticast mode [ 131.871749][ T8230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.879451][ T8234] bridge_slave_1: left allmulticast mode [ 131.891347][ T8234] bridge_slave_1: left promiscuous mode [ 131.914035][ T8234] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.982019][ T8234] bridge_slave_0: left allmulticast mode [ 132.004680][ T8234] bridge_slave_0: left promiscuous mode [ 132.027355][ T8234] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.097565][ T8242] netlink: 228 bytes leftover after parsing attributes in process `syz.0.618'. [ 132.287462][ T8253] batman_adv: batadv0: Adding interface: dummy0 [ 132.305461][ T8253] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.352232][ T8253] batman_adv: batadv0: Interface activated: dummy0 [ 132.364756][ T8255] netlink: 'syz.2.622': attribute type 83 has an invalid length. [ 132.439438][ T8244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.638175][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.625'. [ 132.719016][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.725537][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.732571][ T1314] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 132.787604][ T8282] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 132.987494][ T8296] netlink: 104 bytes leftover after parsing attributes in process `syz.4.627'. [ 133.042876][ T8299] netlink: 80 bytes leftover after parsing attributes in process `syz.0.632'. [ 133.513190][ T8335] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 133.701543][ T8324] bond0: option fail_over_mac: invalid value (16) [ 133.712844][ T8324] bond0 (unregistering): Released all slaves [ 134.122748][ T8320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.576810][ T8401] netlink: 'syz.0.655': attribute type 2 has an invalid length. [ 134.592795][ T8401] netlink: 'syz.0.655': attribute type 2 has an invalid length. [ 134.897055][ T8416] netlink: 'syz.3.656': attribute type 1 has an invalid length. [ 135.009032][ T8416] bond3: entered promiscuous mode [ 135.018728][ T8416] bond3: entered allmulticast mode [ 135.024326][ T8416] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.041893][ T8417] macvlan2: entered promiscuous mode [ 135.049859][ T8417] macvlan2: entered allmulticast mode [ 135.097127][ T8434] sctp: [Deprecated]: syz.4.660 (pid 8434) Use of int in maxseg socket option. [ 135.097127][ T8434] Use struct sctp_assoc_value instead [ 135.186217][ T8429] netlink: 'syz.4.660': attribute type 3 has an invalid length. [ 135.261790][ T8440] Dead loop on virtual device ip6_vti0 (net 37), fix it urgently! [ 135.642047][ T8461] tipc: Enabled bearer , priority 0 [ 135.661071][ T8461] syzkaller0: entered promiscuous mode [ 135.673718][ T8461] syzkaller0: entered allmulticast mode [ 135.706953][ T8461] tipc: Resetting bearer [ 135.725457][ T8461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.735413][ T8461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.753340][ T8463] __nla_validate_parse: 8 callbacks suppressed [ 135.753355][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 135.769276][ T8459] tipc: Resetting bearer [ 135.788626][ T8459] tipc: Disabling bearer [ 180.876712][ T8502] netlink: 'syz.0.679': attribute type 11 has an invalid length. [ 181.000182][ T8506] Bluetooth: MGMT ver 1.23 [ 181.372723][ T8530] sctp: [Deprecated]: syz.0.688 (pid 8530) Use of int in max_burst socket option. [ 181.372723][ T8530] Use struct sctp_assoc_value instead [ 181.573996][ T8538] bond0: option lp_interval: invalid value (0) [ 181.580452][ T8538] bond0: option lp_interval: allowed values 1 - 2147483647 [ 181.591125][ T8538] bond0 (unregistering): Released all slaves [ 181.986727][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.701'. [ 182.015849][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.701'. [ 182.113874][ T8570] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 182.136553][ T8584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.159601][ T8570] bond0 (unregistering): Released all slaves [ 182.272301][ T8574] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 182.286527][ T8572] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 182.304041][ T8582] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.458403][ T8596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.549566][ T8604] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 182.610041][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'. [ 182.658991][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 182.870370][ T8628] netlink: 14 bytes leftover after parsing attributes in process `syz.2.717'. [ 183.110296][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 183.188549][ T8652] netlink: 64 bytes leftover after parsing attributes in process `syz.1.725'. [ 183.268005][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 183.725243][ T8685] netlink: 512 bytes leftover after parsing attributes in process `syz.0.736'. [ 183.942978][ T8696] veth0: entered promiscuous mode [ 184.045811][ T8701] veth0: left promiscuous mode [ 184.430314][ T8719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.548302][ T8723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.726678][ T8726] netlink: 'syz.1.746': attribute type 3 has an invalid length. [ 184.778989][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 185.049352][ T8736] syzkaller1: entered promiscuous mode [ 185.062153][ T8736] syzkaller1: entered allmulticast mode [ 185.223462][ T8758] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.279541][ T8748] bond2 (unregistering): Released all slaves [ 185.324392][ T8766] sctp: [Deprecated]: syz.2.758 (pid 8766) Use of int in maxseg socket option. [ 185.324392][ T8766] Use struct sctp_assoc_value instead [ 185.371351][ T1022] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.385545][ T8771] sctp: [Deprecated]: syz.2.758 (pid 8771) Use of int in maxseg socket option. [ 185.385545][ T8771] Use struct sctp_assoc_value instead [ 185.386676][ T1022] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.424128][ T8769] xt_l2tp: invalid flags combination: 0 [ 185.799776][ T1022] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.830259][ T1022] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.016630][ T8794] netlink: 'syz.0.765': attribute type 1 has an invalid length. [ 186.027625][ T8794] netlink: 'syz.0.765': attribute type 2 has an invalid length. [ 186.035598][ T8794] netlink: 'syz.0.765': attribute type 2 has an invalid length. [ 186.043435][ T8794] netlink: 'syz.0.765': attribute type 2 has an invalid length. [ 186.561102][ T8817] veth0: entered promiscuous mode [ 186.591329][ T8815] veth0: left promiscuous mode [ 186.670397][ T8821] tipc: Enabled bearer , priority 10 [ 186.784133][ T8824] netlink: 'syz.4.775': attribute type 1 has an invalid length. [ 187.601577][ T8863] bridge0: port 3(batadv1) entered blocking state [ 187.618652][ T8863] bridge0: port 3(batadv1) entered disabled state [ 187.637541][ T8863] batadv1: entered allmulticast mode [ 187.647919][ T8863] batadv1: entered promiscuous mode [ 187.670301][ T8872] netlink: 'syz.4.788': attribute type 10 has an invalid length. [ 187.695840][ T8872] veth1_macvtap: left promiscuous mode [ 187.712648][ T8872] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 187.767254][ T30] audit: type=1804 audit(1778914175.191:6): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.788" name="/newroot/152/cgroup.controllers" dev="tmpfs" ino=792 res=1 errno=0 [ 187.814046][ T30] audit: type=1800 audit(1778914175.191:7): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.788" name="cgroup.controllers" dev="tmpfs" ino=792 res=0 errno=0 [ 187.988759][ T8885] __nla_validate_parse: 18 callbacks suppressed [ 187.988774][ T8885] netlink: 112 bytes leftover after parsing attributes in process `syz.2.792'. [ 188.001742][ T8882] Cannot find set identified by id 65534 to match [ 188.095464][ T95] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 188.105278][ T95] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 188.173647][ T8893] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 188.360923][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.796'. [ 188.403963][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.796'. [ 189.158766][ T8960] netlink: 112 bytes leftover after parsing attributes in process `syz.0.808'. [ 189.917218][ T8996] : renamed from bond0 (while UP) [ 190.074705][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.815'. [ 190.101843][ T9013] bond0: entered promiscuous mode [ 190.137925][ T9017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.816'. [ 190.993212][ T9022] wg1: entered promiscuous mode [ 190.998266][ T9022] wg1: entered allmulticast mode [ 191.125677][ T4946] Bluetooth: hci4: command 0x0406 tx timeout [ 191.126771][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 191.132067][ T4946] Bluetooth: hci2: command 0x0406 tx timeout [ 191.894442][ T8944] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.078452][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 192.185734][ T9062] netlink: 'syz.2.830': attribute type 21 has an invalid length. [ 192.494799][ T9081] can: request_module (can-proto-5) failed. [ 192.896677][ T9122] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 192.906916][ T9124] netlink: 48 bytes leftover after parsing attributes in process `syz.1.844'. [ 192.932670][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.842'. [ 193.173668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.188900][ T9131] macvlan1: left promiscuous mode [ 193.258046][ T9137] netem: change failed [ 193.275525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.573693][ T9155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.854'. [ 193.802602][ T9177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.858'. [ 193.910436][ T9183] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20003 [ 194.161212][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.169612][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.177548][ T1314] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 194.209339][ T9202] netlink: 'syz.3.865': attribute type 1 has an invalid length. [ 195.312237][ T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 195.690599][ T9283] tipc: Enabling of bearer rejected, failed to enable media [ 196.041335][ T9309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.429314][ T9337] netlink: 'syz.0.893': attribute type 21 has an invalid length. [ 196.461754][ T9337] IPv6: NLM_F_CREATE should be specified when creating new route [ 196.697172][ T9354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.896'. [ 196.705983][ T30] audit: type=1800 audit(1778914184.121:8): pid=9355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.898" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1025 res=0 errno=0 [ 196.743620][ T9357] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 196.779734][ T9357] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 196.829855][ T9365] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 196.863604][ T9369] sctp: Trying to GSO but underlying device doesn't support it. [ 196.941051][ T9361] bond4: Removing last arp target with arp_interval on [ 197.460770][ T9409] netlink: 'syz.2.910': attribute type 1 has an invalid length. [ 197.494693][ T9409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.503201][ T9408] veth0_to_bond: entered allmulticast mode [ 197.614774][ T9409] bond0: (slave veth3): Enslaving as an active interface with a down link [ 197.672310][ T9413] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 197.813309][ T9427] netlink: 80 bytes leftover after parsing attributes in process `syz.3.913'. [ 197.829904][ T9419] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 198.023629][ T9419] bond2: (slave lo): Enslaving as an active interface with an up link [ 198.117442][ T9419] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 198.621132][ T9475] syzkaller0: entered promiscuous mode [ 198.629886][ T9481] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 198.638716][ T9475] syzkaller0: entered allmulticast mode [ 198.648672][ T9481] netlink: 60 bytes leftover after parsing attributes in process `syz.2.918'. [ 198.752864][ T9470] syz.2.918 (9470) used greatest stack depth: 16632 bytes left [ 198.868626][ T9487] netdevsim netdevsim0 : renamed from netdevsim0 [ 199.041255][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.925'. [ 199.069752][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.926'. [ 199.353344][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'. [ 199.363169][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.932'. [ 199.522061][ T9524] netlink: 'syz.1.934': attribute type 29 has an invalid length. [ 199.550500][ T9524] netlink: 132 bytes leftover after parsing attributes in process `syz.1.934'. [ 199.572588][ T9524] netlink: 'syz.1.934': attribute type 29 has an invalid length. [ 199.617141][ T9524] xt_hashlimit: invalid rate [ 199.637326][ T9524] netlink: 'syz.1.934': attribute type 29 has an invalid length. [ 199.652417][ T9524] netlink: 'syz.1.934': attribute type 29 has an invalid length. [ 199.675399][ T9524] netlink: 'syz.1.934': attribute type 29 has an invalid length. [ 199.694469][ T9524] netlink: 'syz.1.934': attribute type 29 has an invalid length. [ 199.714604][ T9524] netlink: 'syz.1.934': attribute type 29 has an invalid length. [ 200.018121][ T9540] syzkaller0: entered promiscuous mode [ 200.039430][ T9540] syzkaller0: entered allmulticast mode [ 200.178889][ T9546] netlink: 'syz.4.941': attribute type 1 has an invalid length. [ 200.272925][ T9546] bond3: entered promiscuous mode [ 200.279491][ T9546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.286785][ T7734] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3e [ 200.296842][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.943'. [ 200.571279][ T9561] bond3: (slave bridge3): making interface the new active one [ 200.604112][ T9561] bridge3: entered promiscuous mode [ 200.621117][ T9561] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 200.844430][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.950'. [ 201.183926][ T9591] netlink: 48 bytes leftover after parsing attributes in process `syz.3.952'. [ 201.220842][ T9590] netlink: 48 bytes leftover after parsing attributes in process `syz.3.952'. [ 201.355639][ T9610] syzkaller0: entered promiscuous mode [ 201.385321][ T9610] syzkaller0: entered allmulticast mode [ 202.029838][ T9646] netlink: 'syz.2.958': attribute type 49 has an invalid length. [ 202.250338][ T9659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.269661][ T9660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.539632][ T9680] syz.1.966: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 202.559964][ T9680] CPU: 1 UID: 0 PID: 9680 Comm: syz.1.966 Not tainted syzkaller #0 PREEMPT(full) [ 202.559988][ T9680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.560004][ T9680] Call Trace: [ 202.560015][ T9680] [ 202.560022][ T9680] dump_stack_lvl+0xe8/0x150 [ 202.560047][ T9680] warn_alloc+0x249/0x340 [ 202.560069][ T9680] ? stack_trace_save+0xa9/0x100 [ 202.560094][ T9680] ? __pfx_warn_alloc+0x10/0x10 [ 202.560118][ T9680] ? kasan_save_track+0x4f/0x80 [ 202.560134][ T9680] ? kasan_save_track+0x3e/0x80 [ 202.560151][ T9680] ? __kasan_kmalloc+0x93/0xb0 [ 202.560170][ T9680] ? __kmalloc_cache_noprof+0x31c/0x660 [ 202.560191][ T9680] ? xskq_create+0x56/0x170 [ 202.560209][ T9680] ? xsk_setsockopt+0x54c/0x990 [ 202.560223][ T9680] ? do_sock_setsockopt+0x17c/0x1b0 [ 202.560243][ T9680] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 202.560260][ T9680] ? do_syscall_64+0x15f/0xf80 [ 202.560284][ T9680] __vmalloc_node_range_noprof+0x132/0x1750 [ 202.560334][ T9680] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 202.560362][ T9680] ? __kasan_kmalloc+0x93/0xb0 [ 202.560386][ T9680] vmalloc_user_noprof+0xad/0xe0 [ 202.560406][ T9680] ? xskq_create+0xbf/0x170 [ 202.560426][ T9680] xskq_create+0xbf/0x170 [ 202.560448][ T9680] xsk_init_queue+0x8a/0xe0 [ 202.560470][ T9680] xsk_setsockopt+0x54c/0x990 [ 202.560490][ T9680] ? __pfx_xsk_setsockopt+0x10/0x10 [ 202.560506][ T9680] ? __pfx_aa_sk_perm+0x10/0x10 [ 202.560527][ T9680] ? aa_sock_opt_perm+0xff/0x1a0 [ 202.560548][ T9680] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 202.560567][ T9680] ? __pfx_xsk_setsockopt+0x10/0x10 [ 202.560587][ T9680] do_sock_setsockopt+0x17c/0x1b0 [ 202.560611][ T9680] __x64_sys_setsockopt+0x13d/0x1b0 [ 202.560632][ T9680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.560649][ T9680] do_syscall_64+0x15f/0xf80 [ 202.560667][ T9680] ? trace_irq_disable+0x3b/0x140 [ 202.560687][ T9680] ? clear_bhb_loop+0x40/0x90 [ 202.560702][ T9680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.560715][ T9680] RIP: 0033:0x7f1d6dd9ce59 [ 202.560740][ T9680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.560751][ T9680] RSP: 002b:00007f1d6ed1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.560766][ T9680] RAX: ffffffffffffffda RBX: 00007f1d6e015fa0 RCX: 00007f1d6dd9ce59 [ 202.560775][ T9680] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 202.560782][ T9680] RBP: 00007f1d6de32d6f R08: 0000000000000004 R09: 0000000000000000 [ 202.560790][ T9680] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.560797][ T9680] R13: 00007f1d6e016038 R14: 00007f1d6e015fa0 R15: 00007ffdee062948 [ 202.560819][ T9680] [ 202.563966][ T9680] Mem-Info: [ 202.812961][ T9693] netlink: 'syz.2.970': attribute type 1 has an invalid length. [ 202.815773][ T9680] active_anon:5884 inactive_anon:0 isolated_anon:0 [ 202.815773][ T9680] active_file:2822 inactive_file:39984 isolated_file:0 [ 202.815773][ T9680] unevictable:768 dirty:124 writeback:0 [ 202.815773][ T9680] slab_reclaimable:10363 slab_unreclaimable:98430 [ 202.815773][ T9680] mapped:29201 shmem:1288 pagetables:1476 [ 202.815773][ T9680] sec_pagetables:0 bounce:0 [ 202.815773][ T9680] kernel_misc_reclaimable:0 [ 202.815773][ T9680] free:1324196 free_pcp:12814 free_cma:0 [ 202.898127][ T9693] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 202.973612][ T9680] Node 0 active_anon:23436kB inactive_anon:0kB active_file:11288kB inactive_file:159728kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116804kB dirty:492kB writeback:0kB shmem:3616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13320kB pagetables:5384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 203.032350][ T9680] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 203.076498][ T9680] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.108284][ T9680] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 203.126527][ T9680] Node 0 DMA32 free:1334112kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23536kB inactive_anon:0kB active_file:11288kB inactive_file:159728kB unevictable:1536kB writepending:492kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:51012kB local_pcp:21188kB free_cma:0kB [ 203.127829][ T9703] netlink: 'syz.3.974': attribute type 1 has an invalid length. [ 203.189946][ T9680] lowmem_reserve[]: 0 0 0 0 0 [ 203.201925][ T9680] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 203.204639][ T9703] Cannot find add_set index 2 as target [ 203.243683][ T9680] lowmem_reserve[]: 0 0 0 0 0 [ 203.256589][ T9680] Node 1 Normal free:3947884kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.292083][ T9680] lowmem_reserve[]: 0 0 0 0 0 [ 203.298719][ T9680] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 203.312522][ T9680] Node 0 DMA32: 4399*4kB (UME) 2072*8kB (UME) 1071*16kB (UM) 1583*32kB (UME) 514*64kB (UME) 186*128kB (UME) 298*256kB (UME) 205*512kB (UME) 125*1024kB (UME) 63*2048kB (UM) 180*4096kB (UM) = 1334220kB [ 203.368277][ T9680] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 203.427184][ T9680] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 9*16kB (UM) 13*32kB (UM) 10*64kB (UM) 3*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (UM) = 3947884kB [ 203.456694][ T9680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.480978][ T9680] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.491175][ T9680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.504530][ T9680] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.530312][ T9680] 44090 total pagecache pages [ 203.541209][ T9680] 0 pages in swap cache [ 203.557466][ T9680] Free swap = 124996kB [ 203.568659][ T9680] Total swap = 124996kB [ 203.581722][ T9680] 2097051 pages RAM [ 203.597744][ T9680] 0 pages HighMem/MovableOnly [ 203.622924][ T9680] 427117 pages reserved [ 203.642133][ T9680] 0 pages cma reserved [ 203.997567][ T9739] __nla_validate_parse: 8 callbacks suppressed [ 203.997583][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'. [ 204.145133][ T9753] tipc: Invalid UDP bearer configuration [ 204.145184][ T9753] tipc: Enabling of bearer rejected, failed to enable media [ 204.175795][ T9751] netlink: 'syz.2.989': attribute type 2 has an invalid length. [ 204.184161][ T9751] netlink: 'syz.2.989': attribute type 2 has an invalid length. [ 204.301455][ T9758] vlan2: entered allmulticast mode [ 204.306859][ T9758] hsr0: entered allmulticast mode [ 204.311923][ T9758] hsr_slave_0: entered allmulticast mode [ 204.318686][ T9758] hsr_slave_1: entered allmulticast mode [ 204.480538][ T9767] netlink: 'syz.0.996': attribute type 18 has an invalid length. [ 204.502259][ T7231] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 204.514258][ T9767] netlink: 'syz.0.996': attribute type 18 has an invalid length. [ 204.522823][ T7231] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.543786][ T7231] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.574805][ T7231] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.788147][ T9787] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1000'. [ 204.869856][ T9780] bridge2: entered promiscuous mode [ 204.883366][ T9780] bridge2: entered allmulticast mode [ 205.170969][ T9801] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 205.606144][ T9824] IPv6: NLM_F_REPLACE set, but no existing node found! [ 205.831010][ T9832] netlink: 'syz.3.1016': attribute type 1 has an invalid length. [ 205.903163][ T9832] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 205.915283][ T9832] bond5: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 205.945667][ T9832] bond5: (slave vxcan5): making interface the new active one [ 205.954319][ T9832] bond5: (slave vxcan5): Enslaving as an active interface with an up link [ 206.013086][ T9840] bond5: (slave vxcan7): The slave device specified does not support setting the MAC address [ 206.030341][ T9840] bond5: (slave vxcan7): Enslaving as a backup interface with an up link [ 206.052823][ T9842] syzkaller0: entered promiscuous mode [ 206.061895][ T9842] syzkaller0: entered allmulticast mode [ 206.084300][ T9842] 0: reclassify loop, rule prio 0, protocol 800 [ 206.159618][ T9847] veth0_to_bond: entered allmulticast mode [ 206.227328][ T7227] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 206.244542][ T9850] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1023'. [ 206.273241][ T7227] bond1: now running without any active interface! [ 206.324711][ T9858] netlink: 'syz.4.1025': attribute type 1 has an invalid length. [ 206.362933][ T9850] block nbd3: not configured, cannot reconfigure [ 206.395584][ T9850] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1023'. [ 206.552060][ T9858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1025'. [ 206.561576][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 206.580416][ T9879] bond4: (slave bridge4): Enslaving as a backup interface with an up link [ 206.589744][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'. [ 206.612177][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'. [ 206.823967][ T9895] netlink: 'syz.1.1034': attribute type 1 has an invalid length. [ 206.847807][ T9895] netlink: 'syz.1.1034': attribute type 1 has an invalid length. [ 206.858194][ T9895] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.1034'. [ 207.360031][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1044'. [ 207.809030][ T9951] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 207.929349][ T9951] veth5: entered promiscuous mode [ 207.944850][ T9951] veth5: entered allmulticast mode [ 208.052143][ T9968] veth0: entered promiscuous mode [ 208.608188][T10005] openvswitch: netlink: Flow actions attr not present in new flow. [ 208.701119][T10007] bridge3: port 1(veth5) entered blocking state [ 208.712413][T10007] bridge3: port 1(veth5) entered disabled state [ 208.719690][T10007] veth5: entered allmulticast mode [ 208.728788][T10007] veth5: entered promiscuous mode [ 208.739503][T10010] bridge3: port 2(veth0_to_bond) entered blocking state [ 208.749706][T10010] bridge3: port 2(veth0_to_bond) entered disabled state [ 208.759195][T10010] veth0_to_bond: entered allmulticast mode [ 208.767878][T10010] veth0_to_bond: entered promiscuous mode [ 208.848193][ T9967] veth0: left promiscuous mode [ 209.262847][T10043] validate_nla: 1 callbacks suppressed [ 209.262863][T10043] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 209.521261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.757813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.606137][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.612460][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.619634][ T1314] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 265.033985][T10057] __nla_validate_parse: 9 callbacks suppressed [ 265.034002][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'. [ 265.107340][T10063] 0: reclassify loop, rule prio 0, protocol 700 [ 265.279198][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 265.591859][T10097] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1100'. [ 265.613593][T10097] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1100'. [ 265.890914][T10125] ieee802154 phy0 wpan0: encryption failed: -90 [ 266.085440][T10141] tc_dump_action: action bad kind [ 266.093622][T10140] netlink: 'syz.4.1110': attribute type 11 has an invalid length. [ 266.291032][T10162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1116'. [ 266.309941][T10161] geneve3: entered promiscuous mode [ 266.333058][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 56555 - 0 [ 266.376396][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 56555 - 0 [ 266.410086][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 56555 - 0 [ 266.446483][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 56555 - 0 [ 266.778437][T10200] netlink: 'syz.2.1126': attribute type 10 has an invalid length. [ 266.804560][T10200] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1126'. [ 266.827926][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'. [ 266.844211][T10200] netlink: 'syz.2.1126': attribute type 1 has an invalid length. [ 266.857081][T10200] netlink: 'syz.2.1126': attribute type 2 has an invalid length. [ 267.067449][T10211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1130'. [ 267.120271][T10206] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1129'. [ 267.338604][T10219] syzkaller0: entered promiscuous mode [ 267.380958][T10219] syzkaller0: entered allmulticast mode [ 267.406447][T10230] 0: reclassify loop, rule prio 0, protocol 800 [ 267.437520][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 267.452124][T10232] netlink: 'syz.4.1137': attribute type 1 has an invalid length. [ 267.469401][T10232] netlink: 'syz.4.1137': attribute type 2 has an invalid length. [ 267.486123][T10232] netlink: 'syz.4.1137': attribute type 1 has an invalid length. [ 267.847700][ T30] audit: type=1107 audit(1778914255.271:9): pid=10254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='6Ã÷|5Ò}ñÒÄ®,2\·Ëˆ‚©i’ ¬¦Ž¤â rejected, failed to enable media [ 278.938735][T10827] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 278.982718][T10827] netlink: 'syz.0.1274': attribute type 3 has an invalid length. [ 279.010681][T10827] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1274'. [ 279.057247][T10827] NCSI netlink: No device for ifindex 813332851 [ 279.065193][T10831] x_tables: duplicate underflow at hook 2 [ 279.643986][T10864] vlan2: entered allmulticast mode [ 279.723507][T10872] bridge_slave_0: left promiscuous mode [ 279.734554][T10872] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.799031][T10872] bridge_slave_1: left allmulticast mode [ 279.819296][T10872] bridge_slave_1: left promiscuous mode [ 279.834028][T10872] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.882959][T10872] bond0: (slave veth0_to_bond): Releasing active interface [ 279.912502][T10872] team0: Port device team_slave_0 removed [ 279.913675][T10884] openvswitch: netlink: IP tunnel dst address not specified [ 279.927962][T10884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.929895][T10872] team0: Port device team_slave_1 removed [ 279.957850][T10872] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 280.078715][T10892] tipc: Started in network mode [ 280.102055][T10892] tipc: Node identity , cluster identity 4711 [ 280.110686][T10892] tipc: Failed to obtain node identity [ 280.117469][T10892] tipc: Enabling of bearer rejected, failed to enable media [ 280.149894][T10897] syzkaller0: entered promiscuous mode [ 280.164197][T10897] syzkaller0: entered allmulticast mode [ 280.699066][T10925] netlink: 'syz.1.1299': attribute type 1 has an invalid length. [ 280.710016][T10925] netlink: 'syz.1.1299': attribute type 1 has an invalid length. [ 280.926445][T10938] openvswitch: netlink: IP tunnel attribute has 9 unknown bytes. [ 280.947079][T10942] netlink: 'syz.2.1301': attribute type 1 has an invalid length. [ 280.986796][T10931] __nla_validate_parse: 1 callbacks suppressed [ 280.986812][T10931] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1303'. [ 281.044060][T10940] netlink: 'syz.0.1305': attribute type 10 has an invalid length. [ 281.097807][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1307'. [ 281.110459][T10942] bond3: entered promiscuous mode [ 281.116138][T10942] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.134232][T10953] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1308'. [ 281.145887][T10946] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.153009][T10946] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 281.172812][T10946] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 281.190162][T10946] bond3: (slave ip6gre1): making interface the new active one [ 281.198532][T10946] ip6gre1: entered promiscuous mode [ 281.205147][T10946] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 281.907834][T10994] netlink: 'syz.1.1317': attribute type 1 has an invalid length. [ 281.982011][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 282.013634][T11000] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1318'. [ 282.034674][T10997] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1318'. [ 282.082279][T10997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.119034][T10997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.143037][T10997] bond0 (unregistering): Released all slaves [ 282.508519][T11026] xt_hashlimit: size too large, truncated to 1048576 [ 282.555665][T11030] netlink: zone id is out of range [ 282.575666][T11030] netlink: zone id is out of range [ 282.579203][T11028] netlink: 'syz.2.1321': attribute type 2 has an invalid length. [ 282.590309][T11030] netlink: zone id is out of range [ 282.605553][T11030] netlink: zone id is out of range [ 282.607933][T11032] bridge_slave_0 (unregistering): left allmulticast mode [ 282.620956][T11030] netlink: zone id is out of range [ 282.628303][T11032] bridge_slave_0 (unregistering): left promiscuous mode [ 282.637857][T11030] netlink: zone id is out of range [ 282.637871][T11030] netlink: zone id is out of range [ 282.637879][T11030] netlink: zone id is out of range [ 282.637887][T11030] netlink: zone id is out of range [ 282.637895][T11030] netlink: zone id is out of range [ 282.670352][T11032] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.058398][T11055] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 283.138451][T11053] bond5: option lp_interval: invalid value (0) [ 283.144757][T11053] bond5: option lp_interval: allowed values 1 - 2147483647 [ 283.156003][T11053] bond5 (unregistering): Released all slaves [ 283.316668][T11055] bond0: entered promiscuous mode [ 283.369593][T11055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.452033][T11063] bond0: (slave bridge4): making interface the new active one [ 283.469189][T11063] bridge4: entered promiscuous mode [ 283.483990][T11063] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 283.523760][T11069] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 283.555056][T11069] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 283.899207][T11110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1339'. [ 283.936417][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1339'. [ 283.942834][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'. [ 283.964522][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'. [ 283.965538][T11110] netlink: 'syz.0.1339': attribute type 39 has an invalid length. [ 284.415710][T11137] dvmrp0: left allmulticast mode [ 284.467643][T11144] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 285.053336][T11180] tc action pedit offset must be on 32 bit boundaries [ 285.061507][T11180] tc action pedit offset must be on 32 bit boundaries [ 285.068367][T11180] tc action pedit offset must be on 32 bit boundaries [ 285.075170][T11180] tc action pedit offset must be on 32 bit boundaries [ 285.081938][T11180] tc action pedit offset must be on 32 bit boundaries [ 285.088763][T11180] tc action pedit offset must be on 32 bit boundaries [ 285.095553][T11180] tc action pedit offset must be on 32 bit boundaries [ 285.102338][T11180] tc action pedit offset must be on 32 bit boundaries [ 285.109163][T11180] tc action pedit offset must be on 32 bit boundaries [ 285.115956][T11180] tc action pedit offset must be on 32 bit boundaries [ 285.124026][T11176] netlink: 'syz.2.1356': attribute type 1 has an invalid length. [ 285.332936][T11196] ipt_rpfilter: unknown options [ 285.371187][T11193] netlink: 'syz.3.1360': attribute type 10 has an invalid length. [ 285.397521][T11193] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.437174][T11201] macvlan0: left promiscuous mode [ 285.748763][T11215] ipvlan2: entered allmulticast mode [ 285.800347][T11215] batadv_slave_1: entered allmulticast mode [ 285.873709][T11215] batman_adv: batadv0: Adding interface: ipvlan2 [ 285.927728][T11215] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.953873][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.965072][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.975480][T11215] batman_adv: batadv0: Interface activated: ipvlan2 [ 286.493950][T11269] __nla_validate_parse: 5 callbacks suppressed [ 286.493966][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1373'. [ 286.588417][T11275] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1375'. [ 286.637845][T11275] 0·: renamed from hsr0 [ 286.644129][T11269] netlink: 'syz.1.1373': attribute type 4 has an invalid length. [ 286.658459][T11269] netlink: 'syz.1.1373': attribute type 1 has an invalid length. [ 286.660545][T11275] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.666337][T11269] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1373'. [ 286.693461][T11275] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.705502][T11275] 0·: entered allmulticast mode [ 286.712476][T11275] hsr_slave_0: entered allmulticast mode [ 286.727072][T11275] hsr_slave_1: entered allmulticast mode [ 287.150738][T11307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1381'. [ 287.162807][T11312] netlink: 'syz.4.1383': attribute type 23 has an invalid length. [ 287.172494][T11307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1381'. [ 287.186444][T11307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1381'. [ 287.219923][T11307] x_tables: duplicate underflow at hook 2 [ 287.290811][T11317] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1384'. [ 288.069549][T11330] net_ratelimit: 10 callbacks suppressed [ 288.069568][T11330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.200204][T11378] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1395'. [ 289.209711][T11378] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1395'. [ 289.641961][T11378] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1395'. [ 290.151054][T11406] syzkaller0: entered promiscuous mode [ 290.170948][T11406] syzkaller0: entered allmulticast mode [ 290.183502][T11408] C: renamed from lo (while UP) [ 290.204050][T11408] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 290.270352][T11414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.312629][ T5749] lo speed is unknown, defaulting to 1000 [ 290.554004][T11430] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 290.611831][T11430] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 290.911567][T11462] netlink: 'syz.4.1422': attribute type 8 has an invalid length. [ 290.916644][T11448] openvswitch: netlink: Flow key attr not present in new flow. [ 290.952303][T11462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.954264][T11453] lo speed is unknown, defaulting to 1000 [ 291.361266][T11482] netlink: 'syz.4.1430': attribute type 29 has an invalid length. [ 291.749903][T11508] __nla_validate_parse: 10 callbacks suppressed [ 291.749919][T11508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1439'. [ 291.842809][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'. [ 291.874694][T11512] netlink: 'syz.3.1441': attribute type 1 has an invalid length. [ 291.894776][T11512] netlink: 'syz.3.1441': attribute type 2 has an invalid length. [ 292.226571][T11535] 8021q: VLANs not supported on gre0 [ 292.573259][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1455'. [ 292.589169][T11554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.039073][T11567] netlink: 'syz.4.1459': attribute type 1 has an invalid length. [ 293.088379][T11567] bond5: (slave gretap1): making interface the new active one [ 293.098011][T11567] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 293.107093][T11572] C: entered allmulticast mode [ 293.152461][T11567] macvlan4: entered promiscuous mode [ 293.164595][T11567] macvlan4: entered allmulticast mode [ 293.187554][T11567] bond5: entered promiscuous mode [ 293.211229][T11567] gretap1: entered promiscuous mode [ 293.248256][T11567] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 293.269606][T11567] bond5: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 293.290292][T11567] bond5: left promiscuous mode [ 293.296224][T11567] gretap1: left promiscuous mode [ 293.426503][T11583] syzkaller0: entered promiscuous mode [ 293.447037][T11583] syzkaller0: entered allmulticast mode [ 293.638902][T11608] sock: sock_set_timeout: `syz.3.1469' (pid 11608) tries to set negative timeout [ 293.771886][T11610] netlink: 'syz.4.1470': attribute type 10 has an invalid length. [ 294.770485][T11660] netlink: 'syz.0.1484': attribute type 21 has an invalid length. [ 294.793401][T11660] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1484'. [ 294.823345][T11660] netlink: 'syz.0.1484': attribute type 4 has an invalid length. [ 294.841438][T11660] netlink: 'syz.0.1484': attribute type 5 has an invalid length. [ 294.850389][T11664] netlink: 'syz.0.1484': attribute type 21 has an invalid length. [ 294.858758][T11660] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1484'. [ 294.869787][T11664] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1484'. [ 294.913256][T11664] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1484'. [ 295.070961][T11673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1489'. [ 295.086088][T11673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1489'. [ 295.140747][T11673] ieee802154 phy0 wpan0: encryption failed: -22 [ 295.167399][T11673] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 295.400431][T11676] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1490'. [ 295.421129][T11682] lo speed is unknown, defaulting to 1000 [ 295.662836][T11698] syzkaller0: entered promiscuous mode [ 295.672933][T11698] syzkaller0: entered allmulticast mode [ 296.396393][T11729] validate_nla: 2 callbacks suppressed [ 296.396411][T11729] netlink: 'syz.0.1501': attribute type 11 has an invalid length. [ 297.714226][T11748] netlink: 'syz.3.1508': attribute type 1 has an invalid length. [ 297.730790][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1509'. [ 297.740835][T11748] netlink: 'syz.3.1508': attribute type 2 has an invalid length. [ 297.755654][T11748] netlink: 'syz.3.1508': attribute type 1 has an invalid length. [ 297.770727][T11750] x_tables: duplicate underflow at hook 1 [ 297.781933][T11748] netlink: 'syz.3.1508': attribute type 3 has an invalid length. [ 297.798018][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'. [ 297.828475][T11750] syzkaller1: entered promiscuous mode [ 297.847736][T11750] syzkaller1: entered allmulticast mode [ 297.899290][T11750] vlan2: entered allmulticast mode [ 297.917015][T11750] bond0: entered allmulticast mode [ 297.930268][T11750] bridge4: entered allmulticast mode [ 297.970749][T11762] IPVS: Unknown mcast interface: vcan0 [ 298.344535][T11787] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1517'. [ 298.522123][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1519'. [ 298.560586][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1520'. [ 299.805984][T11879] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1535'. [ 299.938875][T11883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1538'. [ 299.969496][T11883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1538'. [ 300.009377][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 300.039161][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 300.168732][T11892] netlink: 'syz.2.1542': attribute type 33 has an invalid length. [ 300.984235][T11941] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 301.316273][T11964] IPv4: Oversized IP packet from 127.202.26.0 [ 301.408103][T11964] netem: change failed [ 301.721167][ T5361] IPVS: starting estimator thread 0... [ 301.841956][T11986] IPVS: using max 37 ests per chain, 88800 per kthread [ 302.191933][T12009] netlink: 'syz.2.1563': attribute type 1 has an invalid length. [ 302.210088][T12009] netlink: 'syz.2.1563': attribute type 1 has an invalid length. [ 302.252686][T12006] netlink: 'syz.0.1562': attribute type 1 has an invalid length. [ 302.493389][T12018] netlink: 'syz.4.1566': attribute type 10 has an invalid length. [ 302.764570][T12018] macvlan1: entered promiscuous mode [ 302.782746][T12018] macvlan1: entered allmulticast mode [ 302.826489][T12018] veth1_vlan: entered allmulticast mode [ 302.887556][T12018] team0: Port device macvlan1 added [ 303.094255][T12019] bond4: (slave bond_slave_1): Device is not bonding slave [ 303.142477][T12019] bond4: option active_slave: invalid value (bond_slave_1) [ 303.182903][T12019] bond4 (unregistering): Released all slaves [ 303.216711][T12033] netlink: 'syz.1.1571': attribute type 4 has an invalid length. [ 303.517808][T12048] __nla_validate_parse: 7 callbacks suppressed [ 303.517835][T12048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1575'. [ 303.691816][T12054] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 303.763327][T12054] bond4 (unregistering): Released all slaves [ 303.799841][T12046] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 303.800389][T12047] veth0: entered promiscuous mode [ 303.829885][T12047] veth0: left promiscuous mode [ 304.089701][T12069] x_tables: duplicate entry at hook 1 [ 304.105772][T12068] syzkaller0: entered promiscuous mode [ 304.126298][T12068] syzkaller0: entered allmulticast mode [ 304.157124][T12074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1579'. [ 304.305272][T12083] netlink: 'syz.0.1580': attribute type 1 has an invalid length. [ 304.352056][T12084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1579'. [ 304.887301][T12103] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1586'. [ 304.905033][T12102] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 304.907760][T12103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1586'. [ 304.956747][T12103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1586'. [ 305.236562][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 305.591813][T12134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1597'. [ 305.632023][T11790] Set syz1 is full, maxelem 65536 reached [ 305.644348][T12137] syzkaller0: entered promiscuous mode [ 305.653963][T12137] syzkaller0: entered allmulticast mode [ 305.818843][T12143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1599'. [ 305.920907][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1602'. [ 306.314318][T12172] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 306.504660][T12185] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 306.810103][T12185] lo speed is unknown, defaulting to 1000 [ 307.002567][T12215] sock: sock_timestamping_bind_phc: sock not bind to device [ 307.157629][T12225] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 307.400541][T12239] netlink: zone id is out of range [ 307.421785][T12239] netlink: zone id is out of range [ 307.445300][T12239] netlink: zone id is out of range [ 307.469230][T12239] netlink: zone id is out of range [ 307.488426][T12239] netlink: zone id is out of range [ 307.505356][T12239] netlink: zone id is out of range [ 307.513267][T12239] netlink: zone id is out of range [ 307.519240][T12239] netlink: zone id is out of range [ 307.683745][T12249] netlink: 'syz.3.1632': attribute type 5 has an invalid length. [ 308.171363][T12274] netlink: 'syz.1.1638': attribute type 2 has an invalid length. [ 308.262457][T12279] netlink: 'syz.0.1639': attribute type 21 has an invalid length. [ 309.179742][T12331] __nla_validate_parse: 14 callbacks suppressed [ 309.179757][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'. [ 309.384241][T12341] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1655'. [ 309.449873][T12341] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1655'. [ 309.533467][T12350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1659'. [ 309.587274][T12350] netlink: 'syz.3.1659': attribute type 4 has an invalid length. [ 309.628240][T12363] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1662'. [ 309.651329][T12363] netlink: 'syz.2.1662': attribute type 9 has an invalid length. [ 309.653014][T12368] netlink: 'syz.4.1663': attribute type 4 has an invalid length. [ 309.661915][T12367] netlink: 'syz.4.1663': attribute type 4 has an invalid length. [ 309.796084][ T5749] lo speed is unknown, defaulting to 1000 [ 309.814234][ T5749] syz0: Port: 1 Link DOWN [ 309.846627][ T5361] lo speed is unknown, defaulting to 1000 [ 310.126902][T12392] netlink: 'syz.3.1671': attribute type 5 has an invalid length. [ 310.260993][T12398] : entered promiscuous mode [ 310.310854][T12400] batadv2: entered allmulticast mode [ 310.378344][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1674'. [ 310.540279][T12414] netlink: 'syz.4.1676': attribute type 1 has an invalid length. [ 310.773944][T12414] 8021q: adding VLAN 0 to HW filter on device bond6 [ 310.835111][T12435] netlink: 'syz.1.1682': attribute type 1 has an invalid length. [ 310.861067][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 310.890814][T12428] veth0_to_bond: left allmulticast mode [ 310.907060][T12428] bond1: (slave veth0_to_bond): Releasing active interface [ 310.943458][T12428] bond6: (slave veth0_to_bond): making interface the new active one [ 310.961939][T12428] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 311.068707][T12435] bond2: entered promiscuous mode [ 311.074255][T12435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.314778][T12458] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1684'. [ 311.549633][T12478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1687'. [ 311.951686][T12502] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1692'. [ 312.034432][T12505] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 312.055052][T12505] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 312.116684][T12509] pimreg: entered allmulticast mode [ 312.176273][T12513] sctp: [Deprecated]: syz.3.1696 (pid 12513) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.176273][T12513] Use struct sctp_sack_info instead [ 420.674817][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 420.681870][ C1] rcu: 0-...!: (1 GPs behind) idle=6724/1/0x4000000000000000 softirq=46931/46932 fqs=53 [ 420.692529][ C1] rcu: (detected by 1, t=10502 jiffies, g=47985, q=479 ncpus=2) [ 420.700278][ C1] Sending NMI from CPU 1 to CPUs 0: [ 420.700312][ C0] NMI backtrace for cpu 0 [ 420.700335][ C0] CPU: 0 UID: 0 PID: 12560 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 420.700352][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.700364][ C0] RIP: 0010:lock_is_held_type+0x84/0x150 [ 420.700392][ C0] Code: 65 ff 05 ff dd 90 07 41 83 bd 88 0b 00 00 00 7e 48 4c 89 eb 48 81 c3 90 0b 00 00 45 31 ff 49 83 ff 31 73 24 48 89 df 4c 89 f6 f7 01 00 00 85 c0 75 2a 49 ff c7 49 63 85 88 0b 00 00 48 83 c3 [ 420.700405][ C0] RSP: 0018:ffffc90000007cd8 EFLAGS: 00000087 [ 420.700418][ C0] RAX: 0000000000000005 RBX: ffff88807c244960 RCX: 0000000000010002 [ 420.700428][ C0] RDX: ffff88807c243d80 RSI: ffff8880796312c0 RDI: ffff88807c244960 [ 420.700439][ C0] RBP: 00000000ffffffff R08: 0000000000000003 R09: 0000000000000004 [ 420.700448][ C0] R10: dffffc0000000000 R11: fffff52000000f90 R12: 0000000000000046 [ 420.700458][ C0] R13: ffff88807c243d80 R14: ffff8880796312c0 R15: 0000000000000002 [ 420.700468][ C0] FS: 00005555706b1500(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000 [ 420.700481][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.700491][ C0] CR2: 00007fcab43adac0 CR3: 0000000074d14000 CR4: 00000000003526f0 [ 420.700505][ C0] Call Trace: [ 420.700516][ C0] [ 420.700525][ C0] advance_sched+0x14c/0xc20 [ 420.700565][ C0] ? __pfx_advance_sched+0x10/0x10 [ 420.700588][ C0] ? __pfx_advance_sched+0x10/0x10 [ 420.700611][ C0] ? __pfx_advance_sched+0x10/0x10 [ 420.700631][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 420.700658][ C0] hrtimer_interrupt+0x44b/0x950 [ 420.700688][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 420.700707][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 420.700728][ C0] [ 420.700732][ C0] [ 420.700738][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.700754][ C0] RIP: 0010:__kmalloc_noprof+0x22c/0x760 [ 420.700774][ C0] Code: 20 4d 8b 2c 24 e8 34 57 83 09 41 89 c7 83 f8 08 0f 83 a6 03 00 00 4a 8b 04 fd 90 67 26 8e 4a 8d 2c 28 4a 8b 44 28 38 8b 48 18 <85> c9 0f 84 33 02 00 00 8b 54 24 04 ff c9 48 8b 7c c8 20 84 d2 0f [ 420.700786][ C0] RSP: 0018:ffffc9000252f9f8 EFLAGS: 00000293 [ 420.700798][ C0] RAX: ffff888078fd2400 RBX: 0000000000000d40 RCX: 0000000000000018 [ 420.700808][ C0] RDX: 000000005522062f RSI: ffffffff8c28af40 RDI: ffffffff8c28af00 [ 420.700818][ C0] RBP: ffff8880b863f4f8 R08: ffffffff822588e8 R09: ffff8880b863f4f8 [ 420.700828][ C0] R10: 0000000000000009 R11: 0000000000000000 R12: ffff88813fe1a8c0 [ 420.700837][ C0] R13: ffffffff933b54f8 R14: 0000000000000022 R15: 0000000000000000 [ 420.700849][ C0] ? __kmalloc_noprof+0x1b8/0x760 [ 420.700871][ C0] ? __kmalloc_noprof+0x20c/0x760 [ 420.700890][ C0] ? tomoyo_encode+0x28b/0x550 [ 420.700910][ C0] ? __kmalloc_noprof+0x1b8/0x760 [ 420.700935][ C0] tomoyo_encode+0x28b/0x550 [ 420.700957][ C0] tomoyo_path_perm+0x318/0x560 [ 420.700973][ C0] ? tomoyo_path_perm+0x251/0x560 [ 420.700989][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 420.701017][ C0] ? __pfx_current_check_access_path+0x10/0x10 [ 420.701037][ C0] ? simple_lookup+0x12c/0x1c0 [ 420.701052][ C0] ? lookup_one_qstr_excl+0x1d4/0x360 [ 420.701073][ C0] tomoyo_path_symlink+0xab/0xf0 [ 420.701095][ C0] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 420.701118][ C0] ? __pfx_filename_create+0x10/0x10 [ 420.701140][ C0] security_path_symlink+0x16f/0x360 [ 420.701163][ C0] filename_symlinkat+0x134/0x410 [ 420.701180][ C0] ? __pfx_filename_symlinkat+0x10/0x10 [ 420.701196][ C0] ? do_getname+0x151/0x250 [ 420.701211][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.701227][ C0] __se_sys_symlinkat+0x4e/0x2b0 [ 420.701241][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.701256][ C0] do_syscall_64+0x15f/0xf80 [ 420.701277][ C0] ? trace_irq_disable+0x3b/0x140 [ 420.701299][ C0] ? clear_bhb_loop+0x40/0x90 [ 420.701315][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.701329][ C0] RIP: 0033:0x7fcab439bf17 [ 420.701344][ C0] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 8e f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.701355][ C0] RSP: 002b:00007ffd51d246a8 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 420.701370][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcab439bf17 [ 420.701380][ C0] RDX: 00007fcab4433d28 RSI: 00000000ffffff9c RDI: 00007ffd51d24740 [ 420.701389][ C0] RBP: 00007ffd51d246ec R08: 0000000000000001 R09: 00000000ffffffff [ 420.701399][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000015d [ 420.701407][ C0] R13: 00000000000927c0 R14: 000000000004c5dc R15: 00007ffd51d24740 [ 420.701424][ C0] [ 420.702305][ C1] rcu: rcu_preempt kthread starved for 10389 jiffies! g47985 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 421.171359][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 421.181324][ C1] rcu: RCU grace-period kthread stack dump: [ 421.187206][ C1] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 421.200700][ C1] Call Trace: [ 421.203977][ C1] [ 421.206913][ C1] __schedule+0x1821/0x5740 [ 421.211426][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 421.216400][ C1] ? __pfx___schedule+0x10/0x10 [ 421.221274][ C1] ? schedule+0x90/0x360 [ 421.225530][ C1] schedule+0x164/0x360 [ 421.229694][ C1] schedule_timeout+0x158/0x2c0 [ 421.234606][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 421.239999][ C1] ? __pfx_process_timeout+0x10/0x10 [ 421.245314][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 421.251135][ C1] ? prepare_to_swait_event+0x340/0x370 [ 421.256700][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 421.261583][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 421.267763][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 421.273064][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 421.278275][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.284092][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 421.288694][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 421.293900][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.299712][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 421.304651][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 421.309711][ C1] kthread+0x389/0x470 [ 421.313790][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 421.318993][ C1] ? __pfx_kthread+0x10/0x10 [ 421.323594][ C1] ret_from_fork+0x514/0xb70 [ 421.328188][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 421.333302][ C1] ? __switch_to+0xc79/0x1410 [ 421.338077][ C1] ? __pfx_kthread+0x10/0x10 [ 421.342673][ C1] ret_from_fork_asm+0x1a/0x30 [ 421.347456][ C1] [ 421.350480][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 421.356803][ C1] CPU: 1 UID: 0 PID: 5625 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 421.366258][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 421.376311][ C1] RIP: 0010:smp_call_function_many_cond+0xfcf/0x13d0 [ 421.382990][ C1] Code: 79 45 8b 2e 44 89 ee 83 e6 01 31 ff e8 7a 06 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 25 02 0c 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 0a 02 0c [ 421.402595][ C1] RSP: 0000:ffffc90003f07840 EFLAGS: 00000293 [ 421.408668][ C1] RAX: ffffffff81b9c256 RBX: ffff8880b873c148 RCX: ffff88802abf9ec0 [ 421.416643][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 421.424615][ C1] RBP: ffffc90003f07970 R08: ffffffff9030bcf7 R09: 1ffffffff206179e [ 421.432591][ C1] R10: dffffc0000000000 R11: fffffbfff206179f R12: 1ffff110170c8589 [ 421.440560][ C1] R13: dffffc0000000000 R14: ffff8880b8642c48 R15: 0000000000000000 [ 421.448531][ C1] FS: 000055556eae8500(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 421.457469][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.464047][ C1] CR2: 000055556eb03a38 CR3: 00000000729ec000 CR4: 00000000003526f0 [ 421.472020][ C1] Call Trace: [ 421.475298][ C1] [ 421.478226][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 421.483168][ C1] ? smp_call_function_many_cond+0x891/0x13d0 [ 421.489240][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 421.494444][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 421.499829][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 421.506160][ C1] ? rcu_is_watching+0x15/0xb0 [ 421.510929][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 421.516305][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 421.521512][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 421.526627][ C1] flush_tlb_mm_range+0x5c3/0x10b0 [ 421.531753][ C1] ? page_table_check_clear+0x124/0x4f0 [ 421.537305][ C1] ? page_table_check_clear+0x48d/0x4f0 [ 421.542862][ C1] ptep_clear_flush+0x120/0x170 [ 421.547728][ C1] do_wp_page+0x3da7/0x4cc0 [ 421.552240][ C1] ? do_wp_page+0x37b4/0x4cc0 [ 421.556933][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 421.561786][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 421.566819][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 421.572209][ C1] handle_mm_fault+0x151f/0x3170 [ 421.577178][ C1] ? handle_mm_fault+0xee/0x3170 [ 421.582134][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 421.587418][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 421.592685][ C1] do_user_addr_fault+0xa73/0x1340 [ 421.597816][ C1] ? rcu_is_watching+0x15/0xb0 [ 421.602644][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 421.608021][ C1] exc_page_fault+0x6a/0xc0 [ 421.612534][ C1] asm_exc_page_fault+0x26/0x30 [ 421.617382][ C1] RIP: 0033:0x7f4ccb7619e0 [ 421.621806][ C1] Code: c4 28 00 48 8d 0c 1e 49 39 d0 49 89 48 60 0f 95 c2 48 29 d8 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 56 08 <48> 89 41 08 48 8d 4e 10 eb b0 48 8d 0d a7 d9 0c 00 ba 9e 10 00 00 [ 421.641412][ C1] RSP: 002b:00007ffd7e3e7070 EFLAGS: 00010206 [ 421.647482][ C1] RAX: 00000000000065d1 RBX: 0000000000008040 RCX: 000055556eb03a30 [ 421.655456][ C1] RDX: 0000000000008041 RSI: 000055556eafb9f0 RDI: 0000000000000004 [ 421.663422][ C1] RBP: 0000000000000802 R08: 00007f4ccb9ede20 R09: 0000000000000001 [ 421.671388][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000008030 [ 421.679353][ C1] R13: 0000000000000000 R14: 00007f4ccb9ede80 R15: 0000000000000000 [ 421.687341][ C1]