last executing test programs: 2.703529494s ago: executing program 4 (id=5619): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a58000000060a010400000000000000000a0004040900010073797a31000000002c00048028000180080001006e6174001c00028008000240e100000a080003400000000208000140000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000480)={0x0, @adiantum, 0x0, @desc3}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0xa0000000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206050000000000000000000000000305000400010000000500010007000000140007800800060000e400050800134000000006050005000200000011000300686173683a6e65742c6e657400000000090002"], 0x60}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0xc, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0xff, 0x0, {0x5, 0x4, 0x1, 0x1d, 0x896, 0x68, 0x7, 0x6, 0x33, 0x112, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}}}, 0x0) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @host}, 0x10, 0xb746f67ce75a520) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000500)={'wg0\x00'}) 2.296840703s ago: executing program 4 (id=5623): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x20, 0x1405, 0x1, 0x70bd26, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1404, 0x300, 0x7, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000001600)=[{0x28, 0x20, 0x0, 0xfffff034}, {0x50, 0x1, 0x7, 0x80000000}, {0x6, 0x80, 0xfd, 0x3}]}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x5}, 0x4) sendmsg$nl_route_sched(r2, 0x0, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0xfffb, 0xff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200)={r5, 0xa2, "f9eb7feb8a64d5c1d4a5bce098668b40cc4fa02f33d5c74fea05512d48969fcdd258f4e3e8d58cd4cb4cf288124ae5f8282caf93184e76c0f4eaaf41332ea810cb005d973893c860a1f24039ab9cec8ed43c47d32b2617fbce10db46f48c53b6bccf037d6ed890c5090914be7f2d7afe43445e1ee5762f06d5eff59fbd554139e4d352c6f328cd3c260a74f5c82f8144beba8e866a0b3654554ff9a484e0d0edd29c"}, &(0x7f00000002c0)=0xaa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000004ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034015b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7cae2cd0a2782d2230fe4bf9865de0d1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e2a5a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf04e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa55e979e03337707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4450c43e93b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac"], &(0x7f0000001140)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r6, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000001380)="b9ff03316844268cb89e14f0080048e0080000000000002177fbac141516e000030a94070203b180004402020000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe, &(0x7f0000001480), &(0x7f00000014c0)}, 0x2c) 2.296511115s ago: executing program 1 (id=5624): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2.266631224s ago: executing program 2 (id=5626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x4c}}, 0x1020) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) 2.100714591s ago: executing program 3 (id=5629): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000101440)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00001013c0)={&(0x7f0000101400)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00050009"], 0x48}, 0x1, 0x0, 0x1000000000000000, 0x4044850}, 0xc040) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f00000001c0), 0x10, 0x0, 0x1, 0x0, 0x0, 0xc881}, 0x2000c080) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 2.037933014s ago: executing program 1 (id=5630): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={0x0}, 0x1, 0x0, 0x0, 0x8c4}, 0x2000c010) 2.037547312s ago: executing program 2 (id=5631): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) recvfrom$unix(r1, &(0x7f00000000c0)=""/168, 0xa8, 0x40000103, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xf}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x44080) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) recvfrom$unix(r1, &(0x7f00000000c0)=""/168, 0xa8, 0x40000103, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xf}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x44080) (async) 1.95903204s ago: executing program 3 (id=5632): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000680)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.874227422s ago: executing program 4 (id=5633): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000400)="44000000410001000300000000000000030100002a0000002c00010010000400000000000000000000840000060006000800000010000700010101010202020200004000", 0x44) 1.793352497s ago: executing program 1 (id=5634): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x45}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}]}, 0x3c}}, 0x6000080) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000180)=0x100, 0x4) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, 0x0, 0x102, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4044004}, 0x4000040) bpf$ENABLE_STATS(0x20, &(0x7f0000000380), 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r2, &(0x7f00000003c0)="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", 0x1000, 0x1, &(0x7f00000013c0)={0xa, 0x5b, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x78, r1, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="00a09ee27700a605dcbcee233d5799e4413af0e1c8805bfaa90825614f78dca1"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a37ecbd3db5b48871995f3d57b6745d2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4c46dac4a03fff9d24816d87090fbe99"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0d8b535e77af60a"}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004800}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001580)={'vxcan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x64, r1, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001700)) socketpair(0x18, 0x800, 0x9, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0xb0, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001940)=0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900), 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xaa}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000001a40)={0x44, 0xe8, 0x334, 0x3}, 0x8) r7 = accept(r2, &(0x7f0000001a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001b00)=0x80) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000001b40)={{0xa, 0x4e20, 0x3ff, @empty, 0x6}, {0xa, 0x4e20, 0x5b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff0}, 0x0, {[0x0, 0x21fd, 0x1000, 0x800, 0x8, 0x6, 0x2, 0x5]}}, 0x5c) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f0000001c80)={&(0x7f0000001bc0), 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8014) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e00)=@bpf_lsm={0x1d, 0x6, &(0x7f0000001cc0)=@raw=[@alu={0x7, 0x0, 0x2, 0x0, 0x1, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @ldst={0x0, 0x3, 0x1, 0x3, 0xc29754193cc07cf, 0xfffffffffffffff0, 0x4}], &(0x7f0000001d00)='GPL\x00', 0x5dce, 0x0, 0x0, 0x41000, 0x20, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001d40)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001d80)={0x5, 0x3, 0x3, 0xb810}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003040)={r8, 0x0, 0xad, 0x4f, &(0x7f0000001ec0)="ee69a852541c2d1e7b70e7f9fbacc9e972441074641cca011a9a6fab9f40ab4b11f47b1e38f755bef2774d25466d70a1540957320575580a801b485f8e93fd9d87e5ddba73ed882240036dc0ebd129dd2cd16743424d4eb5ab3131e100c5f3d6aa0f55b807d38bcf547bac282515d5d5f1dfc4dd8c2e7fdd1576d631a49764a2cc1ed6d97359210932355f42954b7842216364b82ab136ba63363800ca35abad586e1b759af0537b1f6c4da90f", &(0x7f0000001f80)=""/79, 0x10, 0x0, 0x1, 0x1000, &(0x7f0000002000)="b6", &(0x7f0000002040)="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", 0x1, 0x0, 0x4}, 0x50) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000030c0)={'mangle\x00', 0x0, [0x3, 0x4a, 0x4, 0x2, 0x400]}, &(0x7f0000003140)=0x54) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003180), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000031c0)={[{0x2b, 'blkio'}, {0x2b, 'rdma'}, {0x2d, 'io'}, {0x2d, 'devices'}, {0x2b, 'net_prio'}, {0x2d, 'net_cls'}, {0x2d, 'blkio'}, {0x0, 'cpu'}]}, 0x39) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000003200)=0xc, 0x4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x5e3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008081) 1.790756425s ago: executing program 2 (id=5635): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000080000082de000000739700000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 1.748649014s ago: executing program 3 (id=5636): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@getchain={0x3c, 0x66, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x6}, {0xe, 0x4}, {0x2, 0x3}}, [{0x8, 0xb, 0x3ff}, {0x8}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008414}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f0000000280), 0x4000000000001f2, 0xfc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000300), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, @vifc_lcl_ifindex=r4, @dev}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000480)={0x41, 0x4, 0x1, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000004c0)={@empty, @multicast1=0xe0010101, 0x0, "000100"}, 0x3c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="68000000100001040000000000000000000000000000000001000000000000000f00030073797a6b616c6c6572300000340012800a00010076786c616e00000024000280080001000100000008000200e001010108000300010000000500220001000000"], 0x68}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x4, 0xfe, 0xd5, 0x20000003, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0xe3e1, 0xcff}}) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r9) recvmmsg(r9, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/33, 0x21}, {&(0x7f0000002100)=""/158, 0x9e}, {&(0x7f00000021c0)=""/151, 0x97}], 0x4}, 0x9}], 0x3, 0x0, 0x0) bind$packet(r7, &(0x7f0000002280)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write(r7, &(0x7f00000022c0)="ffffffffffff00aabbccddee080045000028000100004011f8cbd0000001e0010101100010000014000061626364000000000000", 0x30) socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) 1.696334648s ago: executing program 4 (id=5637): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x27, &(0x7f0000000440)=@raw=[@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @alu={0x4, 0x1, 0x8, 0x4, 0x1, 0x4, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000400)="75ecedce46dc3f2ddf33c9e9b9e4", 0x0, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x8, &(0x7f00000006c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[]) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x43, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 1.577334371s ago: executing program 2 (id=5638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0xc854) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x1}) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'nr0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x60, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0x6, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000d00)=@newtfilter={0xb48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@filter_kind_options=@f_route={{0xa}, {0xb18, 0x2, [@TCA_ROUTE4_POLICE={0x844, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x200}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xff, 0x6, 0x7fffffff, 0xffffffff, 0x7, 0x1, 0x8, 0x788, 0xba65, 0xd0, 0x3, 0x7, 0x6, 0x8, 0x0, 0x1, 0xc61e, 0x8000, 0x100, 0x3, 0x8000, 0x7fffffff, 0x0, 0x8, 0xfffffff7, 0xb31, 0x57, 0x5, 0x6, 0x80000001, 0x9, 0x3, 0x1ff, 0x5, 0x3, 0xfba, 0x7, 0x3, 0x1, 0x1, 0x0, 0x7, 0x8, 0x0, 0x1, 0x0, 0x8, 0x7, 0xfffffff7, 0xfffffffe, 0x8, 0x3, 0xf, 0x6, 0x1, 0x9, 0x4, 0xd, 0xffffffff, 0x1ff, 0x1, 0x1, 0x5, 0x720f, 0x81, 0x4, 0x100, 0x9, 0x8, 0x5, 0xffff, 0xfffffff7, 0x2, 0x500000, 0x400, 0xffffffff, 0x391, 0x6, 0x6, 0x4, 0x5, 0x1000, 0x100, 0x10001, 0x8, 0x2, 0xffff8000, 0xa, 0x3, 0x2, 0x0, 0x3, 0x4, 0xffff8001, 0x2, 0x2, 0x4, 0x4, 0x8, 0x14, 0x3, 0x1, 0xda, 0x9, 0x5, 0x969d, 0x1, 0x2, 0xd5563c7b, 0x9, 0x2, 0xce5, 0x1, 0x5, 0x7, 0x57bb, 0x200, 0x5, 0x25a, 0x0, 0x0, 0x1b97, 0x8001, 0x8, 0x3, 0xcd7, 0x6, 0x7, 0x100, 0x9, 0x4, 0xfffff000, 0xe, 0x9, 0x8, 0x4, 0x3, 0x0, 0x80, 0x9, 0x92, 0x10000, 0x7fff, 0xa5d, 0x7ff, 0x7, 0x5, 0x3, 0x1ff, 0x9, 0x9, 0x0, 0x3, 0x6, 0xc0, 0x9, 0x9, 0x4, 0x8, 0x9, 0x8, 0x3, 0x8001, 0x7ff, 0xfffffffd, 0x9, 0x10000, 0xc, 0x3ff, 0x4, 0x8, 0x1, 0x1, 0x3c3fd78b, 0xe0a2, 0x10000, 0x9, 0x6, 0xf, 0x9, 0x2, 0x7, 0x0, 0x7, 0x2, 0xfffffff2, 0x4, 0x4, 0x0, 0xfffffff9, 0x8, 0x3, 0x4113, 0x2, 0xa0b, 0xffffffff, 0xa, 0x80000000, 0xe54, 0x4, 0x9, 0x1, 0x3, 0xd, 0xb, 0x7, 0x5, 0x1, 0x0, 0x5, 0x2, 0x8000, 0x4, 0xb, 0x24, 0xffffffaf, 0x400, 0x40, 0x3, 0x4, 0x721, 0x7fffffff, 0x7, 0xffffff62, 0x3, 0x0, 0x8, 0x3, 0x2, 0x7, 0x8, 0x3, 0x1d, 0xfffffff8, 0x9, 0x5, 0x5, 0x0, 0x1, 0x4, 0x7a8, 0x6, 0x9, 0x1, 0x0, 0x6, 0x8, 0x3, 0x3, 0x61, 0xc15, 0x9, 0x6, 0x1, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x0, 0x6, 0x8, 0x8, 0x4, 0x1000, 0x78, 0x4, 0x5, 0x9, 0xf, 0x3, 0xff, 0x9fe1, 0xffffffff, 0xfffffffc, 0x800, 0x4, 0x8, 0xaf, 0x3, 0x9e7, 0x40, 0x0, 0x7, 0x8, 0x6d, 0xb, 0x2, 0x2, 0x3, 0xfffffff7, 0x0, 0x6, 0x7, 0xffff, 0x7, 0x9, 0x4, 0x0, 0x3, 0x6, 0x5f4, 0x7, 0xda9, 0x7fff, 0xffff9a46, 0x40, 0x9, 0x6, 0x2e, 0x3, 0x6, 0x36e, 0x3, 0xc7, 0xf, 0x7fff, 0xff, 0xf57d, 0x7, 0x5, 0x8, 0xf4b2, 0x4, 0x9, 0x6, 0x1, 0x0, 0x6, 0x5, 0x400, 0x800, 0x3, 0x26, 0xbe, 0x88cf, 0x3, 0x863, 0x1, 0x4, 0xfffffffc, 0x7, 0x3, 0x5, 0x64, 0xc, 0x3a, 0x3, 0x5, 0x7f, 0x5, 0x9, 0x6, 0xfffffff4, 0x4015, 0xfffffff7, 0x95, 0x8, 0x1567a127, 0x7a96, 0x5, 0x0, 0x7, 0x6, 0xfffffffa, 0x252b, 0x81, 0x7fe, 0x85, 0x7, 0x4, 0x9, 0x6, 0x7, 0x5c, 0x789, 0x1, 0x49, 0x4, 0xe98c, 0xfff, 0xa42a, 0x3ff, 0x7, 0x6, 0x9, 0x8, 0xf9ed, 0xe0, 0x8, 0x8, 0x9, 0x9, 0x9, 0x1, 0x2, 0x101, 0xfffffffe, 0x2, 0x3, 0x5, 0x1, 0xffffffff, 0x4, 0x7, 0xfffffff9, 0xfffffe00, 0x6370000, 0x5, 0x5, 0x6, 0x2, 0x2, 0x3c, 0x1, 0x0, 0xffff0001, 0x3, 0x6bc, 0xffffffd9, 0x319, 0x5, 0x21241833, 0x2, 0xd5, 0x9, 0x1, 0xc1, 0x7, 0x1, 0x6, 0x4, 0x401, 0x5, 0x8, 0x2677b701, 0x5, 0x7f800, 0xfffffffb, 0x10001, 0x40000000, 0x9, 0x8000, 0x6, 0x8, 0x6, 0x3, 0xa9, 0x3, 0x5, 0x7e2, 0xf, 0x4, 0xe, 0xf16, 0x3, 0x9d, 0x5, 0x7, 0x30000, 0x0, 0x7fffffff, 0x5, 0x10, 0x1ff, 0x3, 0x200, 0x3, 0x8, 0xfffff573, 0x512, 0x15d2, 0x6, 0x10f, 0x9, 0x8, 0xe6, 0x4, 0x687a, 0xb, 0x10, 0x10, 0x9, 0x3ff, 0x4, 0xff, 0x6, 0x30, 0xcf9, 0x400, 0xce5e, 0xfffffffb, 0x7, 0x80, 0x0, 0x3, 0x400, 0x3, 0x4, 0x40, 0x885, 0x1000, 0x7, 0x8, 0x5, 0xffff8001, 0x1, 0x8, 0xcb, 0x4, 0x8, 0xffffffff, 0x6, 0xe90]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe9}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0xd}}, @TCA_ROUTE4_ACT={0x26c, 0x6, [@m_mpls={0xa8, 0x20, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x806}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7fffffff, 0x10001, 0x2, 0x80000000, 0x80000000}, 0x4}}]}, {0x3d, 0x6, "c8817a83d994ea8cabba406f14ac7d787824edd73ffbc8c5669c89fb20ed67e46d567e10bca388020b34c9cbffb80db9fa9fdc9b05e6bef0f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0xac, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, 'ip6erspan0\x00'}]}, {0x6e, 0x6, "93c16ea165c86f15d9d5efc07ddc492dd1edd242a6b72ffcdae109eff4d45ed4102df2b2b85342c325d8caa16bab85cb11b9b8af3d11d5ef32f272d62572298aca415db0758b857adec3ddf548b221f070bcd54b704352eccaac7793d6cc68124c420600c6ef7c6e3ec9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x114, 0x7, 0x0, 0x0, {{0xf}, {0x6c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0xf1c, 0x7, 0x8, 0xfa5}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1ff}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x79, 0x6, "8681d8c8a131e3bed90138821ef85613b89b8a9111f4057abf7dff27044e86053cba9927d4209e68d3c5eade4a322d8bb7b94969654f650b0950d3c016e37e549cab0e2cd036d7f4497bae20897d6958be662ea1a0c691fd3b052e978f88327c5b5bf6cfa5c1ce3a3ad85ab8c6253df251b223c3f6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x14}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}]}}]}, 0xb48}}, 0x0) write(r4, &(0x7f0000000b80)="00000003", 0xff44) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x1d8, 0x43, 0xa0, 0x1d8, 0x98, 0x2d8, 0x178, 0x178, 0x2d8, 0x178, 0x49, 0x0, {[{{@ip={@empty, @local, 0x0, 0xff000000, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffc, 0x0, 0x5, 'snmp\x00', {0x7}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@mac={{0x20}, {@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x1}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x0, 0x2, 0x1, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3d0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r10, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r11, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r9, @ANYRES16=r2, @ANYBLOB="000829a07125e5e211e571bd7000fedbdf2504001f0008000300040000006cfa6f7967bc5238080004000600000008000400d000000005000500f8000000ad120967de4f", @ANYRES8=r9], 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040) setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 1.502621425s ago: executing program 4 (id=5639): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000ffdbfb251100000005"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffbfffff}, {0x0, 0xa00, 0x40800000000000, 0x80000000007ff}, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002580)=ANY=[@ANYBLOB="3801000010000100feffffff0001000000000000000000000000000000000000fc010000000000000000000000000001000107144e240005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x24000000) socket$nl_xfrm(0x10, 0x3, 0x6) bind$unix(r2, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2e, &(0x7f0000000500)=0x6, 0x4) connect$unix(r5, &(0x7f0000000480)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f00000024c0)=[{{&(0x7f0000000940)=@ethernet={0x6}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000009c0)="1e55774ffbf46c09a159326b364053e24b9985623fdab3d391f1cc6ea81c85ca984d1c04d03b352153900d2ff3c6b948f31eb01c34020cdd", 0x38}, {&(0x7f0000000680)="79242751f104313dc8af9df93983adfb159b5f293d784bcac24af0d2b60000000000001529bbb0c290", 0x29}], 0x2, &(0x7f0000000a80)=[{0x108, 0x112, 0x401, "1cf7152dd55a5607bb9d917b5608b748a79032a2e6318eeb201f08d30a51b022a6f1829345d5ee9cd1c56064de3dd692859967cb834032457df13b39c12ff87dddb9ce4550be58c6c57c6ac203c0392030ea7e04dc5d30674893b1edea32e6bf3e41b015f1b9eb9c24d3bd850ea5ca3f73f2c506d301f7330c0d77b6a07af89842c74bd290832409ffeac0ded0d2e0c66465ba2bf693a1a49c940b1d0eed93072862aa2cccbd3cd455a9042f49ef1d3e23a7daf66cec435d6b1010f732b40d5d35d068dde67a7cea64ae5872b3dae1de5ddfb76db183113bcbea0aa5ae11b87960d6be5be49b28a37ba22610cec96920006bea4623"}, {0x50, 0x108, 0x0, "a5b38e64d466476728088e2ddf34474e80e6700120d0bd474433e4dccabb8fb39af9ac6dcbd26eb201f0d983586a66561935ce56b14f0d52eaa5"}, {0x18, 0x115, 0x4, '\v['}], 0x170}}, {{&(0x7f0000000c00)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000ec0)="8ad1a6c66bd9ca056196d9c0f7f87e8964c5950ba81a2b5b4540fd3857014789cc35a2021efb8b62173372dcd54af63bd3ab538f172dc2a90002c346033f81b31d313b96b3efd93352693d99466a99e92504c9d8f91e9042d95fbb7d144f53e8e2a2c3285fb3db02c46d372523d9bb16c51761604d1ba453f306a2f301372a492b150432732427e146ae3d59f49c48880ce32cdfa80e8a46ad0f830bd447f9f2f221053ad20b7a32d721877670cb4a8d4d8ddbdef2cc9780fd0cf1eb11ff752592fd1b6969a211f39ff5e68a053b63e40011cdc86c340a172592f3245fb7332da232d1b530186426e1c4a1c0", 0xec}, {&(0x7f0000000fc0)="21f80dad1be52123ee129ffcc4bd84193e54224c762a9a20414df87ee61c06417867e1d95d0e1269fca848c768ac1717875c6e16462d4e0badef8b15ecd528c7a8edab737995a394f22d9a74a421523c317594db4b0df5e690ef51c01c0dc8bceb7620f175b7e3da57382fc66e008efd4bd71036af9738604157cb18a71a", 0x7e}], 0x2, &(0x7f0000001080)=[{0x40, 0xff, 0x3, "5830e733cd669259f890e3ef258389c7fd0022ea28fbe7e5f9d78ae20d3c41dffe913154a51ad1c0e6d17034737a"}, {0x38, 0x10b, 0x3, "78f6b25428430dcad4dbdc5a857f41e83c279cff5ee3876dd576adce9746d8fc47c6"}], 0x78}}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001100)="c6d1256d8aaf228541cd0bc9730a2d1cc8db59593e71fb3ad631844f6c05512271b54fcc21232ce8c199b088c278e663ecc513461e896a9af6100b21611eb5c62a50ea1d4222708cf708bed7c87ab67a699cf19bdfc7d56d60631c625f3f9867d67a0bab9a59cf04c0df1c97fe89a1ced2f1085c99c6c95874381409b47e660bbff4b447bd1ce65d4f81e93ced12f0bd667f1862106c1bdfcac294a68155036fa961c2f04610f26689f335bdd47b7444794e6cbbde20f5a987bb39e4f1e9c98d077eb43f1c63929bd5d20bdc4c4ad68749987a57586ef3cadf77134a942ff7e10e3312d39fe56470d654f877c1606831a490f2a172e7e0", 0xf7}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="6daae1214209b026c48cd0e98d7bcd60d10eba7a101ca783627935320893d34d6d5d27fb0eb9ab69e9067f90d2640ddda4e312a62268f5bfe007f98b00e7463fad98f5abc0f35b6b4be3991ac77918f8d4daad74bfe30da89e4aeb3fb9f0392b42b11eac3316f97528c5cf2f2d8943e09d7068318f77a32902d3d510fa7da595c7f61a6c1f162fd62708cd0102b55c25a30f1417331df8fb1206cfdfdc64b9a772d7087dbf9871", 0xa7}, {&(0x7f00000022c0)="43949b9439bde7901e475c18df6918ffc1eff08a7de6e7a650a2d7f942a0b64c7e14f862e2a400ef5369ecec", 0x2c}, {&(0x7f0000002300)="7b9ad13c1837d8e2", 0x8}, {&(0x7f0000002340)="54c541e8b88fb8dbb87741404ed3416898b92f0f48b741dc9dbda50c3a5f6be5f6f884145d7b5d37bef042a4b95a6dc3e22ef05d72480690d3bb20f43d49ef0d96234f16357b08a9276a4a0fc8e2ceaffb5f08a69aa875f9024a333fc6ef9d483294a34c6b72037ff2b332a0e25d4b630235573f3bd7", 0x76}], 0x6, &(0x7f0000002440)=[{0x78, 0x11, 0x2, "becea08ffb82713aa9402cc44740d64d1dc2c6c9cf6b6c89a91ca5af9dd9ab148b783965ce7787d9df39092c55554717490d6da330621c5da226f928de20cafb11ba2e989be75f6d7d0636c6601e170c59c4ebed58a7cc1f1b206baba9bca14b1307edaf"}], 0x78}}], 0x3, 0x3ec0) bind$unix(r5, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x306737e2, 0x6}, 0x0, &(0x7f0000000600)={0x1f, 0x2}, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40030040, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a00000a0201060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800122ad8fb8e1bccf43aa94ce1d8bcbd0000ff01000000000000e0020000186100000700000000000000090000009500000000000000"], &(0x7f00000008c0)='syzkaller\x00', 0x5, 0x1d, &(0x7f0000000900)=""/29, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xad}, 0x94) bind$bt_hci(r1, &(0x7f0000000d40)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000d80)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r1, &(0x7f0000000dc0)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'syz_tun\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x52cd00, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000e80)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 1.472671163s ago: executing program 0 (id=5640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000090000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe0002476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea097a75dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f01001bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bc0004c3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b4150900000000000000f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d18716975c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f9836faa292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee63ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c11465fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff300"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.372871578s ago: executing program 0 (id=5641): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r2) getsockname$packet(r2, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000e00)=0x14) sendmsg$nl_route(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@delchain={0x88, 0x64, 0xf31, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x54, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffd}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x21, 0x1, 0xfffffff8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xe4}]}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x100c0000}, 0x4004800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000007c0), 0xc, &(0x7f0000000b80)={&(0x7f0000001100)={0x1b8, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x3, 0x7, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8000}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xcb58}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IP2={0x0, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x1b8}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x4, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000019ed8d7578e2c677cc7b959d4c300000000000050"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000c00)={0x28, 0x0, 0x2710, @local}, 0x10) close(r7) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000c40)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000c80)=0x1, 0x4) sendmmsg$inet(r9, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)='\a', 0x1}], 0x1}}], 0x1, 0x4008004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000800)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r11, 0x2000000, 0xe, 0x0, &(0x7f00000005c0)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.329759504s ago: executing program 1 (id=5642): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000101440)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00001013c0)={&(0x7f0000101400)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00050009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc050) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f00000001c0), 0x10, 0x0, 0x1, 0x0, 0x0, 0xc881}, 0x2000c080) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 1.156352458s ago: executing program 0 (id=5643): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3, 0x4e22, 0xffff, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff}, {}, {0xe, 0x4000000, 0x1}, 0x70bd27, 0x0, 0x2, 0x5, 0x0, 0x8a}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x4f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.065865764s ago: executing program 3 (id=5644): syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x6, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x0, 0x0, 0x1, 0x420008}]}) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1}, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x20000005) socket$kcm(0x10, 0x400000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) 1.06528017s ago: executing program 1 (id=5645): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000ff010000000000000900000018110000", @ANYRES32, @ANYBLOB="00000000000000000300000000000055090100000000009500195798306fe5b6b1a82d714d019ae500000000bf91000000000000b702000001009a4d787cb02e0045292ac1c324f8fc9fa26d9974ddf9008500000084000000b7000000f6000000950000000000000000000000000000000000000000000000000000ef3bddae337db2ea6f345fa1cfc9afd6a9f6632811f3f81d9098de840fcea0086a14865e1b7cdc69024ec55b9aa8a50c0707f2f053727bca99d7babe5147c4faa47a3dbfbb7c72ea1b180cfaca28fbbb921ebb5c53", @ANYRES8=r0, @ANYBLOB="3afb78c5cdca1ca50e0c3ef5703018066402fe543471cc0ddf873c399b362acec8e8380ae4e6f2c466b63289c6713c79a391c4fbfc02be55df2768d663d54591a7f67d90303f131ecad982ece9bd3205984b3dc4514b5b1033ba99446b1dee21f9697821e12ed5776059375121c8f9716ac419f92649ba869a4068415201fd0dc71ab6336174ec96ec86270c50daf2fd3977"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0xfe6, &(0x7f0000001cc0)=""/4070, 0x41000, 0x4d, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f00000001c0)=0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x3e) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x7, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1400000010000100000000000000000001adafaae99c132168667fff35b17a04cc090a010400000000000000000a0000041400ae001100010000000000000000000100000a44d8d7f2e0aa557c3bdfa08ad6d6ca648e8e48c58fd6039668543c0c853cbbc2d200e721469711ea66a2cddfb0565a00c1fcc56b051ee62db369cb89708bfbf02558a54d931990136a541b5bbe451d6ade558ccd54e4c01a343a78855f3bbdde36648d58cf7ef09f1f8be1c1e2ad8cf83b1dceb80a6e49031700000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) close(r4) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000580)=0xac6, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b900000095"], &(0x7f0000000940)='GPL\x00', 0x5, 0x0, 0x0, 0x100, 0x32, '\x00', 0x0, @tracing=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f00000003c0)="1bbb2600000024be9312b8bd000000000000210d0000aaa8fa019600ba9381d440000000000000000000550e38208987db000000000000", 0x37) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a000400766470613000", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="12000000cf67a952e023e992edbdd5c1b1e36d6bbac93c77263fae0dc5fdac347d5340972d16bb52a009278e22602b6af832d308c1cff035498298199fb7c6ba87c12124437402708b084216548d7ceaef808056c79b0e4eb4335424a9d2704bc70a13af5868c6d6ad", @ANYRES16=r8, @ANYBLOB="100000000000000000000400000008000700e000000208000c000100000006000b0005000000"], 0x2c}}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x8) 1.003298058s ago: executing program 0 (id=5646): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000680)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 826.58438ms ago: executing program 0 (id=5647): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, 0x0}, 0xffffffffffffff98) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) sendto$inet6(r1, &(0x7f0000000240)="135caa9392dda584f858cbd37b3be65bde34c430d87b8ded0fbe80b4e36a038360c88972e1e4f8e715e88b790cfd435a8c38c8628f7ef64ecfb955f0e629ce67b3efd8dd623bfdcbd260e3fa40d7df9d4c0aa971716c7bdf95a8645b7efb3ecbf3db09769cd92dce7bbe2287f41b474f422337184f9616dfec713503ce6552500985c3aaa532c079eb1889286fc4ae241648dd77ea1f11b1382cd3b287218255399451f8fe353c92ab0183baac42b9a9328c6813aab7e0d78609bdf82d85a642210679dfecfbad7b8d", 0xc9, 0x40104, &(0x7f0000000340)={0xa, 0x4e22, 0x105, @mcast1, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r0, 0x4) 825.863785ms ago: executing program 3 (id=5648): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8009000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x211, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) r6 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'ip_vti0\x00', 0x0}) sendmmsg$sock(r6, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="63a80a426b71f7207613f91973584c7d146359e174b04679cf64bc09b5d31231dff7a3c9ee4baa2d1ad6aa4ed8dad10ad1acccb150a8484236cbcb19da45f3a6c5e1178a6d67b36fa760e2e6fdfc4a9b6585cfbd1ccee7a4e5141dd1c9f286d69cc7a9d45847e625", 0x68}, {&(0x7f0000000400)="302146068fe29f96eb34b014f28c6f07ec9ea620ee93e5e425bccd86728f0e95748c060708973349a1b0", 0x2a}, {&(0x7f0000000440)="77102c1f9634", 0x6}], 0x3, &(0x7f00000004c0)=[@txtime={{0x18, 0x1, 0x3d, 0x10001}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x3d370f47}}], 0xc0}}, {{&(0x7f0000000580)=@qipcrtr={0x2a, 0xffffffffffffffff}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)="34a292276020f7136b6525affe0dfdab5eb430fcdc3796cc8130dfc330f280cebd8fcc6a6121e3438fa3eadbc663a8ea1aef5a42484fb8226caee4f03c4ff0a57b", 0x41}, {&(0x7f0000000680)="2984704c34d9365f1feb03218e85c5ff07e5", 0x12}, {&(0x7f00000006c0)="af6b39eb7ba29066e8fca0646306e9376fa9c4b8fdc468a897006ee912b3552c0caa787bfd1c83b7937532", 0x2b}, {&(0x7f0000000700)="b2187321d57ea89a4061a7a5dd2dd4bee8fc56abb6f0c100d80ccd915c1451efa41204ed36dd884b05c081a3114a46773ef969613c408f3901dfa50f6e6fb6bc1d474eb305732a62ec6050cee4ba2bcf5783", 0x52}], 0x4, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}}, {{&(0x7f0000000800)=@sco={0x1f, @none}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000880)="62b74069e67116dfa25314f96663031c5db7cc47ce8490d517445e39c4cce3be493a5eccf77fe0a2c7956406b0eb2c09d7baa7cb0d10331494ba2e2ed2dca14d39f4b9deb94232d603764de1d8501dbf9cf48ed1c2ab780e423f16782b76381473e27905e37629479da54f8243990bcfa2585f4000fd808c76832bd0b9d0a23ae3132702cfdeb27e701c5806be7d089e944020606d73ea0372650988c74e457f03c4f91280dc98072678e815b66e2128f5e8b08891e32b95f0885aef94924b2e8688fb92ada5bd1d39a55787bb702cde332a844d2d1d4aef0ac4b9eed820df675e87dbf4bfd09dc2dd56139cd13a1818a68b4ac7299534", 0xf7}, {&(0x7f0000000980)}, {&(0x7f00000009c0)="82b3db5bc9aac9897196e63d214e36261356e59d82a6d44fca97d3ad28c6a408fbd79023", 0x24}, {&(0x7f0000000a00)="7b18254194f34ad649f1ec79f3c475fe0b0cdf095cc009675c61b9fb2d815f77b1b0974393e8666748db58aa1e3d1f74a2ec7d7ec879e5ba57d2e1dc7d98b74412d43b43d31587dffe7802a85d4f0cba39860951a7be9d62eda8bebaceaf560a9fb52d", 0x63}, {&(0x7f0000000a80)="1af751e9af656ad594f6c05eab1ce092ff9c966267e364f7e80a7a5cce2d4bc11e2cf4753336bc53b59e8e2b57aa30abe934498fa58147e1ebd11716a82a9dd61b441b43fe841a022a8bf896a15e819dab40be2a19f09730efecf5c51db8d81c770f1ae4cb57e35ba35eab5246cf3223a8c6b4445cee974e268b28d03a11d5eb89c81b7b2e6acc1cc983d55603f2fb8e11f3492a018cc326ceab94d06da81df3a0049e725d14d0b29ec2432127", 0xad}, {&(0x7f0000000b40)="b0671d98a4f2ed1e26615f5bdbc4c4889061ea16777c16136b3a22633da4a03e9f72d18fd2ba615ea705e5b8cc20d2dd734b1d5bef3f9449df86c8a3aa5387314e4cace1364ce2bc1b0439", 0x4b}], 0x6, &(0x7f0000000c40)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xd}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}}, {{&(0x7f0000000d00)=@xdp={0x2c, 0x1, r7, 0x1b}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000d80)="ce545f47d9a721ebce97a31faec8a6d415be7ee2984105fa6aaa15127adaa36abec6c8ae31b7915c5fe0c88f1e", 0x2d}, {&(0x7f0000000dc0)="5e5f63ce1cdc6e243b435a6d481a385f35d56c52d648d6b76e54662a9a30da1d5b66a9b4f2c7af772993743d975216cc63760934b74774fbc8dfbf786cd7", 0x3e}, {&(0x7f0000000e00)="7ddabb9baca65e93e0e304eac4e781a235b04a7d38e54ff79303f18fa4a7b5e49ef2d345", 0x24}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)="7bc6ee74c5862774703d0732f6cf7d8b794998827c46f5ec12a454ad5a9eeee43f46d207973d985b2a1058bb271018248591f07420b00815df17d4ed2d14b2165daa9eff23c82c9d55", 0x49}, {&(0x7f0000000f00)="563ab671fe2878e8cbabce909f9c9037db7ff1373d26f44138c1a5d5e7f524ef921e1d091ab2ede21ad68d0f2df730b1c1a1fc140bcdc9c0f8bdc424e8b82c38c55815c7f5a47a763acd26aa2da61ac20cb82e0e14513d0e99b491961f22d17afc4f92ee8b18324f82efda56b433c119edcd177e0300b575f6615aeac3b71d53a80dcbf1f5da4393d4f77d66a065a6346ac0e5989894e4e6", 0x98}, {&(0x7f0000000fc0)="d5bd173f0b52b1daaf1527928b9bc5ff234799a3c30e2031a5d9dd186cc3301209bef00f44b24cafaa440ad7e1beef87b438970bb3c7c73d25a86de99c20eea409bcc54217f07bc582958af73a2430e18a494837ba1a82ecdce80e21525e3727842bf3830e0f905157b69c4910d0b39be7feb3ce7e7e0f06d743db9bc305269a0e24e87c16007f2a45bf6f7441ee19f8f1b8a4102929ad46eeef27773b3034872385a37394cd946bbe4ca3a8b694ebf4ad7e0c6d7971b88ec45a23175363eeef2a83206fc57800223e7b768b86b0c63e37ae557b6a8fb3c2873e0b455f1ed64e22305b55ade88570372dcca7898ab4", 0xef}, {&(0x7f00000010c0)="05bc17be5223dd6bd07eae519bbf2b9858f702944b8875b77a3923445cc0bef29a856346950b47f73060f2c0703251fa90705b3162875c3f09b736c829dac7fc869f876e45c0ec429620a44534f8bc6b7f0c067ba687b5927f4f62c19dc95fa4686ba1aad15fca6c5a7178dd5ae02c08812e86b1ae86dd6b8cb6d636fd2afacaeccf", 0x82}, {&(0x7f0000001180)="dacc1da5100e96f8280c2406e6c54efb9a7f20db5d180afa12acb27996d6b4ef64698b91770c7e877523021060383941d1cc80e09b98ec3949673a5990a1a980aac968eaa2cc7ec18849d5f7a4c4b427298cecd20be2fe327e8ec713584a446a3760646fb8c348569c262cd3440d88acbcdd3a2bee6035abe67b1a600d164ee59a7c04f68c9f464ed8c7f5ae3d8270d41a1981e647b87b7746edd1b21a04bac2599dc6f489d3d7d6f2e0e0c31581b2d983965f2a7fe2e19bc7e684bba95e2949e18b5df57ead9722149e7e19da47953936b6c6862af49bc29b992212b476c6613e1f4a77664bbfb1738777e473bd52848174f2ffe60d3edc7e28c6ac443da7e3535fbb84f979074906e8eada3182c56a721ed7f587cffd1eac60a32fb9ad8c8b2143ec0a787e07af03cf71f59087527a71faf482cc9c3c6011be6c39ca7bba261ebadaa233fad013bd745abe68a032fad76165b1fa737f19a886fda37522d3bafe6d68889611099840a277432959ca6faff6d0d9b0a6dd414854cb3dfc6dbacf9bac04b1671f94bdce6b1e8ef5daaabaa3e620adad218a3bfc56d36228ae3afe98743c9939aba76aa2c90e40779304dd01d413517b3999160da0355b2da4357461c2a2a5899eb92fbef741da6992e399810f57057e0962775f96a33b30989ab817a28645347c905bee33f1191448c14fd7f69a839aaba77f706521fc47ba535dcb79a552f1a67e702e78b83607769f2e40936872bac1a2e110026f8a629fc78556b5b5f79acc03f6db18e0af3535541341b3c33c6c3a1bd00ea837dd963a58b144de5465fbaaf71d8d1a3f9ac07b2940048a47907969f8fa0e88612a3723680cc7f50776bf916ba725cc8de369c31e6e3a1f49c5a0a10b1c45f31b0d19dd482ed83b8847e62f2d52644a652b7536af8c9b1c8da04a5358de2409c5af2f9e5a55830bd0c3792be31285d14d7826dcd6648a8547487c37de25f969dd668bbcfd3b3e6544cc14c390363d3a747a69b651f2519bed9006bf49a0abd8584ef1b8777e168505e4a4c5573a3f5445e1bda16cb4d19989cefeaff4d649bfe50b1dce0b1bec9dea23567281995f5029367efa94d7f42ba32435d2424557b334629430c081b99d88e72051e4b67f8e1c49d1f7d9fe3c1d3be0eb358f9e90fd2a9426fc9692338b2b29872ceb8f57868cab9be8bfd92636dd3a733987754653c784d7685f7d9fbf0e400980b2fee2f86392acfc8ddb2b9eea8e45bdb01808c9fc4691f64f3fb12729c144a8500febb7e8ac946c57ba28ccbd55e423903f11d0842fa7305cce4676bec09b1a6716537fc72e4f619931b7e8bccb36f9458c998275c39bf997d5d1f20ddd5a85d01ec870ac06c0552bac310e3ff473f104d88a087870e82486ed9f564d55b09a7c170cca674d299c721a643732b2062f00549013b66e90f89f05290e32c279a51a96a057005c9e21ac0cef00ef655df0888f3a95ac57dab36ff59997d12cc3ee02003d998d9df578ca419011a207f082c9434d23ca4ce26cb0f0a1c3626f5c7c917dd281163edce84c6d89cd0fc5d42eab5cf47882d466ef468b53cb89cfe1f1aab5eefe89cffa77969f110831c902ac61c3015283c6327482e490e095855a48b48b30e879317be50a90f3746396fc60785fb823947ee7ed1e9c987d32b9ffdb401d5a506a45abd07160598d06382a9314759fb4a9fe52b86e6027be5e7c5ca1a16b582666df86b968d1f51ab8ae7f65a11512e47ec6e4098404e7b9562524a1446923f034eea798b022092cf797a90879a121d17996eb83f1f52634faacdee9418526de8bdd4b665c2a8a7157aefa57cb13007dbe8c189c5cea7133cc0429ed27c6caae0f160d2ca6c1918728d7eb0c8eadd995e77e556cf6e1c796f547cc48bd0898930487ee4f2182892a91601f5053da3db78d340de703390b73f0663756c80bad1eaf00cffbc63ab6f6f0bea22436026823611effbaf8503c99f0521ae662e1521d9c54bd0b73be01ccc181bbeae744885b7c9f2e12783d1c1e9eeac2e8efcfe544cf3067a6c744d375b8a5f38650867121d542ad0a4e111f68ce0fb8dd92f76e024756fbdf9399ff124ca4390db9a934556df8d5d6f919f91edcfd57cf758cccfa9013323cc3acd1a50e3a49b4e05539a81fdb1e0466f798c8ed92b2111ecc20e800c9f884b5a8dee2ff31a52375db089ba126d7e23c2d1d984fb134cb769383ad847ee243488ef8b12840f62ec6b2ce421ff73a94194518deddd87268249a7740e2111ac8875a18fa49fb76cd9c4e1b4f01947f8d544b91bbed0a0639e7f3313e142c55baf3f23afbd94d57c0e502a159758ab43ef160d18822b3ada425739bf6c15696cafc8961dfa0e0d5e42ab0041c6a7ec16efb1481643c1dfe4c67b9c59f9a58887b80010a2be472196e44e4486819351fad311a105c459a979e3c3f85faf0cfb944a95f195131d0bb1aa09449f2c879cb7dc4247a9597a7eced98ea91ae86e8dddf66ed8e5cb5d85dcf2e2db06179770051d85b2a035e0e158ad23ba6a3edcbac8f64c0859e001726c687bd81cae7528266e5dc673d5e5cd2468fce026f7b28e03fb43148d647ce17d5e0887802736887664730474ed74de13a97e9a20330c68febb622720f7686e0eb09456cf1d7ce950cbdad8f13a627e5b853c22ca72c4dfbdcb8dfbce86ae762d14ce871efca2cc8b2a4652607ff033b7e87afb1b07082b65b0082e8fa5f0ec03b51ff08837517c38cacc31f56276d2892ecc24308a458cde3f0853f12c45b6e5127a57152d4a8408bb48c75fb921cc8e17af102f869e930e6e7e810001be7becda0a462e619f08ab294e6f909a44cb71efbf2b1e54786853e3bc5f03b175291d43121460d4db5fb551d820b2c4778c14c9f13727f91e01ec895acd0e3a952946610435c7be69bd5faa0842853aeb9f4b8bef6c0c820e2311500e4eeb3e1986a8cf0c3236f6750fed959ad5024d39e9d8c62ad830815a6a54a1318d556882001c190d091c2df4fcaf6e34eeb5fa22897ffb72a2e6cbbd0534ab59c908f444c4b5b945b5ecece0330370ad5780b9a9eb3d965d095f56eac7011409d164f47f631013056f2d0a8aa17cfa01861c5d2d177e4d6c940eb9490df4ae7c5bd68529e3ac5e00811459d23e6222e81412c1dca95564459e3857e2962347eef874e48e9ddaee41c4b77821d272146b97033b4c88be3413b9b243dafbb863bf5c69aea7930e2cf000e1c6408f58153bd292c59159ff98ef6c1e066d6317b5728aef09f60e70530e87b8bb5b18d4fe2a608167d40f0d0a5963e4d4aa0df7f59bad55a246ad3954c08e88942eb60f53a7b7a865bce8502778172aa58453065c6e70a05fd306ecbb9120ffd8015f77ea53d1c34659eaad4fd36747f8d8bde2fb668edeb77c8ef1ebc38f416be3d3638271cd9efec1793da2a96cbd9f6ae43e46952acbfd9b1749461ddd2085ef512b84188eced9c2830c9ead25922973896cdf21327d84bb2bd802a43ba17b9299c9df877d8649037568d880daf3d9299009e02ea6aab14809ce23eb548aeb247dc0799a5f687528367645e95ccbbfa387827a42eb3d0427404dde24abe103b003c67495b4ced07120c1da41209b27532ebe60692d0ee88c866c79f00499589a661e607cc23400c674262f733e0e574e6977538f3a623fd3b0e9075087d573dd552736553c37aa6dc89cf87feee2f10c72a9cbb2ab791d9eca2b724bd8ebf60549b4de8d214517ebe7d0ddf2b92a0de9edd8d2a7620c686fa04bb1759b15b1a63857fb4dfbc9ca46c80ae147d0114f9f052371d16d0ba8756a4839e4d05332af5889c92b9777f5e773ed741e5e6e7af034026d116df750e9eeac09a7c943872622e7a1cdd72c901e3b274aa59af75e70d74523989061db1db92eae9e7db7d41c2d10a747af6044ac75902b2d3abb75b22581da4b0f43d7d848598ba506675661108193f06f386a1b958daa6233553a01a4b242c07c39e8b41d8ec25b657a6d65b54196747bfeeb91d1eab208285c8bfebdadfd58f1b6c29e916267e42aa62029c08de2fa8265bec881f4fcc112cba07f95b8e692bedadf3d6bf58cf961a523705487d59e45710a778e631ade69df49591cff27696c3b3b165c4aef55bb747526ceec033328c9e0676cbaa5156a7fcfbfae2df398a39e1067801cdb6fc06430059e68cb2989d2b880d591b0510f85e785a5a4f849cbf75b0cc43f7e951e266fda681e663ee4b4413b872e7f70ffc22c45092e5e209c9ea91f0026ead9f6f6eb31e459c6e1378f23545b5bc81b4c0d12c85a73a5d2039d0b6bf5bbbdf85dc09ac6ddb99a6909e9165ae4d6f6b1473fdadfddefb2c67de3f395e3a831d613aef7c3db8439b056c53d5e2cf60f9d5f4ea3fd7fa5704d2f3d36e55ff5c616931380f9cf27485cb166df0914e74bc4afea49b7bc4ac0ce37869cff06602998a2167ba4360a5e9b519f4c0fff3636bd8488f8423eb4f1029d3e0d90d3f8531f77b279af777d7bf9ad7cf1bf4c7bbe1d5402c2de9e126b3da568ada140740b2cfade5d14e6d4732fd04dfbe904788cba42c170b2af6a1b7692976182bc47dd893d059b213a8432298ed3d332dd922237cf2c105db34ab5c84b4d13e18738a41a96a168549d046c49fa56e56129f17ecafb3695e065663b23ecd0048d9c9540a86e8ebc7b52139f3d59f9847f4969da1c56d8b0ced94acb08506ac2f506fe8ecff4ce560db77fbd89f30df23ebd3e4dccdd722fcf18ff1cca2231d2f68ccb847d45336ad10e26ed1fbd63d9bc757b2300c208c5a67b99724790894f1752a08c522c065b6a49504b200691a2228ca0c25cfddc28205688dacad53a53698ec1919c37f1febd93d5396cf178cfef7b86008b7bf3b1275d74d67da0601b9311b45fe8b3843c935c711cfda354213f964d352df89b4de2cddd7731fabf7b67de8171ee6f7631d54a74f860f7ad0effe5c7263768766eb82061fd9e54b9fa2f8dbcf7edbc3442df39b67dee922bb480ac2c5e0e8a56610672909d0fe81ace657df5514f3f3b3c2459208fb4f6a560da2f4ce6403e560462204a6d6b24a50648aec80ee842c6a318ed3f89bfbca1964a23766f7e8221136f2c15a04a289c2d0255a81834c3b8a41428dfe0445955863e5244d6d08a67fbb544b3f8e0bcb8dfcf68337370c15ccfa36005f28c30a6e423fe5951c38206d62959fc26b9040a3795cabe86e60bf5a003a4903931801298706f8e5ee0eadbef6e53042268aa386e2fd5419c939efced705e95c187d48f79307a5d790fd30d4bf8de1d4f54843043279fcfe5e734744f83fd2c78c8d146bf7aae154ef67767b8709a3b7795aef53de2f848e69df9d225d625ac5b9b0b466936ab4bca5be08f02d0e1a4f413573fcd0504a74948ecd77b57eaf5c07d4de3f3d2ee0abfa400afedeb9e74a7225c68281d11fcd61345c9874ef65263ec3ef7e7d3ead10fce0453145653a307c4fcd0931d82c780f62ffa75b063886f9aa11dfd56f3c463137b59a9097a5403dd245de312c392fd455f36e34dd8d3e142ea31381929424fda49722ba8ee3b1e52e6f3abfb128d195691e8048da9078619c70638e4d4188b54583bc4b8f2c16a6b636319254bf40ba42445acfd853023dfdc73e4d39b08426e9c64a35909c0ed621123a6dbd106bfa5062e778549194d55f63652dfd8622ce3c36c94a61cc7e74e0324b04e4c4fb176e876155c45c3a8790e6ed4b978f8d45281ab09835b0c1a0c0b26e97afb0b248de02d125f520ea2977", 0x1000}], 0x9, &(0x7f0000002240)=[@mark={{0x14, 0x1, 0x24, 0x81}}, @mark={{0x14, 0x1, 0x24, 0xfffffff9}}], 0x30}}], 0x4, 0x8000) socket$packet(0x11, 0x2, 0x300) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000002380), r8) pipe(&(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r10, &(0x7f0000002540)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x70, r12, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x863a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4090) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r13, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x18, r9, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8088}, 0x4008044) syz_genetlink_get_family_id$ethtool(&(0x7f0000002680), r10) sendmsg$802154_raw(r10, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f00000026c0)="675e68339b2e2c7e8ebee016dd62ba94261760bf914423c931c66e12c65629ab259ff35dd28f522a29f560c127e1ddfc464c7e0f63ed5b552eebbd03cd7bb979ac096f2883b95fd55aac902e3f2bca33afc52f00fd8a8b605ba518cb04a11940c74fe677823ccff6dc3c592d10b11c0b57c9f56e8d285e704e63e8d5f2411b4f06a224e797c29b069f0c8f78989579902a03619c3a064ae2c631aa0b16cea79c0e103d84f44d1ffd579988437f8c6964029c24d7418d7f2d82519068ea5123240286a8819211602b16f09b9e7496d2a9a8861501bf4764ae9db7", 0xda}, 0x1, 0x0, 0x0, 0x4040800}, 0x4040001) sendmsg$RDMA_NLDEV_CMD_GET(r10, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x40, 0x1401, 0x400, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8045}, 0x48000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000002940)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r10, 0x40089416, &(0x7f0000002b40)=r14) bind$inet6(r11, &(0x7f0000002b80)={0xa, 0x4e24, 0xfffffff8, @mcast1, 0x2a}, 0x1c) r15 = socket$inet6(0xa, 0x5, 0x1) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r15, 0x84, 0x83, &(0x7f0000002cc0), &(0x7f0000002d00)=0x8) 373.36756ms ago: executing program 4 (id=5649): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff4000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="08000100000000000c000200ff7f000000000000"], 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000280)=0x373cc, 0x4) 343.057061ms ago: executing program 1 (id=5650): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x400102, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x5]}, {0x0, 0x200, 0xd, 0x100000001}}, 0x1ff, &(0x7f0000000200), &(0x7f0000000240)=0x3}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x2004c080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x60000, 0x10c04}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r6, @ANYBLOB="080006"], 0x24}}, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000340)={0x0, 0x48, &(0x7f0000000300)={&(0x7f0000000600)={0x14, r2, 0x4, 0x70bd27, 0x0, {0x54}}, 0x14}}, 0xc084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c00028008"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xac, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8800}, 0x24004051) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r12, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x20040814}, 0x4090) ioctl$sock_SIOCDELDLCI(r12, 0x8981, &(0x7f0000000440)={'ip6_vti0\x00', 0x7fff}) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000001c40)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x1, 0x6, "42b2f4", 0x5, 0x32, 0x0, @private2, @private1, [], "a6c8658b15e0f1bb"}}}}}}}, 0x0) sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0xfc, 0x31, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xe9, 0xf2, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r13}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0xfc}], 0x1, 0x0, 0x0, 0x1}, 0x0) 197.405722ms ago: executing program 0 (id=5651): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="cc4790b302000000b705000008002f44850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x40, 0x4f}, {0x0, 0x0, 0x8000000000}, {0x0, 0x0, 0xe06}, 0x4}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x20}}, 0xe8) (async) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000240), 0x4) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900), &(0x7f0000000940), 0x1003, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000980)={r2, &(0x7f00000009c0)='v', 0x0}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x40048c0, &(0x7f0000000a00)={0xa, 0x4e24, 0x36c2, @loopback={0xff00000000000000}, 0x2}, 0x1c) (async) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(0x3) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x70bd26, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x10, 0xc, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x10, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) 118.003886ms ago: executing program 2 (id=5652): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff47ffffffffea000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10}, 0x94) socket$alg(0x26, 0x5, 0x0) 94.94016ms ago: executing program 2 (id=5653): pread64(0xffffffffffffffff, &(0x7f0000000180)=""/54, 0x36, 0x4090) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x44}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x0, 0x7f, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 0s ago: executing program 3 (id=5654): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x1, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "3d30bf70dd0f50e0", "795a7581107e4d4e2a24a9c459b4f95d", "dd8976d5", "ec938b15d34f5c3e"}, 0x28) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r9) socket$inet(0x2, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r11 = openat$cgroup_ro(r2, &(0x7f0000000180)='memory.swap.events\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f00000002c0), 0xffffff6a) socket$inet6_sctp(0xa, 0x6, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000300)={@loopback, 0x3, 0x0, 0x2, 0xa, 0x9, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r11, 0x0, 0x20000000002) kernel console output (not intermixed with test programs): 656.130452][T22924] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 656.287383][T22932] netlink: 'syz.0.4168': attribute type 6 has an invalid length. [ 656.306871][T22925] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20003 [ 656.371964][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 10 > 9 [ 656.372000][ T5626] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 657.164662][T22964] netlink: 'syz.3.4177': attribute type 12 has an invalid length. [ 657.164698][T22964] netlink: 'syz.3.4177': attribute type 14 has an invalid length. [ 657.174404][T22964] netlink: 'syz.3.4177': attribute type 12 has an invalid length. [ 657.174424][T22964] netlink: 'syz.3.4177': attribute type 14 has an invalid length. [ 657.186284][T14812] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.186464][T14812] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.186497][T14812] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.338653][T22973] syzkaller0: entered promiscuous mode [ 657.338679][T22973] syzkaller0: entered allmulticast mode [ 658.558716][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 10 > 9 [ 658.558754][ T5626] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 658.987056][T23047] 8021q: VLANs not supported on ip_vti0 [ 659.006544][T14814] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.006592][T14814] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.006626][T14814] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.643980][T23075] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 660.716970][T19405] IPVS: ip_vs_send_async error -101 [ 662.775370][T19405] IPVS: ip_vs_send_async error -101 [ 662.814962][T23097] FAULT_INJECTION: forcing a failure. [ 662.814962][T23097] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 662.814998][T23097] CPU: 1 UID: 0 PID: 23097 Comm: syz.2.4218 Not tainted syzkaller #0 PREEMPT(full) [ 662.815020][T23097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 662.815031][T23097] Call Trace: [ 662.815040][T23097] [ 662.815050][T23097] dump_stack_lvl+0xe8/0x150 [ 662.815086][T23097] should_fail_ex+0x410/0x560 [ 662.815120][T23097] prepare_alloc_pages+0x223/0x600 [ 662.815193][T23097] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 662.815228][T23097] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 662.815258][T23097] ? __pfx_policy_nodemask+0x10/0x10 [ 662.815296][T23097] alloc_pages_mpol+0x21e/0x390 [ 662.815328][T23097] alloc_pages_noprof+0xb1/0x2b0 [ 662.815357][T23097] bpf_prog_test_run_xdp+0xc97/0x11d0 [ 662.815407][T23097] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 662.815440][T23097] ? __fget_files+0x2a/0x420 [ 662.815476][T23097] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 662.815505][T23097] bpf_prog_test_run+0x2c5/0x340 [ 662.815535][T23097] __sys_bpf+0xa22/0xd90 [ 662.815567][T23097] ? __pfx___sys_bpf+0x10/0x10 [ 662.815604][T23097] ? __fget_files+0x2a/0x420 [ 662.815651][T23097] ? ksys_write+0x242/0x270 [ 662.815675][T23097] ? __pfx_ksys_write+0x10/0x10 [ 662.815703][T23097] __x64_sys_bpf+0xba/0xd0 [ 662.815730][T23097] do_syscall_64+0x166/0x520 [ 662.815756][T23097] ? trace_irq_disable+0x3b/0x140 [ 662.815777][T23097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.815798][T23097] ? clear_bhb_loop+0x70/0xc0 [ 662.815824][T23097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.815845][T23097] RIP: 0033:0x7eff5559e1d9 [ 662.815867][T23097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.815884][T23097] RSP: 002b:00007eff56490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 662.815909][T23097] RAX: ffffffffffffffda RBX: 00007eff55825fa0 RCX: 00007eff5559e1d9 [ 662.815924][T23097] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 662.815937][T23097] RBP: 00007eff56490090 R08: 0000000000000000 R09: 0000000000000000 [ 662.815950][T23097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.815964][T23097] R13: 00007eff55826038 R14: 00007eff55825fa0 R15: 00007ffc431278d8 [ 662.815998][T23097] [ 662.963628][T23101] vlan2: entered allmulticast mode [ 662.963658][T23101] bridge_slave_0: entered allmulticast mode [ 662.963930][T23101] bridge0: port 1(vlan2) entered blocking state [ 662.964618][T23101] bridge0: port 1(vlan2) entered disabled state [ 662.970370][T23101] vlan2: entered promiscuous mode [ 662.970389][T23101] bridge_slave_0: entered promiscuous mode [ 663.266547][T23120] IPVS: Unknown mcast interface: macsec0 [ 663.451301][T23130] __nla_validate_parse: 35 callbacks suppressed [ 663.451322][T23130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4224'. [ 663.456127][T14964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 663.547410][T14968] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 663.886487][T14968] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 664.192553][T23159] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 664.294943][T23166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4232'. [ 664.426092][T23171] openvswitch: netlink: Message has 8 unknown bytes. [ 664.642500][T23178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4234'. [ 664.838306][T23169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.841784][T23169] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.853255][T23169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.978987][T23169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.983193][T23169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.996187][T23169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 664.996211][T23169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 665.011623][T23169] veth1_vlan: left promiscuous mode [ 665.012901][T23169] veth0_vlan: left promiscuous mode [ 665.020879][T23169] veth0_vlan: entered promiscuous mode [ 665.024659][T23169] veth1_vlan: entered promiscuous mode [ 665.079610][T23169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 665.082504][T23169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 665.087144][T23169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 665.090319][T23169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 665.107525][T23169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 665.115965][T23169] gre1: left promiscuous mode [ 665.121255][T23169] 8021q: adding VLAN 0 to HW filter on device bond2 [ 665.121812][T23169] bond3: left promiscuous mode [ 665.121828][T23169] bridge0: left promiscuous mode [ 665.126134][T23169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 665.408495][T14814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.409643][T14814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.409748][T14814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.409783][T14814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.711016][T23213] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4242'. [ 666.250052][T23239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4246'. [ 666.481654][T23239] bridge2: entered promiscuous mode [ 666.657179][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4248'. [ 667.169101][T23285] Cannot find del_set index 4 as target [ 667.637634][T23301] bridge0: port 1(syz_tun) entered blocking state [ 667.637762][T23301] bridge0: port 1(syz_tun) entered disabled state [ 667.637943][T23301] syz_tun: entered allmulticast mode [ 667.672404][T23301] syz_tun: entered promiscuous mode [ 667.673187][T23301] bridge0: port 1(syz_tun) entered blocking state [ 667.673327][T23301] bridge0: port 1(syz_tun) entered listening state [ 667.796858][T23301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4262'. [ 668.017218][T23310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4264'. [ 668.242458][T23321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4265'. [ 668.328329][T23326] netlink: 'syz.4.4267': attribute type 3 has an invalid length. [ 669.240006][T23362] FAULT_INJECTION: forcing a failure. [ 669.240006][T23362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.240044][T23362] CPU: 1 UID: 0 PID: 23362 Comm: syz.2.4275 Not tainted syzkaller #0 PREEMPT(full) [ 669.240067][T23362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 669.240080][T23362] Call Trace: [ 669.240089][T23362] [ 669.240099][T23362] dump_stack_lvl+0xe8/0x150 [ 669.240135][T23362] should_fail_ex+0x410/0x560 [ 669.240169][T23362] _copy_to_user+0x31/0xb0 [ 669.240202][T23362] bpf_test_finish+0x52e/0x690 [ 669.240242][T23362] ? __pfx_bpf_test_finish+0x10/0x10 [ 669.240286][T23362] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 669.240333][T23362] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 669.240366][T23362] ? __fget_files+0x2a/0x420 [ 669.240402][T23362] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 669.240431][T23362] bpf_prog_test_run+0x2c5/0x340 [ 669.240463][T23362] __sys_bpf+0xa22/0xd90 [ 669.240497][T23362] ? __pfx___sys_bpf+0x10/0x10 [ 669.240533][T23362] ? __fget_files+0x2a/0x420 [ 669.240579][T23362] ? ksys_write+0x242/0x270 [ 669.240612][T23362] ? __pfx_ksys_write+0x10/0x10 [ 669.240640][T23362] __x64_sys_bpf+0xba/0xd0 [ 669.240667][T23362] do_syscall_64+0x166/0x520 [ 669.240694][T23362] ? trace_irq_disable+0x3b/0x140 [ 669.240715][T23362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.240736][T23362] ? clear_bhb_loop+0x70/0xc0 [ 669.240763][T23362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.240783][T23362] RIP: 0033:0x7eff5559e1d9 [ 669.240805][T23362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.240822][T23362] RSP: 002b:00007eff56490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 669.240846][T23362] RAX: ffffffffffffffda RBX: 00007eff55825fa0 RCX: 00007eff5559e1d9 [ 669.240861][T23362] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 669.240875][T23362] RBP: 00007eff56490090 R08: 0000000000000000 R09: 0000000000000000 [ 669.240888][T23362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 669.240900][T23362] R13: 00007eff55826038 R14: 00007eff55825fa0 R15: 00007ffc431278d8 [ 669.240935][T23362] [ 669.461720][T23366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4277'. [ 669.966820][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 670.022537][T23389] ip_tables: iptables: counters copy to user failed while replacing table [ 670.213984][T23395] openvswitch: netlink: Message has 40 unknown bytes. [ 670.256560][T23398] smc: smcd device lo applied user defined pnetid SYZ0 [ 670.771401][T23415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4289'. [ 670.846228][ T8573] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 670.922461][T23420] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4291'. [ 671.491436][T23439] xt_addrtype: ipv6 does not support BROADCAST matching [ 671.563895][T23444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4299'. [ 672.193417][T23448] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 672.352508][T23471] netlink: 'syz.0.4304': attribute type 1 has an invalid length. [ 672.352537][T23471] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4304'. [ 673.076313][T23484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4307'. [ 673.076356][T23484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4307'. [ 673.112892][T23484] erspan0: entered promiscuous mode [ 673.114104][T23484] gretap0: entered promiscuous mode [ 673.114837][T23484] debugfs: 'hsr1' already exists in 'hsr' [ 673.114858][T23484] Cannot create hsr debugfs directory [ 673.114917][T23484] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 673.114935][T23484] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 673.152200][T23487] netlink: 'syz.3.4307': attribute type 8 has an invalid length. [ 673.153716][T23487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4307'. [ 673.153746][T23487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4307'. [ 673.346834][T23493] syzkaller1: entered promiscuous mode [ 673.346861][T23493] syzkaller1: entered allmulticast mode [ 673.372549][T23493] syz.1.4310: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 673.372733][T23493] CPU: 1 UID: 0 PID: 23493 Comm: syz.1.4310 Not tainted syzkaller #0 PREEMPT(full) [ 673.372758][T23493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 673.372771][T23493] Call Trace: [ 673.372780][T23493] [ 673.372790][T23493] dump_stack_lvl+0xe8/0x150 [ 673.372826][T23493] warn_alloc+0x24d/0x270 [ 673.372851][T23493] ? kasan_save_track+0x4f/0x80 [ 673.372875][T23493] ? kasan_save_track+0x3e/0x80 [ 673.372903][T23493] ? __pfx_warn_alloc+0x10/0x10 [ 673.372924][T23493] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 673.372947][T23493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.372992][T23493] __vmalloc_node_range_noprof+0x127/0x1540 [ 673.373038][T23493] ? rcu_is_watching+0x16/0xb0 [ 673.373074][T23493] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 673.373097][T23493] ? __kmalloc_cache_noprof+0x321/0x600 [ 673.373122][T23493] ? __kmalloc_cache_noprof+0x14d/0x600 [ 673.373146][T23493] ? xskq_create+0x56/0x220 [ 673.373241][T23493] xskq_create+0x148/0x220 [ 673.373267][T23493] ? xsk_init_queue+0x8a/0xe0 [ 673.373295][T23493] xsk_init_queue+0x8a/0xe0 [ 673.373324][T23493] xsk_setsockopt+0x52a/0x960 [ 673.373352][T23493] ? __pfx_xsk_setsockopt+0x10/0x10 [ 673.373376][T23493] ? __pfx_aa_sk_perm+0x10/0x10 [ 673.373433][T23493] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 673.373464][T23493] ? __pfx_xsk_setsockopt+0x10/0x10 [ 673.373493][T23493] do_sock_setsockopt+0x17c/0x1b0 [ 673.373532][T23493] __x64_sys_setsockopt+0x13d/0x1b0 [ 673.373562][T23493] do_syscall_64+0x166/0x520 [ 673.373591][T23493] ? trace_irq_disable+0x3b/0x140 [ 673.373615][T23493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.373639][T23493] ? clear_bhb_loop+0x70/0xc0 [ 673.373667][T23493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.373691][T23493] RIP: 0033:0x7fd3c6b9e1d9 [ 673.373712][T23493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.373731][T23493] RSP: 002b:00007fd3c7ad3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 673.373752][T23493] RAX: ffffffffffffffda RBX: 00007fd3c6e25fa0 RCX: 00007fd3c6b9e1d9 [ 673.373767][T23493] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 673.373780][T23493] RBP: 00007fd3c6c35888 R08: 0000000000000004 R09: 0000000000000000 [ 673.373792][T23493] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 673.373805][T23493] R13: 00007fd3c6e26038 R14: 00007fd3c6e25fa0 R15: 00007ffda7f9a9f8 [ 673.373839][T23493] [ 673.373876][T23493] Mem-Info: [ 673.373888][T23493] active_anon:6802 inactive_anon:0 isolated_anon:0 [ 673.373888][T23493] active_file:0 inactive_file:43802 isolated_file:0 [ 673.373888][T23493] unevictable:0 dirty:470 writeback:0 [ 673.373888][T23493] slab_reclaimable:11794 slab_unreclaimable:115909 [ 673.373888][T23493] mapped:31920 shmem:540 pagetables:1365 [ 673.373888][T23493] sec_pagetables:0 bounce:0 [ 673.373888][T23493] kernel_misc_reclaimable:0 [ 673.373888][T23493] free:1286935 free_pcp:18074 free_cma:0 [ 673.373938][T23493] Node 0 active_anon:27208kB inactive_anon:0kB active_file:0kB inactive_file:175008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127680kB dirty:1876kB writeback:0kB shmem:2160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15612kB pagetables:5316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 673.373994][T23493] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 673.374043][T23493] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.374100][T23493] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 673.374143][T23493] Node 0 DMA32 free:1184192kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27208kB inactive_anon:0kB active_file:0kB inactive_file:175008kB unevictable:0kB writepending:1876kB zspages:0kB present:3129332kB managed:2527708kB mlocked:0kB bounce:0kB free_pcp:72292kB local_pcp:46716kB free_cma:0kB [ 673.374203][T23493] lowmem_reserve[]: 0 0 0 0 0 [ 673.374242][T23493] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.374297][T23493] lowmem_reserve[]: 0 0 0 0 0 [ 673.374336][T23493] Node 1 Normal free:3948188kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.374393][T23493] lowmem_reserve[]: 0 0 0 0 0 [ 673.374431][T23493] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 673.374569][T23493] Node 0 DMA32: 1132*4kB (UME) 783*8kB (UME) 765*16kB (UME) 266*32kB (UME) 31*64kB (UME) 8*128kB (UME) 3*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 280*4096kB (UME) = 1184248kB [ 673.374731][T23493] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 673.374837][T23493] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 3*16kB (UM) 2*32kB (UM) 8*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 962*4096kB (M) = 3948188kB [ 673.375001][T23493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.375018][T23493] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 673.375035][T23493] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.375053][T23493] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 673.375070][T23493] 44338 total pagecache pages [ 673.375079][T23493] 0 pages in swap cache [ 673.375088][T23493] Free swap = 124996kB [ 673.375097][T23493] Total swap = 124996kB [ 673.375107][T23493] 2097051 pages RAM [ 673.375115][T23493] 0 pages HighMem/MovableOnly [ 673.375124][T23493] 433508 pages reserved [ 673.375132][T23493] 0 pages cma reserved [ 674.239436][T23519] netlink: 'syz.2.4315': attribute type 3 has an invalid length. [ 674.511722][T23542] netlink: 'syz.0.4319': attribute type 15 has an invalid length. [ 674.535065][T23542] netlink: 'syz.0.4319': attribute type 28 has an invalid length. [ 675.064905][T23519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 675.263513][T23560] netlink: NAT attribute has 8 unknown bytes [ 675.263551][T23560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.289448][T23560] netlink: 'syz.0.4325': attribute type 3 has an invalid length. [ 675.289472][T23560] netlink: 'syz.0.4325': attribute type 1 has an invalid length. [ 675.289485][T23560] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4325'. [ 675.289501][T23560] NCSI netlink: No device for ifindex 0 [ 675.364248][T23566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4326'. [ 675.426979][T23566] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4326'. [ 675.889508][T23591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4334'. [ 676.000875][T23595] ip_tables: iptables: counters copy to user failed while replacing table [ 676.001212][T23595] ip_tables: iptables: counters copy to user failed while replacing table [ 676.001584][T23595] ip_tables: iptables: counters copy to user failed while replacing table [ 676.003619][T23595] ip_tables: iptables: counters copy to user failed while replacing table [ 676.004277][T23595] ip_tables: iptables: counters copy to user failed while replacing table [ 676.004649][T23595] ip_tables: iptables: counters copy to user failed while replacing table [ 676.004974][T23595] ip_tables: iptables: counters copy to user failed while replacing table [ 676.005368][T23595] ip_tables: iptables: counters copy to user failed while replacing table [ 676.450465][T23607] IPVS: length: 127 != 24 [ 676.451060][T23607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4338'. [ 677.106991][T23629] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4346'. [ 677.249538][T23639] netlink: 660 bytes leftover after parsing attributes in process `syz.3.4348'. [ 677.249735][T23640] netlink: 660 bytes leftover after parsing attributes in process `syz.3.4348'. [ 677.259481][T23629] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4346'. [ 677.693242][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4354'. [ 677.750715][T23656] lo speed is unknown, defaulting to 1000 [ 677.908990][T23658] xt_CT: No such helper "netbios-ns" [ 678.160706][T23672] syzkaller0: entered promiscuous mode [ 678.160730][T23672] syzkaller0: entered allmulticast mode [ 679.176789][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.176816][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.345526][T23708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.763314][T23730] IPv6: NLM_F_REPLACE set, but no existing node found! [ 680.428520][T23767] net_ratelimit: 63 callbacks suppressed [ 680.428545][T23767] openvswitch: netlink: Key type 36 is out of range max 32 [ 681.064589][T23788] syzkaller0: entered promiscuous mode [ 681.064615][T23788] syzkaller0: entered allmulticast mode [ 681.203988][T23794] __nla_validate_parse: 4 callbacks suppressed [ 681.204012][T23794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4389'. [ 681.396352][T23801] bridge1: entered promiscuous mode [ 681.447611][T23806] netlink: zone id is out of range [ 681.447665][T23806] netlink: zone id is out of range [ 681.447810][T23806] netlink: zone id is out of range [ 681.447856][T23806] netlink: zone id is out of range [ 681.447865][T23806] netlink: zone id is out of range [ 681.447874][T23806] netlink: zone id is out of range [ 681.447883][T23806] netlink: zone id is out of range [ 681.447898][T23806] netlink: zone id is out of range [ 681.447907][T23806] netlink: zone id is out of range [ 682.114184][T23827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4395'. [ 682.462986][T23833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4397'. [ 682.539269][T23831] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 682.569245][T23831] bond2: (slave macvlan2): making interface the new active one [ 682.574170][T23831] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 682.574524][ T10] bond_slave_0: entered promiscuous mode [ 682.574562][ T10] bond_slave_1: entered promiscuous mode [ 682.714283][T23842] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 682.714324][T23842] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 682.714362][T23842] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 682.730375][T23847] syzkaller0: entered promiscuous mode [ 682.730396][T23847] syzkaller0: entered allmulticast mode [ 682.939743][T23860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4398'. [ 683.088336][ C1] bridge0: port 1(syz_tun) entered learning state [ 683.089186][ C1] ip6_tunnel: 8 xmit: Local address not yet configured! [ 683.131207][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 10 > 9 [ 683.131244][ T5626] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 683.166889][T14964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 683.241174][T23869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4407'. [ 683.277086][T14964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 683.541655][T23877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4409'. [ 683.542477][T23879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4409'. [ 683.726182][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 683.906213][T14964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 684.200928][ T5279] veth0_macvtap: left promiscuous mode [ 685.779698][T23979] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4428'. [ 686.118349][T23989] IPVS: set_ctl: invalid protocol: 3776 0.32.0.0:23553 [ 686.400451][T23997] bond5: entered allmulticast mode [ 686.401577][T23997] 8021q: adding VLAN 0 to HW filter on device bond5 [ 686.461866][T23998] bond6: entered allmulticast mode [ 686.462424][T23998] 8021q: adding VLAN 0 to HW filter on device bond6 [ 686.640955][T24014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4437'. [ 687.074207][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 10 > 9 [ 687.183915][T24047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4444'. [ 687.363836][T24052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4448'. [ 687.778430][T24069] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4452'. [ 687.779962][ T5626] Bluetooth: hci1: SCO packet too small [ 687.866770][T24069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4452'. [ 687.866802][T24069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4452'. [ 687.866886][T24069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4452'. [ 687.885116][T24069] batman_adv: batadv0: Adding interface: syzkaller0 [ 687.885134][T24069] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.885161][T24069] batman_adv: batadv0: Interface activated: syzkaller0 [ 688.453447][T24067] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 688.524147][T24067] batman_adv: batadv0: Removing interface: syzkaller0 [ 688.572108][T24090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4458'. [ 689.469642][T24141] netlink: 'syz.0.4466': attribute type 10 has an invalid length. [ 689.471807][T24141] netlink: 'syz.0.4466': attribute type 10 has an invalid length. [ 689.702024][T24151] lo: entered allmulticast mode [ 689.762889][T24151] lo: left allmulticast mode [ 689.786571][T24151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4469'. [ 690.044344][T24156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4470'. [ 690.240733][ T31] audit: type=1804 audit(1791883540.186:11): pid=24166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4473" name="/newroot/296/cgroup.controllers" dev="tmpfs" ino=1523 res=1 errno=0 [ 690.240876][ T31] audit: type=1800 audit(1791883540.186:12): pid=24166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4473" name="cgroup.controllers" dev="tmpfs" ino=1523 res=0 errno=0 [ 690.559018][T24180] FAULT_INJECTION: forcing a failure. [ 690.559018][T24180] name failslab, interval 1, probability 0, space 0, times 0 [ 690.559054][T24180] CPU: 0 UID: 0 PID: 24180 Comm: syz.3.4476 Not tainted syzkaller #0 PREEMPT(full) [ 690.559076][T24180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 690.559089][T24180] Call Trace: [ 690.559098][T24180] [ 690.559107][T24180] dump_stack_lvl+0xe8/0x150 [ 690.559143][T24180] should_fail_ex+0x410/0x560 [ 690.559175][T24180] ? __alloc_skb+0x1db/0x7a0 [ 690.559207][T24180] should_failslab+0xa8/0x100 [ 690.559237][T24180] ? __alloc_skb+0x1db/0x7a0 [ 690.559264][T24180] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 690.559287][T24180] ? __alloc_skb+0x18d/0x7a0 [ 690.559317][T24180] ? __alloc_skb+0x1db/0x7a0 [ 690.559353][T24180] __alloc_skb+0x1db/0x7a0 [ 690.559390][T24180] netlink_sendmsg+0x5d4/0xb40 [ 690.559429][T24180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.559465][T24180] ? apparmor_socket_sendmsg+0x98/0x360 [ 690.559491][T24180] ? lock_acquire+0x115/0x350 [ 690.559517][T24180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.559544][T24180] sock_sendmsg_nosec+0x14e/0x190 [ 690.559575][T24180] sock_write_iter+0x2de/0x3e0 [ 690.559606][T24180] ? __pfx_sock_write_iter+0x10/0x10 [ 690.559640][T24180] ? bpf_lsm_file_permission+0x9/0x20 [ 690.559669][T24180] ? security_file_permission+0x75/0x260 [ 690.559703][T24180] vfs_write+0x612/0xba0 [ 690.559735][T24180] ? __pfx_vfs_write+0x10/0x10 [ 690.559770][T24180] ? __fget_files+0x2a/0x420 [ 690.559823][T24180] ksys_write+0x150/0x270 [ 690.559849][T24180] ? __pfx_ksys_write+0x10/0x10 [ 690.559886][T24180] do_syscall_64+0x166/0x520 [ 690.559914][T24180] ? trace_irq_disable+0x3b/0x140 [ 690.559937][T24180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.559959][T24180] ? clear_bhb_loop+0x70/0xc0 [ 690.559987][T24180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.560008][T24180] RIP: 0033:0x7f3c1779e1d9 [ 690.560030][T24180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.560049][T24180] RSP: 002b:00007f3c18710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 690.560074][T24180] RAX: ffffffffffffffda RBX: 00007f3c17a25fa0 RCX: 00007f3c1779e1d9 [ 690.560090][T24180] RDX: 0000000000000060 RSI: 0000200000000300 RDI: 0000000000000006 [ 690.560105][T24180] RBP: 00007f3c18710090 R08: 0000000000000000 R09: 0000000000000000 [ 690.560118][T24180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.560132][T24180] R13: 00007f3c17a26038 R14: 00007f3c17a25fa0 R15: 00007fff0d42d428 [ 690.560169][T24180] [ 690.822410][T24185] 8021q: VLANs not supported on gre0 [ 691.020809][T24197] Bluetooth: ISO socket layer initialized [ 691.042457][T24199] netlink: 'syz.1.4482': attribute type 21 has an invalid length. [ 691.042552][T24199] netlink: 'syz.1.4482': attribute type 4 has an invalid length. [ 691.042568][T24199] netlink: 'syz.1.4482': attribute type 5 has an invalid length. [ 691.660181][T24219] __nla_validate_parse: 9 callbacks suppressed [ 691.660206][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4486'. [ 691.662980][T24218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4486'. [ 692.129967][T24237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4492'. [ 692.132403][T24237] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4492'. [ 692.566739][T24266] dummy0: entered promiscuous mode [ 692.566920][T24266] dummy0: left promiscuous mode [ 693.272532][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4506'. [ 693.594553][T24300] batadv_slave_1: entered promiscuous mode [ 693.603639][T24300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4509'. [ 693.624768][T24299] batadv_slave_1: left promiscuous mode [ 694.999382][T24375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4529'. [ 695.035299][T24375] ipvlan2: entered allmulticast mode [ 695.035323][T24375] geneve1: entered allmulticast mode [ 696.038639][T24419] netlink: 'syz.2.4541': attribute type 1 has an invalid length. [ 696.134717][T24419] 8021q: adding VLAN 0 to HW filter on device bond4 [ 696.189923][T24424] bond4: (slave geneve3): making interface the new active one [ 696.195104][T24424] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 696.527055][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 696.768495][T24448] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4549'. [ 697.392920][T24473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4559'. [ 697.452693][T24476] xt_IDLETIMER: timeout value is too big [ 697.564824][T24482] vlan0: left promiscuous mode [ 697.578141][T24482] macvtap0: left promiscuous mode [ 697.590887][T24482] vti0: left promiscuous mode [ 697.674792][T24490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4563'. [ 697.686641][T24493] net_ratelimit: 94 callbacks suppressed [ 697.686662][T24493] ip_tables: iptables: counters copy to user failed while replacing table [ 698.028931][T24508] netlink: 'syz.3.4567': attribute type 3 has an invalid length. [ 698.118736][T24506] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 698.128314][T24517] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 698.180879][T24517] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4569'. [ 698.183871][T24506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4566'. [ 698.183894][T24506] netlink: 39 bytes leftover after parsing attributes in process `syz.1.4566'. [ 698.199623][T24517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4569'. [ 698.222549][T24506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4566'. [ 698.332399][T24526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4568'. [ 698.445911][ C1] bridge0: port 1(syz_tun) entered forwarding state [ 698.445939][ C1] bridge0: topology change detected, propagating [ 698.848811][T24508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 698.870500][T24557] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4575'. [ 698.904003][T24557] netlink: 'syz.0.4575': attribute type 8 has an invalid length. [ 699.539489][T24582] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 699.639507][T24586] team0: Port device xfrm0 added [ 699.640053][T24582] tipc: Started in network mode [ 699.640082][T24582] tipc: Node identity 32c8289d40e6, cluster identity 8 [ 699.640343][T24582] tipc: Enabled bearer , priority 0 [ 699.959271][T24600] netlink: 'syz.0.4586': attribute type 3 has an invalid length. [ 700.096031][T24619] netlink: 'syz.1.4588': attribute type 1 has an invalid length. [ 700.281467][T24619] bond7: entered promiscuous mode [ 700.281964][T24619] 8021q: adding VLAN 0 to HW filter on device bond7 [ 700.561886][T24635] tunl0: entered promiscuous mode [ 700.561910][T24635] tunl0: entered allmulticast mode [ 700.771761][T24600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 700.880456][ T5738] tipc: Node number set to 1915627677 [ 701.192544][T24648] dvmrp0: entered allmulticast mode [ 701.602732][T24674] netlink: 'syz.3.4603': attribute type 3 has an invalid length. [ 702.416625][T24674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 702.748161][T24702] __nla_validate_parse: 71 callbacks suppressed [ 702.748186][T24702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4612'. [ 702.821742][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 10 > 9 [ 702.821780][ T5626] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 702.865988][ T8573] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 702.918765][T24715] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.4615'. [ 702.921812][T24707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4613'. [ 702.946661][ T8573] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 702.953499][T24712] netlink: 'syz.4.4614': attribute type 1 has an invalid length. [ 702.993433][T24712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 703.014823][T24712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4614'. [ 703.045490][T24712] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4614'. [ 703.139059][T24720] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 703.184569][T24724] netlink: 'syz.4.4620': attribute type 3 has an invalid length. [ 703.426503][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 703.480996][T24735] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4621'. [ 703.732658][T24745] lo: left promiscuous mode [ 703.748917][T24745] tunl0: left promiscuous mode [ 703.779825][T24745] sit0: left promiscuous mode [ 703.811700][T24745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.812815][T24745] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.813595][T24745] batman_adv: batadv0: Interface activated: dummy0 [ 703.813616][T24745] batadv0: mtu less than device minimum [ 703.814646][T24745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.817026][T24745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.818474][T24745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.819908][T24745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.821348][T24745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.822785][T24745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.824227][T24745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.826498][T24745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.827936][T24745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.902898][T24745] bridge0: port 3(batadv0) entered blocking state [ 703.903018][T24745] bridge0: port 3(batadv0) entered forwarding state [ 703.903289][T24745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.989539][T24745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.013256][T24724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 704.022667][T24745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 704.036504][T24745] veth1_vlan: left promiscuous mode [ 704.039281][T24745] veth0_vlan: left promiscuous mode [ 704.043427][T24745] veth0_vlan: entered promiscuous mode [ 704.060179][T24745] veth1_vlan: entered promiscuous mode [ 704.112727][T24745] veth1_macvtap: left promiscuous mode [ 704.121532][T24745] veth0_macvtap: left promiscuous mode [ 704.128051][T24745] veth1_macvtap: entered promiscuous mode [ 704.164084][T24745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 704.165189][T24745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 704.182481][T24745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 704.184902][T24745] bridge1: left promiscuous mode [ 704.198633][T24745] batman_adv: batadv0: Interface activated: macvtap1 [ 704.278476][T14812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.278535][T14812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.278571][T14812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.304532][T14814] bridge0: port 1(1x9) entered blocking state [ 704.304654][T14814] bridge0: port 1(1x9) entered forwarding state [ 704.332713][T14814] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.332852][T14814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.398086][T24756] netlink: 844 bytes leftover after parsing attributes in process `syz.4.4629'. [ 704.398115][T24756] netlink: 844 bytes leftover after parsing attributes in process `syz.4.4629'. [ 704.426023][ T5719] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 704.698680][ T5626] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 704.766780][T14812] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.766864][T14812] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.767035][T14812] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.767757][T14811] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.877028][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 705.177018][T24798] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4640'. [ 705.411400][T14814] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 705.659702][T24809] bridge1: entered promiscuous mode [ 705.659729][T24809] bridge1: entered allmulticast mode [ 705.684228][T24809] team0: Port device bridge1 added [ 706.130312][T24844] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4652'. [ 706.182047][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 10 > 9 [ 706.182086][ T5626] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 706.447574][T14811] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 706.447859][T14811] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 706.501589][T24849] vlan2: entered promiscuous mode [ 706.501615][T24849] bond0: entered promiscuous mode [ 706.501628][T24849] bond_slave_0: entered promiscuous mode [ 706.504239][T24849] bond_slave_1: entered promiscuous mode [ 706.651523][T24865] vlan2: entered promiscuous mode [ 706.900281][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 707.096458][T24887] macvlan2: entered promiscuous mode [ 707.096486][T24887] macvlan2: entered allmulticast mode [ 707.105338][T24887] bond5: entered promiscuous mode [ 707.131128][T24887] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 707.242632][T24887] bond5: left promiscuous mode [ 707.907914][T24925] team0: Port device xfrm0 removed [ 707.912936][T24894] __nla_validate_parse: 2 callbacks suppressed [ 707.912957][T24894] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4662'. [ 707.912977][T24894] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4662'. [ 707.915022][T24928] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4662'. [ 707.915045][T24928] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4662'. [ 707.915460][ T38] tipc: Resetting bearer [ 708.160262][T24908] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 708.160292][T24908] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 708.304939][T24908] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 708.304967][T24908] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 708.330169][T24908] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 708.330196][T24908] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 708.442021][T24908] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 708.442048][T24908] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 708.583170][T24908] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 708.583201][T24908] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 708.705241][T24951] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 708.705241][T24951] Please contact the netfilter-devel mailing list or update your nftables rules. [ 708.769944][T24953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4678'. [ 708.993111][T24960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4680'. [ 708.993192][T24960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4680'. [ 709.055110][T24967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4680'. [ 709.094994][T24960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4680'. [ 709.095055][T24960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4680'. [ 709.244675][T24976] netlink: 'syz.4.4687': attribute type 3 has an invalid length. [ 710.067649][T24976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 710.286868][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 710.367734][ C0] net_ratelimit: 63 callbacks suppressed [ 710.367760][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 710.561057][T25037] netlink: 'syz.4.4701': attribute type 1 has an invalid length. [ 710.854973][T25045] netlink: Invalid conntrack helper [ 710.855009][T25045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.855447][T25045] netlink: Invalid conntrack helper [ 710.855474][T25045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.866581][T25045] netlink: Invalid conntrack helper [ 710.866610][T25045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.866977][T25045] netlink: Invalid conntrack helper [ 710.867001][T25045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.872639][T25045] netlink: Invalid conntrack helper [ 710.900649][T25040] bond4: (slave bridge3): making interface the new active one [ 710.915020][T25040] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 710.994266][T25055] netlink: 'syz.2.4703': attribute type 1 has an invalid length. [ 711.053108][T25055] bond6: entered promiscuous mode [ 711.053558][T25055] 8021q: adding VLAN 0 to HW filter on device bond6 [ 711.080959][T25057] bond6: (slave bridge2): making interface the new active one [ 711.080984][T25057] bridge2: entered promiscuous mode [ 711.082139][T25057] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 711.126401][T25057] bond6: (slave bridge3): Enslaving as a backup interface with an up link [ 711.149966][T25057] bond6: (slave bridge4): Enslaving as a backup interface with an up link [ 711.190646][T25057] bond6: (slave bridge5): Enslaving as a backup interface with an up link [ 711.211216][T25057] bond6: (slave bridge6): Enslaving as a backup interface with an up link [ 711.233526][T25057] bond6: (slave bridge7): Enslaving as a backup interface with an up link [ 711.234437][T25064] veth0: entered promiscuous mode [ 711.263131][T25057] bond6: (slave bridge8): Enslaving as a backup interface with an up link [ 711.286432][T25057] bond6: (slave bridge9): Enslaving as a backup interface with an up link [ 711.292688][T25061] veth0: left promiscuous mode [ 711.344333][T25057] bond6: (slave bridge10): Enslaving as a backup interface with an up link [ 711.420287][T25057] bond6: (slave bridge11): Enslaving as a backup interface with an up link [ 711.452895][T25057] bond6: (slave bridge12): Enslaving as a backup interface with an up link [ 711.498494][T25057] bond6: (slave bridge13): Enslaving as a backup interface with an up link [ 711.561118][T25057] bond6: (slave bridge14): Enslaving as a backup interface with an up link [ 711.634718][T25057] bond6: (slave bridge15): Enslaving as a backup interface with an up link [ 711.748972][T25057] bond6: (slave bridge16): Enslaving as a backup interface with an up link [ 711.832550][T25057] bond6: (slave bridge17): Enslaving as a backup interface with an up link [ 711.885822][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 712.155471][T25091] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 712.185488][T25102] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 712.222264][T25102] bond0 (unregistering): Released all slaves [ 712.305412][T25098] sit2: entered promiscuous mode [ 712.633087][T25129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.855245][T25142] netlink: 'syz.2.4725': attribute type 11 has an invalid length. [ 713.113050][T25156] __nla_validate_parse: 13 callbacks suppressed [ 713.113175][T25156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4726'. [ 713.403253][T25163] netlink: 'syz.1.4727': attribute type 1 has an invalid length. [ 713.528788][T25163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.601383][T25162] bond6: option tlb_dynamic_lb: invalid value (109) [ 713.603350][T25162] bond6 (unregistering): Released all slaves [ 713.687454][T25164] bond0: (slave erspan1): making interface the new active one [ 713.688872][T25164] bond0: (slave erspan1): Enslaving as an active interface with an up link [ 713.969399][T25183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4733'. [ 713.971729][T25183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4733'. [ 714.204315][T25199] : renamed from team_slave_1 (while UP) [ 714.329665][T25203] syz_tun: left promiscuous mode [ 714.329892][T25203] bridge0: port 1(syz_tun) entered disabled state [ 714.389184][T25203] bond0: (slave bond_slave_0): Releasing backup interface [ 714.417795][T25203] bond0: (slave bond_slave_1): Releasing backup interface [ 714.453320][T25203] team0: Port device team_slave_0 removed [ 714.493778][T25203] team0: Port device team_slave_1 removed [ 714.498846][T25203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.498870][T25203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.509808][T25203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.509828][T25203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.574024][T25207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4738'. [ 714.659053][T25204] team0: Device xfrm0 is of different type [ 714.694663][T25206] tipc: Enabled bearer , priority 0 [ 715.300595][T25249] netlink: 'syz.1.4750': attribute type 2 has an invalid length. [ 715.344717][T25253] netlink: 'syz.2.4749': attribute type 1 has an invalid length. [ 715.387456][T25253] 8021q: adding VLAN 0 to HW filter on device bond7 [ 715.437859][T25253] bond7: (slave syz_tun): Enslaving as a backup interface with an up link [ 715.438952][T25256] netlink: 'syz.3.4751': attribute type 4 has an invalid length. [ 715.453291][T25256] lo: left allmulticast mode [ 715.540608][T25258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 715.540622][T25258] IPv6: NLM_F_CREATE should be set when creating new route [ 715.540648][T25258] IPv6: NLM_F_CREATE should be set when creating new route [ 715.806304][ T10] tipc: Node number set to 65534 [ 716.193707][T25271] net_ratelimit: 64 callbacks suppressed [ 716.193730][T25271] netlink: Conntrack attr has 4 unknown bytes [ 716.193762][T25271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.271746][T25273] bridge0: port 3(batadv0) entered disabled state [ 716.283057][T25273] bridge0: port 1(1x9) entered disabled state [ 716.288430][T25273] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.347252][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 716.484293][T25285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4758'. [ 716.556570][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 716.775760][T25294] bond4: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 716.777780][T25294] bond4 (unregistering): Released all slaves [ 717.421432][T25320] ipvlan2: entered allmulticast mode [ 717.421451][T25320] macvlan1: entered allmulticast mode [ 717.421458][T25320] veth1_vlan: entered allmulticast mode [ 717.645852][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 717.891121][T25226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 717.891358][T25243] netlink: 'syz.0.4747': attribute type 2 has an invalid length. [ 717.891380][T25243] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4747'. [ 717.892007][T25311] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4763'. [ 718.599592][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4774'. [ 718.599846][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4774'. [ 718.600044][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4774'. [ 718.600256][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4774'. [ 718.600451][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4774'. [ 718.600653][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4774'. [ 718.600845][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4774'. [ 718.635998][T25352] netlink: 'syz.1.4776': attribute type 3 has an invalid length. [ 718.696802][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4774'. [ 719.198002][T25376] tipc: Resetting bearer [ 719.198358][T25376] tipc: Resetting bearer [ 719.450039][T25352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 719.813659][T25405] openvswitch: netlink: Key type 1028 is out of range max 32 [ 720.050713][T25415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4790'. [ 720.100344][T25416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4790'. [ 720.374879][T25431] ip_tables: iptables: counters copy to user failed while replacing table [ 720.442179][T25436] netlink: 'syz.3.4797': attribute type 3 has an invalid length. [ 721.276032][T25436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.555482][T25477] netlink: 'syz.3.4804': attribute type 3 has an invalid length. [ 721.729688][T25490] netlink: 'syz.1.4806': attribute type 4 has an invalid length. [ 722.155911][T19405] IPVS: ip_vs_send_async error -101 [ 722.373414][T25518] netlink: 'syz.1.4814': attribute type 3 has an invalid length. [ 722.450097][T25509] bridge0: port 1(wlan1) entered blocking state [ 722.450206][T25509] bridge0: port 1(wlan1) entered disabled state [ 722.450378][T25509] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 722.462979][T25509] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode [ 722.610812][T25509] mac80211_hwsim hwsim26 wlan1 (unregistering): left allmulticast mode [ 722.610845][T25509] mac80211_hwsim hwsim26 wlan1 (unregistering): left promiscuous mode [ 722.610955][T25509] bridge0: port 1(wlan1) entered disabled state [ 723.190794][T25518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 723.715762][T25533] netlink: 'syz.4.4815': attribute type 5 has an invalid length. [ 724.215173][T19405] IPVS: ip_vs_send_async error -101 [ 724.293965][T25559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.294007][T25559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.358761][T25569] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 724.618661][T25559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.618702][T25559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.800435][T25589] netlink: 'syz.4.4827': attribute type 3 has an invalid length. [ 724.912934][T25559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.912976][T25559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.974825][T25595] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 725.060211][T25559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.060251][T25559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.224032][T25610] xt_hashlimit: overflow, try lower: 0/0 [ 725.386205][T14812] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.386241][T14812] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.526608][T14811] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.526646][T14811] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.527930][T14812] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.527958][T14812] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.527991][T14812] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.528015][T14812] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.622308][T25589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.877451][T25631] syzkaller0: entered promiscuous mode [ 725.877477][T25631] syzkaller0: entered allmulticast mode [ 726.113087][T25644] lo speed is unknown, defaulting to 1000 [ 726.870720][T25648] __nla_validate_parse: 7 callbacks suppressed [ 726.870744][T25648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4841'. [ 728.889624][T14977] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 729.133268][T25672] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 729.155234][T25674] netlink: 'syz.4.4847': attribute type 3 has an invalid length. [ 729.183450][T25672] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 729.183454][T25675] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 729.368922][T25682] netlink: 'syz.3.4848': attribute type 16 has an invalid length. [ 729.368947][T25682] netlink: 'syz.3.4848': attribute type 17 has an invalid length. [ 729.399044][T25682] tunl0: left allmulticast mode [ 729.479111][T25682] bridge0: port 3(batadv0) entered blocking state [ 729.479253][T25682] bridge0: port 3(batadv0) entered forwarding state [ 729.503615][T25682] bridge0: port 1(1x9) entered blocking state [ 729.503771][T25682] bridge0: port 1(1x9) entered forwarding state [ 729.522174][T25682] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.522332][T25682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.581128][T25682] bridge1: left allmulticast mode [ 729.584447][T25682] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 729.611091][ T5719] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 729.624021][T14964] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 729.705852][ T5719] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 729.831798][ T38] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.831917][ T38] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.831956][ T38] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.959224][T25674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 730.220399][T25704] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4853'. [ 730.368353][T14977] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 730.675305][T25704] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20003 [ 730.773520][T25712] netlink: 47 bytes leftover after parsing attributes in process `syz.1.4855'. [ 731.131066][T25717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 731.159524][T25717] netlink: 'syz.4.4856': attribute type 1 has an invalid length. [ 731.159551][T25717] netlink: 576 bytes leftover after parsing attributes in process `syz.4.4856'. [ 731.411071][T25732] netlink: 'syz.2.4863': attribute type 64 has an invalid length. [ 731.559167][T25739] netlink: 'syz.0.4864': attribute type 3 has an invalid length. [ 731.560034][T25714] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 731.752769][T25751] macvlan4: entered allmulticast mode [ 731.752797][T25751] bridge0: entered allmulticast mode [ 731.752852][T25751] bridge0: entered promiscuous mode [ 731.859655][T25757] netlink: 'syz.1.4868': attribute type 16 has an invalid length. [ 731.859680][T25757] netlink: 'syz.1.4868': attribute type 17 has an invalid length. [ 732.373763][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 732.375856][T25739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 733.285272][T25757] bridge1: left allmulticast mode [ 733.310478][T25757] veth3: left allmulticast mode [ 733.357096][T25757] geneve2: left allmulticast mode [ 733.394126][T25757] ip6gre1: left promiscuous mode [ 733.394144][T25757] ip6gre1: left allmulticast mode [ 733.415333][T25757] bond5: left allmulticast mode [ 733.423753][T25757] bond6: left allmulticast mode [ 733.544119][T25757] bond7: left promiscuous mode [ 733.679764][ T8575] syj1: Port: 1 Link DOWN [ 733.759264][T14817] pimreg: left allmulticast mode [ 733.764875][T14817] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 733.983754][T14817] batman_adv: batadv0: Removing interface: ip6gretap1 [ 734.008454][T14817] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 734.133410][T25816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4878'. [ 734.177761][T14817] bond12 (unregistering): (slave gretap1): Releasing active interface [ 734.241341][T14817] batman_adv: batadv0: Interface deactivated: macvlan4 [ 734.254458][T14817] batman_adv: batadv0: Removing interface: macvlan4 [ 734.302408][T14817] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 734.356252][T14817] bond10 (unregistering): (slave bridge0): Releasing backup interface [ 734.356283][T14817] bridge0 (unregistering): left promiscuous mode [ 734.421078][T14817] bond0 (unregistering): (slave team0): Releasing backup interface [ 734.422859][T14817] bond0 (unregistering): Released all slaves [ 734.429313][T14817] bond1 (unregistering): Released all slaves [ 734.444492][T14817] bond2 (unregistering): Released all slaves [ 734.460225][T14817] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 734.460243][T14817] wireguard0: left promiscuous mode [ 734.461394][T14817] bond3 (unregistering): Released all slaves [ 734.483048][T14817] bond4 (unregistering): Released all slaves [ 734.497078][T14817] bond5 (unregistering): (slave veth3): Releasing active interface [ 734.498585][T14817] bond5 (unregistering): Released all slaves [ 734.519411][T14817] bond6 (unregistering): Released all slaves [ 734.531993][T14817] bond7 (unregistering): Released all slaves [ 734.544035][T14817] bond8 (unregistering): Released all slaves [ 734.560123][T14817] bond9 (unregistering): Released all slaves [ 734.577603][T14817] bond10 (unregistering): Released all slaves [ 734.595427][T14817] bond11 (unregistering): (slave veth13): Releasing backup interface [ 734.595454][T14817] veth13: left promiscuous mode [ 734.617981][T14817] bond11 (unregistering): Released all slaves [ 734.634779][T14817] bond12 (unregistering): Released all slaves [ 734.656092][T14812] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.656146][T14812] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.656184][T14812] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.656220][T14812] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.826538][T25823] Bluetooth: hci0: unsupported parameter 5135 [ 734.826565][T25823] Bluetooth: hci0: unsupported parameter 8192 [ 734.826670][T25823] Bluetooth: hci0: unsupported parameter 5135 [ 734.826686][T25823] Bluetooth: hci0: unsupported parameter 8192 [ 734.961541][T14817] ovs-system: left promiscuous mode [ 735.110999][T14817] tipc: Left network mode [ 735.155284][T25823] lo speed is unknown, defaulting to 1000 [ 735.236193][T25833] netlink: 'syz.4.4883': attribute type 3 has an invalid length. [ 735.239514][T25829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4880'. [ 735.566853][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 735.973520][T25859] netlink: 'syz.1.4885': attribute type 3 has an invalid length. [ 736.019249][T25833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 738.726288][T25884] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4891'. [ 738.908270][T25898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4895'. [ 739.624381][T14817] hsr_slave_0: left promiscuous mode [ 739.625337][T14817] hsr_slave_1: left promiscuous mode [ 739.645897][T14817] batman_adv: batadv0: Removing interface: macvtap1 [ 739.653900][T14817] batman_adv: batadv0: Removing interface: macvtap2 [ 739.679516][T14817] veth1_macvtap: left promiscuous mode [ 739.679557][T14817] veth0_macvtap: left promiscuous mode [ 739.680476][T14817] veth1_vlan: left promiscuous mode [ 739.680662][T14817] veth0_vlan: left promiscuous mode [ 740.344782][T14817] team0 (unregistering): Port device dummy0 removed [ 740.968608][T25925] bond8 (unregistering): Released all slaves [ 740.992377][T14817] IPVS: stop unused estimator thread 0... [ 741.681208][T25885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 741.834498][T25937] netlink: 'syz.1.4901': attribute type 3 has an invalid length. [ 742.130893][T25964] geneve1: entered promiscuous mode [ 742.161768][T25964] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 742.161795][T25964] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 742.161817][T25964] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 742.165761][T14805] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.165806][T14805] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.165839][T14805] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.663419][T25937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.041177][T26000] ip_tables: iptables: counters copy to user failed while replacing table [ 743.045147][T26002] sctp: [Deprecated]: syz.1.4913 (pid 26002) Use of int in max_burst socket option deprecated. [ 743.045147][T26002] Use struct sctp_assoc_value instead [ 743.413376][T26020] netlink: 'syz.3.4919': attribute type 3 has an invalid length. [ 743.476475][T26027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4920'. [ 743.477665][T26027] veth0_macvtap: left promiscuous mode [ 743.782120][T26046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4922'. [ 744.240866][T26020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 744.345604][T26065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4927'. [ 744.621019][T26082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4932'. [ 744.621049][T26082] openvswitch: netlink: Flow actions attr not present in new flow. [ 745.196531][T26106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4937'. [ 745.228687][T26106] veth0_to_bridge: entered promiscuous mode [ 745.229017][T26106] macvtap1: entered allmulticast mode [ 745.229034][T26106] veth0_to_bridge: entered allmulticast mode [ 745.279358][T26114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4941'. [ 745.283569][T26106] veth0_to_bridge: left allmulticast mode [ 745.283599][T26106] veth0_to_bridge: left promiscuous mode [ 745.360808][T26111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4939'. [ 745.516016][T26137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4947'. [ 745.516044][T26137] openvswitch: netlink: Flow actions attr not present in new flow. [ 745.679950][T26139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4945'. [ 745.751575][T26145] IPVS: persistence engine module ip_vs_pe_ not found [ 745.825360][T26149] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 745.856512][T26150] sctp: [Deprecated]: syz.4.4951 (pid 26150) Use of int in max_burst socket option. [ 745.856512][T26150] Use struct sctp_assoc_value instead [ 745.964449][T26156] netlink: 15 bytes leftover after parsing attributes in process `syz.3.4953'. [ 746.353557][T26190] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 746.545795][T26197] netlink: 'syz.0.4963': attribute type 2 has an invalid length. [ 748.821491][T26163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 749.003725][T26203] __nla_validate_parse: 5 callbacks suppressed [ 749.003747][T26203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4967'. [ 749.500948][T26233] netlink: 'syz.2.4972': attribute type 1 has an invalid length. [ 749.501006][T26233] netlink: 'syz.2.4972': attribute type 7 has an invalid length. [ 749.501020][T26233] netlink: 'syz.2.4972': attribute type 8 has an invalid length. [ 749.501034][T26233] netlink: 'syz.2.4972': attribute type 1 has an invalid length. [ 749.501047][T26233] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4972'. [ 750.066875][T26256] syzkaller0: entered promiscuous mode [ 750.066900][T26256] syzkaller0: entered allmulticast mode [ 750.538574][T26278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4978'. [ 750.542799][T26278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4978'. [ 750.705100][T26284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4981'. [ 751.721039][T26316] netlink: Conntrack attr has 12 unknown bytes [ 751.721090][T26316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 752.195098][T26333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 752.503249][T26335] ip_tables: iptables: counters copy to user failed while replacing table [ 752.845074][T26349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4996'. [ 753.540887][T26282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 753.807940][T26361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4997'. [ 753.850848][T26361] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 753.868768][T26361] bond5 (unregistering): Released all slaves [ 753.904240][T26364] netlink: Conntrack attr type has unexpected length (type=0, length=1, expected=0) [ 753.904270][T26364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.065176][T26372] netlink: 'syz.0.5001': attribute type 1 has an invalid length. [ 754.205481][T26380] veth0: entered promiscuous mode [ 754.234696][T26381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5004'. [ 754.234725][T26381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5004'. [ 754.235471][T26380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5004'. [ 754.344151][T26391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5005'. [ 754.344198][T26391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5005'. [ 754.345382][T26391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5005'. [ 754.356995][T26386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5002'. [ 755.113028][T26416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5008'. [ 755.441000][T26416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5008'. [ 755.478097][T26431] netlink: Conntrack attr type has unexpected length (type=0, length=1, expected=0) [ 755.478143][T26431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.898997][T26447] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 755.954933][T26447] sctp: [Deprecated]: syz.1.5016 (pid 26447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 755.954933][T26447] Use struct sctp_sack_info instead [ 756.148560][T26461] macvtap0: entered promiscuous mode [ 756.148586][T26461] veth0_macvtap: entered promiscuous mode [ 756.541968][T26474] netlink: Conntrack attr type has unexpected length (type=0, length=1, expected=0) [ 756.542014][T26474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 756.724829][T26486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5029'. [ 757.839269][T26529] netlink: 'syz.4.5041': attribute type 10 has an invalid length. [ 757.877648][T26529] team0: Port device dummy0 added [ 758.033226][T26530] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 758.033266][T26530] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 758.033306][T26530] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 758.514067][T26559] netlink: 'syz.3.5048': attribute type 1 has an invalid length. [ 758.675379][T26566] netlink: 'syz.3.5048': attribute type 1 has an invalid length. [ 758.828610][T26563] gretap1: entered allmulticast mode [ 758.855203][T26563] bond5: (slave gretap1): making interface the new active one [ 758.868433][T26563] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 759.120368][T26585] Bluetooth: hci0: unsupported parameter 5135 [ 759.120392][T26585] Bluetooth: hci0: unsupported parameter 65 [ 759.120404][T26585] Bluetooth: hci0: unsupported parameter 5135 [ 759.120416][T26585] Bluetooth: hci0: unsupported parameter 65 [ 759.274720][T26592] netlink: 'syz.2.5053': attribute type 1 has an invalid length. [ 759.451767][T26582] __nla_validate_parse: 72 callbacks suppressed [ 759.451792][T26582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5051'. [ 759.580685][T26603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5056'. [ 759.618601][T26601] netlink: 'syz.0.5055': attribute type 2 has an invalid length. [ 759.618627][T26601] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5055'. [ 759.682623][T26601] netlink: 'syz.0.5055': attribute type 10 has an invalid length. [ 759.685423][T26601] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 760.097693][T26618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5057'. [ 760.157401][T26631] netlink: Invalid conntrack timeout [ 760.157573][T26631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.427790][T26646] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5064'. [ 760.482224][T26649] syzkaller1: entered promiscuous mode [ 760.482251][T26649] syzkaller1: entered allmulticast mode [ 760.525739][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 760.690973][T26652] team0: entered promiscuous mode [ 760.690999][T26652] team_slave_0: entered promiscuous mode [ 760.691214][T26652] team_slave_1: entered promiscuous mode [ 760.691398][T26652] dummy0: entered promiscuous mode [ 760.691712][T26652] team0: entered allmulticast mode [ 760.691729][T26652] team_slave_0: entered allmulticast mode [ 760.691744][T26652] team_slave_1: entered allmulticast mode [ 760.691759][T26652] dummy0: entered allmulticast mode [ 760.696591][T26652] team0: Cannot enslave team device to itself [ 760.844295][T26657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5067'. [ 760.953109][T26661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5072'. [ 760.953242][T26661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5072'. [ 761.210720][T26672] x_tables: duplicate underflow at hook 1 [ 761.247286][T26675] netlink: Invalid conntrack timeout [ 761.247321][T26675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.396649][T26687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5079'. [ 761.397716][T26687] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5079'. [ 761.600257][T26693] xt_ecn: cannot match TCP bits for non-tcp packets [ 762.158234][T26726] netlink: Invalid conntrack timeout [ 762.158269][T26726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.558796][T26746] bond7: (slave syz_tun): Removing an active aggregator [ 762.559489][T26746] bond7: (slave syz_tun): Releasing backup interface [ 762.632885][T26746] tipc: Resetting bearer [ 762.696430][T26746] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 762.697142][ T8575] s`z1: Port: 1 Link DOWN [ 763.400503][T26767] netlink: Invalid conntrack timeout [ 763.400617][T26767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.498189][T26818] netlink: 'syz.2.5114': attribute type 1 has an invalid length. [ 764.716049][T26820] veth5: entered allmulticast mode [ 764.723434][T26820] bond8: (slave veth5): Enslaving as an active interface with a down link [ 764.786589][T26818] bond8: (slave veth0_to_bond): making interface the new active one [ 764.787756][T26818] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 764.823434][T26826] __nla_validate_parse: 70 callbacks suppressed [ 764.823456][T26826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5115'. [ 764.855026][T26826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5115'. [ 765.102106][T26834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5117'. [ 765.455478][T26854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5121'. [ 765.970561][T26866] netlink: 300 bytes leftover after parsing attributes in process `syz.1.5124'. [ 766.003834][T26863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5123'. [ 766.027533][T26863] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 766.229712][T26871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5125'. [ 766.314331][T26873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5126'. [ 766.315215][T26875] veth1_to_bond: entered promiscuous mode [ 766.337696][T26875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5127'. [ 766.370440][T26875] veth1_to_bond (unregistering): left promiscuous mode [ 766.426159][T26875] bond0: (slave bond_slave_1): Releasing backup interface [ 766.813593][T26899] sctp: [Deprecated]: syz.1.5135 (pid 26899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 766.813593][T26899] Use struct sctp_sack_info instead [ 767.138289][T26912] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5138'. [ 767.261058][T26922] netlink: 'syz.1.5140': attribute type 3 has an invalid length. [ 768.121369][T26949] lo speed is unknown, defaulting to 1000 [ 768.184374][T26952] netlink: 'syz.2.5146': attribute type 1 has an invalid length. [ 768.206421][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 768.340662][T26952] 8021q: adding VLAN 0 to HW filter on device bond9 [ 768.711182][T26968] netlink: 'syz.4.5150': attribute type 4 has an invalid length. [ 769.447541][T26990] macvlan3: entered promiscuous mode [ 769.447568][T26990] macvlan3: entered allmulticast mode [ 769.454297][T26990] bond5: entered promiscuous mode [ 769.481753][T26990] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 769.513333][T26990] bond5: left promiscuous mode [ 769.528517][T26999] netlink: 'syz.1.5157': attribute type 3 has an invalid length. [ 769.528548][T26999] netlink: 'syz.1.5157': attribute type 3 has an invalid length. [ 770.113953][T27003] __nla_validate_parse: 11 callbacks suppressed [ 770.113976][T27003] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5160'. [ 770.202722][T27003] hsr_slave_1 (unregistering): left promiscuous mode [ 770.233137][T27016] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5160'. [ 770.233200][T27016] netlink: 'syz.0.5160': attribute type 9 has an invalid length. [ 770.233216][T27016] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5160'. [ 770.233232][T27016] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5160'. [ 770.303335][T27018] netlink: 'syz.1.5164': attribute type 1 has an invalid length. [ 770.362216][T27018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5164'. [ 770.365164][T27024] netlink: 'syz.2.5165': attribute type 19 has an invalid length. [ 770.369716][T27018] 8021q: adding VLAN 0 to HW filter on device bond8 [ 770.424905][T27018] 8021q: adding VLAN 0 to HW filter on device bond8 [ 770.458836][T27018] bond8: (slave geneve3): making interface the new active one [ 770.459434][T27018] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 770.467823][ T38] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 770.468061][ T38] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 770.468094][ T38] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 770.468123][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 770.532205][T27030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5167'. [ 770.535471][T27029] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5167'. [ 770.757012][T27045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5172'. [ 770.757052][T27045] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5172'. [ 770.757068][T27045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5172'. [ 771.658741][T27098] openvswitch: netlink: Multiple metadata blocks provided [ 771.705464][T27050] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 771.709059][T27057] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 771.715480][T27069] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 771.748797][T27109] 8021q: VLANs not supported on team0 [ 771.764076][T27109] 8021q: VLANs not supported on team0 [ 772.069988][T27122] FAULT_INJECTION: forcing a failure. [ 772.069988][T27122] name failslab, interval 1, probability 0, space 0, times 0 [ 772.070021][T27122] CPU: 1 UID: 0 PID: 27122 Comm: syz.3.5192 Not tainted syzkaller #0 PREEMPT(full) [ 772.070042][T27122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 772.070052][T27122] Call Trace: [ 772.070060][T27122] [ 772.070070][T27122] dump_stack_lvl+0xe8/0x150 [ 772.070105][T27122] should_fail_ex+0x410/0x560 [ 772.070140][T27122] ? __alloc_skb+0x1db/0x7a0 [ 772.070167][T27122] should_failslab+0xa8/0x100 [ 772.070194][T27122] ? __alloc_skb+0x1db/0x7a0 [ 772.070217][T27122] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 772.070233][T27122] ? __alloc_skb+0x18d/0x7a0 [ 772.070256][T27122] ? __alloc_skb+0x1db/0x7a0 [ 772.070288][T27122] __alloc_skb+0x1db/0x7a0 [ 772.070317][T27122] nci_send_cmd+0x89/0x360 [ 772.070456][T27122] nci_dev_up+0x669/0xdc0 [ 772.070492][T27122] ? __pfx_nci_dev_up+0x10/0x10 [ 772.070516][T27122] ? down_read+0x130/0x330 [ 772.070544][T27122] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 772.070569][T27122] nfc_dev_up+0x165/0x350 [ 772.070615][T27122] nfc_genl_dev_up+0x89/0xe0 [ 772.070640][T27122] genl_family_rcv_msg_doit+0x233/0x340 [ 772.070671][T27122] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 772.070705][T27122] ? bpf_lsm_capable+0x9/0x20 [ 772.070724][T27122] ? security_capable+0x7e/0x2c0 [ 772.070760][T27122] genl_rcv_msg+0x614/0x7a0 [ 772.070786][T27122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 772.070804][T27122] ? __pfx_nfc_genl_dev_up+0x10/0x10 [ 772.070847][T27122] netlink_rcv_skb+0x226/0x4a0 [ 772.070872][T27122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 772.070891][T27122] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 772.070932][T27122] ? down_read+0x2be/0x330 [ 772.070963][T27122] genl_rcv+0x28/0x40 [ 772.070983][T27122] netlink_unicast+0x7bd/0x940 [ 772.071024][T27122] netlink_sendmsg+0x813/0xb40 [ 772.071063][T27122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.071101][T27122] ? apparmor_socket_sendmsg+0x98/0x360 [ 772.071129][T27122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.071149][T27122] sock_sendmsg_nosec+0x14e/0x190 [ 772.071177][T27122] ____sys_sendmsg+0x54e/0x850 [ 772.071207][T27122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 772.071242][T27122] ? import_iovec+0x73/0xa0 [ 772.071277][T27122] ___sys_sendmsg+0x2a5/0x360 [ 772.071295][T27122] ? __lock_acquire+0x747/0x2de0 [ 772.071313][T27122] ? __pfx____sys_sendmsg+0x10/0x10 [ 772.071360][T27122] ? __fget_files+0x2a/0x420 [ 772.071377][T27122] ? __fget_files+0x3a2/0x420 [ 772.071401][T27122] __x64_sys_sendmsg+0x1b1/0x290 [ 772.071416][T27122] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 772.071445][T27122] do_syscall_64+0x166/0x520 [ 772.071461][T27122] ? trace_irq_disable+0x3b/0x140 [ 772.071474][T27122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.071487][T27122] ? clear_bhb_loop+0x70/0xc0 [ 772.071503][T27122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.071515][T27122] RIP: 0033:0x7f3c1779e1d9 [ 772.071529][T27122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.071539][T27122] RSP: 002b:00007f3c18710028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.071555][T27122] RAX: ffffffffffffffda RBX: 00007f3c17a25fa0 RCX: 00007f3c1779e1d9 [ 772.071564][T27122] RDX: 0000000004008054 RSI: 0000200000000500 RDI: 0000000000000008 [ 772.071572][T27122] RBP: 00007f3c18710090 R08: 0000000000000000 R09: 0000000000000000 [ 772.071580][T27122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.071588][T27122] R13: 00007f3c17a26038 R14: 00007f3c17a25fa0 R15: 00007fff0d42d428 [ 772.071609][T27122] [ 772.100961][T27122] nci: nci_send_cmd: no memory for command [ 772.695465][T27145] netlink: 'syz.4.5197': attribute type 3 has an invalid length. [ 772.695491][T27145] netlink: 'syz.4.5197': attribute type 1 has an invalid length. [ 773.150749][T27167] Bluetooth: hci0: unsupported parameter 5134 [ 773.150776][T27167] Bluetooth: hci0: unsupported parameter 8192 [ 773.150790][T27167] Bluetooth: hci0: unsupported parameter 5134 [ 773.150803][T27167] Bluetooth: hci0: unsupported parameter 8192 [ 774.127235][T27205] bond9: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 774.127258][T27205] bond9: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 774.127510][T27205] bond9: entered allmulticast mode [ 774.178281][T27211] ip6gre1: entered promiscuous mode [ 774.178298][T27211] ip6gre1: entered allmulticast mode [ 774.239267][T27217] netlink: 'syz.2.5213': attribute type 1 has an invalid length. [ 774.315128][T27217] 8021q: adding VLAN 0 to HW filter on device bond10 [ 774.351400][T27222] bond10: (slave veth7): Enslaving as an active interface with a down link [ 774.390339][T27217] bond10: (slave syz_tun): making interface the new active one [ 774.393890][T27217] syz_tun: entered promiscuous mode [ 774.394259][T27217] bond10: (slave syz_tun): Enslaving as an active interface with an up link [ 774.394346][ T8575] s`z1: Port: 1 Link ACTIVE [ 774.986761][T27260] FAULT_INJECTION: forcing a failure. [ 774.986761][T27260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.986797][T27260] CPU: 0 UID: 0 PID: 27260 Comm: syz.2.5221 Not tainted syzkaller #0 PREEMPT(full) [ 774.986819][T27260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 774.986832][T27260] Call Trace: [ 774.986849][T27260] [ 774.986859][T27260] dump_stack_lvl+0xe8/0x150 [ 774.986893][T27260] should_fail_ex+0x410/0x560 [ 774.986926][T27260] _copy_from_user+0x2d/0xb0 [ 774.986958][T27260] ___sys_sendmsg+0x1c6/0x360 [ 774.986979][T27260] ? __lock_acquire+0x747/0x2de0 [ 774.987007][T27260] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.987074][T27260] ? __fget_files+0x2a/0x420 [ 774.987103][T27260] ? __fget_files+0x3a2/0x420 [ 774.987145][T27260] __x64_sys_sendmsg+0x1b1/0x290 [ 774.987168][T27260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 774.987212][T27260] do_syscall_64+0x166/0x520 [ 774.987238][T27260] ? trace_irq_disable+0x3b/0x140 [ 774.987259][T27260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.987281][T27260] ? clear_bhb_loop+0x70/0xc0 [ 774.987305][T27260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.987324][T27260] RIP: 0033:0x7eff5559e1d9 [ 774.987344][T27260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.987360][T27260] RSP: 002b:00007eff56490028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 774.987384][T27260] RAX: ffffffffffffffda RBX: 00007eff55825fa0 RCX: 00007eff5559e1d9 [ 774.987399][T27260] RDX: 000000000000c040 RSI: 00002000000004c0 RDI: 0000000000000004 [ 774.987412][T27260] RBP: 00007eff56490090 R08: 0000000000000000 R09: 0000000000000000 [ 774.987425][T27260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.987438][T27260] R13: 00007eff55826038 R14: 00007eff55825fa0 R15: 00007ffc431278d8 [ 774.987473][T27260] [ 775.068533][T27255] 8021q: adding VLAN 0 to HW filter on device bond6 [ 775.670982][T27288] __nla_validate_parse: 11 callbacks suppressed [ 775.671008][T27288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5226'. [ 775.744724][T27294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5228'. [ 775.785312][T27296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5230'. [ 775.796229][T27296] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5230'. [ 775.842346][T27299] netlink: Invalid conntrack timeout [ 775.842393][T27299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 776.203939][T27324] tap0: tun_chr_ioctl cmd 1074025677 [ 776.204060][T27324] tap0: linktype set to 780 [ 776.515237][T27342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5240'. [ 776.525067][T27342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5240'. [ 776.534407][T27348] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 776.538363][T27348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5241'. [ 776.810755][T27360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5244'. [ 777.515852][T27395] batman_adv: batadv0: Adding interface: dummy0 [ 777.515883][T27395] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.515912][T27395] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 777.908387][T27409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5256'. [ 778.463008][T27448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5268'. [ 778.591617][T27455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.687650][T27459] netlink: Invalid conntrack timeout [ 778.687687][T27459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.738757][T27464] bridge0: port 2(syz_tun) entered blocking state [ 778.738911][T27464] bridge0: port 2(syz_tun) entered disabled state [ 778.739062][T27464] syz_tun: entered allmulticast mode [ 778.741217][T27464] syz_tun: entered promiscuous mode [ 778.750855][T27464] netlink: 'syz.1.5273': attribute type 4 has an invalid length. [ 778.752576][T27464] netlink: 'syz.1.5273': attribute type 4 has an invalid length. [ 778.776224][T27467] netlink: 'syz.3.5276': attribute type 11 has an invalid length. [ 778.832011][T27464] bridge0: port 4(ip6gretap0) entered blocking state [ 778.832190][T27464] bridge0: port 4(ip6gretap0) entered disabled state [ 778.832325][T27464] ip6gretap0: entered allmulticast mode [ 778.836368][T27464] ip6gretap0: entered promiscuous mode [ 779.033921][T27476] ip_tables: iptables: counters copy to user failed while replacing table [ 779.286417][T27491] netlink: 'syz.1.5284': attribute type 21 has an invalid length. [ 779.286909][T27493] netlink: 'syz.1.5284': attribute type 21 has an invalid length. [ 779.782356][T27501] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.783083][T27501] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.801066][T27501] bond_slave_0: left promiscuous mode [ 779.964645][T27501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.986048][T27501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.383418][T27501] veth1_macvtap: left allmulticast mode [ 782.707761][T27501] bridge0: left allmulticast mode [ 782.746676][ T9050] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.746728][ T9050] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.746763][ T9050] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.746798][ T9050] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.414630][T27574] FAULT_INJECTION: forcing a failure. [ 783.414630][T27574] name failslab, interval 1, probability 0, space 0, times 0 [ 783.414666][T27574] CPU: 1 UID: 0 PID: 27574 Comm: syz.2.5304 Not tainted syzkaller #0 PREEMPT(full) [ 783.414690][T27574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 783.414703][T27574] Call Trace: [ 783.414713][T27574] [ 783.414722][T27574] dump_stack_lvl+0xe8/0x150 [ 783.414770][T27574] should_fail_ex+0x410/0x560 [ 783.414811][T27574] should_failslab+0xa8/0x100 [ 783.414842][T27574] __kmalloc_noprof+0xfe/0x720 [ 783.414866][T27574] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 783.414890][T27574] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 783.414921][T27574] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 783.414954][T27574] genl_family_rcv_msg_doit+0xda/0x340 [ 783.414984][T27574] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 783.415016][T27574] ? apparmor_capable+0x126/0x170 [ 783.415042][T27574] ? bpf_lsm_capable+0x9/0x20 [ 783.415067][T27574] ? security_capable+0x7e/0x2c0 [ 783.415101][T27574] genl_rcv_msg+0x614/0x7a0 [ 783.415130][T27574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 783.415149][T27574] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 783.415195][T27574] netlink_rcv_skb+0x226/0x4a0 [ 783.415225][T27574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 783.415249][T27574] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 783.415297][T27574] ? down_read+0x2be/0x330 [ 783.415341][T27574] genl_rcv+0x28/0x40 [ 783.415359][T27574] netlink_unicast+0x7bd/0x940 [ 783.415397][T27574] netlink_sendmsg+0x813/0xb40 [ 783.415433][T27574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.415469][T27574] ? apparmor_socket_sendmsg+0x98/0x360 [ 783.415496][T27574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.415521][T27574] sock_sendmsg_nosec+0x14e/0x190 [ 783.415553][T27574] ____sys_sendmsg+0x54e/0x850 [ 783.415581][T27574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 783.415617][T27574] ? import_iovec+0x73/0xa0 [ 783.415652][T27574] ___sys_sendmsg+0x2a5/0x360 [ 783.415674][T27574] ? __lock_acquire+0x747/0x2de0 [ 783.415704][T27574] ? __pfx____sys_sendmsg+0x10/0x10 [ 783.415779][T27574] ? __fget_files+0x2a/0x420 [ 783.415810][T27574] ? __fget_files+0x3a2/0x420 [ 783.415852][T27574] __x64_sys_sendmsg+0x1b1/0x290 [ 783.415876][T27574] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 783.415925][T27574] do_syscall_64+0x166/0x520 [ 783.415951][T27574] ? trace_irq_disable+0x3b/0x140 [ 783.415973][T27574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.415993][T27574] ? clear_bhb_loop+0x70/0xc0 [ 783.416020][T27574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.416041][T27574] RIP: 0033:0x7eff5559e1d9 [ 783.416061][T27574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.416079][T27574] RSP: 002b:00007eff56490028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.416102][T27574] RAX: ffffffffffffffda RBX: 00007eff55825fa0 RCX: 00007eff5559e1d9 [ 783.416118][T27574] RDX: 000000000000c040 RSI: 00002000000004c0 RDI: 0000000000000004 [ 783.416133][T27574] RBP: 00007eff56490090 R08: 0000000000000000 R09: 0000000000000000 [ 783.416146][T27574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.416159][T27574] R13: 00007eff55826038 R14: 00007eff55825fa0 R15: 00007ffc431278d8 [ 783.416194][T27574] [ 783.606692][T19405] IPVS: ip_vs_send_async error -101 [ 783.681196][T27578] __nla_validate_parse: 7 callbacks suppressed [ 783.681216][T27578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5306'. [ 783.682425][T27578] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5306'. [ 783.709891][T27578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5306'. [ 783.779902][T27579] netlink: 3784 bytes leftover after parsing attributes in process `syz.0.5305'. [ 784.152046][T27609] xt_HMARK: spi-set and port-set can't be combined [ 784.260767][T27613] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5312'. [ 784.333599][T27620] netlink: 'syz.1.5315': attribute type 1 has an invalid length. [ 784.446606][T27620] bond10: entered promiscuous mode [ 784.447120][T27620] 8021q: adding VLAN 0 to HW filter on device bond10 [ 784.580864][T27620] 8021q: adding VLAN 0 to HW filter on device bond10 [ 784.584132][T27620] bond10: (slave xfrm1): The slave device specified does not support setting the MAC address [ 784.584156][T27620] bond10: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 784.620580][T27620] bond10: (slave xfrm1): making interface the new active one [ 784.620607][T27620] xfrm1: entered promiscuous mode [ 784.625186][T27620] xfrm1: left promiscuous mode [ 784.711875][T27636] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 784.714971][T27636] bond6 (unregistering): Released all slaves [ 784.764819][T27643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5320'. [ 784.772947][T27644] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5322'. [ 784.921303][T27637] tipc: Resetting bearer [ 784.968408][T27637] veth0_vlan: left promiscuous mode [ 784.971151][T27637] veth0_vlan: entered promiscuous mode [ 784.988043][T27637] macvtap0: left promiscuous mode [ 784.988069][T27637] veth0_macvtap: left promiscuous mode [ 784.991156][T27637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 784.994529][T27637] ip6gre1: left promiscuous mode [ 784.994974][T27637] geneve2: left promiscuous mode [ 785.028829][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 785.030651][T27637] bridge1: left promiscuous mode [ 785.057245][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 785.070443][T27637] 8021q: adding VLAN 0 to HW filter on device bond5 [ 785.071171][T27637] bond6: left promiscuous mode [ 785.071192][T27637] bridge2: left promiscuous mode [ 785.112648][T27637] 8021q: adding VLAN 0 to HW filter on device bond8 [ 785.185325][T14814] bond8: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 785.189751][ T8842] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.232436][ T8842] bond10: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 785.284807][ T9053] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 785.326269][T14814] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.327934][ T38] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.329452][T27663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5326'. [ 785.393090][ T38] nci: nci_rx_work: unknown MT 0x6 [ 785.475069][T27668] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5328'. [ 785.475096][T27668] openvswitch: netlink: Flow key attr not present in new flow. [ 785.494541][T14814] syz_tun: left promiscuous mode [ 785.726032][T19405] IPVS: ip_vs_send_async error -101 [ 785.727808][T27687] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 785.806428][ T8574] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 785.861359][T27695] netlink: 'syz.3.5338': attribute type 24 has an invalid length. [ 785.881943][T27695] bond7: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 785.881964][T27695] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 785.883127][T27695] bond7 (unregistering): Released all slaves [ 785.966549][ T8574] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 786.031501][T27701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5340'. [ 786.038274][T27701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.151731][T27705] openvswitch: netlink: Message has 40 unknown bytes. [ 786.470805][T27712] netlink: 'syz.3.5343': attribute type 8 has an invalid length. [ 787.948329][T27651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 788.242028][T27724] vlan0: entered promiscuous mode [ 788.431735][T27733] netlink: 'syz.4.5349': attribute type 1 has an invalid length. [ 788.617607][T27744] Bluetooth: hci0: unsupported parameter 5135 [ 788.617634][T27744] Bluetooth: hci0: unsupported parameter 8192 [ 788.617648][T27744] Bluetooth: hci0: unsupported parameter 5135 [ 788.617660][T27744] Bluetooth: hci0: unsupported parameter 8192 [ 788.754282][T27752] __nla_validate_parse: 4 callbacks suppressed [ 788.754306][T27752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5360'. [ 788.919224][T27761] vlan0: entered promiscuous mode [ 789.077587][T27771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5363'. [ 789.165980][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 789.218279][T27777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5365'. [ 789.257757][T27774] ipvlan3: entered promiscuous mode [ 789.912057][T27812] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 789.976856][T27802] bond7: Removing last arp target with arp_interval on [ 790.305999][T27831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5377'. [ 790.480303][T27832] lo speed is unknown, defaulting to 1000 [ 790.590010][T27845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5379'. [ 790.608655][ T5626] block nbd2: Receive control failed (result -107) [ 790.620886][T27845] li: renamed from lo (while UP) [ 790.938949][T27857] netlink: 'syz.4.5385': attribute type 46 has an invalid length. [ 790.938977][T27857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5385'. [ 791.160268][T27861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5387'. [ 791.334753][T27864] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 791.337705][T27861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5387'. [ 791.530861][T27867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5389'. [ 791.768061][T27881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5394'. [ 793.059245][T27924] 8021q: adding VLAN 0 to HW filter on device bond6 [ 793.351384][T27939] IPVS: Error connecting to the multicast addr [ 793.366432][T27937] syzkaller0: entered promiscuous mode [ 793.366457][T27937] syzkaller0: entered allmulticast mode [ 793.652283][ T5626] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 794.556621][T27990] netlink: 'syz.4.5418': attribute type 1 has an invalid length. [ 794.556660][T27990] __nla_validate_parse: 5 callbacks suppressed [ 794.556673][T27990] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5418'. [ 794.720739][T27999] netlink: Unknown conntrack attr (type=14385, max=9) [ 794.720784][T27999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.007609][T27996] syzkaller0: entered allmulticast mode [ 795.224433][T27983] netlink: 'syz.2.5414': attribute type 1 has an invalid length. [ 795.294015][T28017] netlink: 'syz.0.5423': attribute type 219 has an invalid length. [ 795.309424][T27983] 8021q: adding VLAN 0 to HW filter on device bond11 [ 795.420366][T28009] bond11: (slave veth9): Enslaving as an active interface with a down link [ 795.721633][T28024] bond8: option packets_per_slave: invalid value (258018537) [ 795.721661][T28024] bond8: option packets_per_slave: allowed values 0 - 65535 [ 795.749595][T28024] bond8 (unregistering): Released all slaves [ 795.803715][T28044] netlink: NAT attribute has 8 unknown bytes [ 795.803754][T28044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.041577][T28051] batman_adv: batadv0: Adding interface: gretap1 [ 796.041603][T28051] batman_adv: batadv0: Interface activated: gretap1 [ 796.216233][T28064] openvswitch: netlink: Flow actions attr not present in new flow. [ 796.524364][T28078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5438'. [ 796.618699][T28078] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5438'. [ 797.005772][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 798.686553][T28037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 799.006363][T28126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5448'. [ 799.006401][T28126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5448'. [ 799.078537][T28126] bridge8: entered promiscuous mode [ 799.078574][T28126] bridge8: entered allmulticast mode [ 799.113435][T28136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5450'. [ 799.113536][T28136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 799.113559][T28136] IPv6: NLM_F_CREATE should be set when creating new route [ 799.433054][T28142] syzkaller0: entered promiscuous mode [ 799.433083][T28142] syzkaller0: entered allmulticast mode [ 799.715378][T28160] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 799.853442][T28175] IPVS: set_ctl: invalid protocol: 22 100.1.1.1:20001 [ 802.426964][T28186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5465'. [ 802.684369][T28195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5469'. [ 802.738624][T28205] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5470'. [ 802.764936][T28204] ip6gretap1: entered allmulticast mode [ 802.777353][T28204] batman_adv: batadv0: Adding interface: ip6gretap1 [ 802.777373][T28204] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.777405][T28204] batman_adv: batadv0: Interface activated: ip6gretap1 [ 802.930096][T28209] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5473'. [ 803.041659][T28214] netlink: 'syz.4.5474': attribute type 1 has an invalid length. [ 803.070815][T28214] 8021q: adding VLAN 0 to HW filter on device bond7 [ 803.100837][T28214] 8021q: adding VLAN 0 to HW filter on device bond7 [ 803.101457][T28214] bond7: (slave gre4): The slave device specified does not support setting the MAC address [ 803.104235][T28214] bond7: (slave gre4): Error -95 calling set_mac_address [ 803.116366][T28222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5477'. [ 803.182141][T28215] gretap1: entered promiscuous mode [ 803.215832][T28213] syzkaller0: entered promiscuous mode [ 803.215858][T28213] syzkaller0: entered allmulticast mode [ 803.584283][T28214] 8021q: adding VLAN 0 to HW filter on device bond8 [ 803.637418][T28214] bond7: (slave bond8): Enslaving as an active interface with a down link [ 803.673081][T28215] bond7 (unregistering): (slave bond8): Releasing active interface [ 803.703250][T28215] bond7 (unregistering): Released all slaves [ 804.070643][T28269] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 804.290727][T28272] tipc: Resetting bearer [ 804.325212][T28283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5485'. [ 804.402590][T28286] netlink: 'syz.0.5487': attribute type 26 has an invalid length. [ 804.418110][T28287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5488'. [ 804.576842][T14968] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 804.587990][T14968] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 804.886070][T28283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5485'. [ 804.894035][T28307] syzkaller0: entered promiscuous mode [ 804.894060][T28307] syzkaller0: entered allmulticast mode [ 805.083254][T28309] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 805.200896][T28321] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 805.409453][T14968] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 805.464149][T28333] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5500'. [ 805.464181][T28333] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5500'. [ 805.507801][ T31] audit: type=1800 audit(1791883655.456:13): pid=28336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5499" name="memory.events" dev="tmpfs" ino=2281 res=0 errno=0 [ 812.365719][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 814.285791][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 824.527314][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 829.646143][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 834.766611][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 842.446112][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 901.325764][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 926.925844][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 929.218024][T28389] __nla_validate_parse: 1 callbacks suppressed [ 929.218048][T28389] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5511'. [ 929.280964][T28383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5509'. [ 929.281002][T28383] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5509'. [ 929.769197][T28430] netlink: Invalid conntrack timeout [ 929.769233][T28430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.020559][T28445] FAULT_INJECTION: forcing a failure. [ 930.020559][T28445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.020622][T28445] CPU: 0 UID: 0 PID: 28445 Comm: syz.4.5524 Not tainted syzkaller #0 PREEMPT(full) [ 930.020647][T28445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 930.020660][T28445] Call Trace: [ 930.020669][T28445] [ 930.020680][T28445] dump_stack_lvl+0xe8/0x150 [ 930.020723][T28445] should_fail_ex+0x410/0x560 [ 930.020762][T28445] _copy_from_user+0x2d/0xb0 [ 930.020794][T28445] ___sys_recvmsg+0x173/0x5a0 [ 930.020830][T28445] ? __pfx____sys_recvmsg+0x10/0x10 [ 930.020861][T28445] ? lock_acquire+0x115/0x350 [ 930.020922][T28445] do_recvmmsg+0x31a/0x7f0 [ 930.020957][T28445] ? __pfx_do_recvmmsg+0x10/0x10 [ 930.020995][T28445] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 930.021029][T28445] ? __fget_files+0x3a2/0x420 [ 930.021073][T28445] __x64_sys_recvmmsg+0x198/0x250 [ 930.021109][T28445] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 930.021147][T28445] do_syscall_64+0x166/0x520 [ 930.021174][T28445] ? trace_irq_disable+0x3b/0x140 [ 930.021198][T28445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.021221][T28445] ? clear_bhb_loop+0x70/0xc0 [ 930.021248][T28445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.021268][T28445] RIP: 0033:0x7f5730d9e1d9 [ 930.021290][T28445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.021307][T28445] RSP: 002b:00007f5731c36028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 930.021331][T28445] RAX: ffffffffffffffda RBX: 00007f5731026270 RCX: 00007f5730d9e1d9 [ 930.021346][T28445] RDX: 0000000000010106 RSI: 0000200000000c40 RDI: 0000000000000004 [ 930.021360][T28445] RBP: 00007f5731c36090 R08: 0000000000000000 R09: 0000000000000000 [ 930.021372][T28445] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 930.021383][T28445] R13: 00007f5731026308 R14: 00007f5731026270 R15: 00007ffc1680d938 [ 930.021416][T28445] [ 930.104878][T28447] netlink: 'syz.1.5526': attribute type 30 has an invalid length. [ 930.387839][T28455] ip_tables: iptables: counters copy to user failed while replacing table [ 930.390452][T28455] ip_tables: iptables: counters copy to user failed while replacing table [ 930.390820][T28455] ip_tables: iptables: counters copy to user failed while replacing table [ 930.391238][T28455] ip_tables: iptables: counters copy to user failed while replacing table [ 930.391598][T28455] ip_tables: iptables: counters copy to user failed while replacing table [ 930.401522][T28455] ip_tables: iptables: counters copy to user failed while replacing table [ 930.402219][T28455] ip_tables: iptables: counters copy to user failed while replacing table [ 930.402543][T28455] ip_tables: iptables: counters copy to user failed while replacing table [ 930.564010][T28460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5529'. [ 930.828698][T28475] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5533'. [ 930.830711][T28476] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5533'. [ 931.002170][T28475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5533'. [ 931.009204][T28476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5533'. [ 932.066817][T28529] FAULT_INJECTION: forcing a failure. [ 932.066817][T28529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.066855][T28529] CPU: 0 UID: 0 PID: 28529 Comm: syz.4.5545 Not tainted syzkaller #0 PREEMPT(full) [ 932.066879][T28529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 932.066892][T28529] Call Trace: [ 932.066902][T28529] [ 932.066912][T28529] dump_stack_lvl+0xe8/0x150 [ 932.066947][T28529] should_fail_ex+0x410/0x560 [ 932.066981][T28529] _copy_from_user+0x2d/0xb0 [ 932.067011][T28529] ___sys_recvmsg+0x173/0x5a0 [ 932.067042][T28529] ? __pfx____sys_recvmsg+0x10/0x10 [ 932.067072][T28529] ? lock_acquire+0x115/0x350 [ 932.067129][T28529] do_recvmmsg+0x31a/0x7f0 [ 932.067164][T28529] ? __pfx_do_recvmmsg+0x10/0x10 [ 932.067201][T28529] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 932.067232][T28529] ? __fget_files+0x3a2/0x420 [ 932.067275][T28529] __x64_sys_recvmmsg+0x198/0x250 [ 932.067302][T28529] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 932.067339][T28529] do_syscall_64+0x166/0x520 [ 932.067365][T28529] ? trace_irq_disable+0x3b/0x140 [ 932.067387][T28529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.067409][T28529] ? clear_bhb_loop+0x70/0xc0 [ 932.067435][T28529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.067455][T28529] RIP: 0033:0x7f5730d9e1d9 [ 932.067475][T28529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.067502][T28529] RSP: 002b:00007f5731c36028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 932.067526][T28529] RAX: ffffffffffffffda RBX: 00007f5731026270 RCX: 00007f5730d9e1d9 [ 932.067542][T28529] RDX: 0000000000010106 RSI: 0000200000000c40 RDI: 0000000000000004 [ 932.067555][T28529] RBP: 00007f5731c36090 R08: 0000000000000000 R09: 0000000000000000 [ 932.067568][T28529] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 932.067581][T28529] R13: 00007f5731026308 R14: 00007f5731026270 R15: 00007ffc1680d938 [ 932.067618][T28529] [ 933.246940][T28578] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 933.435747][T28590] syzkaller1: entered promiscuous mode [ 933.435773][T28590] syzkaller1: entered allmulticast mode [ 933.580514][T28601] netlink: 'syz.1.5560': attribute type 6 has an invalid length. [ 933.823382][T28611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5562'. [ 934.075103][T28579] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 934.607348][T28656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5574'. [ 934.611968][T28653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5574'. [ 934.621743][T28657] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5569'. [ 934.745230][T28649] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5569'. [ 934.756304][T28649] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5569'. [ 937.148910][T28626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 937.337461][T28665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5576'. [ 937.454858][T28676] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5579'. [ 937.710198][T28701] FAULT_INJECTION: forcing a failure. [ 937.710198][T28701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.717915][T28701] CPU: 0 UID: 0 PID: 28701 Comm: syz.0.5584 Not tainted syzkaller #0 PREEMPT(full) [ 937.717952][T28701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 937.717965][T28701] Call Trace: [ 937.717974][T28701] [ 937.717982][T28701] dump_stack_lvl+0xe8/0x150 [ 937.718019][T28701] should_fail_ex+0x410/0x560 [ 937.718051][T28701] _copy_from_user+0x2d/0xb0 [ 937.718080][T28701] ___sys_recvmsg+0x173/0x5a0 [ 937.718110][T28701] ? __pfx____sys_recvmsg+0x10/0x10 [ 937.718150][T28701] ? lock_acquire+0x115/0x350 [ 937.718204][T28701] do_recvmmsg+0x31a/0x7f0 [ 937.718236][T28701] ? __pfx_do_recvmmsg+0x10/0x10 [ 937.718273][T28701] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 937.718303][T28701] ? __fget_files+0x3a2/0x420 [ 937.718342][T28701] __x64_sys_recvmmsg+0x198/0x250 [ 937.718368][T28701] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 937.718405][T28701] do_syscall_64+0x166/0x520 [ 937.718431][T28701] ? trace_irq_disable+0x3b/0x140 [ 937.718452][T28701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.718473][T28701] ? clear_bhb_loop+0x70/0xc0 [ 937.718499][T28701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.718518][T28701] RIP: 0033:0x7f3cf5f9e1d9 [ 937.718540][T28701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.718559][T28701] RSP: 002b:00007f3cf6e53028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 937.718582][T28701] RAX: ffffffffffffffda RBX: 00007f3cf6226270 RCX: 00007f3cf5f9e1d9 [ 937.718598][T28701] RDX: 0000000000010106 RSI: 0000200000000c40 RDI: 0000000000000004 [ 937.718612][T28701] RBP: 00007f3cf6e53090 R08: 0000000000000000 R09: 0000000000000000 [ 937.718626][T28701] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 937.718639][T28701] R13: 00007f3cf6226308 R14: 00007f3cf6226270 R15: 00007ffe6e060fd8 [ 937.718672][T28701] [ 938.594120][T28726] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5595'. [ 938.661144][T28732] net_ratelimit: 61 callbacks suppressed [ 938.661167][T28732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 938.726108][T28732] syzkaller1: entered promiscuous mode [ 938.726134][T28732] syzkaller1: entered allmulticast mode [ 938.845615][T28745] netlink: 'syz.3.5600': attribute type 1 has an invalid length. [ 938.933145][T28735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 939.001085][T28750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5601'. [ 939.059053][T28754] netlink: 'syz.2.5603': attribute type 1 has an invalid length. [ 939.544467][T28773] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5609'. [ 939.577622][ T9053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.577648][ T9053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.840534][T28794] netlink: zone id is out of range [ 939.840551][T28794] netlink: zone id is out of range [ 939.840560][T28794] netlink: zone id is out of range [ 939.840568][T28794] netlink: zone id is out of range [ 939.840577][T28794] netlink: zone id is out of range [ 939.840586][T28794] netlink: zone id is out of range [ 939.840598][T28794] netlink: zone id is out of range [ 939.840608][T28794] netlink: zone id is out of range [ 939.951500][T28790] bridge0: port 3(batadv0) entered disabled state [ 939.952257][T28790] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.952473][T28790] bridge0: port 1(1x9) entered disabled state [ 939.996334][T28790] batman_adv: batadv0: Interface deactivated: dummy0 [ 940.111296][T28790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.181920][T28790] veth1_vlan: left allmulticast mode [ 940.239499][T28790] geneve1: left promiscuous mode [ 940.270445][T28790] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 940.350039][T28790] batman_adv: batadv0: Interface deactivated: macvtap1 [ 940.407256][T28790] veth3: left allmulticast mode [ 940.408150][T28790] bridge3: left promiscuous mode [ 940.408321][T28790] bridge4: left promiscuous mode [ 940.408483][T28790] bridge5: left promiscuous mode [ 940.408639][T28790] bridge6: left promiscuous mode [ 940.408803][T28790] bridge7: left promiscuous mode [ 940.413084][T28790] sit2: left promiscuous mode [ 940.414979][T28790] ipvlan2: left allmulticast mode [ 940.414999][T28790] macvlan1: left allmulticast mode [ 940.482546][T28790] gretap1: left allmulticast mode [ 940.509346][T28790] ipvlan3: left promiscuous mode [ 940.517114][T14805] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.517159][T14805] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.517192][T14805] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.603309][T28820] netlink: 'syz.2.5621': attribute type 3 has an invalid length. [ 940.603335][T28820] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5621'. [ 940.744909][T28822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5622'. [ 940.778776][T28827] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5625'. [ 941.078384][T28837] tc_dump_action: action bad kind [ 941.464524][T28867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5636'. [ 941.657044][T28876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5641'. [ 941.733204][T28876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5641'. [ 941.744572][T28876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5641'. [ 942.933332][T28928] tc_dump_action: action bad kind [ 942.960497][T28928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5650'. [ 942.975212][T28916] nbd0: detected capacity change from 0 to 63 [ 942.993137][ T1954] [ 942.995509][ T1954] ====================================================== [ 942.997172][T28928] netlink: 'syz.1.5650': attribute type 2 has an invalid length. [ 942.997191][T28928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5650'. [ 943.019124][ T1954] WARNING: possible circular locking dependency detected [ 943.026227][ T1954] syzkaller #0 Not tainted [ 943.030660][ T1954] ------------------------------------------------------ [ 943.037747][ T1954] kworker/1:1H/1954 is trying to acquire lock: [ 943.039958][ T5626] block nbd0: Receive control failed (result -32) [ 943.050324][ T1954] ffff888056f2dc68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 943.059436][ T1954] [ 943.059436][ T1954] but task is already holding lock: [ 943.066800][ T1954] ffff88805f020178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 943.075250][ T1954] [ 943.075250][ T1954] which lock already depends on the new lock. [ 943.075250][ T1954] [ 943.085646][ T1954] [ 943.085646][ T1954] the existing dependency chain (in reverse order) is: [ 943.094652][ T1954] [ 943.094652][ T1954] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 943.101908][ T1954] __mutex_lock+0x19d/0x1550 [ 943.107027][ T1954] nbd_queue_rq+0xc1/0xff0 [ 943.111964][ T1954] blk_mq_dispatch_rq_list+0x499/0x1990 [ 943.118082][ T1954] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 943.124976][ T1954] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 943.131481][ T1954] blk_mq_run_work_fn+0x16c/0x300 [ 943.137030][ T1954] process_scheduled_works+0xc3d/0x1630 [ 943.143101][ T1954] worker_thread+0xa47/0xfb0 [ 943.148213][ T1954] kthread+0x38b/0x480 [ 943.152798][ T1954] ret_from_fork+0x514/0xb70 [ 943.157930][ T1954] ret_from_fork_asm+0x1a/0x30 [ 943.163833][ T1954] [ 943.163833][ T1954] -> #5 (set->srcu){.+.+}-{0:0}: [ 943.170958][ T1954] __synchronize_srcu+0xc9/0x2f0 [ 943.176418][ T1954] elevator_switch+0x1e8/0x7b0 [ 943.181745][ T1954] elevator_change+0x2fa/0x480 [ 943.187030][ T1954] elevator_set_default+0x375/0x440 [ 943.192755][ T1954] blk_register_queue+0x3f3/0x4e0 [ 943.198390][ T1954] __add_disk+0x6b8/0xdb0 [ 943.203249][ T1954] add_disk_fwnode+0x100/0x3a0 [ 943.208536][ T1954] nbd_dev_add+0x733/0xb60 [ 943.213500][ T1954] nbd_init+0x168/0x1f0 [ 943.218281][ T1954] do_one_initcall+0x250/0x870 [ 943.223661][ T1954] do_initcall_level+0x10a/0x1a0 [ 943.229178][ T1954] do_initcalls+0x59/0xa0 [ 943.234041][ T1954] kernel_init_freeable+0x29d/0x3e0 [ 943.239771][ T1954] kernel_init+0x22/0x1d0 [ 943.244630][ T1954] ret_from_fork+0x514/0xb70 [ 943.249751][ T1954] ret_from_fork_asm+0x1a/0x30 [ 943.255044][ T1954] [ 943.255044][ T1954] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 943.262876][ T1954] __mutex_lock+0x19d/0x1550 [ 943.267997][ T1954] elevator_change+0x1af/0x480 [ 943.273281][ T1954] elevator_set_none+0xb5/0x140 [ 943.278649][ T1954] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 943.285068][ T1954] nbd_start_device+0x189/0xb30 [ 943.290439][ T1954] nbd_genl_connect+0x167d/0x1cd0 [ 943.295987][ T1954] genl_family_rcv_msg_doit+0x233/0x340 [ 943.302063][ T1954] genl_rcv_msg+0x614/0x7a0 [ 943.307086][ T1954] netlink_rcv_skb+0x226/0x4a0 [ 943.312403][ T1954] genl_rcv+0x28/0x40 [ 943.316912][ T1954] netlink_unicast+0x7bd/0x940 [ 943.322201][ T1954] netlink_sendmsg+0x813/0xb40 [ 943.327486][ T1954] sock_sendmsg_nosec+0x14e/0x190 [ 943.333035][ T1954] ____sys_sendmsg+0x54e/0x850 [ 943.338336][ T1954] ___sys_sendmsg+0x2a5/0x360 [ 943.343537][ T1954] __x64_sys_sendmsg+0x1b1/0x290 [ 943.349005][ T1954] do_syscall_64+0x166/0x520 [ 943.354119][ T1954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.360530][ T1954] [ 943.360530][ T1954] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 943.369157][ T1954] blk_alloc_queue+0x544/0x690 [ 943.374444][ T1954] __blk_mq_alloc_disk+0x194/0x390 [ 943.380076][ T1954] nbd_dev_add+0x494/0xb60 [ 943.385017][ T1954] nbd_init+0x168/0x1f0 [ 943.389694][ T1954] do_one_initcall+0x250/0x870 [ 943.394983][ T1954] do_initcall_level+0x10a/0x1a0 [ 943.400507][ T1954] do_initcalls+0x59/0xa0 [ 943.405386][ T1954] kernel_init_freeable+0x29d/0x3e0 [ 943.411122][ T1954] kernel_init+0x22/0x1d0 [ 943.415992][ T1954] ret_from_fork+0x514/0xb70 [ 943.421131][ T1954] ret_from_fork_asm+0x1a/0x30 [ 943.426423][ T1954] [ 943.426423][ T1954] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 943.433639][ T1954] fs_reclaim_acquire+0x71/0x100 [ 943.439114][ T1954] __kmalloc_noprof+0xbc/0x720 [ 943.444405][ T1954] sock_kmalloc+0xd6/0x160 [ 943.449350][ T1954] __tcp_md5_do_add+0x179/0x4a0 [ 943.454813][ T1954] tcp_md5_do_add+0xfa/0x390 [ 943.459925][ T1954] tcp_v6_parse_md5_keys+0x550/0x670 [ 943.465789][ T1954] do_tcp_setsockopt+0x1250/0x1f80 [ 943.471456][ T1954] do_sock_setsockopt+0x17c/0x1b0 [ 943.476999][ T1954] __x64_sys_setsockopt+0x13d/0x1b0 [ 943.482717][ T1954] do_syscall_64+0x166/0x520 [ 943.487831][ T1954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.494243][ T1954] [ 943.494243][ T1954] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 943.502344][ T1954] lock_sock_nested+0x41/0x100 [ 943.507635][ T1954] inet_shutdown+0x6a/0x390 [ 943.512700][ T1954] nbd_mark_nsock_dead+0x2cb/0x550 [ 943.518362][ T1954] recv_work+0x1cee/0x1e10 [ 943.523302][ T1954] process_scheduled_works+0xc3d/0x1630 [ 943.529378][ T1954] worker_thread+0xa47/0xfb0 [ 943.534489][ T1954] kthread+0x38b/0x480 [ 943.539078][ T1954] ret_from_fork+0x514/0xb70 [ 943.544471][ T1954] ret_from_fork_asm+0x1a/0x30 [ 943.549761][ T1954] [ 943.549761][ T1954] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 943.557409][ T1954] __lock_acquire+0x164c/0x2de0 [ 943.562779][ T1954] lock_acquire+0x115/0x350 [ 943.567801][ T1954] __mutex_lock+0x19d/0x1550 [ 943.572928][ T1954] nbd_queue_rq+0x373/0xff0 [ 943.577952][ T1954] blk_mq_dispatch_rq_list+0x499/0x1990 [ 943.584026][ T1954] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 943.590876][ T1954] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 943.597381][ T1954] blk_mq_run_work_fn+0x16c/0x300 [ 943.602965][ T1954] process_scheduled_works+0xc3d/0x1630 [ 943.609032][ T1954] worker_thread+0xa47/0xfb0 [ 943.614145][ T1954] kthread+0x38b/0x480 [ 943.618734][ T1954] ret_from_fork+0x514/0xb70 [ 943.623847][ T1954] ret_from_fork_asm+0x1a/0x30 [ 943.629141][ T1954] [ 943.629141][ T1954] other info that might help us debug this: [ 943.629141][ T1954] [ 943.639362][ T1954] Chain exists of: [ 943.639362][ T1954] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 943.639362][ T1954] [ 943.651701][ T1954] Possible unsafe locking scenario: [ 943.651701][ T1954] [ 943.659185][ T1954] CPU0 CPU1 [ 943.664550][ T1954] ---- ---- [ 943.669920][ T1954] lock(&cmd->lock); [ 943.673902][ T1954] lock(set->srcu); [ 943.680318][ T1954] lock(&cmd->lock); [ 943.686816][ T1954] lock(&nsock->tx_lock); [ 943.691232][ T1954] [ 943.691232][ T1954] *** DEADLOCK *** [ 943.691232][ T1954] [ 943.699377][ T1954] locks held by kworker/1:1H/1954: 4, last CPU#1: [ 943.705829][ T1954] #0: ffff888021e93940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 943.716911][ T1954] #1: ffffc9000649fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 943.729790][ T1954] #2: ffff88807464ef18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 943.739196][ T1954] #3: ffff88805f020178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 943.748071][ T1954] [ 943.748071][ T1954] stack backtrace: [ 943.754222][ T1954] CPU: 1 UID: 0 PID: 1954 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 943.763685][ T1954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 943.773746][ T1954] Workqueue: kblockd blk_mq_run_work_fn [ 943.779317][ T1954] Call Trace: [ 943.782594][ T1954] [ 943.785525][ T1954] dump_stack_lvl+0xe8/0x150 [ 943.790129][ T1954] print_circular_bug+0x2e2/0x300 [ 943.795159][ T1954] check_noncircular+0x12f/0x150 [ 943.800107][ T1954] __lock_acquire+0x164c/0x2de0 [ 943.804968][ T1954] lock_acquire+0x115/0x350 [ 943.809471][ T1954] ? nbd_queue_rq+0x373/0xff0 [ 943.814158][ T1954] __mutex_lock+0x19d/0x1550 [ 943.818755][ T1954] ? nbd_queue_rq+0x373/0xff0 [ 943.823453][ T1954] ? do_raw_spin_lock+0x12b/0x2f0 [ 943.828481][ T1954] ? nbd_queue_rq+0x373/0xff0 [ 943.833165][ T1954] ? __pfx___mutex_lock+0x10/0x10 [ 943.838194][ T1954] ? rcu_is_watching+0x16/0xb0 [ 943.842966][ T1954] ? trace_sched_exit_tp+0x3a/0x130 [ 943.848184][ T1954] nbd_queue_rq+0x373/0xff0 [ 943.852694][ T1954] ? __pfx_nbd_queue_rq+0x10/0x10 [ 943.857720][ T1954] ? irqentry_exit+0x218/0x920 [ 943.862485][ T1954] ? __pfx___schedule+0x10/0x10 [ 943.867336][ T1954] ? irqentry_exit+0x218/0x920 [ 943.872105][ T1954] blk_mq_dispatch_rq_list+0x499/0x1990 [ 943.877656][ T1954] ? sbitmap_get+0x229/0x390 [ 943.882250][ T1954] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 943.888238][ T1954] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 943.894048][ T1954] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 943.900386][ T1954] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 943.907156][ T1954] ? lock_acquire+0x115/0x350 [ 943.911835][ T1954] ? process_scheduled_works+0x97a/0x1630 [ 943.917556][ T1954] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 943.923539][ T1954] ? blk_mq_run_work_fn+0x144/0x300 [ 943.928750][ T1954] blk_mq_run_work_fn+0x16c/0x300 [ 943.933778][ T1954] ? process_scheduled_works+0x97a/0x1630 [ 943.939497][ T1954] process_scheduled_works+0xc3d/0x1630 [ 943.945058][ T1954] ? __pfx_process_scheduled_works+0x10/0x10 [ 943.951040][ T1954] ? assign_work+0x3cf/0x5d0 [ 943.955638][ T1954] worker_thread+0xa47/0xfb0 [ 943.960246][ T1954] ? __kthread_parkme+0x71/0x1f0 [ 943.965193][ T1954] kthread+0x38b/0x480 [ 943.969263][ T1954] ? __pfx_worker_thread+0x10/0x10 [ 943.974381][ T1954] ? __pfx_kthread+0x10/0x10 [ 943.978971][ T1954] ret_from_fork+0x514/0xb70 [ 943.983586][ T1954] ? __pfx_ret_from_fork+0x10/0x10 [ 943.988704][ T1954] ? __switch_to+0xc89/0x1420 [ 943.993385][ T1954] ? __pfx_kthread+0x10/0x10 [ 943.997973][ T1954] ret_from_fork_asm+0x1a/0x30 [ 944.002752][ T1954] [ 944.020388][ T1954] block nbd0: Dead connection, failed to find a fallback [ 944.020413][ T1954] block nbd0: shutting down sockets [ 944.020428][ T1954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 944.020504][ T1954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 944.020566][ T1954] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 944.020590][ T1954] Buffer I/O error on dev nbd0, logical block 1, async page read [ 944.020604][ T1954] Buffer I/O error on dev nbd0, logical block 2, async page read [ 944.020618][ T1954] Buffer I/O error on dev nbd0, logical block 3, async page read [ 944.088266][ T4946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 944.088301][ T4946] Buffer I/O error on dev nbd0, logical block 0, async page read [ 944.088316][ T4946] Buffer I/O error on dev nbd0, logical block 1, async page read [ 944.088329][ T4946] Buffer I/O error on dev nbd0, logical block 2, async page read [ 944.088341][ T4946] Buffer I/O error on dev nbd0, logical block 3, async page read [ 944.100671][T28932] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5651'. [ 944.111398][ T4946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 944.111431][ T4946] Buffer I/O error on dev nbd0, logical block 0, async page read [ 944.111447][ T4946] Buffer I/O error on dev nbd0, logical block 1, async page read [ 944.143511][ T4946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 944.164963][T28938] veth1_to_team: entered promiscuous mode [ 944.166102][ T4946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 944.171983][T28938] veth1_to_team: left promiscuous mode [ 944.180215][ T4946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 944.193777][ T4946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 944.193951][ T4946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 944.194000][T28817] ldm_validate_partition_table(): Disk read failed. [ 944.194081][ T4946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 944.194400][T28817] Dev nbd0: unable to read RDB block 0 [ 944.194864][T28817] nbd0: unable to read partition table [ 944.210196][T28817] ldm_validate_partition_table(): Disk read failed. [ 944.210570][T28817] Dev nbd0: unable to read RDB block 0 [ 944.211009][T28817] nbd0: unable to read partition table