last executing test programs: 3.047480487s ago: executing program 2 (id=1270): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001c80), 0x0, 0x40010022, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x7ff, 0x8, {{0x8, 0x4, 0x0, 0x2, 0x20, 0x66, 0x0, 0x2f, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @rr={0x7, 0x7, 0x10, [@local]}, @ra={0x94, 0x4}]}}}}}) 2.841270925s ago: executing program 1 (id=1273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000010a010200000000000000ff02001a006c16cb18530dfa5307000000000000001a3719cdf0d6"], 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) recvmmsg(r2, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @target={{0xb}, @void}}]}], {0x14, 0x10}}, 0x94}, 0x1, 0x0, 0x0, 0x44001}, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000940)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f00000002c0)=0x6, 0x4) sendto$inet(r6, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001800010000000000000000000a80000000030006000000001400070000000000000000000000000000000001047431683a7e77f8fea9e092fc09490ee4147b39ac8328f42104c0567a9c6ca56023ec9c7c6858196273b0f1289c0c8b6000e646aef97dccd5f205a4250ffc5f69d6fe67ad12ede62cc46c6563c5ea47e8efb14ca0ad8c64e06dee0b023dd5991501829cbbe4e0be7634301471baca"], 0x30}}, 0x20000000) close(0x4) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="10020000feffffff0008000000000000850000081800000018010028e6214a25ddac23fb0856f200000000002001000000f8ff00000000bfa1000000000000070100f19579f8c73b40470008000000b703000001000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x26}, 0x94) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tracing={0x0, 0x23d4f78000000000}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r11, r10, 0x0, r10}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000000700)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 2.239412302s ago: executing program 4 (id=1278): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x13, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x3, 0xa, 0x8, {0x4e24, 0x4e23, [0x6, 0x1, 0x4bb, 0x8], [0x4, 0x6, 0xfffffff8, 0xdfd], 0x0, [0x9, 0x6]}, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "459be8"}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000100)}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) 2.224830069s ago: executing program 0 (id=1279): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003580), r1) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001300)={&(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/203, 0x87, 0x0, &(0x7f0000001200), 0xfffffff3}, &(0x7f0000001340)=0x24) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001a000100feffffff0000000081"], 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000003640)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000000b00)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2e, 0x3, 'fo\x00', 0x11, 0x10000004, 0x8}, 0x2c) (async) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.003546299s ago: executing program 0 (id=1281): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000006ffc)=0x4000000000000200, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000100)={0x2b, 0x3}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0xc8, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x9, 0x8, 0x40, 0x1, 0x2, 0x8, 0x8}}, {0x14, 0x2, [0xc6, 0x2, 0x0, 0x6, 0x8, 0x8, 0x8a3, 0x2]}}, {{0x1c, 0x1, {0x10, 0x6, 0x6, 0xffffff48, 0x0, 0x7fffffff, 0xe392, 0x3}}, {0xa, 0x2, [0xee6, 0x9, 0x5]}}, {{0x1c, 0x1, {0x41, 0x64, 0x8, 0x0, 0x2, 0x8, 0xfff, 0x2}}, {0x8, 0x2, [0x4, 0x8]}}, {{0x1c, 0x1, {0x4, 0x2, 0x56f, 0x1ff, 0x1, 0x2, 0x4a6bd1ff, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x3, @random="21e6b238ff37"}, 0x31) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000240)={r9, 0x1, 0x6, @random="00000200"}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000780)={r9, 0x1, 0x6}, 0x10) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000280)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x17, r11, 0x1, 0x0, 0x6, @multicast}, 0xfdee) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) 1.805992859s ago: executing program 1 (id=1283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100001000000000800000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000020002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e01010000000000000000000000000000000033000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000fb0000000000000000000000000000000000000000000000000000000000000006000000000000000000008056000000000000000000000000000000000000000000000000000000100000000900000002000000000000000000000200030000000000000000004800080073686132353600000000000000000000000000000000000000000000ffffffffffffffeb0000800100000000000000000000000000000000000000000000000000000000a3f270b13100"], 0x138}}, 0x0) 1.800654544s ago: executing program 2 (id=1284): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000008ebc, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'erspan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'vlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r8 = socket(0x5, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@gettaction={0x78, 0x32, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000082}, 0x20048850) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x400}, 0x20004041) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r14 = socket(0x2a, 0x2, 0x0) connect$inet(r14, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r13, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r11, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.692227803s ago: executing program 1 (id=1285): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149014006040800", 0x58}], 0x1) 1.652116991s ago: executing program 0 (id=1286): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed', 0x9) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x2, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) (async) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0xfffe) (async) sendto$inet(r2, &(0x7f0000000000)='<', 0xfffffffffffffe8a, 0x805, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) writev(r6, &(0x7f0000000000)=[{0x0, 0x5d}, {&(0x7f0000000040)="ace4e81540a04f1171b08a13bb1b8f122d19fe2e8185b5334072d1c24e0a427f5af12595d503b031bba60e0a5a21d0e3d3be77ed1a7b7a96056d42a7f5cc1b699be0db7ea9c1df5bbaa50dcabcb4df1db4359515e8c93264845161f1c4cdb90eb8613809a21cd714660b3ac128de6498687740ad9acd6a5530fa7cfede1a16e1dedb81add6deb9ea88f2f4b0876eefe252990fd7316550d4a0b899db327717a5e0ffd6d2c96c7ae76d9b0f6c11", 0xad}], 0x2) syz_emit_ethernet(0x1272, &(0x7f0000000500)={@remote, @remote, @void, {@mpls_mc={0x8848, {[{0x7}, {0x1, 0x0, 0x1}, {0x5}], @ipv6=@dccp_packet={0x1, 0x6, "8c7139", 0x1230, 0x21, 0xff, @private2, @ipv4={'\x00', '\xff\xff', @multicast1}, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x18, 0x66}, @dstopts={0x8, 0x1c, '\x00', [@generic={0x40, 0xaa, "8ade5fbce744e0a2d2ed98d828b64e120104b7dda7445a06f4299e437a9f3dadd341115c88d08fb0c2a13c26279b07e696e2ad69ea7981be8ba182e8a14fc877ab4f99425a80f22bfd37586bb167c06c84a016a0bb3263f5b9fa522ef769ead051923c78d9a30d36f6f58619bf8beaf64ef8d5807c6f7abcbbccec95529cd676a276da76aaab34ad1a4ca5a66d18fef10734bf458a2121bf4d156f67f0905020c475b04c4def827e281a"}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x28, {0x2, 0x4000007a, 0x6, 0x2, [0x6, 0x0, 0x8000000000000001, 0x3bba]}}, @jumbo]}, @srh={0x0, 0x12, 0x4, 0x9, 0x9, 0x78, 0x7bd8, [@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @private0, @private2={0xfc, 0x2, '\x00', 0xc}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @remote]}, @fragment={0x2, 0x0, 0x0, 0x1, 0x0, 0x15, 0x64}, @routing={0x6, 0xa, 0x0, 0xfc, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2f}, @remote]}, @srh={0x2e, 0x4, 0x4, 0x2, 0x4, 0x8, 0x259b, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x2f, 0x0, 0xfe, 0x1, 0x0, 0x6, 0x67}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x5, 'R3\v', 0x6, "183cff"}, "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"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) 1.609999942s ago: executing program 1 (id=1287): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0x1a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffc, 0x0, 0x1, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@multicast2, @in=@multicast1, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x33, 0x1, 0x0, 0x0, 0x2, 0x2c1a9274a31f37a5}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.492023897s ago: executing program 2 (id=1289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040)=0x9, 0x4) recvmmsg$unix(r1, &(0x7f00000021c0)=[{{&(0x7f0000000300), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000400)=""/90, 0x5a}, {&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f0000000580)=""/185, 0xb9}, {&(0x7f0000000640)=""/78, 0x4e}, {&(0x7f0000000700)=""/197, 0xc5}, {&(0x7f00000008c0)=""/137, 0x89}, {&(0x7f0000000980)=""/10, 0xa}], 0x8, &(0x7f0000000a40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000ac0)=""/230, 0xe6}, {&(0x7f0000000bc0)=""/105, 0x69}, {&(0x7f0000000c40)=""/210, 0xd2}, {&(0x7f0000000d40)=""/242, 0xf2}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/44, 0x2c}], 0x6, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000fc0)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001040)=""/227, 0xe3}, {&(0x7f00000011c0)=""/197, 0xc5}, {&(0x7f00000012c0)=""/119, 0x77}], 0x3, &(0x7f0000001380)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000001480), 0x6e, &(0x7f0000001640)=[{&(0x7f0000001500)=""/124, 0x7c}, {&(0x7f0000001580)=""/115, 0x73}, {&(0x7f0000001600)=""/44, 0x2c}], 0x3}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001680)=""/20, 0x14}, {&(0x7f00000016c0)=""/52, 0x34}, {&(0x7f0000001700)=""/3, 0x3}], 0x3, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001880)=""/210, 0xd2}, {&(0x7f0000001980)=""/168, 0xa8}, {&(0x7f0000001a40)=""/182, 0xb6}, {&(0x7f0000001b00)=""/105, 0x69}, {&(0x7f0000001b80)=""/199, 0xc7}, {&(0x7f0000001c80)=""/237, 0xed}, {&(0x7f0000001d80)=""/101, 0x65}, {&(0x7f0000001e00)=""/168, 0xa8}, {&(0x7f0000001ec0)=""/255, 0xff}], 0x9, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}], 0x6, 0x40012041, &(0x7f0000002340)={0x0, 0x989680}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c000000100001052bbd7400ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01606e000000000050598ce4fc0684acf11c0012800900010069706970000000000c00028008000300ac1414bb"], 0x3c}}, 0x84000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071124f000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x1a2a1}, [@IFLA_IFNAME={0x14, 0x3, 'wg2\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bf2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x95a5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000010000000000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="132a0100008000f61b0012800900010069706970000000000c000280060012004e200000"], 0x3c}}, 0x20004000) 1.359992902s ago: executing program 0 (id=1291): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000380)={{r2, &(0x7f00000000c0)='$@:#\xf7@*-#$>}/}\x00', 0xc0002, &(0x7f0000000100)={@_ha_fsid={[0x2, 0x3]}, {0x5, 0x3, 0x9, 0x1}}, 0xfffffc01, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x2}, 0x2, &(0x7f00000002c0)=[{0x3, 0xfffffffd, &(0x7f0000000300)='\a\x00\x00\x00\x00z\a~\x03~\x8f\xbbS\xffs', &(0x7f0000000200)="15c65e47", 0x4, 0x2}, {0x3, 0xeb5, &(0x7f0000000240)='\x00', &(0x7f0000000280)="5eb12859ab18c10c350fc3ae9bc34da64237ed9ac868a657ba66b607eb9eb2605082e450e3f81a297664a0dffd7f97", 0x2f, 0x2}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff000, 0xe, 0x0, &(0x7f0000000400)="882f1242b009007d39f301003c60", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r5], 0x54}, 0x1, 0x0, 0x0, 0x20008081}, 0x200004d5) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x90, r5, 0x400, 0x8070bd27, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0x4) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[], 0x58}, 0x1, 0x7}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x40000) sendfile(r0, r0, &(0x7f0000000000)=0xffffffff, 0x10000) sendto$inet6(r3, &(0x7f0000000580)="456c29b15f5c6b314cd6f627377ce172cf1461d4e6e103edcdf3e6dbf9bfc2411d83b7a5797376dfa34e82aa23ebb9987619d191e5df7ac8dd83333bc5fb4376a1b52524cf80f1512267d864c85858f8e151035de15a47fc2788058b0678513b71ac35cb89f5405418c401ce5def864f624ba6248ac0e8118f7727495b26703538a78755adb1dbf6b71dcb2be668e7de233310a891c041e2faa11aa44397c1cd1285a6ba7bbbbe27808743d8ca990f9df79697b7a045d9179cd19c2f5dd9320fa177e9a703724bc0d34000f9e89af42dc05f47189107a6cb34d97d54e5f049534218a9a227313d896a6ff4099ac3c6d5e55b806b6821ef6db71255a7e905f2", 0xff, 0x731ae1be40367bd2, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) 1.24227785s ago: executing program 2 (id=1292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001400000000008000140000000040c000680080002000000000010000d8008000100640101000400038014001880"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004b0000400000000000059078ac1414000a01010044140503ac14141d000000040a010101000000009402000000000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c5b000000907800"], 0x0) (rerun: 64) 1.235661018s ago: executing program 4 (id=1293): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='%#\x00', 0x440000, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x3549]}, {0x4, 0x1, 0x9, 0xccc}}, 0x8000, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x1ff}) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@remote, @multicast1}, 0x8) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r2, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0x0}}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x411, 0x70bd27, 0x25dfdbbd, {0x0, 0x0, 0x0, 0x0, 0x7079d, 0x40606}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0xb4ab035985936913}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040054}, 0x8000) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000300030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) sendmsg$kcm(r6, &(0x7f0000002440)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000340)="4867543d229e7eef30240ead14f8bdc7c20bcbb6f5d242093ee2ba39388776e5cadaa2bd4cec274d7a103c7504b68113351ebea644f99ff352c0bd3f3a5d2a8f8268f30ca7860374fd04e23aba32e92c8bc38f38d6d470e9252c5e88f8fb94e959c2e18c5859df32fec04845f9da9798da49fff66c7f3120", 0x78}, {&(0x7f00000003c0)="b85cc854d76fc7b01b7822965168e38c2b8159de175535eff7d66ebf61a6478afc1d350e65d033cedfffe6bd44a1472bb906ccfa577438f8f8bc30c415f4cf5cf7390dcb5e0bc0c0a0e74350fe5c64e249e278baee410ed2c4c42b28363c177c88ba0e173e7b4e5e48a5a699d1d98b442f", 0x71}, {&(0x7f00000005c0)="96e80d947bec9af16bcf26b2dac41ab510476047d92c9735f4fb1dfc7a03955aed762a504fbf7dffa29d97e40f990a40cfe09ba8fb0c0fd6558b5d2a51d43e242c4168fc396d9a1d40dc9ad6a33b85a798adba1596d28e64c3f6d5d70c3e72c4cc11f8750df3fd174ffead7019eb4defc40e265e0616e3f67d527de122704bf0f0a08b5cf99088f5d959bb03a5b7af7341841719eeaa0663f191391868049ef03acea180a4e1ab8e03257d46de0bfdda681a059847cf48c2dead91a219303d9aa6ab606011fd44d2d8d414756ab78aedb4e9318bb677a771ca37b18d90c7", 0xde}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="eeecde22ffdd43c3f1ea794f87e4a5fe44b78eceea6efeea2155a253dd4db82a3b76be0af836fceb7d26e85bc43a74d3698e20236f4a86a8915c3cf5d9049ffc315e193d7e06ad75396797a45d258f7e70017b4fbfe28d1de9d88f70b291b510b5b5c7fe6a92553d48fe921ccfca533223fe9cf9", 0x74}, {&(0x7f0000002300)="b5e182d2a843c0b058cbe111443ac757350744d7448afd5b3228c1c94aee79c6d1535dc2d8d8131b08976775c86682ea8d47b66935f1fd3ff377c6491e", 0x3d}, {&(0x7f0000002340)="d38f3d5940a7e0460109fc6198aa9f", 0xf}, {&(0x7f0000002380)="072610e8420c3e4333741f1e484156e39c5a8da1c7c588", 0x17}], 0x8}, 0x0) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, [@generic={0x81, 0x1, 0x1, 0x66}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (rerun: 64) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000000940)={{}, {0xdf}, 0x100, 0x0, 0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)="933e0d538bffe5f49e884f0524e82565ac37fc0ccf6e4df2fc062a367bb25bc8b83a2994c90546a13901eaaa0a45fae8818f721a5bf2dad3d8b58e7fdbe2e98059383a6a7c9f536958f57b6c963ca849bf51b08d797b61a02c8efeb3b1fc99f97ee1299a1eff2900c869cb65dbb0032613ea9472e5245b0a859f1ebbbb7a92ffe5a52c3e3d0f04fdf9d99af73debf0ac1879c696ec5781bc669e1bd07d95bcf0c1a4b608ab26d74c5384dfbfa68b27c87e2a69ce9a15172515041875ed64d5df3367002d66f6249c341c5cc7c9326eee1d279cd13e18735bd9809082da", 0xdd, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1c9}) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000c40)=@nat={'nat\x00', 0x670, 0x5, 0x390, 0xf0, 0x0, 0xfeffffff, 0x0, 0xf0, 0x2f8, 0x2f8, 0xffffffff, 0x2f8, 0x2f8, 0x5, 0x0, {[{{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@ecn={{0x28}, {0x1, 0x39, 0x8b, 0xa4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @gre_key=0x7fff, @icmp_id=0x65}}}}, {{@ip={@loopback, @multicast2, 0xff000000, 0x109998b04474784b, 'bridge_slave_0\x00', 'vlan0\x00', {}, {0xff}, 0x89, 0x3, 0x19}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0xc40, @port=0x4e28}}}}, {{@ip={@loopback, @multicast1, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @port=0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a40), r5) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000080) (async) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109005000108049000000990d59906040c6226d83b3dd9fa584140a972beb7bb2e6afdd6ee1b52f5b7186508ea84b4900077fd8998d20bae80da358cd54297825c2d1c678d77df25140553e000000ba"], 0x64}}, 0x0) 1.229120527s ago: executing program 0 (id=1294): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, 0x0, 0x58) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000200)=ANY=[], 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x400, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}}}, 0x58}, 0x1, 0x0, 0x0, 0x4004051}, 0x4000000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00000000003a2f000000000000000000000000a06addadc52ca2a8c858ab1961", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000380000000000010000000000000009141e030490781200183f250000000000000000e4ffff7e000001e000000200186371ae9b1c03"], 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000100001002dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="18430100a1a20100140003007866726d30000000000000000000000010001a800c3018efdc6158938200000005002700"], 0x4c}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c0000fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb0000000000"], 0x84}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.212236317s ago: executing program 3 (id=1295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000080000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fc000000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x30, 0x140b, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x2, 0xfffffffc, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x4040) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r3, &(0x7f0000002c80)=[{{&(0x7f0000000940)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="00dd41dc115d27cf850a782da28375b561df298712d56b", 0x2}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d80), 0x30}}], 0x2, 0x41) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f00000001c0)=0x401, 0x4) 1.096889074s ago: executing program 2 (id=1296): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in=@empty, 0x0, 0x1, 0x0, 0xfbfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x10000000000000}}, {{@in=@private=0xa010100, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) (async) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000c0016"], 0x34}}, 0x0) 991.535032ms ago: executing program 3 (id=1297): syz_emit_ethernet(0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000030000403a00fc000000000000000000000000000000ff0200000007000000000000000000000000604aa19800003c"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 990.617139ms ago: executing program 4 (id=1298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x20, 0x78, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "875cebffd7a1a0d93b8794b0a3567f8ab8149939ed386a3b064a4a2145fbc81b", "266ad6e679d475338af99c88307f4c2c", {"f0bb398104c59db657bfa49a2e7d719c", "88e08be5765c068922aee5d6069069a7"}}}}}, 0x86) 983.596004ms ago: executing program 2 (id=1299): socket(0x2a, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000480)=ANY=[@ANYBLOB="ffffe300", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000900001c0093801800018008000100", @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004818) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r8, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) 858.166008ms ago: executing program 3 (id=1300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff8664ecd7a0424a53fa00fc010000000000000000000000000002fe800000000000000000001faf0000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000090780000080201055dd9df00"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50102008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000280)="17000000020001000003d68c5ee17688a20032000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff0601150039330100000000000300000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000000000000000003eb7d4d9f53a3b6cf36e351cdf", 0xb8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) sendto$inet6(r4, 0x0, 0x3d, 0x4088010, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "c4267af351d4f83719b75775eff19355acec9a8ead4114d414cf9d4b46b22a83c5fe0932f9600a9cb27037afe79d0bb5f8072521675d567ab321977aed4f857d3a0ccc30586e8b091a48"}, @ETHTOOL_A_BITSET_VALUE={0xb, 0x4, "73b320e8a7706c"}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc00000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x3a, 0x4, "bf78dfdfb8fd84db79bb4af93af199cedf61c5fb3016542c6cb00d3e160848902fe83ef5a8376699a8ab22b9a56d508c8ffffcaa83cc"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x20000000}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000000)=[{r5, 0x400}], 0x1, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="c0fbedd8c1c20fb9b8209a08efe4", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 639.820299ms ago: executing program 1 (id=1301): r0 = socket$inet6(0xa, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x20}, {r0, 0x6478}, {r0, 0x1}], 0x3, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) shutdown(r0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x48}}}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES16=r5, @ANYRESOCT, @ANYRESDEC=r3, @ANYBLOB="008008000000009d50"], 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r7 = socket(0x6, 0x5, 0x7) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000000000000000330000000200000000000000000000000000ffffac1414aa000000000000fdff00000000000000000000000020010000000000000000000000000000000004d26c000000000000000000000000000000000000000000000100000000000000000c0000000000000000000000ac1e0101000000000000000000000000000004d26c0000"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x17, &(0x7f0000000240)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@lx, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044801}, 0x20004000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in=@remote}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f00000004c0)=0xe8) syz_emit_ethernet(0x27, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbb00bbbbbbbb88a84864abe9d398"], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@loopback, @in=@initdev}}, {{@in6=@private2}, 0x0, @in=@initdev}}, &(0x7f00000006c0)=0x43) gettid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000700)) 617.462992ms ago: executing program 3 (id=1302): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f00000009c0)="464827d838e85e4c50500c19"}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010001fff00000000000000000000b3b2", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703667726574617000000018000280140006002001000000000000000000000000000108001f0004000000"], 0x54}, 0x1, 0x0, 0x0, 0x20}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x9, 0xfffffffd, 0x0, 0x8, 0x0, 0x3, 0xf8, 0x0, 0x1, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x45, [0x0, 0x2]}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110380000000000ae000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0xa85, 0xf) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) clock_gettime(0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 539.477199ms ago: executing program 0 (id=1303): r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_buf(r0, 0x29, 0x50, &(0x7f0000000600)=""/222, &(0x7f0000000700)=0xde) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@broadcast, @empty, 0x0}, &(0x7f00000005c0)=0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x8d1, &(0x7f0000000080)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) listen(r4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_SIOCADDRT(r7, 0xff09, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x80800) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r8, r9, 0x0, 0xffffffff000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r10, &(0x7f0000000580)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000ffffffff000000000700000018480000fdffffff000000000000000085100000070000001869000004000000000000000700000095000000000000006e6a7d40c368330d5feabedf196dd90c90a404773ed9503a17ea7c1f75618bec7215154d22e0d6a283560a2d83a7cadfd04422bdaf7563da7657"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', r3, 0x0, r9, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xe, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[r10], &(0x7f0000000280)=[{0x1, 0x2, 0x10}], 0x10, 0xd0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000010000000850000008600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r15}, &(0x7f0000000000), &(0x7f0000000140)=r12}, 0x20) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c00000016d1743e2000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x3a, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f00000000c0)=r16, 0x4) sendmsg$inet(r14, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 484.770058ms ago: executing program 4 (id=1304): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000040000000000000000000000850000007b00000018010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000002ffffffb702000008000000b703000007030000850000001700000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x9, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f00000000c0), &(0x7f0000000080)=@udp, 0x3}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f0000000080), 0x0, 0x800, 0x6) sendfile(r3, r1, 0x0, 0x1) ioctl$int_out(r1, 0x7e52, &(0x7f0000000000)) bind$llc(r1, &(0x7f0000000080)={0x1a, 0x30e, 0xff, 0xef, 0x0, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x64, r5, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}, {{@pci, {0x8, 0x3, 0x4000001}}}]}, 0xfde3}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004810) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r5, 0x800, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) 413.512286ms ago: executing program 3 (id=1305): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000009300)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20004018) sendmsg$key(r0, 0x0, 0x8014) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x70bd25, 0x25cfdbfb, {0x1, 0x0, 0xa00}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0xa000000}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x40, 0x0}}]}, 0x3c}, 0x1, 0x2000a00, 0x0, 0x20044890}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000002ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000000540)={0x2538, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfd, {0x9}, [@generic="1f1738d7741906d6ad243e14dbdcacf016816220f23c3507459fa6c46f49b211954a848afa5543c8dd7a3022c9f1f8d85ec680c3e4700ca095f8028296c6b36cbfc9fce538c6ad8e165dbd1b611a2ff356dcb6b7c9f273859eb62e7fd20c26c201df21128a987a05a0f4b79048892278adb880b4ba89b9a0bc62b407388a221b0560cb6a7792e4040339ff0e88f0a4d3cce7db00a4aa90b9550ed696ba4c5da28353da2181f95ce7a0a7854262a2bf350fd6a1879292a50e993f4d06ee5cb97ea9e7785afecb4886bd1fb7186a404b5e0cc8c6434e85cb38770bae2bda0a0a0ffd69b376e4dadbf49c7c5ec99b52ad5f", @generic="14f610d9b67d5513c21662201580cdc6b55e6cc77accbef8eca2c8d0500165f53dd6120e03bdc3f1566de94cb6fae9fb79aac46cf35b00f099", @nested={0x17a, 0x7b, 0x0, 0x1, [@nested={0x4, 0x104}, @generic="7b7c8e003d1f07b4084c46ab8d6721b2f684cceaab774afa537d4f92aa238acdfa22e20aca1a0d007547b44448c1b2bf41b53c82fa1070686248cd02d044888b7a5b8a097b43123a0b319cd2a033b050af461eb6ae1e226e6c2b99d02a6b87bc43589c723a915934028f61ec466f3b5fd4b74c9191c5341b9996897d924093fc", @typed={0x8, 0x160, 0x0, 0x0, @uid=0xee01}, @typed={0xc, 0xf2, 0x0, 0x0, @u64=0x9}, @generic="6fe6f8ce6fb65a6570c4d07e78b94153bdeb0ba1724bc6bdfe89504466a129907fa103d6ff9d2bf7cb2150a6c4879abbf71603875fafedc5131b2000376c69e55024cf6c5de1f45da9b32f61fe75294ca100", @generic="611454a93952c483e2c8860ba173a81e164859eae7a1c70eba53069e3c65c2c63f96ccfc5b790ee98c25d6006d66130c437d092f2a27a971de7d4928584a8ecd4cac14857e1afc2a323a595b202cc851086cfc87fc1f027dc6a800bf9e5c9b9c19e8175cd435146c3a83889b1ff0ace12350afb6de3b2968112b40285262cb6781c6f84ebded8549567da5bb"]}, @typed={0xf, 0x142, 0x0, 0x0, @str='(}.[\'\'\\%}[\x00'}, @nested={0x2124, 0x7a, 0x0, 0x1, [@generic="1be312f3fae242f9dd58630d228f916d8f864afe4beb4e5a9cf74052df705ddcf2db075522cb4da3fd72914b922bae624673f05f21391fd4c6cf399e50acc0c8117cfa01029dada158242e60b6a8d745f82aa72122406fd475b42064b45fc0fb5d1cd7ee3ecab80315a8da00183d0040f90f23b6684f0f85ee4176238627990a4198e9bac99412f6a1fb744190d8fa007a42ba5c42f471d183e88b87393e0931cef4476a2bc4bd4f106de3477fad5f668d00d82dca1337ae1e7391", @generic="36688773f56d9b247d27c27c35d1b7fef6b1b9c573bdde7bbe9d6faa0fd89534f02aa66fdc16e7e603a7709443c6aafd8e204c40ff4a5aae947ed8ccb8cf34b6a0ab55a4219c57d9870865f0a053ea2aac1f54b16d", @typed={0x4, 0xf0}, @generic="89a1c1e08493d27305b0fcd3b24e512c3cb79abf703e41cbec4f8622b5b55ae92e91f079393694091cc965011bce6706a375e8745f57ae7ea51d4900d678ccaaf821dd9bcc41d6710b78e75ab65532da759e7aa5c929c4fa0150a969254934f223c53104e398f5a584849dc357e399022e56f6264a4a34c60514bac38786e42d05610bba2a6dd02c4f48f85d386d31ac2df203531b0cc85d556939853d8e6e3e41d757b4b84d9db9691a34b3b2afcc3ffb68712a3b47fa4fcee231310b15e69f862f832b99f7a62eda13fa982a650d38b284ffecbecd6979db173712a9e75ff0f73bd1e42e8eabf3f99dc7cbec7ef78467bf5a4e00b4ad8ed933812ac410bfa3c6972fc4c4dc727dbe374fd487d301e68fe0630f059490b1dfb890113a2c7e9339fe4d0edbcd39661263a19be364c7c535d62129cdfc8ff982208481e52ec161e8e66ec5ccc265d10e368ad88721761796477c79920d94b5e16855d936bdab54a6c34177175b745726afb3f0dd16a9562c429af7d41c364651454cae3f51e49ca0dcf84e4a78abeb6edc5ab3ed2ea8066d7435816e4bd2848c0f435679105b7077e5f519fbf50de19a55a933956045d68e515d45f62e7023e10325754c9b6a96d40d5e1225af898b27c8e3ab73c5712894f8000613247edf6ce345c98d72cf39fc6fd30f59a214e8263a7ec513811529032eeaf058bf4e54482f064f3fe2eb92a9e5e61dca3685658cd0e53bf038cd9e1e85359f6ed4b507b1ae61f54463e9e9cc9387d3a3485a3aaf6dd9dc523a76d841ce7d25da939c6d1cb30ef74005001e9fbddf87196e4f79242f3fd93352be479c5e257c1d59a2ad86a47e1993bb5e00b95828010d65809a66de3c072887eae70c4083b1b6592660a6acd268a638ffd7e71cbcd42e6826530fb746687da7578811885057a6f9f75008b8dd312cb9d9a0284b1002c345bdddfc736afaabacebd10ef18abf42c0f00e3144bfce7dc953689cbf5540deecd4f5a77ec77c58e69e99edca34a85d5a768e9fe28b6a3258f27789a0b22b74e451cd2765417d36bf1efc2b00c2ee1c22ff6a5160c0bb5481bf57015be2a23df579b86f7ce3b8fe0b22e7fa1a0f2265c5855348bd01f050d6d754cda2b0ce9614038f1bac478c5b529c9c6dcc7f45a10cc13552e78082c4b12a6d1413b3abb48686960ae47efb75378968def90be03bc7fc29ada65904e9f3f685decc23ea598fd660e5d67905ec95a1ede01c672d959d166053f6ef7733a61b24e6594f5e7eefbf38c44848b5cc6dfe35ae09468ad0bd62a87394392b963f093f6f804d1d1a0bca058793916552a3d170e7a4c5a30f57fb9f46524da0b8570191955069a21ab71717bde4349ce5261f7fab37b6295c1432263af42d07cd3d823e75e5197f210946e56bf9967999da5e60ebbf2120764668dddd6bbcbb8e922f96e2211abee42a049abffb94551c99584da85ea1d9d1ae185abc94f22f5368a1f6f4582d35d1ee50ad1c2b6975b5c2ff6b4ccea8c4f315f470736076d5ff2a8c990b40dcd9e7b6f5e870d0ac9303dadb2e9cfe030b6b03dacfc51133bedd60c9324dc417d616c02c88f992e1493cb791150b136b91be0e97880f47ccbd68d67e6e8067f00b76f0d8c5ce2cd341b1aa7f5cf2647f29f11b5ddbebd23f88bacd8c9df28e905ff8203786d7b36d6c7e5586a59e94fd6b76bcb951a905ac2420b0a38ac80fa5d30890f2617d82597528a23f0dd218011ffb4018bdc4904ddad5e5fe079c680be492826841dd815caaae24c694c6c63cc07818594f9d492ac333727a87abfcc2e566342365504765676779643e876ce05c7ed43836de7fc9111f6f01f50cfd9e7fc5a5a4c0d884104a16f2018ec029018a90487df090a8969bcda839890cfef91ca844e31cd5b4dead941d27b899cd2ff8fbe7204749308c0114c331dc897ea04100e5bc494ca9c931c9ff47c34c5de67d9c9c147446fb823120130b5fb7bce202a6c19eb23556d427100572ec3a00ad911738262bad4eae97f3db179370a50f33af78b167bf6aceb5bf44366a96fe6fcb27f449e42c31b7575f74db6571c27e56fa4d1c9e27220a99bac19e83a7303d3b701ef045586df98d1c43c725662176800fba79dc050c451a47d31aad10e2f2dba2f42bdbd517adf3eab764351414e356cb431ee0e22eae7d6604e2622b719fd13c61d369b79ee81ebf680af98ef00efb1495ecf61a131baf383feead2cc327fa93f7cbdfb4068bdd8898317774daa82393d62de9e927212f752c0825492d1f70631122c087916f6c3fc3b409d9b38b1322ff81e042dd86a89a6d10d93a2a5872f0193f79dd3ed91d9a6bf53c1c7993b86cec4a30a0af7138f31f7f572d6080d6179b311113ab2bd3519d9e7e2c16d994470d2096fc5ae1b272cf0ab39174b07b378a487779f328ab158876832eaed5858b537d43760e7af30ff089e679dd533c6592d62be5f3e0737039301fea973bb32b49e4be712bafab379ba0b989e64b689b6c9665af459400e7d3700c3ba042eafbd97b038f43832b48705d03c9117f5a138494c8e68f53ce2e098fab72d144a7612fc251ec111310c0fe75dc128f10093c2c53b08667edf19436468b1538a7b97dfc39a96011b13a024e2cf73db09a203ced26cb3214ea55a2f0b3b4210b1385a486767208edf9d7e5a4013b76ba100ae85b35605f0ceea5189c631dd7d9a91d1794d918fdee89ef0f9cf9b6651d042300e9dddad8364b3fe02da98b56277c291bfab707c5f258bff17955384b5b0fd47b67546ac7885bf675a3ac933232b5b160f4d494204225f2ab5d4cc3e1152b7122a0c8c43ff93f9a071b5040a25bdffafe03440b82b91af178e3256a1f972853eb5174910c20c3a3874e2e105f991afbe04dd456d07dfa53441e3e070baa6c69df45bda834469be29f23d6cec548687aa82f23bbebf0290d90cc8c37dbb00cb5c652741abee69e30538823dcfe880f20c4b60959bccc8135c4afe3576e071349aea9d80ec00e049bf26683400c210766635acd08fae092515a8553df25c0dc50e678f02e11f00cb83ff09e902c84b624a0d45150737bbb27e4064990e0ffd43d15e3738e1e89cb118740146d910e4098fa2ed3c702fa65c06ce852f2b97598e03a3dbb3f99355e9883a5832febd76f32d4fd4796474d31f564867de7be8aa4a6caa06db1d3f95fbf5da19a683d74ce975e6cd06973b03133ba86727da02332f6952f1458b6ad8d6c8e16615181f82c70600ce870ecedd335739102c0851015518529c44d49f82910dbbba26cb5e030f8bd5d8934b6ae3aaad3290a4fac1885cd0c7e5b09afcb639a47c0eb77ce176337feab10e6466e91d5cbf342adc249f1ab8c5b1bb89e50cd690935bc1ff8b0f20f2329ac675244394c0c4f694c518b7b1aeaf822b3984dafc05aea30c6b069683e7fa9c9dc3f2500ccb7b5cdb01f3d8ef251f384d8b8616c505d2a925ec888b852394e8dd49fcfc4ce5fb438521e2c2e7c8520fa05dbed5008b11f9c74fdccfa3c66b0b0c32d920d443c85e1f9e9fce1578e0a5ea7a336f24991c7a355c067a8bc3aa4b86ba05de86f5c575800854297cf813b47a99fbef011616312c9a41d4c4df14c37da4a0f6d7ee6e34eadad91cca8d8b576aff947e448d81f2535f33bc1764659bee48f6eead46e287f8382e15252988621c92df64941c5236aacab8b1383d1508addc3c9bddc7d6c2b0a0ff76a4f88733d1d0609111924fa04a146dd44d2f861b1eb3699a31287473cc7c9641ad255e0d1e1aded27d970e21e2e95ba05234a0eb30da4c25b3f8de7210c76bc1e2e90f3c488c3de555455da92cb392f5d52a85b4c41a53a9731ff41810066dcd266fb125d4de3a46bb634e3f44473269292d75329f4e66e3eaa8d05ffc135da1ce1b556dec1b4394b4c34db150d7e9f21812ce05bd2225f5dd750da58845495a5bd9fae33d7f56b6e6fb070c4e90ec6da92fd54024aa4057f5cfab356cb3e3dfd868aac8cd010a9a7f12469123a841cc4a1a61f4cbefd2a3c48cf5607e3bf98e18c16b30b92ddef2e48760890bcf85079b0bf68ef957a5f2904c838a10bd0dd81a8b3e6a9408b50364bf3dfbead033c68cb5c71e4290bd93e84aa27bb8ab15c2ecafbbcaefbe45fa97fcd2ab4f2a8fa5cd730de148790e798fa037a32ca471a8712a2a61762d9085ca200795ff023daf41dd9a1d90af654b42148978855152adaeaadc413eb9172a4a166bc6079b159ecf590a879b0911cf177069d3046d0ef407d8afa07c241952f9895bdcbb02b9d189b8a7e331ee6b4060202028b354b0c927275b1b813348eafbb01e239200d0ce7df0c2c83d2a7ba39ce24e8c2e3153d4360b2f85ade37f40d317c97285398387a64373b70b9631deee4770563fc37667452ab04c6eff4f074ce0f73abc74b68541c30cf1fabefc65e8a9fce0916ff901ffbeb07128f536a718a67da0146291c2b72f5eac1f44ff9ce1c2f428c6b3ecfe44080d220de70ef2217a4d05caec573d27423b9a03e6acf3417a74dad37d4fa4df55e51a8427dd9295e1e6d27dd555a9d59632c84da2c97e4da0f2b846ee88e2a7d9117bee013086dd91b4d38ce3259fcd34c5faf4a8435842ce8a3832adecc2b41d66189279db8f6615a25ccc500d6138b8b3e08ab849dd5bc80b6ca426d49cca98f4f07f6fc3b095bdd95cdc565a95e3acdc2f25d4ecbbfaffd83e3a0fde073e2f1697a667712716eb1182d3609a7cf1ab3dbec404c759f9a367b585d2db51a2fbb16fc24f2af6a23bf8d13e19c58e8a03206d7e94e52c7c4a968f7ff5cf026f4cb63a615175d360efb64b717dcda221d4fee52b694d3c66b3ebda63f8327a3b51e81bad19df7ebf286417c118802708b60cc901e09ad37f16dabb31c47a7ffe9282f4b7e2e9817aa20380aa5874daa0c5d4de622a1a7ddf196c078f8bbd703503f0c6d0f2a62e2d7bacdd887ab505a86ee7540cab9528d1800d7d7ea2b6123f78ffa5a94aa2eb452569d952b243aa45b20ebe9190f36b3fadc8def14df88e8b531a2a1e1b3e13fd635dfa7ee1d6166a64b6959fe4bb05d51f265eae2ef40930cfee1ad83cff36c256b5efd95f9e9d6048b6a190c83688a770ce15ffe254a245a14bb9d2ed67c0e3458022b83fb4651a4aeef34e3d9f9b26d254bc25eed2ecb5e52eb1a0b77fe0dc9a7e388050c44d032214e364dcf512c5af7be47cd54203ad415aacc89aaa204430267113f78fd8bdaf18e3b1def8cdb62f8e93eb477fd551c8f27bc850e7d7b47641973ff849cc330b848da3a448c23b778294e0935a748961470dc3a8c123245cc9806a214e649f93b0100bd09f97f1219463917568f90da580f54b1b9dc6931e85d869d5dfdd647b13039c564de465c9f04d46a26712f02adc82d67f33894d267046b456f7de24be2b57cce7998bb4f01b94e8f7d47dff8bd0a496d06b989799e2b341c3cec13df6bae2b32b9541f55c8ef88db61242aac651591b7c57acae59cd8a660d538d5b0991c6622cbac388feb224598cdc7f0e0f3b5e6311fe2548f02f31028074c699920444868d736ad0a4c8a8386e68027c19c9bb5ae6040bfdd7325f45175243aeeb002ea19ff4a3c3bbe5bc43ef4922d47f0edb32dcc5aaf9aef0bcbda0c609e882267100ad7d64125af5c18d0efab908e945e5df2987a9b1f1b30412be357c498846626710d537e710373d88ac9b89c687bf6d39eb4f4ec05549658c21ac71af0a7e92d5d5ef1cdd7dd9c79cd445de6fe76fdaf675e7c896694a9a95c", @typed={0x8, 0xde, 0x0, 0x0, @u32=0x6}, @generic="584fc5a6305b70751cda40f9dfd7cdcd6efdd403bf94d18a5075155f7e60e4a2dac643d6606ea676f35e1bad1605804b984f2fa1ed7974a7728ced86e9beee07523afe1a030b826e6e921062fa346d3b4a4db331e27c3347f5ecd600689b58687bcec8185c445c19684a1f7c6fbc84b22cb6a83817eab8ccbfd223199b9a7f4fa94e30c1950e7e953deadfbf854537db3625d08c277ec7d4e6b269b908d8bef0733d728708e49fe80838622514bfddb2ddcaac2c43c5d593dd63fd964b1d2cda4251f0d113129681d814b3508754938df7b614c22a8f57e4ef924bd0bf6fe4aa17636e3cdada3932f1519bfe6a078d9f475138f3f481330190e3b3df03016693fe2dcf77e14117f7c39982110d666c0923590ccea0af6e8abc55f2978970b226dcc2ae8edf29c6bae7d712735d54a796d2148ba7b4a6ca457ac8c9411f46072e13c5b622d9824bdbabddd25c03cb0ad0bcce0877b3bf5a8327bd228ea9d92c2a4593babaea6bf5d2722a0912ed7b7bc417a700816c7c9a2508f12581a19a69eac7be6d6db3e1cf55a46633f852714a186b1070fc6dce9d6ab88283ad8775262b901c56ef6e7b0ec9c8f7da71057171de34bca549beb6efec738bbe48a53c81794e92790c6c03a248b8d1b473bb850cdddc2d6aef1b504d55dd9d53a7e3b49c847baae4e11cda2a47efba6c57305df80711276e45121cffe88f09218baafa9621fda443d16e90a14e32d20e9637c899ebf9249eddca5fb21b6b9b234bc9aacfe7fff6f7c0c38cb5c22115170c5fa4605a0f0a1f0d7fad01a35761a457d044531e93817ce9233d0d5fef242481119dd457c2fe93c5f404addebca804eeced1ed6220817539d32335775e68b6026576a79a281a977a4ebcf64647888a8772d11d568a5a7d60ef13f28d84249f3c8622e50139f75f5be6278941e191ec1cb641789c536a2a7408ef3c0bfcc9e57ee2f4b07078444e386ca1c304b69ef8420d5dd9ecacfcd5028d1bd0583693082e052aeead30f6cb90f624cf621adbeb500d3ad5b52b0cee00fd9ae68b40bc5dd8ed1a90d3a94c360b5fe4ae10f95973752fef4d6b4484af772ab2050821f12f364b87ad73ecaad1879643237eb1306859b464a2dc3ceaf6b2ef60e18b2f1eebaba05c38c79d13b922501b70a4546ce5d77c434f78bd7e47fae7b8dff2f5f2600e5f5de39a70cc75716b563f9e43a20427827830d285917575060bfc70783fb911553bda11bb2c5016e941adf2cd50004072189c845dd7a876a31477de1d5afbe7dc1a67f06b16023107b9596d554d65be828e50f9c6f01939de3203351fb3eef0e8c011356b5be2dd33637364c91f578e580e1ff60433fe38a46173352ec0b0e5bd8921f093ad7d427e2841d84a5c14a9c86e15b66b9e647f71c67a74c94dd43ec2575340c59c095cce9b049e0ec46ae44e134621ef003ca5876ead7708d4cb79e7a1ce8127e9ce6e2e1a9e7994e03ad572cc01fb0665b63d8a398bdb5066a323dfc0417e0aa6d911033db6be2883c6cf603de0b37282f4d6fc7a62605fc1c31634744a61a02cc45917e7a16ffc177d0a09f57ee13fb39de4010ca5727051393cef1c632af6246f40d5b826670b9c8a83bb2422da08b3ed14a29e03ce07e45c5fe4d372ac8e7de42824a5b8ce40c1b2cb2b2f39fb72e700266f151948927acf775b56e513f85ab50e3d8b11c0dd23a2bcc1d62331b7e194b50068dad1cc7f21bc05ffa947119bad4df59ba7bbbeb84823b6dbdfac4b100d6c5570b5c6fce9989bcbae704fadcafa4ba6fa085b06b56a8a7f3bf4a6abf010114b0aa60167f3424cd8ff84bf653d39a8474a7364150016d8d6c08d7b7efdeb5c89fe72d40c9c0e3fff617931f1d2f5ad625a9ba6b73bb7b05eb4766c8bf9a7d7ace9c8f67b855cb3e9f1108a00a98d54baab8b5cb9d336f30581df8ee54fa3ee0c1defc2602b4dc892b6696a8b103b3428258b57a2d9abeea091f9a014edd65ea1b6435686f7482be0f3ecc0eec1d53d301343583aecbbd9a3344b302ad678cbe10497adc0a1d011290ecaa9c7e8586c7cafb35ceb97a152ef8c286ba56ed0bb1a39fb89ff9734f8f89ce7df5e07f77ef7ae5ba721cdc093d4a183071eb91251626d79c416b9a0243e1ecc4ac24d421526aede0b1462a71b291ba8373fc703d87daa30270ff4a5524b917060018dce4375be6e6f20bf819a5bf7f689f26476dd0abb80a124c6e5d461f8b12128fb3f6a84cbd7bc312146d7ae1418e5cf56516673dcce64f48b797908b1f53c0994557572b088d6bae56aaac73012ff8a3c4e14c368229330844c1d95d3030778b3bed108aa9684a39b00c09594b270d0424dc56db300dbbd46fd8baee1100347eefeda9b57746cda4cc6a968c1a75e42e298d2b79273a319fe02f04dee95ec5cee2f8fb3827394c43eabda06a8f0095d65cd5a79222124ae24d3916e53b71f8f14aea57341a106258a1af01d1a76ef924b1c9a1cfb7c628c7e2da567474e128403e236f71a3bb986c885cc5477193f32c373b12a40f77085e3d903710f2fa092f5d541638f6a0d4ab2b167286fc327419642cfac50903bef427c8699053f0724a0b26c79b2763e5a6cea9cb040a4fd31366894da3991d4a6c9bc11851f64c5b0caa1f8617b38d41a5e16f9b4fc57a02c19a6a07f19b2f0cafc3242aa4cef783dc3e5955f36cc3793465d23de224f8104641047d07b7fa320b1da00220fc5a443c5efb020095ab71775f75c40254e9bfdeec6abc3644df0f136ffaf9a784ba707d037527d43ee2d7650f207722c7d7a3c00dd3caca345d3bf12073e9170127b19989af57f0479c4fe5912732368f3cb0c65724f5bb79727fd6eb5fbe409db64b168884cad6053b74e4857d0d9b37778e8fccfc33a8ec7fc5b57daaedb1e21e1278a2ff060de9ce2072735c98f9a7ad40e62b0f07b5e1869a57faaa903104e212f39143a7d08f8b209b0d551281d0c5dc137f214d9f2768df8fb9028ba7c8b674b734c8e43b844a5364ee4e52d2d56a38db4a21fa292a348c9c0b1618a255d592efa5d1c5fee89d2af4b978d3aa0d5e2dcb4a1ef50dfd8f1fe791bbe1c9043777d43ce9412a738b0c4668889153af495fa942c638dee6e4e4290eeff0d356257305263395b4b3b08d65be1c7e0ac78d6e455e5fabb9fd61fb1c36e87db7534f62efad2e6e64227e86fc0d29cd243e0e3bd675e07a980df370afbe5c155346c3aba0b3f0ea6d0237273c3171ebc8b671e47493a40df21036db55139a4bf6e9fd367188c8245ad238c3a0732e056cb277e47f4e5a81382034a06dbb8a41c46ba09e8bd0824311d653ef3c06fc7c47a00e16c4cd43135fa6a853036553d98762f9061a36ee92e14acfd567dc7e4a0d4bbbd2bbf2576ce3a29ca880f5156f55ccee99863f505ae0d9fedfa7a28d9d04d4d9ef070ca0a6cef2a79142bd2319279a7fa838f211aa1c71d335de815cbffc18e75aee5d8a9cea47bde7981780ea879ffa5609b8d8edfc6c388ad588aa3fc65d68e71d7f3e3530d3b0504089e8c13cf24b699c9ea453187d76a650ee74daa2bf7395b3f42a26265e6489a49c1f5ac98e723a8ad177e100337f6ac015825e6a4cf692980b60373f4c015a97373b19707336eee7e9cb883ce4e7abea859abd13de9dbd4455438268b81e39e4245c35169464016e1ea64ac8d4601a4184fdc0d1012c76f5b0c64dbc94463aca9bb54d09fdeb149f599829189b1b9cd88072ef00fef178c3066a878f6110755302ca203c1b6e3485ab086556b1c31f1bed8e1f16f31dc4b49537164c776456da5232bea1f6f7cd805aa471264a1332aea7cfb4e9ed7693175a3fa0d1854162eee10cf488b28d9e9fa741c621349b22c5e67a53bfe1d8d5902bb3020820e8c495eba14c859bf0489cef452d1dde0eb519c95d92ce8b2016a3bb93b240979d5e381cd03ddeea3747d2ad355499a15aaaf22d2d62fa02ee2b8d411a56d7f527a879b00665a49fc00bb8cb9124faefc96718b3a535e10dd18c3d47957585aedff3d2c2f3520063318d5a62b3a7b4d73f0a471df1807324c04a775e993e48cc451fd89d9a410794bccd2af6ab334ff3bb827c4c877e037bd26fb843578a395f6670a062dc69d8fe3573018b2ac569b824b0e8711836e2a3ffed82d03c30858b6220ca963f527ab79199a546d848eca066a05dc6ce7a6ea00dbc8ad36e0417ce9d2697f2814727d2f380ca05ed20fba16ab93f6d3b0a4034853980e7143568cddd2c17eb55c020ae7b5f04f086a3dc070090671378b6215f8b07553d86042fc56f51623cd2853d4e335908c565a02423dd6bdf84cccc46b63515a55d3a2f9c5798f2c27317b502f458e7e4562f06c3008ffd3113efdcb31d76dd8af6f0d208bb4019f10174e2382c677e1ae19abdf2fc4530e247ada60183f8f5717498da061960e3a65668bb0ef55f5b2bff3fa971c83715255afc049e0e2744d89b3dda8f514e42b9a755f7f13a6aca5983db847f10fb50f64b2ff04866bb79c8451d837d87e208e544a62ecb46b56dfc292b0504f5a5b3b5b8670063a73e875a6b8494dd22db313c0313d87849c4ad0612fc869f336b75b70ae18246195bb697348d7c820c26bdbc099d6725ae790ae4894c6ae73bdce909a5fa6cc33e733ff44c06c31b305ddae2a9d22aad192d1b5209bebc5e43080e0931f1bc72a3d15aa3486637357586bc5cec89457ec454d4bce7236b54277a6ee93cd6d796dbc9f90397682737abc515d8e2607568b36613bcc0141ea0176059e35e94336d68431b29be93eb45805a8d4db2758c8038cbcb92b6c9328b60c46310d3c952cdfd10ec9c3656079e9970a0c53bb0a0945e09e01079c028ca58c866f66eed3705d2b69811eef951234f14de23f99d205379e405ec7bfcd26abc922926d6c519439b912cbc956773c15a057e5150096e951074698df5aec49888a5477db38117544ab97ce06dad25e605a40be89374ba807b8c5d41b1f9f724b6cd1f2ed430701b158bfbeb10b9d1f6596ca78f3908752454d81876cc94e37381d0aba1b12430cabad5b7eec00dd67afb6990008a89199f6634ab50906961d8902ec62987f6c98a040dd5bbd11c8c292143925a3f0d0776123adee98a3b342e384c3c39519891d4e3babb5142c443e40f78d296b5d3c181a0c15bd09f5ec80f12fc3a121a8ecc32c54e6128dcd6658a245386e62888cc5726d4f542cb3d19181e86a1c4b50873be1b2b94d7014bc8e40a72b9686b4125637d40d189ac9cfc5d787ff715c19f9ea45c6f658a7555f2ebcb90488f8f81c40ea2e6cd2bfc3ed93bf86f3ac94d64a76ccc654cf4bbd03e25d6db6efed3bb8241bf150300bbf21c46d156aa570883bd113bf554a26f45778f16bfa253c5030bc6c08388250615ced79c0d226fe6496c2c52ec32840b6162164ec31cbeb5999c8a8f57ebdadb469d09e66120aae20ccf22fb2ccbdfee0cfb6e0f4deacfb6ff1c78031ef25f083c03c7f61a5d48449bc045e9522f1ae05d56648c133ee60b7c45ab01ff0cb51fff2286ec1d72148872467552fb749446c6943d95df49169b600d90979a0b584c382a8d04833cc3bcf02f98111fe88caaf274c4ed346f84352a7137143ee854fb2febe054545607fcaebe9da6887a802d87e28ca7f5cdb99b4e2fd77028021c53a7e153a03ea11c48e24fc12f9f82f37203cd62bca9247689ee08f576bc75c6c4d49a86fe4dc1cdec0ac155085726f20a1d156b5baf7aa3e438e7370541d1d09f31a024114fe67918ee569757ed3", @nested={0x4, 0x14c}]}, @typed={0x8, 0x5e, 0x0, 0x0, @u32=0xef}, @nested={0x140, 0x76, 0x0, 0x1, [@generic="abf587e8dc9d531a23b1e6cbf00270a3203fefa0318ea225d24ada99640c9c0251df1d8fbafd3c0d84527b4f01a4c46f080b9ddccc2e67a1df07c1e0c9d9201bca9fe4c050da8af245c5bf8d10d64ea019e6d55ec74d8615bd096dd7bc0c46641d2fff972c7df20ad01296dc12cc70f54e1cf902b294f03fb5926eb1bebbe205f5f026909eee5970578e207d8386780e525e140dee2b93205b73714d9950539669614d24e308b1bebf95e7dd98efd9c24210b9387029dc89509b7a62d0f116e3ea5e9d0d39ef66a9deb52c53c4382ed43a67ad", @generic="22d7bc459cf660aecfcf98e15092c5c65c5ef7827d39be710c1aaf1edb1160860f5d0d63a85049bc21ead0c470d043b94480df968495237ecbdc93013faddc341645861ed6231b20bedcab59c240028d7c1be6a470d9fdfbce623015085d45d11fa1fab61e67a89b6d"]}]}, 0x2538}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) 333.017249ms ago: executing program 4 (id=1306): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00c1000000000000004aa35a0ef805316c00"/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)}, 0x20) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16, @ANYBLOB="010000140000000000", @ANYRES32], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=@delchain={0x24, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xfff3, 0xf}, {0xa, 0x18}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0xc804) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 188.661938ms ago: executing program 3 (id=1307): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x82, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669732829"], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x4000880) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008040d0008000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) unshare(0xe040400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0xa, 0x0, 0x51) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = socket(0x2b, 0x1, 0x0) listen(r8, 0x0) ppoll(&(0x7f0000000280)=[{r8, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x6f89c659e9b3087f) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="100300000000000000000100000048000180060001000200000008000500ffffff7f0c00070000000000000000000800090000000000060004004e230000080008000200000008000b0073697000060001000a000001"], 0x5c}, 0x1, 0x0, 0x0, 0x44044}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB, @ANYRES32=r9, @ANYBLOB='@\x00z'], 0x5c}, 0x1, 0x0, 0x0, 0x10800}, 0x4000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) 90.2491ms ago: executing program 4 (id=1308): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0xe, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) 0s ago: executing program 1 (id=1309): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x100, 0x0, &(0x7f0000000280)="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", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}, 0x50) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008"], 0x70}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x54}}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)={0x1, 0x21, "2806b296a413c597f08d828b0e951cf1a93406e7e9ddf7f3863455535d5f8af5f1"}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000013c0)={'wg2\x00', &(0x7f0000000500)=@ethtool_gstrings={0x25, 0x8}}) pselect6(0x40, &(0x7f0000000180)={0x1, 0x40, 0x3, 0x3, 0x7def1099, 0x8, 0x5, 0x7}, 0x0, &(0x7f0000001380)={0x80000000, 0x8, 0x401, 0xfffffffffffffffa, 0x3, 0x9, 0xfffffffffffffff9, 0x9}, &(0x7f00000013c0)={0x77359400}, 0x0) kernel console output (not intermixed with test programs): ace not active [ 80.851154][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.858374][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.884437][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.924288][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.931754][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.957940][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.021981][ T5629] hsr_slave_0: entered promiscuous mode [ 81.028248][ T5629] hsr_slave_1: entered promiscuous mode [ 81.034189][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 81.040030][ T5629] Cannot create hsr debugfs directory [ 81.083497][ T5647] hsr_slave_0: entered promiscuous mode [ 81.089903][ T5647] hsr_slave_1: entered promiscuous mode [ 81.096079][ T5647] debugfs: 'hsr0' already exists in 'hsr' [ 81.101871][ T5647] Cannot create hsr debugfs directory [ 81.158442][ T5638] hsr_slave_0: entered promiscuous mode [ 81.164561][ T5638] hsr_slave_1: entered promiscuous mode [ 81.170793][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 81.176891][ T5638] Cannot create hsr debugfs directory [ 81.187863][ T5642] hsr_slave_0: entered promiscuous mode [ 81.193980][ T5642] hsr_slave_1: entered promiscuous mode [ 81.200735][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 81.206509][ T5642] Cannot create hsr debugfs directory [ 81.648562][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.662009][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.670820][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.680088][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.689737][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.700567][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.708676][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.718488][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.779274][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.791011][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.799427][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.809377][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.817905][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.829453][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.837373][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.847697][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.905524][ T5641] Bluetooth: hci1: command tx timeout [ 81.931585][ T5647] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.942219][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.950042][ T5647] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.960764][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.968919][ T5647] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.979623][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.994524][ T5647] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.995775][ T5637] Bluetooth: hci2: command tx timeout [ 82.003258][ T4949] Bluetooth: hci3: command tx timeout [ 82.006956][ T5641] Bluetooth: hci0: command tx timeout [ 82.022240][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.065510][ T5641] Bluetooth: hci4: command tx timeout [ 82.115357][ T5642] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.124769][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.134776][ T5642] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.144455][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.153966][ T5642] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.164077][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.171944][ T5642] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.182304][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.282151][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.298559][ T5638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.309836][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.325713][ T5638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.334953][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.343444][ T5638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.353994][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.362587][ T5638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.371918][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.410571][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.422122][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.452370][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.459799][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.477961][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.485117][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.518862][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.535671][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.542798][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.588020][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.595157][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.624566][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.674698][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.713379][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.741407][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.754684][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.761876][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.790778][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.821126][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.828304][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.853760][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.860955][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.912026][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.919237][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.931123][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.970428][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.977625][ T3292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.024302][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.031501][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.109863][ T5642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.686525][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.708502][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.853266][ T5629] veth0_vlan: entered promiscuous mode [ 83.917411][ T5629] veth1_vlan: entered promiscuous mode [ 83.952063][ T5632] veth0_vlan: entered promiscuous mode [ 83.987082][ T5641] Bluetooth: hci1: command tx timeout [ 84.007979][ T5632] veth1_vlan: entered promiscuous mode [ 84.065697][ T5641] Bluetooth: hci3: command tx timeout [ 84.065990][ T4949] Bluetooth: hci0: command tx timeout [ 84.071744][ T5637] Bluetooth: hci2: command tx timeout [ 84.093723][ T5629] veth0_macvtap: entered promiscuous mode [ 84.125725][ T5629] veth1_macvtap: entered promiscuous mode [ 84.147980][ T5637] Bluetooth: hci4: command tx timeout [ 84.164477][ T5632] veth0_macvtap: entered promiscuous mode [ 84.212638][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.237759][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.247384][ T5632] veth1_macvtap: entered promiscuous mode [ 84.264480][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.279137][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.311006][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.336862][ T139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.346346][ T139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.368238][ T139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.379804][ T139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.403814][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.423214][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.469572][ T139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.489113][ T139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.516843][ T139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.537893][ T139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.609435][ T5647] veth0_vlan: entered promiscuous mode [ 84.631088][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.642916][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.665714][ T5647] veth1_vlan: entered promiscuous mode [ 84.722179][ T3344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.727877][ T5638] veth0_vlan: entered promiscuous mode [ 84.735244][ T3344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.746312][ T5638] veth1_vlan: entered promiscuous mode [ 84.818885][ T5642] veth0_vlan: entered promiscuous mode [ 84.840958][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.850305][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.861464][ T5647] veth0_macvtap: entered promiscuous mode [ 84.863109][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.872740][ T5647] veth1_macvtap: entered promiscuous mode [ 84.924601][ T3344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.935784][ T3344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.962519][ T5638] veth0_macvtap: entered promiscuous mode [ 84.988503][ T5638] veth1_macvtap: entered promiscuous mode [ 84.999064][ T5642] veth1_vlan: entered promiscuous mode [ 85.043046][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.068662][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.119872][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.134687][ T5825] sctp: [Deprecated]: syz.0.1 (pid 5825) Use of int in maxseg socket option. [ 85.134687][ T5825] Use struct sctp_assoc_value instead [ 85.151529][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.161637][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.171863][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.205308][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.215811][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.241461][ T5827] Cannot find add_set index 2 as target [ 85.270031][ T1157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.290720][ T1157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.331573][ T5831] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7'. [ 85.344490][ T5642] veth0_macvtap: entered promiscuous mode [ 85.373284][ T1157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.399163][ T1157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.414876][ T5642] veth1_macvtap: entered promiscuous mode [ 85.608704][ T5837] bond1: option primary_reselect: invalid value (6) [ 85.623480][ T5837] bond1 (unregistering): Released all slaves [ 85.648963][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.656847][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.674297][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.683314][ T5843] warning: `syz.0.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.721914][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.768290][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.776911][ T3344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.790130][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.810554][ T3344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.841483][ T3344] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.852707][ T3344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.882289][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.892730][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.952857][ T5848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 85.997734][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.033242][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.065930][ T5637] Bluetooth: hci1: command tx timeout [ 86.145501][ T5637] Bluetooth: hci0: command tx timeout [ 86.157240][ T5641] Bluetooth: hci3: command tx timeout [ 86.162975][ T5637] Bluetooth: hci2: command tx timeout [ 86.169347][ T5854] netlink: 'syz.0.15': attribute type 1 has an invalid length. [ 86.197444][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.226000][ T5637] Bluetooth: hci4: command tx timeout [ 86.237917][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.249613][ T5854] team0: entered promiscuous mode [ 86.260417][ T5854] team_slave_0: entered promiscuous mode [ 86.266723][ T5854] team_slave_1: entered promiscuous mode [ 86.266869][ T5856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.272626][ T5854] team0: entered allmulticast mode [ 86.272642][ T5854] team_slave_0: entered allmulticast mode [ 86.272655][ T5854] team_slave_1: entered allmulticast mode [ 86.299150][ T5853] netlink: 'syz.1.14': attribute type 2 has an invalid length. [ 86.316935][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.328503][ T5853] netlink: 'syz.1.14': attribute type 1 has an invalid length. [ 86.340394][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.348827][ T5853] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14'. [ 86.361905][ T5856] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 86.392450][ T5860] Zero length message leads to an empty skb [ 86.435279][ T5854] bridge1: entered promiscuous mode [ 86.441175][ T5854] bridge1: entered allmulticast mode [ 86.456501][ T5854] team0: Port device bridge1 added [ 86.654934][ T994] cfg80211: failed to load regulatory.db [ 86.884850][ T5876] xt_hashlimit: max too large, truncated to 1048576 [ 86.887730][ T5878] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 86.916328][ T5876] xt_ecn: cannot match TCP bits for non-tcp packets [ 86.920358][ T5878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 87.296696][ T5899] netlink: 176 bytes leftover after parsing attributes in process `syz.2.24'. [ 87.450903][ T5903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.551548][ T5905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'. [ 87.953404][ T5886] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.270579][ T5886] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.464163][ T5886] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.664275][ T5886] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.924157][ T1157] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.990077][ T1060] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.043446][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.152508][ T3344] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.616190][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 89.637276][ T5968] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 89.760293][ T5911] Set syz1 is full, maxelem 65536 reached [ 89.962574][ T5976] syz.1.42 uses obsolete (PF_INET,SOCK_PACKET) [ 90.207207][ T5983] bond1 (unregistering): Released all slaves [ 90.568265][ T6005] tipc: Enabling of bearer rejected, failed to enable media [ 90.591367][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.51'. [ 91.014026][ T6009] netlink: 'syz.2.53': attribute type 3 has an invalid length. [ 91.038313][ T6013] netlink: 'syz.4.55': attribute type 3 has an invalid length. [ 91.053256][ T6013] rdma_op ffff88802275f9f0 conn xmit_rdma 0000000000000000 [ 91.132786][ T6019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.54'. [ 91.151196][ T6018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.56'. [ 91.159748][ T6019] openvswitch: netlink: Flow actions attr not present in new flow. [ 91.229712][ T6024] FAULT_INJECTION: forcing a failure. [ 91.229712][ T6024] name failslab, interval 1, probability 0, space 0, times 0 [ 91.233809][ T6014] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 91.242535][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz.1.58 Not tainted syzkaller #0 PREEMPT(full) [ 91.242558][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.242575][ T6024] Call Trace: [ 91.242582][ T6024] [ 91.242593][ T6024] dump_stack_lvl+0xe8/0x150 [ 91.242623][ T6024] should_fail_ex+0x40c/0x560 [ 91.242654][ T6024] should_failslab+0xa8/0x100 [ 91.242679][ T6024] ? dst_alloc+0x105/0x170 [ 91.242700][ T6024] kmem_cache_alloc_noprof+0x87/0x650 [ 91.242721][ T6024] ? nf_hook+0xa1/0x3a0 [ 91.242750][ T6024] dst_alloc+0x105/0x170 [ 91.242768][ T6024] ? ip_check_mc_rcu+0x4be/0x670 [ 91.242791][ T6024] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 91.242824][ T6024] ? ip_route_output_key_hash+0xd8/0x2a0 [ 91.242849][ T6024] ip_route_output_key_hash+0x18d/0x2a0 [ 91.242876][ T6024] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 91.242898][ T6024] ? __vlan_get_protocol_offset+0x349/0x3e0 [ 91.242924][ T6024] ? __asan_memset+0x22/0x50 [ 91.242949][ T6024] ip_route_output_flow+0x2a/0x150 [ 91.242982][ T6024] ip_tunnel_xmit+0x6ce/0x2040 [ 91.243007][ T6024] ? ip_tunnel_xmit+0x100/0x2040 [ 91.243041][ T6024] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 91.243070][ T6024] ? __pfx_gre_build_header+0x10/0x10 [ 91.243089][ T6024] ? skb_network_protocol+0x23d/0x400 [ 91.243107][ T6024] ? iptunnel_handle_offloads+0x2fd/0x630 [ 91.243140][ T6024] ipgre_xmit+0x90a/0xcd0 [ 91.243159][ T6024] ? unwind_get_return_address+0x4d/0x90 [ 91.243186][ T6024] ? __pfx_ipgre_xmit+0x10/0x10 [ 91.243216][ T6024] dev_hard_start_xmit+0x2cd/0x830 [ 91.243251][ T6024] __dev_queue_xmit+0x1435/0x37f0 [ 91.243270][ T6024] ? bpf_test_run+0x354/0x830 [ 91.243286][ T6024] ? bpf_prog_test_run_skb+0xe35/0x2230 [ 91.243314][ T6024] ? __dev_queue_xmit+0x29b/0x37f0 [ 91.243342][ T6024] ? __pfx___dev_queue_xmit+0x10/0x10 [ 91.243378][ T6024] ? rcu_is_watching+0x15/0xb0 [ 91.243402][ T6024] ? skb_release_data+0x30f/0xab0 [ 91.243432][ T6024] __bpf_redirect+0xa76/0x1250 [ 91.243466][ T6024] bpf_clone_redirect+0x319/0x4b0 [ 91.243492][ T6024] ? bpf_test_run+0x1d1/0x830 [ 91.243510][ T6024] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 91.243537][ T6024] ? __kernel_text_address+0xd/0x30 [ 91.243570][ T6024] ? __pfx___schedule+0x10/0x10 [ 91.243586][ T6024] ? ktime_get+0x45/0x220 [ 91.243622][ T6024] ? preempt_schedule_thunk+0x16/0x30 [ 91.243647][ T6024] ? preempt_schedule_common+0x82/0xd0 [ 91.243663][ T6024] ? bpf_test_run+0x1d1/0x830 [ 91.243684][ T6024] ? bpf_test_timer_continue+0x10c/0x320 [ 91.243707][ T6024] bpf_test_run+0x354/0x830 [ 91.243747][ T6024] ? __pfx_bpf_test_run+0x10/0x10 [ 91.243775][ T6024] ? trace_kmem_cache_alloc+0x29/0xe0 [ 91.243799][ T6024] ? __kasan_krealloc+0xec/0x110 [ 91.243832][ T6024] ? skb_dst_set+0x72/0x140 [ 91.243853][ T6024] bpf_prog_test_run_skb+0xe35/0x2230 [ 91.243890][ T6024] ? __fget_files+0x3a2/0x420 [ 91.243910][ T6024] ? __fget_files+0x2a/0x420 [ 91.243938][ T6024] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 91.243957][ T6024] bpf_prog_test_run+0x2c5/0x340 [ 91.243984][ T6024] __sys_bpf+0x643/0x950 [ 91.244011][ T6024] ? __pfx___sys_bpf+0x10/0x10 [ 91.244051][ T6024] ? ksys_write+0x242/0x270 [ 91.244076][ T6024] ? __pfx_ksys_write+0x10/0x10 [ 91.244104][ T6024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.244124][ T6024] __x64_sys_bpf+0x7c/0x90 [ 91.244146][ T6024] do_syscall_64+0x174/0x580 [ 91.244163][ T6024] ? trace_irq_disable+0x3b/0x140 [ 91.244187][ T6024] ? clear_bhb_loop+0x40/0x90 [ 91.244208][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.244225][ T6024] RIP: 0033:0x7f1890d9ce59 [ 91.244241][ T6024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.244253][ T6024] RSP: 002b:00007f1891c7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.244271][ T6024] RAX: ffffffffffffffda RBX: 00007f1891015fa0 RCX: 00007f1890d9ce59 [ 91.244284][ T6024] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 91.244294][ T6024] RBP: 00007f1891c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 91.244304][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.244314][ T6024] R13: 00007f1891016038 R14: 00007f1891015fa0 R15: 00007ffe725065b8 [ 91.244343][ T6024] [ 91.249709][ T6026] netlink: 'syz.2.56': attribute type 3 has an invalid length. [ 91.341951][ T6028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.59'. [ 91.381993][ T6026] netlink: 132 bytes leftover after parsing attributes in process `syz.2.56'. [ 91.723367][ T6037] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 91.935578][ T6043] netlink: 'syz.4.64': attribute type 43 has an invalid length. [ 92.283700][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 92.304596][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 92.633021][ T6067] FAULT_INJECTION: forcing a failure. [ 92.633021][ T6067] name failslab, interval 1, probability 0, space 0, times 0 [ 92.646062][ T6067] CPU: 0 UID: 0 PID: 6067 Comm: syz.3.70 Not tainted syzkaller #0 PREEMPT(full) [ 92.646084][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.646092][ T6067] Call Trace: [ 92.646099][ T6067] [ 92.646105][ T6067] dump_stack_lvl+0xe8/0x150 [ 92.646130][ T6067] should_fail_ex+0x40c/0x560 [ 92.646159][ T6067] should_failslab+0xa8/0x100 [ 92.646181][ T6067] ? dst_alloc+0x105/0x170 [ 92.646200][ T6067] kmem_cache_alloc_noprof+0x87/0x650 [ 92.646219][ T6067] ? nf_hook+0xa1/0x3a0 [ 92.646245][ T6067] dst_alloc+0x105/0x170 [ 92.646262][ T6067] ? ip_check_mc_rcu+0x4be/0x670 [ 92.646282][ T6067] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 92.646313][ T6067] ? ip_route_output_key_hash+0xd8/0x2a0 [ 92.646337][ T6067] ip_route_output_key_hash+0x18d/0x2a0 [ 92.646362][ T6067] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 92.646381][ T6067] ? __vlan_get_protocol_offset+0x349/0x3e0 [ 92.646403][ T6067] ? __asan_memset+0x22/0x50 [ 92.646425][ T6067] ip_route_output_flow+0x2a/0x150 [ 92.646447][ T6067] ip_tunnel_xmit+0x6ce/0x2040 [ 92.646471][ T6067] ? ip_tunnel_xmit+0x100/0x2040 [ 92.646502][ T6067] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 92.646526][ T6067] ? __pfx_gre_build_header+0x10/0x10 [ 92.646542][ T6067] ? skb_network_protocol+0x23d/0x400 [ 92.646559][ T6067] ? iptunnel_handle_offloads+0x2fd/0x630 [ 92.646586][ T6067] ipgre_xmit+0x90a/0xcd0 [ 92.646602][ T6067] ? unwind_get_return_address+0x4d/0x90 [ 92.646625][ T6067] ? __pfx_ipgre_xmit+0x10/0x10 [ 92.646652][ T6067] dev_hard_start_xmit+0x2cd/0x830 [ 92.646684][ T6067] __dev_queue_xmit+0x1435/0x37f0 [ 92.646700][ T6067] ? bpf_test_run+0x354/0x830 [ 92.646714][ T6067] ? bpf_prog_test_run_skb+0xe35/0x2230 [ 92.646739][ T6067] ? __dev_queue_xmit+0x29b/0x37f0 [ 92.646767][ T6067] ? __pfx___dev_queue_xmit+0x10/0x10 [ 92.646801][ T6067] ? rcu_is_watching+0x15/0xb0 [ 92.646826][ T6067] ? skb_release_data+0x30f/0xab0 [ 92.646855][ T6067] __bpf_redirect+0xa76/0x1250 [ 92.646890][ T6067] bpf_clone_redirect+0x319/0x4b0 [ 92.646920][ T6067] ? bpf_test_run+0x1d1/0x830 [ 92.646938][ T6067] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 92.646960][ T6067] ? __kernel_text_address+0xd/0x30 [ 92.647001][ T6067] ? __pfx___schedule+0x10/0x10 [ 92.647017][ T6067] ? ktime_get+0x45/0x220 [ 92.647051][ T6067] ? preempt_schedule_thunk+0x16/0x30 [ 92.647075][ T6067] ? preempt_schedule_common+0x82/0xd0 [ 92.647092][ T6067] ? bpf_test_run+0x1d1/0x830 [ 92.647112][ T6067] ? bpf_test_timer_continue+0x10c/0x320 [ 92.647134][ T6067] bpf_test_run+0x354/0x830 [ 92.647174][ T6067] ? __pfx_bpf_test_run+0x10/0x10 [ 92.647204][ T6067] ? trace_kmem_cache_alloc+0x29/0xe0 [ 92.647227][ T6067] ? __kasan_krealloc+0xec/0x110 [ 92.647260][ T6067] ? skb_dst_set+0x72/0x140 [ 92.647279][ T6067] bpf_prog_test_run_skb+0xe35/0x2230 [ 92.647316][ T6067] ? __fget_files+0x3a2/0x420 [ 92.647335][ T6067] ? __fget_files+0x2a/0x420 [ 92.647360][ T6067] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 92.647378][ T6067] bpf_prog_test_run+0x2c5/0x340 [ 92.647398][ T6067] __sys_bpf+0x643/0x950 [ 92.647422][ T6067] ? __pfx___sys_bpf+0x10/0x10 [ 92.647458][ T6067] ? ksys_write+0x242/0x270 [ 92.647482][ T6067] ? __pfx_ksys_write+0x10/0x10 [ 92.647508][ T6067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.647526][ T6067] __x64_sys_bpf+0x7c/0x90 [ 92.647549][ T6067] do_syscall_64+0x174/0x580 [ 92.647567][ T6067] ? trace_irq_disable+0x3b/0x140 [ 92.647592][ T6067] ? clear_bhb_loop+0x40/0x90 [ 92.647613][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.647628][ T6067] RIP: 0033:0x7fd1ea79ce59 [ 92.647644][ T6067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.647657][ T6067] RSP: 002b:00007fd1eb6f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.647674][ T6067] RAX: ffffffffffffffda RBX: 00007fd1eaa15fa0 RCX: 00007fd1ea79ce59 [ 92.647686][ T6067] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 92.647696][ T6067] RBP: 00007fd1eb6f8090 R08: 0000000000000000 R09: 0000000000000000 [ 92.647705][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.647715][ T6067] R13: 00007fd1eaa16038 R14: 00007fd1eaa15fa0 R15: 00007ffeddff4578 [ 92.647743][ T6067] [ 93.139852][ T6076] netlink: 56 bytes leftover after parsing attributes in process `syz.3.74'. [ 93.224863][ T6074] team0: Device wg0 is of different type [ 93.268111][ T6074] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 93.651572][ T6089] syzkaller0: entered promiscuous mode [ 93.678595][ T6094] netlink: 'syz.1.80': attribute type 2 has an invalid length. [ 93.686816][ T6089] syzkaller0: entered allmulticast mode [ 93.790395][ T6105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.82'. [ 94.112727][ T6117] FAULT_INJECTION: forcing a failure. [ 94.112727][ T6117] name failslab, interval 1, probability 0, space 0, times 0 [ 94.125446][ T6117] CPU: 1 UID: 0 PID: 6117 Comm: syz.0.84 Not tainted syzkaller #0 PREEMPT(full) [ 94.125468][ T6117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 94.125478][ T6117] Call Trace: [ 94.125484][ T6117] [ 94.125491][ T6117] dump_stack_lvl+0xe8/0x150 [ 94.125517][ T6117] should_fail_ex+0x40c/0x560 [ 94.125550][ T6117] should_failslab+0xa8/0x100 [ 94.125575][ T6117] ? dst_alloc+0x105/0x170 [ 94.125593][ T6117] kmem_cache_alloc_noprof+0x87/0x650 [ 94.125614][ T6117] ? nf_hook+0xa1/0x3a0 [ 94.125644][ T6117] dst_alloc+0x105/0x170 [ 94.125663][ T6117] ? ip_check_mc_rcu+0x4be/0x670 [ 94.125686][ T6117] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 94.125720][ T6117] ? ip_route_output_key_hash+0xd8/0x2a0 [ 94.125754][ T6117] ip_route_output_key_hash+0x18d/0x2a0 [ 94.125781][ T6117] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 94.125803][ T6117] ? __vlan_get_protocol_offset+0x349/0x3e0 [ 94.125830][ T6117] ? __asan_memset+0x22/0x50 [ 94.125856][ T6117] ip_route_output_flow+0x2a/0x150 [ 94.125883][ T6117] ip_tunnel_xmit+0x6ce/0x2040 [ 94.125909][ T6117] ? ip_tunnel_xmit+0x100/0x2040 [ 94.125945][ T6117] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 94.125974][ T6117] ? __pfx_gre_build_header+0x10/0x10 [ 94.125993][ T6117] ? skb_network_protocol+0x23d/0x400 [ 94.126012][ T6117] ? iptunnel_handle_offloads+0x2fd/0x630 [ 94.126046][ T6117] ipgre_xmit+0x90a/0xcd0 [ 94.126064][ T6117] ? unwind_get_return_address+0x4d/0x90 [ 94.126090][ T6117] ? __pfx_ipgre_xmit+0x10/0x10 [ 94.126119][ T6117] dev_hard_start_xmit+0x2cd/0x830 [ 94.126153][ T6117] __dev_queue_xmit+0x1435/0x37f0 [ 94.126172][ T6117] ? bpf_test_run+0x354/0x830 [ 94.126187][ T6117] ? bpf_prog_test_run_skb+0xe35/0x2230 [ 94.126216][ T6117] ? __dev_queue_xmit+0x29b/0x37f0 [ 94.126243][ T6117] ? __pfx___dev_queue_xmit+0x10/0x10 [ 94.126277][ T6117] ? rcu_is_watching+0x15/0xb0 [ 94.126301][ T6117] ? skb_release_data+0x30f/0xab0 [ 94.126331][ T6117] __bpf_redirect+0xa76/0x1250 [ 94.126366][ T6117] bpf_clone_redirect+0x319/0x4b0 [ 94.126395][ T6117] ? bpf_test_run+0x1d1/0x830 [ 94.126414][ T6117] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 94.126437][ T6117] ? __kernel_text_address+0xd/0x30 [ 94.126471][ T6117] ? __pfx___schedule+0x10/0x10 [ 94.126487][ T6117] ? ktime_get+0x45/0x220 [ 94.126523][ T6117] ? preempt_schedule_thunk+0x16/0x30 [ 94.126549][ T6117] ? preempt_schedule_common+0x82/0xd0 [ 94.126567][ T6117] ? bpf_test_run+0x1d1/0x830 [ 94.126588][ T6117] ? bpf_test_timer_continue+0x10c/0x320 [ 94.126611][ T6117] bpf_test_run+0x354/0x830 [ 94.126652][ T6117] ? __pfx_bpf_test_run+0x10/0x10 [ 94.126681][ T6117] ? trace_kmem_cache_alloc+0x29/0xe0 [ 94.126706][ T6117] ? __kasan_krealloc+0xec/0x110 [ 94.126740][ T6117] ? skb_dst_set+0x72/0x140 [ 94.126769][ T6117] bpf_prog_test_run_skb+0xe35/0x2230 [ 94.126809][ T6117] ? __fget_files+0x3a2/0x420 [ 94.126830][ T6117] ? __fget_files+0x2a/0x420 [ 94.126856][ T6117] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 94.126875][ T6117] bpf_prog_test_run+0x2c5/0x340 [ 94.126897][ T6117] __sys_bpf+0x643/0x950 [ 94.126924][ T6117] ? __pfx___sys_bpf+0x10/0x10 [ 94.126969][ T6117] ? ksys_write+0x242/0x270 [ 94.126996][ T6117] ? __pfx_ksys_write+0x10/0x10 [ 94.127024][ T6117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.127044][ T6117] __x64_sys_bpf+0x7c/0x90 [ 94.127067][ T6117] do_syscall_64+0x174/0x580 [ 94.127085][ T6117] ? trace_irq_disable+0x3b/0x140 [ 94.127110][ T6117] ? clear_bhb_loop+0x40/0x90 [ 94.127131][ T6117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.127149][ T6117] RIP: 0033:0x7f576839ce59 [ 94.127165][ T6117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.127179][ T6117] RSP: 002b:00007f57665f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.127197][ T6117] RAX: ffffffffffffffda RBX: 00007f5768615fa0 RCX: 00007f576839ce59 [ 94.127209][ T6117] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 94.127220][ T6117] RBP: 00007f57665f6090 R08: 0000000000000000 R09: 0000000000000000 [ 94.127230][ T6117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.127240][ T6117] R13: 00007f5768616038 R14: 00007f5768615fa0 R15: 00007ffe2a0e6b88 [ 94.127270][ T6117] [ 94.181051][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 94.575158][ T6082] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 94.764281][ T6131] vlan2: entered promiscuous mode [ 94.782882][ T6131] bridge0: entered promiscuous mode [ 95.173695][ T6166] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 95.345461][ T5637] Bluetooth: hci0: command 0x0401 tx timeout [ 95.558600][ T6180] netlink: 'syz.0.98': attribute type 1 has an invalid length. [ 95.571069][ T6172] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 95.725587][ T6183] __nla_validate_parse: 7 callbacks suppressed [ 95.725605][ T6183] netlink: 204 bytes leftover after parsing attributes in process `syz.3.102'. [ 95.792789][ T6191] netlink: 232 bytes leftover after parsing attributes in process `syz.3.102'. [ 95.823932][ T6183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.102'. [ 95.848264][ T6183] netlink: 260 bytes leftover after parsing attributes in process `syz.3.102'. [ 96.466881][ T6203] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 96.531217][ T6188] netlink: 204 bytes leftover after parsing attributes in process `syz.0.104'. [ 96.977015][ T6214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.274011][ T6221] FAULT_INJECTION: forcing a failure. [ 97.274011][ T6221] name failslab, interval 1, probability 0, space 0, times 0 [ 97.286730][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.3.110 Not tainted syzkaller #0 PREEMPT(full) [ 97.286753][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 97.286763][ T6221] Call Trace: [ 97.286770][ T6221] [ 97.286777][ T6221] dump_stack_lvl+0xe8/0x150 [ 97.286803][ T6221] should_fail_ex+0x40c/0x560 [ 97.286835][ T6221] should_failslab+0xa8/0x100 [ 97.286861][ T6221] ? dst_alloc+0x105/0x170 [ 97.286882][ T6221] kmem_cache_alloc_noprof+0x87/0x650 [ 97.286903][ T6221] ? nf_hook+0xa1/0x3a0 [ 97.286934][ T6221] dst_alloc+0x105/0x170 [ 97.286952][ T6221] ? ip_check_mc_rcu+0x4be/0x670 [ 97.286976][ T6221] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 97.287011][ T6221] ? ip_route_output_key_hash+0xd8/0x2a0 [ 97.287042][ T6221] ip_route_output_key_hash+0x18d/0x2a0 [ 97.287070][ T6221] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 97.287092][ T6221] ? __vlan_get_protocol_offset+0x349/0x3e0 [ 97.287120][ T6221] ? __asan_memset+0x22/0x50 [ 97.287146][ T6221] ip_route_output_flow+0x2a/0x150 [ 97.287172][ T6221] ip_tunnel_xmit+0x6ce/0x2040 [ 97.287199][ T6221] ? ip_tunnel_xmit+0x100/0x2040 [ 97.287235][ T6221] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 97.287265][ T6221] ? __pfx_gre_build_header+0x10/0x10 [ 97.287285][ T6221] ? skb_network_protocol+0x23d/0x400 [ 97.287304][ T6221] ? iptunnel_handle_offloads+0x2fd/0x630 [ 97.287338][ T6221] ipgre_xmit+0x90a/0xcd0 [ 97.287358][ T6221] ? unwind_get_return_address+0x4d/0x90 [ 97.287384][ T6221] ? __pfx_ipgre_xmit+0x10/0x10 [ 97.287416][ T6221] dev_hard_start_xmit+0x2cd/0x830 [ 97.287453][ T6221] __dev_queue_xmit+0x1435/0x37f0 [ 97.287472][ T6221] ? bpf_test_run+0x354/0x830 [ 97.287489][ T6221] ? bpf_prog_test_run_skb+0xe35/0x2230 [ 97.287518][ T6221] ? __dev_queue_xmit+0x29b/0x37f0 [ 97.287548][ T6221] ? __pfx___dev_queue_xmit+0x10/0x10 [ 97.287585][ T6221] ? rcu_is_watching+0x15/0xb0 [ 97.287616][ T6221] ? skb_release_data+0x30f/0xab0 [ 97.287648][ T6221] __bpf_redirect+0xa76/0x1250 [ 97.287687][ T6221] bpf_clone_redirect+0x319/0x4b0 [ 97.287718][ T6221] ? bpf_test_run+0x1d1/0x830 [ 97.287736][ T6221] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 97.287758][ T6221] ? __kernel_text_address+0xd/0x30 [ 97.287791][ T6221] ? __pfx___schedule+0x10/0x10 [ 97.287806][ T6221] ? ktime_get+0x45/0x220 [ 97.287840][ T6221] ? preempt_schedule_thunk+0x16/0x30 [ 97.287866][ T6221] ? preempt_schedule_common+0x82/0xd0 [ 97.287882][ T6221] ? bpf_test_run+0x1d1/0x830 [ 97.287904][ T6221] ? bpf_test_timer_continue+0x10c/0x320 [ 97.287927][ T6221] bpf_test_run+0x354/0x830 [ 97.287968][ T6221] ? __pfx_bpf_test_run+0x10/0x10 [ 97.287994][ T6221] ? trace_kmem_cache_alloc+0x29/0xe0 [ 97.288013][ T6221] ? __kasan_krealloc+0xec/0x110 [ 97.288042][ T6221] ? skb_dst_set+0x72/0x140 [ 97.288057][ T6221] bpf_prog_test_run_skb+0xe35/0x2230 [ 97.288085][ T6221] ? __fget_files+0x3a2/0x420 [ 97.288100][ T6221] ? __fget_files+0x2a/0x420 [ 97.288120][ T6221] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 97.288135][ T6221] bpf_prog_test_run+0x2c5/0x340 [ 97.288150][ T6221] __sys_bpf+0x643/0x950 [ 97.288171][ T6221] ? __pfx___sys_bpf+0x10/0x10 [ 97.288205][ T6221] ? ksys_write+0x242/0x270 [ 97.288225][ T6221] ? __pfx_ksys_write+0x10/0x10 [ 97.288247][ T6221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.288262][ T6221] __x64_sys_bpf+0x7c/0x90 [ 97.288280][ T6221] do_syscall_64+0x174/0x580 [ 97.288296][ T6221] ? trace_irq_disable+0x3b/0x140 [ 97.288316][ T6221] ? clear_bhb_loop+0x40/0x90 [ 97.288333][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.288347][ T6221] RIP: 0033:0x7fd1ea79ce59 [ 97.288361][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.288373][ T6221] RSP: 002b:00007fd1eb6f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.288390][ T6221] RAX: ffffffffffffffda RBX: 00007fd1eaa15fa0 RCX: 00007fd1ea79ce59 [ 97.288399][ T6221] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 97.288406][ T6221] RBP: 00007fd1eb6f8090 R08: 0000000000000000 R09: 0000000000000000 [ 97.288414][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.288422][ T6221] R13: 00007fd1eaa16038 R14: 00007fd1eaa15fa0 R15: 00007ffeddff4578 [ 97.288446][ T6221] [ 98.066066][ T6237] netlink: 'syz.2.114': attribute type 15 has an invalid length. [ 98.121779][ T6237] netlink: 52 bytes leftover after parsing attributes in process `syz.2.114'. [ 98.359071][ T6251] Bluetooth: MGMT ver 1.23 [ 98.580477][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 98.695500][ T6268] ip6tnl2: entered allmulticast mode [ 98.826973][ T6280] syzkaller0: entered promiscuous mode [ 98.844642][ T6280] syzkaller0: entered allmulticast mode [ 99.026771][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.131'. [ 99.221959][ T6306] netlink: 'syz.0.133': attribute type 1 has an invalid length. [ 99.329086][ T6306] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 99.550914][ T6324] FAULT_INJECTION: forcing a failure. [ 99.550914][ T6324] name failslab, interval 1, probability 0, space 0, times 0 [ 99.571921][ T6324] CPU: 0 UID: 0 PID: 6324 Comm: syz.4.137 Not tainted syzkaller #0 PREEMPT(full) [ 99.571945][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 99.571955][ T6324] Call Trace: [ 99.571962][ T6324] [ 99.571969][ T6324] dump_stack_lvl+0xe8/0x150 [ 99.571995][ T6324] should_fail_ex+0x40c/0x560 [ 99.572026][ T6324] should_failslab+0xa8/0x100 [ 99.572052][ T6324] ? skb_clone+0x212/0x3a0 [ 99.572071][ T6324] kmem_cache_alloc_noprof+0x87/0x650 [ 99.572103][ T6324] skb_clone+0x212/0x3a0 [ 99.572125][ T6324] bpf_clone_redirect+0x170/0x4b0 [ 99.572157][ T6324] ? bpf_test_run+0x1d1/0x830 [ 99.572177][ T6324] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 99.572199][ T6324] ? __kernel_text_address+0xd/0x30 [ 99.572232][ T6324] ? __pfx___schedule+0x10/0x10 [ 99.572249][ T6324] ? ktime_get+0x45/0x220 [ 99.572284][ T6324] ? preempt_schedule_thunk+0x16/0x30 [ 99.572310][ T6324] ? preempt_schedule_common+0x82/0xd0 [ 99.572328][ T6324] ? bpf_test_run+0x1d1/0x830 [ 99.572349][ T6324] ? bpf_test_timer_continue+0x10c/0x320 [ 99.572372][ T6324] bpf_test_run+0x354/0x830 [ 99.572410][ T6324] ? __pfx_bpf_test_run+0x10/0x10 [ 99.572439][ T6324] ? trace_kmem_cache_alloc+0x29/0xe0 [ 99.572463][ T6324] ? __kasan_krealloc+0xec/0x110 [ 99.572496][ T6324] ? skb_dst_set+0x72/0x140 [ 99.572517][ T6324] bpf_prog_test_run_skb+0xe35/0x2230 [ 99.572555][ T6324] ? __fget_files+0x3a2/0x420 [ 99.572576][ T6324] ? __fget_files+0x2a/0x420 [ 99.572600][ T6324] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 99.572620][ T6324] bpf_prog_test_run+0x2c5/0x340 [ 99.572640][ T6324] __sys_bpf+0x643/0x950 [ 99.572665][ T6324] ? __pfx___sys_bpf+0x10/0x10 [ 99.572704][ T6324] ? ksys_write+0x242/0x270 [ 99.572730][ T6324] ? __pfx_ksys_write+0x10/0x10 [ 99.572758][ T6324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.572777][ T6324] __x64_sys_bpf+0x7c/0x90 [ 99.572801][ T6324] do_syscall_64+0x174/0x580 [ 99.572819][ T6324] ? trace_irq_disable+0x3b/0x140 [ 99.572843][ T6324] ? clear_bhb_loop+0x40/0x90 [ 99.572865][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.572882][ T6324] RIP: 0033:0x7f7ae8d9ce59 [ 99.572904][ T6324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.572918][ T6324] RSP: 002b:00007f7ae6ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.572936][ T6324] RAX: ffffffffffffffda RBX: 00007f7ae9015fa0 RCX: 00007f7ae8d9ce59 [ 99.572949][ T6324] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 99.572959][ T6324] RBP: 00007f7ae6ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 99.572969][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.572979][ T6324] R13: 00007f7ae9016038 R14: 00007f7ae9015fa0 R15: 00007ffcc482d998 [ 99.573008][ T6324] [ 99.992133][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'. [ 100.034092][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'. [ 100.180519][ T6345] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 100.296380][ T6349] openvswitch: netlink: Message has 159 unknown bytes. [ 100.386952][ T6354] netlink: 'syz.3.146': attribute type 1 has an invalid length. [ 100.407570][ T6359] veth1_to_bond: entered promiscuous mode [ 100.615858][ T6366] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 100.709178][ T6359] veth1_to_bond: left promiscuous mode [ 100.850359][ T6347] __nla_validate_parse: 2 callbacks suppressed [ 100.850379][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.145'. [ 101.399850][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.155'. [ 101.442012][ T6397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'. [ 101.593370][ T6407] team0: Port device syz_tun added [ 101.593428][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 101.715806][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 101.729134][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.161'. [ 101.901174][ T6419] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 101.929614][ T6419] bond1 (unregistering): Released all slaves [ 102.502285][ T6448] tipc: Enabling of bearer rejected, media not registered [ 102.601876][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'. [ 102.674815][ T6454] netlink: 44 bytes leftover after parsing attributes in process `syz.1.174'. [ 102.708227][ T6453] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 102.716507][ T6454] netlink: 43 bytes leftover after parsing attributes in process `syz.1.174'. [ 102.727122][ T10] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 102.749888][ T6458] netlink: 'syz.4.176': attribute type 1 has an invalid length. [ 102.761138][ T6454] netlink: 'syz.1.174': attribute type 6 has an invalid length. [ 102.783918][ T6454] netlink: 'syz.1.174': attribute type 5 has an invalid length. [ 102.805257][ T6454] netlink: 43 bytes leftover after parsing attributes in process `syz.1.174'. [ 102.903031][ T6461] tun0: tun_chr_ioctl cmd 1074025675 [ 102.924215][ T6461] tun0: persist enabled [ 102.942761][ T6461] tun0: tun_chr_ioctl cmd 1074025675 [ 102.972279][ T6461] tun0: persist disabled [ 103.213932][ T6480] netlink: 'syz.3.182': attribute type 3 has an invalid length. [ 103.231511][ T6480] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 103.246012][ T6481] 8021q: VLANs not supported on ip6gre0 [ 103.545981][ T6497] netlink: 'syz.1.186': attribute type 1 has an invalid length. [ 103.576093][ T6497] netlink: 'syz.1.186': attribute type 2 has an invalid length. [ 103.641998][ T6504] team_slave_1: entered promiscuous mode [ 103.679380][ T6504] team0: Port device team_slave_1 removed [ 103.689531][ T6497] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 103.706459][ T6497] netlink: 'syz.1.186': attribute type 5 has an invalid length. [ 103.800522][ T6507] Driver unsupported XDP return value 0 on prog (id 63) dev N/A, expect packet loss! [ 104.240025][ T139] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.609607][ T6551] gretap1: entered allmulticast mode [ 105.211093][ T6569] netlink: 'syz.1.204': attribute type 1 has an invalid length. [ 105.639414][ T6594] netlink: 'syz.4.211': attribute type 1 has an invalid length. [ 105.792066][ T6594] bond1: (slave veth3): Enslaving as an active interface with a down link [ 105.931831][ T6596] bond1: (slave veth5): Enslaving as an active interface with a down link [ 105.954442][ T6594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.203114][ T6612] block nbd0: not configured, cannot reconfigure [ 106.521423][ T6636] syz.0.222 (6636) used obsolete PPPIOCDETACH ioctl [ 106.558020][ T6642] __nla_validate_parse: 12 callbacks suppressed [ 106.558035][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 106.573957][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 106.587268][ T6635] netlink: 72 bytes leftover after parsing attributes in process `syz.2.220'. [ 106.767046][ T6652] netlink: 168 bytes leftover after parsing attributes in process `syz.1.226'. [ 106.800167][ T6652] netlink: 240 bytes leftover after parsing attributes in process `syz.1.226'. [ 106.906945][ T6659] openvswitch: netlink: IPv6 tunnel dst address is zero [ 106.958433][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 107.168108][ T6671] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 107.204716][ T6677] netlink: 168 bytes leftover after parsing attributes in process `syz.4.234'. [ 107.214124][ T6677] netlink: 240 bytes leftover after parsing attributes in process `syz.4.234'. [ 107.311073][ T6679] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 107.390141][ T6684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.422325][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 107.607671][ T6697] netlink: zone id is out of range [ 107.612959][ T6697] netlink: del zone limit has 8 unknown bytes [ 107.789836][ T6704] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 107.949923][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 108.313759][ T6727] openvswitch: netlink: IPv4 tun info is not correct [ 108.412757][ T6733] syzkaller1: entered allmulticast mode [ 108.566658][ T6738] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 109.161077][ T6764] Bluetooth: MGMT ver 1.23 [ 109.253905][ T6772] netlink: 'syz.1.256': attribute type 1 has an invalid length. [ 109.620417][ T5652] udevd[5652]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 109.663586][ T6792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.088354][ T6815] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 110.299480][ T6827] netlink: 'syz.2.275': attribute type 31 has an invalid length. [ 110.330787][ T6827] netlink: 'syz.2.275': attribute type 31 has an invalid length. [ 110.748095][ T6852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.756177][ T6852] IPv6: NLM_F_CREATE should be set when creating new route [ 110.769603][ T6852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.900556][ T6858] syzkaller0: entered promiscuous mode [ 110.926592][ T6858] syzkaller0: entered allmulticast mode [ 110.998185][ T6865] xt_TCPMSS: Only works on TCP SYN packets [ 111.186555][ T6873] 0·: renamed from hsr0 (while UP) [ 111.200283][ T6875] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20001 [ 111.214238][ T6873] 0·: entered allmulticast mode [ 111.228249][ T6873] hsr_slave_0: entered allmulticast mode [ 111.248999][ T6873] hsr_slave_1: entered allmulticast mode [ 111.264281][ T6873] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 111.302140][ T6882] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 111.645500][ T6896] __nla_validate_parse: 24 callbacks suppressed [ 111.645518][ T6896] netlink: 56 bytes leftover after parsing attributes in process `syz.3.292'. [ 112.153169][ T6925] netlink: 'syz.1.300': attribute type 1 has an invalid length. [ 112.184020][ T6925] netlink: 224 bytes leftover after parsing attributes in process `syz.1.300'. [ 112.224455][ T6925] IPVS: Unknown mcast interface: _ridge_slave_0 [ 112.346822][ T6932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.302'. [ 112.524383][ T6945] macvlan1: entered allmulticast mode [ 112.541742][ T6945] veth1_vlan: entered allmulticast mode [ 112.582010][ T6945] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 112.811877][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 112.872998][ T6978] sctp: [Deprecated]: syz.3.310 (pid 6978) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.872998][ T6978] Use struct sctp_sack_info instead [ 113.155363][ T6995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.313'. [ 113.157155][ T6993] netlink: 'syz.4.314': attribute type 1 has an invalid length. [ 113.175647][ T6994] pim6reg: entered allmulticast mode [ 113.490219][ T7017] netlink: 160 bytes leftover after parsing attributes in process `syz.4.320'. [ 113.579765][ T7020] syzkaller0: entered promiscuous mode [ 113.585570][ T7020] syzkaller0: entered allmulticast mode [ 113.594555][ T7020] tipc: Started in network mode [ 113.599936][ T7020] tipc: Node identity eab12cfdb8a1, cluster identity 4711 [ 113.607572][ T7020] tipc: Enabled bearer , priority 0 [ 113.627307][ T7019] tipc: Resetting bearer [ 113.698501][ T7019] tipc: Disabling bearer [ 113.707725][ T7023] netlink: zone id is out of range [ 113.714031][ T7023] netlink: zone id is out of range [ 113.720160][ T7023] netlink: zone id is out of range [ 113.723094][ T7024] xt_hashlimit: size too large, truncated to 1048576 [ 113.726217][ T7023] netlink: zone id is out of range [ 113.737861][ T7023] netlink: zone id is out of range [ 113.743094][ T7023] netlink: zone id is out of range [ 113.748891][ T7023] netlink: zone id is out of range [ 113.754104][ T7023] netlink: zone id is out of range [ 113.759756][ T7023] netlink: zone id is out of range [ 114.180716][ T7042] netlink: 224 bytes leftover after parsing attributes in process `syz.2.327'. [ 114.453658][ T7057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.332'. [ 114.739852][ T7070] team0: Port device syz_tun removed [ 114.818403][ T7070] bridge_slave_0: left allmulticast mode [ 114.846661][ T7070] bridge_slave_0: left promiscuous mode [ 114.849245][ T7076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.337'. [ 114.862653][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.878198][ T7070] bridge_slave_1: left allmulticast mode [ 114.883952][ T7070] bridge_slave_1: left promiscuous mode [ 114.890456][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.923915][ T7070] bond0: (slave bond_slave_0): Releasing backup interface [ 114.954264][ T7070] bond0: (slave bond_slave_1): Releasing backup interface [ 114.992821][ T7082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.001602][ T7070] team0: Port device team_slave_0 removed [ 115.041356][ T7070] team0: Port device team_slave_1 removed [ 115.056235][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.063648][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.318142][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.330541][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.470734][ T7086] veth0: entered promiscuous mode [ 115.523672][ T7087] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.657575][ T7083] veth0: left promiscuous mode [ 116.554781][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 116.573884][ T7153] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 116.592853][ T7156] netlink: 'syz.4.351': attribute type 39 has an invalid length. [ 116.671592][ T7161] Unknown options in mask 6 [ 116.790940][ T7162] vlan0: entered promiscuous mode [ 116.941159][ T7164] FAULT_INJECTION: forcing a failure. [ 116.941159][ T7164] name failslab, interval 1, probability 0, space 0, times 0 [ 116.953967][ T7164] CPU: 1 UID: 0 PID: 7164 Comm: syz.3.353 Not tainted syzkaller #0 PREEMPT(full) [ 116.953997][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.954007][ T7164] Call Trace: [ 116.954013][ T7164] [ 116.954020][ T7164] dump_stack_lvl+0xe8/0x150 [ 116.954054][ T7164] should_fail_ex+0x40c/0x560 [ 116.954095][ T7164] should_failslab+0xa8/0x100 [ 116.954121][ T7164] ? skb_clone+0x212/0x3a0 [ 116.954140][ T7164] kmem_cache_alloc_noprof+0x87/0x650 [ 116.954169][ T7164] skb_clone+0x212/0x3a0 [ 116.954191][ T7164] bpf_clone_redirect+0x170/0x4b0 [ 116.954221][ T7164] ? bpf_test_run+0x1d1/0x830 [ 116.954239][ T7164] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 116.954262][ T7164] ? __kernel_text_address+0xd/0x30 [ 116.954295][ T7164] ? __pfx___schedule+0x10/0x10 [ 116.954313][ T7164] ? ktime_get+0x45/0x220 [ 116.954348][ T7164] ? preempt_schedule_thunk+0x16/0x30 [ 116.954374][ T7164] ? preempt_schedule_common+0x82/0xd0 [ 116.954391][ T7164] ? bpf_test_run+0x1d1/0x830 [ 116.954412][ T7164] ? bpf_test_timer_continue+0x10c/0x320 [ 116.954432][ T7164] bpf_test_run+0x354/0x830 [ 116.954469][ T7164] ? __pfx_bpf_test_run+0x10/0x10 [ 116.954497][ T7164] ? trace_kmem_cache_alloc+0x29/0xe0 [ 116.954520][ T7164] ? __kasan_krealloc+0xec/0x110 [ 116.954551][ T7164] ? skb_dst_set+0x72/0x140 [ 116.954570][ T7164] bpf_prog_test_run_skb+0xe35/0x2230 [ 116.954605][ T7164] ? __fget_files+0x3a2/0x420 [ 116.954623][ T7164] ? __fget_files+0x2a/0x420 [ 116.954646][ T7164] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 116.954665][ T7164] bpf_prog_test_run+0x2c5/0x340 [ 116.954686][ T7164] __sys_bpf+0x643/0x950 [ 116.954712][ T7164] ? __pfx___sys_bpf+0x10/0x10 [ 116.954751][ T7164] ? ksys_write+0x242/0x270 [ 116.954778][ T7164] ? __pfx_ksys_write+0x10/0x10 [ 116.954804][ T7164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.954823][ T7164] __x64_sys_bpf+0x7c/0x90 [ 116.954847][ T7164] do_syscall_64+0x174/0x580 [ 116.954865][ T7164] ? trace_irq_disable+0x3b/0x140 [ 116.954889][ T7164] ? clear_bhb_loop+0x40/0x90 [ 116.954910][ T7164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.954926][ T7164] RIP: 0033:0x7fd1ea79ce59 [ 116.954943][ T7164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.954956][ T7164] RSP: 002b:00007fd1eb6f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.954983][ T7164] RAX: ffffffffffffffda RBX: 00007fd1eaa15fa0 RCX: 00007fd1ea79ce59 [ 116.954994][ T7164] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 116.955004][ T7164] RBP: 00007fd1eb6f8090 R08: 0000000000000000 R09: 0000000000000000 [ 116.955015][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.955024][ T7164] R13: 00007fd1eaa16038 R14: 00007fd1eaa15fa0 R15: 00007ffeddff4578 [ 116.955051][ T7164] [ 117.527143][ T7180] netlink: 'syz.2.360': attribute type 1 has an invalid length. [ 117.534868][ T7180] netlink: 'syz.2.360': attribute type 1 has an invalid length. [ 117.711970][ T7186] __nla_validate_parse: 1 callbacks suppressed [ 117.711989][ T7186] netlink: 44 bytes leftover after parsing attributes in process `syz.2.361'. [ 117.738233][ T7191] netlink: 'syz.4.364': attribute type 2 has an invalid length. [ 117.773174][ T7191] netlink: 'syz.4.364': attribute type 3 has an invalid length. [ 117.775040][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'. [ 117.808551][ T7191] net_ratelimit: 337 callbacks suppressed [ 117.808569][ T7191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.813119][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 117.815424][ T10] IPVS: starting estimator thread 0... [ 117.859065][ T7196] ieee802154 phy1 wpan1: encryption failed: -22 [ 117.879064][ T7196] netlink: 164 bytes leftover after parsing attributes in process `syz.0.363'. [ 117.917853][ T7193] netlink: 32 bytes leftover after parsing attributes in process `syz.0.363'. [ 117.995748][ T7197] IPVS: using max 27 ests per chain, 64800 per kthread [ 118.267362][ T7215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.370'. [ 118.331489][ T7219] xt_TCPMSS: Only works on TCP SYN packets [ 118.372546][ T7219] xt_TCPMSS: Only works on TCP SYN packets [ 118.437017][ T7228] netlink: 'syz.3.373': attribute type 1 has an invalid length. [ 118.438607][ T7227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.374'. [ 118.463366][ T7228] netlink: 224 bytes leftover after parsing attributes in process `syz.3.373'. [ 118.496906][ T7233] netlink: 'syz.3.373': attribute type 1 has an invalid length. [ 118.520875][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 118.530667][ T7233] netlink: 224 bytes leftover after parsing attributes in process `syz.3.373'. [ 119.035514][ T7262] tipc: Started in network mode [ 119.040431][ T7262] tipc: Node identity ac14140f, cluster identity 4711 [ 119.101606][ T7262] tipc: New replicast peer: 255.255.255.255 [ 119.124262][ T7262] tipc: Enabled bearer , priority 10 [ 119.162095][ T7270] x_tables: duplicate entry at hook 1 [ 119.534447][ T7287] nbd: must specify at least one socket [ 120.047154][ T7306] bridge_slave_0: left allmulticast mode [ 120.070549][ T7306] bridge_slave_0: left promiscuous mode [ 120.084600][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.120753][ T7306] bridge_slave_1: left allmulticast mode [ 120.126879][ T7306] bridge_slave_1: left promiscuous mode [ 120.132708][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.157900][ T7306] bond0: (slave bond_slave_0): Releasing backup interface [ 120.190555][ T7306] bond0: (slave bond_slave_1): Releasing backup interface [ 120.220653][ T7306] team_slave_0: left promiscuous mode [ 120.233951][ T7306] team_slave_0: left allmulticast mode [ 120.267785][ T7306] team0: Port device team_slave_0 removed [ 120.296268][ T7306] team_slave_1: left promiscuous mode [ 120.307667][ T7306] team_slave_1: left allmulticast mode [ 120.330976][ T7306] team0: Port device team_slave_1 removed [ 120.344853][ T7306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.352834][ T7306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.363550][ T7306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.372564][ T7306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.382695][ T7306] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.435632][ T994] tipc: Node number set to 2886997007 [ 121.103866][ T7365] openvswitch: netlink: IP tunnel TTL not specified. [ 121.143357][ T7365] xt_NFQUEUE: number of total queues is 0 [ 121.203773][ T7367] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.211175][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.220798][ T7367] bridge0: entered allmulticast mode [ 121.264316][ T7367] bridge_slave_1: left allmulticast mode [ 121.276313][ T7367] bridge_slave_1: left promiscuous mode [ 121.307070][ T7367] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.301713][ T5641] block nbd0: Receive control failed (result -32) [ 122.301784][ T5637] block nbd0: Receive control failed (result -32) [ 122.333511][ T7367] bridge_slave_0: left allmulticast mode [ 122.366453][ T7367] bridge_slave_0: left promiscuous mode [ 122.382431][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.485440][ T7366] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 122.776920][ T7394] __nla_validate_parse: 15 callbacks suppressed [ 122.776940][ T7394] netlink: 84 bytes leftover after parsing attributes in process `syz.4.419'. [ 122.900956][ T7394] netlink: 84 bytes leftover after parsing attributes in process `syz.4.419'. [ 122.935592][ T7394] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 123.062277][ T7411] netlink: 296 bytes leftover after parsing attributes in process `syz.2.426'. [ 123.145487][ T5731] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 123.178839][ T7418] vlan2: entered allmulticast mode [ 123.185307][ T5637] Bluetooth: hci0: command 0x0401 tx timeout [ 123.205566][ T7418] bond0: entered allmulticast mode [ 123.219073][ T7418] bond_slave_0: entered allmulticast mode [ 123.225928][ T7418] bond_slave_1: entered allmulticast mode [ 123.485736][ T3344] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 123.889276][ T7455] netlink: 'syz.2.438': attribute type 1 has an invalid length. [ 123.957330][ T7462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.438'. [ 123.987419][ T5864] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 124.028588][ T7455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.037409][ T7465] netlink: 'syz.2.438': attribute type 10 has an invalid length. [ 124.103332][ T7465] netlink: 40 bytes leftover after parsing attributes in process `syz.2.438'. [ 124.146579][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 124.151910][ T7465] dummy0: entered promiscuous mode [ 124.162741][ T7467] netlink: 'syz.3.441': attribute type 10 has an invalid length. [ 124.179141][ T7469] hsr_slave_0: left promiscuous mode [ 124.199410][ T7469] hsr_slave_1: left promiscuous mode [ 124.329120][ T7467] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.359358][ T7467] team0: Port device netdevsim1 added [ 124.527485][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 124.549508][ T3344] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 124.569069][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 124.578269][ T3344] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 124.594671][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 124.636120][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 124.656823][ T30] audit: type=1800 audit(1781592670.381:2): pid=7488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.446" name="memory.events" dev="tmpfs" ino=463 res=0 errno=0 [ 124.895351][ T994] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 125.001223][ T7497] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 125.101936][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.158059][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.190308][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.877541][ T7526] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 125.994120][ T7526] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 126.013102][ T994] dummy0: entered promiscuous mode [ 126.180235][ T7541] bridge1: entered promiscuous mode [ 126.196459][ T7541] bridge1: entered allmulticast mode [ 126.214257][ T7541] team0: Port device bridge1 added [ 126.218686][ T7545] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.410674][ T7557] netlink: 'syz.3.465': attribute type 27 has an invalid length. [ 126.533506][ T5731] IPVS: starting estimator thread 0... [ 126.559613][ T7562] netlink: 'syz.2.468': attribute type 12 has an invalid length. [ 126.603529][ T7527] bond2: option downdelay: invalid value (18446744073709551613) [ 126.611402][ T7527] bond2: option downdelay: allowed values 0 - 2147483647 [ 126.634090][ T7527] bond2 (unregistering): Released all slaves [ 126.659440][ T7564] IPVS: using max 31 ests per chain, 74400 per kthread [ 126.727515][ T7563] tipc: Enabled bearer , priority 10 [ 126.903995][ T7582] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 126.955955][ T7582] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 127.247293][ T7596] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 127.845151][ T5731] tipc: Node number set to 1376791805 [ 127.918953][ T7630] veth0: entered promiscuous mode [ 127.942767][ T7629] veth0: left promiscuous mode [ 128.152001][ T7639] __nla_validate_parse: 12 callbacks suppressed [ 128.152018][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.492'. [ 128.164313][ T7647] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 128.354873][ T7652] syzkaller0: entered promiscuous mode [ 128.373821][ T7652] syzkaller0: entered allmulticast mode [ 128.429315][ T7652] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20001 [ 128.440675][ T7650] netlink: 'syz.1.495': attribute type 1 has an invalid length. [ 128.546004][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 128.601551][ T7655] bond1: (slave geneve2): making interface the new active one [ 128.653732][ T7655] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 128.710309][ T7650] bond1 (unregistering): (slave geneve2): Releasing active interface [ 128.743584][ T7650] bond1 (unregistering): Released all slaves [ 128.930402][ T7677] netlink: 60 bytes leftover after parsing attributes in process `syz.3.502'. [ 129.130958][ T7680] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.260563][ T7684] 0·: left allmulticast mode [ 129.278250][ T7684] hsr_slave_0: left allmulticast mode [ 129.286985][ T7695] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 129.309472][ T7684] hsr_slave_1: left allmulticast mode [ 129.408318][ T7680] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.493333][ T7680] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.577629][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.510'. [ 129.586892][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 129.599754][ T7707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.688452][ T7680] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.922454][ T7723] tipc: Started in network mode [ 129.940059][ T7725] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.515'. [ 129.950531][ T7723] tipc: Node identity ac14140f, cluster identity 4711 [ 129.968968][ T7723] tipc: Enabled bearer , priority 10 [ 130.045712][ T139] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.109115][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 130.210430][ T7736] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.242955][ T57] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.279008][ T57] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.402828][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.445766][ T7748] netlink: 32 bytes leftover after parsing attributes in process `syz.0.519'. [ 130.480329][ T7748] syz_tun: entered promiscuous mode [ 130.638338][ T7726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.838785][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 131.085310][ T5731] tipc: Node number set to 2886997007 [ 131.121672][ T7778] netlink: 'syz.2.526': attribute type 29 has an invalid length. [ 131.307290][ T7791] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 131.315668][ T7794] syzkaller0: entered promiscuous mode [ 131.322027][ T7794] syzkaller0: entered allmulticast mode [ 132.705919][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.816890][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 133.026661][ T7821] syzkaller0: entered promiscuous mode [ 133.055133][ T7821] syzkaller0: entered allmulticast mode [ 133.420490][ T7845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.545'. [ 133.487691][ T7845] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 133.531027][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 133.540691][ T7845] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.571513][ T7853] bond3: option ad_actor_sys_prio: invalid value (0) [ 133.578419][ T7853] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 133.587070][ T7853] bond3 (unregistering): Released all slaves [ 133.616484][ T7854] bond2: (slave geneve2): making interface the new active one [ 133.630778][ T7854] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 133.662582][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.545'. [ 133.686259][ T7845] netlink: 'syz.2.545': attribute type 8 has an invalid length. [ 133.702563][ T7845] sch_fq: defrate 0 ignored. [ 133.729922][ T7854] syz.2.545 (7854) used greatest stack depth: 18824 bytes left [ 133.836875][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'. [ 133.857185][ T7860] netlink: 50 bytes leftover after parsing attributes in process `syz.0.549'. [ 133.961484][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 134.051613][ T139] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.126332][ T139] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.207868][ T139] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.354735][ T139] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.422255][ T7882] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 134.564297][ T7902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.557'. [ 134.663556][ T7905] netlink: 'syz.0.558': attribute type 1 has an invalid length. [ 134.703375][ T7905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.558'. [ 134.777390][ T7905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.558'. [ 134.875114][ T5637] Bluetooth: hci0: command 0x0401 tx timeout [ 134.937686][ T7914] netlink: 68 bytes leftover after parsing attributes in process `syz.1.561'. [ 134.957386][ T7908] macsec1: entered allmulticast mode [ 134.962751][ T7908] bond0: entered allmulticast mode [ 134.968882][ T7908] bond_slave_0: entered allmulticast mode [ 134.974646][ T7908] bond_slave_1: entered allmulticast mode [ 134.994570][ T7908] bond_slave_0: entered promiscuous mode [ 135.000833][ T7908] bond_slave_1: entered promiscuous mode [ 135.012686][ T7908] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 135.029359][ T7908] bond0: left allmulticast mode [ 135.042241][ T7908] bond_slave_0: left allmulticast mode [ 135.070489][ T7908] bond_slave_1: left allmulticast mode [ 135.113187][ T5365] bond_slave_0: left promiscuous mode [ 135.119230][ T5365] bond_slave_1: left promiscuous mode [ 135.181764][ T7907] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.227669][ T7907] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.552830][ T7946] netlink: 'syz.2.567': attribute type 1 has an invalid length. [ 136.103391][ T7958] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.111180][ T7958] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.345587][ T7958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.377489][ T7958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.479843][ T7958] veth1_vlan: left allmulticast mode [ 136.489628][ T7958] macvlan1: left allmulticast mode [ 136.525176][ T7958] ip6tnl2: left allmulticast mode [ 136.539536][ T7958] vlan2: left allmulticast mode [ 136.544628][ T7958] bond0: left allmulticast mode [ 136.549709][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 136.561798][ T7958] bond_slave_0: left allmulticast mode [ 136.567347][ T7958] bond_slave_1: left allmulticast mode [ 136.573364][ T7958] bridge1: left promiscuous mode [ 136.578458][ T7958] bridge1: left allmulticast mode [ 136.640821][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.662973][ T3292] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.686275][ T3292] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.719428][ T3292] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.753379][ T3292] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.764059][ T3292] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.775385][ T3292] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.844100][ T3292] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.883882][ T3292] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.264775][ T8031] bond3 (unregistering): Released all slaves [ 137.390982][ T8044] netlink: 'syz.0.588': attribute type 12 has an invalid length. [ 137.399189][ T8044] netlink: 'syz.0.588': attribute type 13 has an invalid length. [ 137.465394][ T8048] netlink: 'syz.0.588': attribute type 12 has an invalid length. [ 137.476879][ T8048] netlink: 'syz.0.588': attribute type 13 has an invalid length. [ 137.724346][ T8057] vlan3: entered promiscuous mode [ 137.909211][ T8066] bond2: entered promiscuous mode [ 137.915565][ T8066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.186661][ T8087] syzkaller0: entered promiscuous mode [ 138.192446][ T8087] syzkaller0: entered allmulticast mode [ 138.333831][ T8093] netlink: 'syz.2.602': attribute type 1 has an invalid length. [ 138.483498][ T8098] __nla_validate_parse: 19 callbacks suppressed [ 138.483517][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 138.510404][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 139.008974][ T8129] gtp1: entered promiscuous mode [ 139.013969][ T8129] gtp1: entered allmulticast mode [ 139.024697][ T8129] team0: Device gtp1 is of different type [ 139.079098][ T8121] netlink: 'syz.4.611': attribute type 29 has an invalid length. [ 139.761947][ T8164] syzkaller1: entered promiscuous mode [ 139.781316][ T8164] syzkaller1: entered allmulticast mode [ 139.802915][ T8181] netlink: 912 bytes leftover after parsing attributes in process `syz.2.628'. [ 139.860018][ T8174] syzkaller0: entered promiscuous mode [ 139.883653][ T8174] syzkaller0: entered allmulticast mode [ 140.190602][ T8199] tipc: New replicast peer: 255.255.255.255 [ 140.207790][ T8199] tipc: Enabled bearer , priority 10 [ 140.228325][ T8199] netlink: 68 bytes leftover after parsing attributes in process `syz.4.635'. [ 140.438438][ T8212] tipc: Started in network mode [ 140.452505][ T8218] xt_hashlimit: size too large, truncated to 1048576 [ 140.460781][ T8212] tipc: Node identity ac14140f, cluster identity 4711 [ 140.470542][ T8212] tipc: New replicast peer: 255.255.255.255 [ 140.486541][ T8212] tipc: Enabled bearer , priority 10 [ 140.530385][ T8217] sctp: [Deprecated]: syz.1.638 (pid 8217) Use of int in max_burst socket option. [ 140.530385][ T8217] Use struct sctp_assoc_value instead [ 141.208792][ T8246] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 141.240295][ T8246] netlink: 'syz.4.645': attribute type 21 has an invalid length. [ 141.520169][ T8259] syzkaller0: entered promiscuous mode [ 141.541343][ T8259] syzkaller0: entered allmulticast mode [ 141.675272][ T5731] tipc: Node number set to 2886997007 [ 141.795575][ T8280] netlink: 'syz.3.657': attribute type 1 has an invalid length. [ 141.874700][ T8280] bond1: entered promiscuous mode [ 141.890066][ T8280] bond1: entered allmulticast mode [ 141.896403][ T8280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.907427][ T8285] gre0: entered promiscuous mode [ 141.912446][ T8285] gre0: entered allmulticast mode [ 141.995541][ T8290] SET target dimension over the limit! [ 142.005310][ T8288] netlink: 'syz.1.656': attribute type 7 has an invalid length. [ 142.088233][ T8296] syzkaller0: entered promiscuous mode [ 142.101367][ T8296] syzkaller0: entered allmulticast mode [ 142.151037][ T8301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.661'. [ 142.168792][ T8292] macsec1: entered allmulticast mode [ 142.174336][ T8292] bond0: entered allmulticast mode [ 142.180304][ T8292] bond_slave_0: entered allmulticast mode [ 142.195295][ T8292] bond_slave_1: entered allmulticast mode [ 142.209879][ T8292] bond_slave_0: entered promiscuous mode [ 142.215650][ T8292] bond_slave_1: entered promiscuous mode [ 142.239384][ T8292] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 142.257996][ T8292] bond0: left allmulticast mode [ 142.265049][ T8292] bond_slave_0: left allmulticast mode [ 142.277090][ T8292] bond_slave_1: left allmulticast mode [ 142.362440][ T5731] bond_slave_0: left promiscuous mode [ 142.367925][ T5731] bond_slave_1: left promiscuous mode [ 142.397025][ T8312] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 142.507668][ T5637] block nbd1: Receive control failed (result -32) [ 142.690346][ T8314] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 143.086878][ T8352] bond0: (slave ip6tnl0): refused to change device type [ 143.215905][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 143.225052][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 143.230467][ T8354] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 143.242207][ T8354] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.672'. [ 143.257720][ T8359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.286126][ T8359] bond3: (slave bond0): making interface the new active one [ 143.312775][ T8364] netlink: 'syz.0.673': attribute type 4 has an invalid length. [ 143.317290][ T8366] netlink: 164 bytes leftover after parsing attributes in process `syz.2.674'. [ 143.332982][ T8364] netlink: 152 bytes leftover after parsing attributes in process `syz.0.673'. [ 143.355813][ T8359] bond3: (slave bond0): Enslaving as an active interface with an up link [ 143.384445][ T8364] .`: renamed from bond0 (while UP) [ 145.735859][ T8324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.000687][ T8389] netlink: 52 bytes leftover after parsing attributes in process `syz.2.677'. [ 146.010706][ T8386] netlink: 'syz.3.680': attribute type 12 has an invalid length. [ 146.094613][ T5365] IPVS: starting estimator thread 0... [ 146.197986][ T8407] netlink: 76 bytes leftover after parsing attributes in process `syz.1.681'. [ 146.208097][ T8399] IPVS: using max 34 ests per chain, 81600 per kthread [ 146.343528][ T8415] netlink: 'syz.4.683': attribute type 1 has an invalid length. [ 146.360246][ T8415] netlink: 76 bytes leftover after parsing attributes in process `syz.4.683'. [ 146.448678][ T8421] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.486000][ T8422] netlink: 'syz.1.687': attribute type 1 has an invalid length. [ 146.507076][ T8422] netlink: 224 bytes leftover after parsing attributes in process `syz.1.687'. [ 146.517941][ T8421] netlink: 'syz.1.687': attribute type 1 has an invalid length. [ 146.527758][ T8421] netlink: 224 bytes leftover after parsing attributes in process `syz.1.687'. [ 146.560164][ T8421] netlink: 'syz.1.687': attribute type 10 has an invalid length. [ 146.668230][ T8437] netlink: 7 bytes leftover after parsing attributes in process `syz.1.691'. [ 146.695553][ T8433] netlink: 'syz.0.689': attribute type 8 has an invalid length. [ 146.714808][ T8435] netlink: 'syz.3.690': attribute type 1 has an invalid length. [ 146.741731][ T8440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.763230][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 146.770020][ T8440] vlan0: entered promiscuous mode [ 146.846065][ T8435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.897583][ T8438] bond2: (slave geneve2): making interface the new active one [ 146.906870][ T8438] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 147.451951][ T8485] netlink: 'syz.3.703': attribute type 49 has an invalid length. [ 147.618277][ T8495] netlink: 452 bytes leftover after parsing attributes in process `syz.2.704'. [ 147.776280][ T8500] bond0: option arp_missed_max: invalid value (0) [ 147.784154][ T8500] bond0: option arp_missed_max: allowed values 1 - 255 [ 147.792844][ T8500] bond0 (unregistering): Released all slaves [ 147.813874][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.709'. [ 147.942151][ T8514] erspan0: entered promiscuous mode [ 148.000153][ T8517] erspan0: left promiscuous mode [ 148.148874][ T8527] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.155648][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.714'. [ 148.432662][ T8536] syzkaller0: entered promiscuous mode [ 148.452434][ T8536] syzkaller0: entered allmulticast mode [ 148.505948][ T8538] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 148.877554][ T8563] openvswitch: netlink: Invalid VLAN frame [ 150.409935][ T30] audit: type=1800 audit(1781592696.141:3): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.728" name=CB dev="tmpfs" ino=887 res=0 errno=0 [ 150.579521][ T8580] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 150.630520][ T8580] bond2 (unregistering): Released all slaves [ 150.704080][ T8605] sctp: [Deprecated]: syz.0.736 (pid 8605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.704080][ T8605] Use struct sctp_sack_info instead [ 150.763607][ T8593] batman_adv: batadv0: Adding interface: gretap1 [ 150.776398][ T8593] batman_adv: batadv0: Interface activated: gretap1 [ 150.788725][ T8605] sctp: [Deprecated]: syz.0.736 (pid 8605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.788725][ T8605] Use struct sctp_sack_info instead [ 150.816617][ T8610] sctp: [Deprecated]: syz.1.737 (pid 8610) Use of int in max_burst socket option deprecated. [ 150.816617][ T8610] Use struct sctp_assoc_value instead [ 150.857053][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b4e3000: rx timeout, send abort [ 150.872296][ T8605] v: renamed from gre0 (while UP) [ 150.908801][ T8605] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 150.928925][ T8614] validate_nla: 3 callbacks suppressed [ 150.928940][ T8614] netlink: 'syz.4.739': attribute type 4 has an invalid length. [ 151.092581][ T8625] __nla_validate_parse: 6 callbacks suppressed [ 151.092599][ T8625] netlink: 64 bytes leftover after parsing attributes in process `syz.0.741'. [ 151.116091][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 151.127561][ T8627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.743'. [ 151.176124][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 151.176628][ T1060] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.192435][ T8627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.743'. [ 151.221685][ T1060] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.245098][ T1060] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.262023][ T8629] netlink: 96 bytes leftover after parsing attributes in process `syz.1.743'. [ 151.276191][ T1060] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.357282][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057e23000: rx timeout, send abort [ 151.367824][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b4e3000: abort rx timeout. Force session deactivation [ 151.494027][ T8641] tap0: tun_chr_ioctl cmd 1074025677 [ 151.513132][ T8641] tap0: linktype set to 774 [ 151.851071][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b4e2000: rx timeout, send abort [ 151.865589][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057e23000: abort rx timeout. Force session deactivation [ 151.892662][ T8657] macvtap1: entered promiscuous mode [ 151.901141][ T8657] macvtap1: entered allmulticast mode [ 151.906911][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.920780][ T8657] veth1_vlan: entered allmulticast mode [ 151.938152][ T8660] bridge5: entered promiscuous mode [ 152.092838][ T8662] syzkaller1: entered promiscuous mode [ 152.098899][ T8662] syzkaller1: entered allmulticast mode [ 152.359383][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b4e2000: abort rx timeout. Force session deactivation [ 152.413674][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.764'. [ 152.548183][ T8692] block nbd0: must specify backend [ 152.593246][ T8694] syz_tun: entered allmulticast mode [ 152.729770][ T8704] netlink: 'syz.2.768': attribute type 21 has an invalid length. [ 152.738270][ T8704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.768'. [ 152.749111][ T8704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.768'. [ 152.761103][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.769'. [ 152.837622][ T8692] syz_tun: left allmulticast mode [ 153.344631][ T8745] netlink: 'syz.1.777': attribute type 1 has an invalid length. [ 153.379444][ T8746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.608916][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.616608][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.940549][ T8727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.984069][ T8727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.437906][ T8730] tipc: Enabling of bearer rejected, already enabled [ 154.490494][ T8745] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 154.511576][ T3331] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.529827][ T3331] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.553777][ T3331] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.575067][ T3331] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.764790][ T8793] xt_hashlimit: max too large, truncated to 1048576 [ 154.776210][ T8793] No such timeout policy "syz1" [ 155.280036][ T8824] netlink: 'syz.3.793': attribute type 32 has an invalid length. [ 156.103323][ T8867] __nla_validate_parse: 167 callbacks suppressed [ 156.103355][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.798'. [ 156.105460][ T8866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.797'. [ 156.153150][ T8869] --map-set only usable from mangle table [ 156.197386][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'. [ 156.244050][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 156.291681][ T8866] netlink: 'syz.4.797': attribute type 3 has an invalid length. [ 156.843510][ T8904] netlink: 104 bytes leftover after parsing attributes in process `syz.4.807'. [ 156.878999][ T8904] ip_vti0: entered promiscuous mode [ 156.890864][ T8904] ip_vti0: entered allmulticast mode [ 157.206567][ T8923] tipc: Can't bind to reserved service type 2 [ 157.365366][ T8935] netlink: 'syz.4.814': attribute type 10 has an invalid length. [ 157.388489][ T8935] netlink: 224 bytes leftover after parsing attributes in process `syz.4.814'. [ 157.464580][ T8939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.710781][ T8949] netlink: 112 bytes leftover after parsing attributes in process `syz.4.819'. [ 157.784240][ T8943] netlink: 100 bytes leftover after parsing attributes in process `syz.2.816'. [ 157.803815][ T8950] syzkaller1: entered promiscuous mode [ 157.806530][ T8954] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.818'. [ 157.819837][ T8943] netlink: 100 bytes leftover after parsing attributes in process `syz.2.816'. [ 157.838283][ T8950] syzkaller1: entered allmulticast mode [ 158.105362][ T8927] syz.3.811 (8927) used greatest stack depth: 17968 bytes left [ 158.138568][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.173420][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.347029][ T8966] xt_hl: Unknown TTL match mode: 237 [ 158.388083][ T8966] syzkaller0: entered promiscuous mode [ 158.401979][ T8966] syzkaller0: entered allmulticast mode [ 158.794035][ T8980] ieee802154 phy1 wpan1: encryption failed: -90 [ 158.854851][ T8980] netlink: 'syz.2.827': attribute type 11 has an invalid length. [ 159.174639][ T8987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.201616][ T8987] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.216901][ T8987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.312159][ T8987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.350249][ T8987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.379159][ T8987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.408310][ T8987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.447831][ T8987] veth1_vlan: left promiscuous mode [ 159.455866][ T8987] veth0_vlan: left promiscuous mode [ 159.462477][ T8987] veth0_vlan: entered promiscuous mode [ 159.472470][ T8987] veth1_vlan: entered promiscuous mode [ 159.488128][ T8987] veth1_macvtap: left promiscuous mode [ 159.495859][ T8987] veth0_macvtap: left promiscuous mode [ 159.502773][ T8987] veth0_macvtap: entered promiscuous mode [ 159.510997][ T8987] veth1_macvtap: entered promiscuous mode [ 159.527236][ T8987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.537180][ T8987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.546429][ T8987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.559609][ T8987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.571533][ T8987] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.590961][ T8980] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 159.599591][ T8980] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 159.669574][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.677509][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.719323][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.727357][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.854051][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.869408][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.968890][ T9013] dvmrp0: entered allmulticast mode [ 160.079447][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.099844][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.282413][ T9027] netlink: 'syz.3.836': attribute type 1 has an invalid length. [ 160.582101][ T9027] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.633888][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.664910][ T9033] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 160.675293][ T9033] bond3: (slave batadv1): making interface the new active one [ 160.688600][ T9033] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 160.698176][ T9024] syzkaller1: entered promiscuous mode [ 160.706846][ T9024] syzkaller1: entered allmulticast mode [ 160.714137][ T9035] veth1_macvtap: left promiscuous mode [ 160.721062][ T9035] macsec0: entered promiscuous mode [ 160.727642][ T9035] macsec0: entered allmulticast mode [ 161.013486][ T139] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 161.163476][ T9045] __nla_validate_parse: 2 callbacks suppressed [ 161.163494][ T9045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.840'. [ 161.190912][ T9051] sctp: [Deprecated]: syz.2.842 (pid 9051) Use of int in maxseg socket option. [ 161.190912][ T9051] Use struct sctp_assoc_value instead [ 161.242070][ T9045] netlink: 32 bytes leftover after parsing attributes in process `syz.4.840'. [ 161.263987][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'. [ 161.641274][ T9074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.665252][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 161.749431][ T8843] wlan1: Trigger new scan to find an IBSS to join [ 161.847096][ T9074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.485170][ T9091] vlan0: left promiscuous mode [ 162.609874][ T9091] veth1_macvtap: entered promiscuous mode [ 162.630998][ T9091] veth1_macvtap: entered allmulticast mode [ 162.649309][ T9091] macsec0: left promiscuous mode [ 162.864592][ T9091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.910372][ T9091] bond2: left promiscuous mode [ 163.008349][ T9091] macvtap1: left promiscuous mode [ 163.140833][ T3344] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.173220][ T3344] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.223441][ T3344] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.269978][ T3344] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.322510][ T1157] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.362029][ T1157] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.648297][ T5365] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.899890][ T9136] netlink: 'syz.3.862': attribute type 10 has an invalid length. [ 164.659843][ T9165] IPVS: length: 35 != 24 [ 165.253063][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 165.489160][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.879'. [ 165.527901][ T9163] trusted_key: syz.2.870 sent an empty control message without MSG_MORE. [ 165.711748][ T9196] netlink: 40 bytes leftover after parsing attributes in process `syz.0.882'. [ 165.727999][ T9198] netlink: 'syz.3.883': attribute type 4 has an invalid length. [ 165.754061][ T9196] netlink: 40 bytes leftover after parsing attributes in process `syz.0.882'. [ 166.093617][ T9204] team0: left promiscuous mode [ 166.103959][ T9204] bridge1: left promiscuous mode [ 166.117607][ T9204] team0: left allmulticast mode [ 166.129975][ T9204] bridge1: left allmulticast mode [ 166.220737][ T9209] tipc: Enabling of bearer rejected, already enabled [ 166.587700][ T9224] netlink: 40 bytes leftover after parsing attributes in process `syz.0.890'. [ 166.621354][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 166.666859][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 166.681364][ T9227] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.891'. [ 166.683840][ T9224] lo speed is unknown, defaulting to 1000 [ 166.733374][ T9224] lo speed is unknown, defaulting to 1000 [ 166.738160][ T9227] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 166.785187][ T3269] wlan1: Trigger new scan to find an IBSS to join [ 166.853043][ T9224] lo speed is unknown, defaulting to 1000 [ 166.890113][ T9224] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 166.932770][ T9224] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 166.980188][ T9224] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 167.012075][ T9224] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.052369][ T9224] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 167.109906][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 167.293911][ T9224] lo speed is unknown, defaulting to 1000 [ 167.483094][ T9224] lo speed is unknown, defaulting to 1000 [ 167.520713][ T9224] lo speed is unknown, defaulting to 1000 [ 167.568722][ T9224] lo speed is unknown, defaulting to 1000 [ 167.639794][ T9224] lo speed is unknown, defaulting to 1000 [ 167.679742][ T9224] lo speed is unknown, defaulting to 1000 [ 167.708968][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 167.759699][ T3269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.075128][ T9256] netlink: 'syz.3.900': attribute type 12 has an invalid length. [ 168.471452][ T9273] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 168.723749][ T9282] netlink: 296 bytes leftover after parsing attributes in process `syz.3.909'. [ 169.461071][ T9308] netlink: 'syz.3.918': attribute type 10 has an invalid length. [ 169.686354][ T9308] team0 (unregistering): Port device team_slave_0 removed [ 169.698962][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 169.719204][ T9308] team0 (unregistering): Port device netdevsim1 removed [ 169.776594][ T9309] syzkaller1: entered promiscuous mode [ 169.784878][ T9309] syzkaller1: entered allmulticast mode [ 169.844879][ T9320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.920'. [ 169.887168][ T9320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.920'. [ 169.947121][ T9320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.920'. [ 170.346339][ T9341] nbd: must specify an index to disconnect [ 170.489785][ T9335] "syz.4.926" (9335) uses obsolete ecb(arc4) skcipher [ 170.759075][ T9358] sctp: [Deprecated]: syz.3.932 (pid 9358) Use of int in maxseg socket option. [ 170.759075][ T9358] Use struct sctp_assoc_value instead [ 170.790490][ T9365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.286089][ T9380] syzkaller0: entered promiscuous mode [ 171.303276][ T9380] syzkaller0: entered allmulticast mode [ 172.092950][ T9398] lo speed is unknown, defaulting to 1000 [ 172.259530][ T9404] __nla_validate_parse: 30 callbacks suppressed [ 172.259559][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.946'. [ 172.543532][ T9404] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 172.544088][ T9412] tipc: Enabling of bearer rejected, failed to enable media [ 172.624331][ T9412] netlink: 9 bytes leftover after parsing attributes in process `syz.0.947'. [ 172.716177][ T9412] gretap0: entered promiscuous mode [ 172.753983][ T9422] netlink: 5 bytes leftover after parsing attributes in process `syz.0.947'. [ 172.756946][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 172.793815][ T9422] 0ªî{X¹¦: renamed from gretap0 [ 172.814414][ T9422] 0ªî{X¹¦: left promiscuous mode [ 172.838946][ T9422] 0ªî{X¹¦: entered allmulticast mode [ 172.934254][ T9422] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 173.192111][ T9377] Set syz1 is full, maxelem 65536 reached [ 173.858521][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.958'. [ 173.998939][ T9461] can: request_module (can-proto-5) failed. [ 174.058083][ T9470] sit0: entered promiscuous mode [ 174.101855][ T9470] netlink: 'syz.2.961': attribute type 1 has an invalid length. [ 174.136928][ T9475] netlink: 'syz.0.962': attribute type 13 has an invalid length. [ 174.162023][ T9470] netlink: 1 bytes leftover after parsing attributes in process `syz.2.961'. [ 174.197323][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'. [ 174.305685][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 174.605273][ T9490] netlink: 36 bytes leftover after parsing attributes in process `syz.4.966'. [ 174.637952][ T9497] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 174.655196][ T9497] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 174.952950][ T9502] gretap0: entered promiscuous mode [ 174.986472][ T9502] macsec1: entered allmulticast mode [ 175.009379][ T9502] gretap0: entered allmulticast mode [ 175.070637][ T9502] gretap0: left allmulticast mode [ 175.096511][ T9502] gretap0: left promiscuous mode [ 177.989756][ T9522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.007088][ T9522] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.035849][ T9522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.083674][ T9522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.093338][ T9522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.106051][ T9522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.116981][ T9522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.138029][ T9522] veth1_vlan: left promiscuous mode [ 178.147380][ T9522] veth0_vlan: left promiscuous mode [ 178.153883][ T9522] veth0_vlan: entered promiscuous mode [ 178.163188][ T9522] veth1_vlan: entered promiscuous mode [ 178.173790][ T9522] veth1_macvtap: left promiscuous mode [ 178.180465][ T9522] veth0_macvtap: left promiscuous mode [ 178.188089][ T9522] veth0_macvtap: entered promiscuous mode [ 178.194929][ T9522] veth1_macvtap: entered promiscuous mode [ 178.209431][ T9522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.227337][ T9522] 8021q: adding VLAN 0 to HW filter on device eth0 [ 178.236675][ T9522] 8021q: adding VLAN 0 to HW filter on device eth1 [ 178.249882][ T9538] netlink: 72 bytes leftover after parsing attributes in process `syz.2.975'. [ 178.251674][ T9522] 8021q: adding VLAN 0 to HW filter on device eth2 [ 178.259967][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.975'. [ 178.275617][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'. [ 178.276413][ T9522] 8021q: adding VLAN 0 to HW filter on device eth3 [ 178.347379][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.354536][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.401186][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.408422][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.538006][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'. [ 178.620324][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.647092][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.671807][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.682824][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.753415][ T9545] veth1_macvtap (unregistering): left allmulticast mode [ 178.899808][ T9556] netlink: 'syz.2.981': attribute type 32 has an invalid length. [ 179.080897][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.122802][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.157704][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.168814][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.258636][ T9564] bridge6: entered promiscuous mode [ 179.268718][ T9564] bridge6: entered allmulticast mode [ 179.284098][ T9564] team0: Port device bridge6 added [ 179.291133][ T9569] xfrm0: entered allmulticast mode [ 179.444434][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.983'. [ 179.458025][ T8843] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 179.516838][ T8843] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 179.546072][ T8843] bond1: (slave veth3): making interface the new active one [ 179.560797][ T8843] bond1: active interface up! [ 179.587649][ T9580] netlink: 132 bytes leftover after parsing attributes in process `syz.3.985'. [ 179.597145][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.983'. [ 179.658843][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 179.741508][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 179.969559][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.987'. [ 180.106637][ T9598] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.256826][ T9613] netlink: 'syz.0.991': attribute type 1 has an invalid length. [ 180.283804][ T9612] tipc: MTU too low for tipc bearer [ 180.494669][ T9621] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 180.648296][ T9631] netlink: 'syz.1.998': attribute type 15 has an invalid length. [ 180.757116][ T9636] openvswitch: netlink: Flow actions attr not present in new flow. [ 181.054308][ T9650] lo speed is unknown, defaulting to 1000 [ 182.437689][ T9704] block nbd2: server does not support multiple connections per device. [ 182.456498][ T9704] block nbd2: shutting down sockets [ 182.586395][ T9714] 8021q: VLANs not supported on vxcan1 [ 182.858538][ T9724] netlink: 'syz.0.1024': attribute type 3 has an invalid length. [ 182.989850][ T9724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.031812][ T9724] netlink: 'syz.0.1024': attribute type 21 has an invalid length. [ 183.313597][ T9724] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 183.330579][ T9740] __nla_validate_parse: 12 callbacks suppressed [ 183.330615][ T9740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1029'. [ 183.548957][ T9747] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1032'. [ 183.660697][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 183.741968][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 184.108041][ T9774] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 184.134027][ T9774] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 184.158278][ T9776] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1038'. [ 184.171660][ T9774] tipc: Enabled bearer , priority 16 [ 184.212907][ T9781] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20001 [ 185.116958][ T9786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.867280][ T9828] vlan4: entered promiscuous mode [ 185.924925][ T9828] bridge0: entered promiscuous mode [ 186.142901][ T9791] Set syz1 is full, maxelem 65536 reached [ 186.256947][ T9834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1051'. [ 186.293582][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'. [ 186.510615][ T9838] lo speed is unknown, defaulting to 1000 [ 186.513483][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'. [ 186.724850][ T9853] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1056'. [ 187.142989][ T9864] IPVS: set_ctl: invalid protocol: 137 0.8.0.0:0 [ 187.299962][ T9866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1058'. [ 187.820915][ T9879] netlink: 'syz.1.1063': attribute type 1 has an invalid length. [ 187.891345][ T9879] 8021q: adding VLAN 0 to HW filter on device bond5 [ 188.020485][ T9879] bond5: (slave geneve3): making interface the new active one [ 188.030101][ T9879] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 188.167905][ T9900] netlink: 'syz.0.1065': attribute type 1 has an invalid length. [ 188.213506][ T9899] ipip0: entered promiscuous mode [ 188.227608][ T9899] ipip0: entered allmulticast mode [ 188.362996][ T9907] netlink: 'syz.1.1068': attribute type 13 has an invalid length. [ 188.397683][ T9907] netlink: 'syz.1.1068': attribute type 17 has an invalid length. [ 189.025266][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 189.218140][ T9907] macvtap1: left allmulticast mode [ 189.223336][ T9907] veth1_vlan: left allmulticast mode [ 189.248984][ T9907] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.459848][ T9939] netlink: 'syz.3.1077': attribute type 1 has an invalid length. [ 189.483965][ T9939] __nla_validate_parse: 2 callbacks suppressed [ 189.483983][ T9939] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1077'. [ 189.503515][ T9943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1079'. [ 189.539249][ T9939] netlink: 658 bytes leftover after parsing attributes in process `syz.3.1077'. [ 189.563249][ T9939] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1077'. [ 189.777214][ T9959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1081'. [ 189.823077][ T9948] xt_limit: Overflow, try lower: 268435456/134217728 [ 190.040149][ T9969] nbd: socks must be embedded in a SOCK_ITEM attr [ 190.157090][ T9965] bond3: option updelay: invalid value (18446744073709518847) [ 190.165724][ T9965] bond3: option updelay: allowed values 0 - 2147483647 [ 190.177599][ T9965] bond3 (unregistering): Released all slaves [ 190.360221][ T9977] netlink: 'syz.4.1088': attribute type 6 has an invalid length. [ 190.729421][ T9992] bond2: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms [ 190.739734][ T9992] bond2: entered promiscuous mode [ 190.837945][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 190.895809][ T9997] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 190.897268][ T9993] xt_hashlimit: size too large, truncated to 1048576 [ 190.937410][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 190.967135][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1096'. [ 190.990536][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 191.012595][T10008] netlink: 'syz.4.1096': attribute type 18 has an invalid length. [ 191.026355][T10011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1097'. [ 191.896063][T10032] netlink: 'syz.3.1102': attribute type 2 has an invalid length. [ 192.712113][ T5745] IPVS: starting estimator thread 0... [ 192.815776][T10048] IPVS: using max 33 ests per chain, 79200 per kthread [ 192.830905][T10047] xt_hashlimit: size too large, truncated to 1048576 [ 194.155652][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.260725][T10092] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 194.362089][ T5766] IPVS: starting estimator thread 0... [ 194.477562][T10104] IPVS: using max 29 ests per chain, 69600 per kthread [ 194.803716][T10092] bond3 (unregistering): Released all slaves [ 194.915924][T10123] veth1_to_hsr: entered promiscuous mode [ 195.113609][T10116] __nla_validate_parse: 6 callbacks suppressed [ 195.113628][T10116] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1119'. [ 195.263536][T10116] hsr_slave_1 (unregistering): left promiscuous mode [ 195.676876][T10152] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1122'. [ 195.899223][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1124'. [ 195.982799][T10135] syzkaller1: entered promiscuous mode [ 196.132170][T10152] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 196.192447][T10135] syzkaller1: entered allmulticast mode [ 196.354751][T10175] tipc: Enabled bearer , priority 0 [ 196.434189][T10175] syzkaller0: entered promiscuous mode [ 196.454648][T10175] syzkaller0: entered allmulticast mode [ 196.473322][T10139] lo speed is unknown, defaulting to 1000 [ 196.561821][T10175] dummy0: mtu less than device minimum [ 196.589408][T10174] tipc: Resetting bearer [ 196.686678][T10174] tipc: Disabling bearer [ 197.380122][T10218] netlink: 'syz.2.1135': attribute type 29 has an invalid length. [ 197.399288][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'. [ 197.811618][T10234] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1137'. [ 197.851042][ T30] audit: type=1804 audit(1781592743.571:4): pid=10232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1138" name="/newroot/231/cgroup.controllers" dev="tmpfs" ino=1195 res=1 errno=0 [ 198.010458][ T30] audit: type=1800 audit(1781592743.571:5): pid=10232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1138" name="cgroup.controllers" dev="tmpfs" ino=1195 res=0 errno=0 [ 198.079964][ T30] audit: type=1804 audit(1781592743.661:6): pid=10232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1138" name="/newroot/231/cgroup.controllers" dev="tmpfs" ino=1195 res=1 errno=0 [ 198.171750][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 198.221010][T10248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1143'. [ 198.283526][T10248] syzkaller1: entered allmulticast mode [ 198.947601][T10257] syzkaller0: entered promiscuous mode [ 198.963761][T10257] syzkaller0: entered allmulticast mode [ 199.316819][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 199.436844][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'. [ 199.473704][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 199.520880][T10279] netlink: 'syz.0.1151': attribute type 14 has an invalid length. [ 199.553513][T10279] netlink: 'syz.0.1151': attribute type 11 has an invalid length. [ 200.474193][T10307] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.351705][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 201.351888][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 201.362398][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 201.368442][ T5635] Bluetooth: hci3: command 0x0406 tx timeout [ 203.364355][T10301] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.433045][T10325] macsec0: entered allmulticast mode [ 203.446343][T10325] dummy0: entered allmulticast mode [ 203.474265][T10325] dummy0: entered promiscuous mode [ 203.488024][T10325] dummy0: left allmulticast mode [ 203.648929][ T8747] dummy0: left promiscuous mode [ 204.168587][T10376] __nla_validate_parse: 1 callbacks suppressed [ 204.168606][T10376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1171'. [ 204.688003][T10399] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1175'. [ 205.544779][T10434] netlink: 63 bytes leftover after parsing attributes in process `syz.3.1183'. [ 206.172308][T10425] sctp: [Deprecated]: syz.1.1180 (pid 10425) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.172308][T10425] Use struct sctp_sack_info instead [ 206.173128][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 207.900604][T10419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.272127][ T8843] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.282909][T10525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1193'. [ 208.305258][ T8843] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.426754][ T8843] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.458140][ T8843] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.639085][T10549] netlink: 'syz.0.1198': attribute type 1 has an invalid length. [ 208.700259][T10552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1198'. [ 208.736267][T10550] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1198'. [ 208.775547][T10552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1198'. [ 208.786714][T10550] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1198'. [ 208.899089][T10549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.906443][T10565] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1202'. [ 208.918239][T10551] netlink: 'syz.1.1197': attribute type 1 has an invalid length. [ 208.929970][T10555] bridge_slave_1: invalid flags given to default FDB implementation [ 208.975099][T10565] gretap0: entered promiscuous mode [ 209.200018][T10577] netlink: 'syz.0.1203': attribute type 6 has an invalid length. [ 209.260033][T10577] netlink: 'syz.0.1203': attribute type 7 has an invalid length. [ 209.302042][T10577] netlink: 'syz.0.1203': attribute type 8 has an invalid length. [ 209.350606][T10567] syzkaller1: entered promiscuous mode [ 209.365107][T10567] syzkaller1: entered allmulticast mode [ 210.078822][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1208'. [ 210.115962][T10601] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1209'. [ 210.135320][T10601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1209'. [ 210.300775][T10607] x_tables: duplicate underflow at hook 3 [ 210.741767][T10622] tipc: Enabling of bearer rejected, already enabled [ 211.329726][T10640] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1221'. [ 211.361367][T10642] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1223'. [ 211.622515][T10649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1226'. [ 211.654083][T10651] batadv0: entered promiscuous mode [ 211.683702][T10651] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 211.762206][T10651] veth0: entered promiscuous mode [ 211.850129][T10647] : entered promiscuous mode [ 211.859228][T10656] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1227'. [ 211.873798][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1229'. [ 211.884808][T10666] netlink: 'syz.3.1229': attribute type 8 has an invalid length. [ 211.894274][T10656] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1227'. [ 211.915058][T10656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1227'. [ 212.024421][T10666] geneve3: entered promiscuous mode [ 212.030801][T10666] geneve3: entered allmulticast mode [ 212.038512][T10656] veth0: left promiscuous mode [ 212.445874][T10691] tun0: tun_chr_ioctl cmd 2148553947 [ 212.573962][T10691] netlink: 'syz.3.1237': attribute type 13 has an invalid length. [ 212.612966][T10699] lo speed is unknown, defaulting to 1000 [ 212.651191][T10695] gretap1: entered promiscuous mode [ 212.936627][T10702] team_slave_1: left promiscuous mode [ 212.944859][T10702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.992584][T10702] vlan0: left promiscuous mode [ 213.022845][T10702] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 213.052484][T10702] vlan3: left promiscuous mode [ 213.058353][T10702] bond1: left promiscuous mode [ 213.063194][T10702] bond1: left allmulticast mode [ 213.070992][T10702] batman_adv: batadv0: Interface deactivated: gretap1 [ 213.085194][T10702] geneve3: left promiscuous mode [ 213.090178][T10702] geneve3: left allmulticast mode [ 213.104131][T10695] gretap0: entered promiscuous mode [ 213.154873][ T57] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.175576][ T57] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.229666][ T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.239995][ T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.327937][T10716] netlink: 'syz.1.1244': attribute type 3 has an invalid length. [ 213.810389][T10733] batadv2: entered promiscuous mode [ 213.826038][T10733] batadv2: entered allmulticast mode [ 213.838780][T10733] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 214.054624][T10753] tipc: Enabled bearer , priority 10 [ 214.646880][T10805] openvswitch: netlink: Actions may not be safe on all matching packets [ 214.655815][T10795] lo speed is unknown, defaulting to 1000 [ 214.737178][T10803] block nbd0: must specify backend [ 214.862790][T10817] netlink: 'syz.1.1264': attribute type 1 has an invalid length. [ 214.897132][T10817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.034866][T10816] bond4: option tlb_dynamic_lb: invalid value (5) [ 215.059445][T10816] bond4 (unregistering): Released all slaves [ 215.347477][T10838] __nla_validate_parse: 11 callbacks suppressed [ 215.347494][T10838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1269'. [ 216.569726][T10900] batadv_slave_1: entered promiscuous mode [ 216.579308][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1281'. [ 216.621587][T10899] batadv_slave_1: left promiscuous mode [ 216.659324][T10907] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1283'. [ 216.717033][T10910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1284'. [ 216.762809][T10910] erspan0: entered promiscuous mode [ 216.786986][T10910] erspan0: left promiscuous mode [ 216.968564][T10925] syzkaller0: entered promiscuous mode [ 216.983326][T10925] syzkaller0: entered allmulticast mode [ 217.030324][T10925] tipc: Enabled bearer , priority 0 [ 217.038537][T10921] tipc: Resetting bearer [ 217.128541][T10884] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 217.188254][T10937] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1292'. [ 217.215912][T10937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1292'. [ 217.270703][T10768] tipc: Resetting bearer [ 217.384949][T10944] xfrm0: entered allmulticast mode [ 217.502917][T10954] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1294'. [ 217.531709][T10953] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1297'. [ 217.918510][T10971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1302'. [ 218.005486][T10975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1304'. [ 218.385184][ T5641] Bluetooth: hci0: command 0x0401 tx timeout [ 218.465583][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 218.501917][T10991] [ 218.504284][T10991] ============================================ [ 218.510438][T10991] WARNING: possible recursive locking detected [ 218.516595][T10991] syzkaller #0 Not tainted [ 218.520999][T10991] -------------------------------------------- [ 218.527127][T10991] syz.3.1307/10991 is trying to acquire lock: [ 218.533173][T10991] ffff888020308e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250 [ 218.544317][T10991] [ 218.544317][T10991] but task is already holding lock: [ 218.551663][T10991] ffff888020308e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 218.561320][T10991] and the lock comparison function returns 0: [ 218.567362][T10991] [ 218.567362][T10991] other info that might help us debug this: [ 218.575407][T10991] Possible unsafe locking scenario: [ 218.575407][T10991] [ 218.582848][T10991] CPU0 [ 218.586116][T10991] ---- [ 218.589384][T10991] lock(&dev_instance_lock_key#3); [ 218.594577][T10991] lock(&dev_instance_lock_key#3); [ 218.599768][T10991] [ 218.599768][T10991] *** DEADLOCK *** [ 218.599768][T10991] [ 218.607894][T10991] May be due to missing lock nesting notation [ 218.607894][T10991] [ 218.616198][T10991] 2 locks held by syz.3.1307/10991: [ 218.621374][T10991] #0: ffffffff8fdc1540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 218.630442][T10991] #1: ffff888020308e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 218.640530][T10991] [ 218.640530][T10991] stack backtrace: [ 218.646404][T10991] CPU: 1 UID: 0 PID: 10991 Comm: syz.3.1307 Not tainted syzkaller #0 PREEMPT(full) [ 218.646422][T10991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.646432][T10991] Call Trace: [ 218.646439][T10991] [ 218.646447][T10991] dump_stack_lvl+0xe8/0x150 [ 218.646467][T10991] print_deadlock_bug+0x279/0x290 [ 218.646487][T10991] __lock_acquire+0x24bf/0x2cd0 [ 218.646505][T10991] ? __lock_acquire+0x683/0x2cd0 [ 218.646520][T10991] ? rtnl_newlink+0x148e/0x1bd0 [ 218.646541][T10991] ? rtnetlink_rcv_msg+0x802/0xc00 [ 218.646562][T10991] ? netlink_rcv_skb+0x226/0x4a0 [ 218.646576][T10991] ? netlink_unicast+0x7bb/0x940 [ 218.646597][T10991] ? netlink_sendmsg+0x813/0xb40 [ 218.646611][T10991] ? ____sys_sendmsg+0x9b9/0xa20 [ 218.646625][T10991] ? ___sys_sendmsg+0x2a5/0x360 [ 218.646639][T10991] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 218.646652][T10991] ? do_syscall_64+0x174/0x580 [ 218.646668][T10991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.646686][T10991] ? __ethtool_get_link_ksettings+0x109/0x250 [ 218.646705][T10991] lock_acquire+0x106/0x350 [ 218.646719][T10991] ? __ethtool_get_link_ksettings+0x109/0x250 [ 218.646742][T10991] __mutex_lock+0x19d/0x1590 [ 218.646760][T10991] ? __ethtool_get_link_ksettings+0x109/0x250 [ 218.646779][T10991] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.646795][T10991] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 218.646809][T10991] ? __wake_up_common_lock+0x195/0x1f0 [ 218.646831][T10991] ? __ethtool_get_link_ksettings+0x109/0x250 [ 218.646851][T10991] ? __pfx___mutex_lock+0x10/0x10 [ 218.646871][T10991] ? igmp_group_added+0x238/0x910 [ 218.646885][T10991] ? igmpv3_del_delrec+0x204/0x710 [ 218.646901][T10991] __ethtool_get_link_ksettings+0x109/0x250 [ 218.646922][T10991] bond_netdev_event+0x643/0xf80 [ 218.646944][T10991] ? __pfx_bond_netdev_event+0x10/0x10 [ 218.646968][T10991] ? ipmr_device_event+0x1f6/0x220 [ 218.646989][T10991] notifier_call_chain+0x1a5/0x3d0 [ 218.647017][T10991] __dev_notify_flags+0x1aa/0x310 [ 218.647032][T10991] ? __pfx___dev_notify_flags+0x10/0x10 [ 218.647045][T10991] ? __dev_change_flags+0x5f1/0x820 [ 218.647061][T10991] ? __pfx___dev_change_flags+0x10/0x10 [ 218.647079][T10991] netif_change_flags+0xde/0x1b0 [ 218.647095][T10991] dev_change_flags+0x128/0x260 [ 218.647118][T10991] vlan_device_event+0x1b4e/0x1f00 [ 218.647137][T10991] ? packet_notifier+0xf1b/0xf70 [ 218.647152][T10991] ? br_device_event+0x282/0x9c0 [ 218.647166][T10991] ? __pfx_phonet_device_notify+0x10/0x10 [ 218.647183][T10991] ? __pfx_vlan_device_event+0x10/0x10 [ 218.647198][T10991] ? bcm_notifier+0xa9/0x890 [ 218.647211][T10991] ? raw_notifier+0x9d/0x7d0 [ 218.647231][T10991] ? cgw_notifier+0x314/0x380 [ 218.647246][T10991] notifier_call_chain+0x1a5/0x3d0 [ 218.647267][T10991] __dev_notify_flags+0x1aa/0x310 [ 218.647282][T10991] ? __pfx___dev_notify_flags+0x10/0x10 [ 218.647296][T10991] ? __dev_change_flags+0x5f1/0x820 [ 218.647311][T10991] ? __pfx___dev_change_flags+0x10/0x10 [ 218.647327][T10991] ? __local_bh_enable_ip+0xd0/0x130 [ 218.647343][T10991] netif_change_flags+0xde/0x1b0 [ 218.647358][T10991] do_setlink+0xdd6/0x4670 [ 218.647378][T10991] ? __pfx_do_setlink+0x10/0x10 [ 218.647392][T10991] ? __lock_acquire+0x683/0x2cd0 [ 218.647409][T10991] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 218.647425][T10991] ? rcu_is_watching+0x15/0xb0 [ 218.647441][T10991] ? do_trace_netlink_extack+0x80/0x1d0 [ 218.647464][T10991] ? __mutex_trylock_common+0x15f/0x270 [ 218.647483][T10991] ? __pfx___mutex_trylock_common+0x10/0x10 [ 218.647504][T10991] ? rcu_is_watching+0x15/0xb0 [ 218.647519][T10991] ? trace_contention_end+0x3d/0x140 [ 218.647538][T10991] ? __mutex_lock+0x30f/0x1590 [ 218.647558][T10991] ? rtnl_newlink+0x8a3/0x1bd0 [ 218.647580][T10991] ? __pfx___mutex_lock+0x10/0x10 [ 218.647599][T10991] ? ns_capable+0x89/0xe0 [ 218.647613][T10991] ? rtnl_link_get_net_capable+0xd3/0x310 [ 218.647630][T10991] rtnl_newlink+0x148e/0x1bd0 [ 218.647656][T10991] ? __pfx_rtnl_newlink+0x10/0x10 [ 218.647678][T10991] ? __lock_acquire+0x683/0x2cd0 [ 218.647695][T10991] ? __lock_acquire+0x683/0x2cd0 [ 218.647711][T10991] ? is_bpf_text_address+0x26/0x2b0 [ 218.647727][T10991] ? unwind_next_frame+0x8f/0x2550 [ 218.647747][T10991] ? is_bpf_text_address+0x26/0x2b0 [ 218.647766][T10991] ? __lock_acquire+0x683/0x2cd0 [ 218.647782][T10991] ? kernel_text_address+0xa5/0xe0 [ 218.647802][T10991] ? __kernel_text_address+0xd/0x30 [ 218.647821][T10991] ? unwind_get_return_address+0x4d/0x90 [ 218.647838][T10991] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 218.647859][T10991] ? arch_stack_walk+0xfb/0x150 [ 218.647879][T10991] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 218.647900][T10991] ? __pfx_rtnl_newlink+0x10/0x10 [ 218.647926][T10991] ? __pfx_rtnl_newlink+0x10/0x10 [ 218.647947][T10991] rtnetlink_rcv_msg+0x802/0xc00 [ 218.647967][T10991] ? kasan_save_track+0x3e/0x80 [ 218.647988][T10991] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 218.648015][T10991] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 218.648037][T10991] ? __lock_acquire+0x683/0x2cd0 [ 218.648056][T10991] netlink_rcv_skb+0x226/0x4a0 [ 218.648072][T10991] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 218.648094][T10991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.648114][T10991] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.648129][T10991] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.648146][T10991] netlink_unicast+0x7bb/0x940 [ 218.648172][T10991] netlink_sendmsg+0x813/0xb40 [ 218.648191][T10991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.648207][T10991] ? __se_sys_ioctl+0x47/0x170 [ 218.648227][T10991] ? do_syscall_64+0x174/0x580 [ 218.648243][T10991] ? aa_sock_msg_perm+0xf1/0x1b0 [ 218.648264][T10991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.648283][T10991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.648299][T10991] ____sys_sendmsg+0x9b9/0xa20 [ 218.648314][T10991] ? __might_fault+0xaf/0x130 [ 218.648335][T10991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.648354][T10991] ? import_iovec+0x73/0xa0 [ 218.648371][T10991] ___sys_sendmsg+0x2a5/0x360 [ 218.648386][T10991] ? __lock_acquire+0x683/0x2cd0 [ 218.648401][T10991] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.648419][T10991] ? tomoyo_path_number_perm+0x219/0x5f0 [ 218.648448][T10991] ? __fget_files+0x2a/0x420 [ 218.648467][T10991] ? __fget_files+0x3a2/0x420 [ 218.648487][T10991] __x64_sys_sendmsg+0x1bd/0x2a0 [ 218.648504][T10991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.648519][T10991] ? rcu_is_watching+0x15/0xb0 [ 218.648538][T10991] ? __pfx_kcov_ioctl+0x10/0x10 [ 218.648560][T10991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.648576][T10991] do_syscall_64+0x174/0x580 [ 218.648591][T10991] ? trace_irq_disable+0x3b/0x140 [ 218.648612][T10991] ? clear_bhb_loop+0x40/0x90 [ 218.648628][T10991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.648642][T10991] RIP: 0033:0x7fd1ea79ce59 [ 218.648659][T10991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.648672][T10991] RSP: 002b:00007fd1eb6d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.648688][T10991] RAX: ffffffffffffffda RBX: 00007fd1eaa16090 RCX: 00007fd1ea79ce59 [ 218.648700][T10991] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 218.648710][T10991] RBP: 00007fd1ea832d6f R08: 0000000000000000 R09: 0000000000000000 [ 218.648720][T10991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.648729][T10991] R13: 00007fd1eaa16128 R14: 00007fd1eaa16090 R15: 00007ffeddff4578 [ 218.648746][T10991]