last executing test programs: 2.641212377s ago: executing program 3 (id=7785): socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3c364ca41d6357e544508474004000b42a201ecffffffffffffff8a0e2f964e0000c534a632ab6193fcf19b2df3ee0500faa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a069078ac1e0101ac1497b51d0bc115", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x8) r7 = socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 2.640790853s ago: executing program 2 (id=7786): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb"], 0x0, 0x30, 0x0, 0x0, 0x2, 0x10000}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110b0000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0xc854}, 0x408c1) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={r11, 0x44e9}, &(0x7f0000000040)=0x8) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) socket$nl_generic(0x10, 0x3, 0x10) 2.180953032s ago: executing program 2 (id=7795): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x139}], 0x1}}], 0x1, 0x81) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.005287167s ago: executing program 0 (id=7798): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008ba65271103100000040009500000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) r5 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) r7 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000018c0), 0x80800) r8 = accept$inet6(r2, &(0x7f0000001900)={0xa, 0x0, 0x0, @local}, &(0x7f0000001940)=0x1c) sendmsg$netlink(r3, &(0x7f0000001a00)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfc, 0x800}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000580)={0x1338, 0x2c, 0x10, 0x70bd2a, 0x25dfdbff, "", [@typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x6f, 0x90, 0x0, 0x1, [@generic="3dd065d20481234d4b30f54248702b1e71ef60cc902a34dec98d7ea38163dcc92ae30df17becb87612944295d80cb959474012dbfc6ad3d5529431abb9946d10f7da53f280ad33e34fcf0f37e8b77ec61d86e66caa16bf4b313bb7", @typed={0x8, 0x14e, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x3d, 0x0, 0x0, @pid=r5}]}, @typed={0x8, 0xfd, 0x0, 0x0, @u32=0xd6a}, @nested={0x119b, 0x123, 0x0, 0x1, [@nested={0x4, 0x11e}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r6}, @generic="02b03aa830102be0a6e3ed5c317bbb0127a37c50042495e92977497a614dc34377977a6f983c408452358212269449071cab515874466140c0d0f8c57946e2426a800c537a886e780841b736757014fc46c4f5b17cf91b1d198bd4de2aa9667db503ec849d6d06c1ff1a1f189fb96a6197ed4ac78a9545b5413dc206ac6430ae8dd16bdabeef239bcb536dbf3dd3f14d07d5771795bbf5729b67d63bb100cd947c4d89a34462a54fa0ba93631c1742e5d120401bc154f1ed4c0a751cde393010f71e2bf7334538f2761fb34902f092be160187696988ab5e3d44ab33cb993b32fec7a20f9b2c161a6f71345d953c2923a74d380695b9ef7645891671d5979e95ba2b9f0f86a339dd124c8870e88a063a58af2a99ce6a52d7f8b03dd49781736df1a99f55d03f8ff754ae458e22e028a9133d864559300c1d71b867c8758d2a3cca8f131b9722c66d6a5537c76bdb0ead1cb877e3d6fd6b69d0b7fb34fc54815f3582abeb29d6179b34a9bfef557b741e7e4cb6630a0629a3c9f878150738c69373e5fea5045bfb17bac3601052dc5a72f7fefc894cad4fef2bf6874b88ca5294cf6bb2414179c8e7ee881f4d4e4542626d8906e3ea8475804c0b8d68b6b149ed9f668d50129ba7e46ef93d596cad4968f8ae9cf114b92ba59d8cdfff7b3ea78813594472892122b96ac51c9e0446fa510192e86c514f0d34bdf9f6d214546e2c4cd8bd3603c8fa01c488d21fb03a2994d35d20047be17d6f95491d86e0675ead4f5af34cba28d1d47bb501e46204080294cbfe2cb3fe538d2de7a2fed9a25d425b1ed07af5c8f067a4d9bd13b4fb6f82f00c7f28aad958739b34e138873b5c115e5660a7f402dd124dbd132cb0b855a902b1d3b010bfc040137e24203d18bfebb6f8bb4f9f4b8a7cd94c0a9eaa513fe33fc53d72ec669cbce7b288da56341ec4f303517611ba255831e22cfdbb9dc79859c41c2e3b5c96e273c2674af6b4c3f865590ea451f145749a6b242c222012e0dae92e18e65751e9213000eabe9d5bd63964895ae13855f7f80a4b1cd36c8baf5d8b70da2e7f93bd204101cd9ed1da779f8a362ccff69faeee505c13e95639404c8df37e8af5b6470b3aa5b058e14a21b2ff555449b3d4f38e49931f77722675aed7c45cd466860e1927e9cc7e9e3707ca37db9959c918c3ff6244373a03c5048f94246634e53e35f0bb4b92ab529029ad901c06cbe3b76bbf24a5cac38e76b4c089f02e1246d9d6c38a92abae23254752a207a3efa0b614ef580c460165c2d2283d3e1480ac69fc3540147f2cd48d097252e0d594b2d306111e7af4b565e13a7c6ae728747d24f60f2c1729513dfcfc1b04af450452f7ca8c32b2bcc56ad242451cbc19ab7b950e6c13812b65e8b386c6d88f3273e16f0bac824052c6180f52d435edd508302880ed8056d4e725015a1a0fccb253f6668146408e4f13e1344701a66e20b04576ebba7bb812c43243d9a7dade061932d924414993125da14943cf4ef1690e7558717f6d490e5d1ffb3acef3494d7df71ff1d335c5ed1279ef3899b2a32ce967fed6bcf634598ca92f12dc4dca282f2fe602bec2dafcccd5e66487ce9497e748524cb4dcaa8532223bc60fb3d5ab57e31b558bc46ff5b0b726ba1250cfbaa2422de4fc9156e5e95ea71ef1f9b733dc70130dd5f254c97b9b577e16f17a8aaeed256f3af257022f11764091dc12db2a519071b42359c8e1a6e6feaeefb5c005c5930b49b152efd58556893b006c5c6436f76e5a77b12b7ca4ccf34b034b7c98109e56be355c9787e4dd035626acff8f2e8959631a7d1171aebe5b1e363e070ee9d8d944ad8a8503d6d99aa10f4bc012f5b91157dea8db33d7131ec2d5f2c45d6b1bfb55413351afb97783a858a9d2a1636c507bcb8a1c7ae8ce59c53fce77cc10b53f32d40263bfedf18fc3cfde73228815ec2619091eafc6e97c9fd0cb551ee576f23c637333dd17f69964dc23dd4bbb3be19648fc22f85897ea9dd410aa11def1347c7591ed93e8bef0f1eeea2884bb062c4641c991e9ae6237b21660eb191aa504c92184ff1b0cc5040e32f8466d6558e593dfbd1b90a6c637c9820b2422042853fc46cf08ec06ed38a1b592a460bcd9836355f8545498587fc67914ec08cd322caf6ff7de0009ae3e452bd8e02f6b16af75382912fc681f596d3d4e207db42499867b43ce4f6eaad960ce7c435a06b4650bf66a50efd6191fb65d28f63ca8042624d8090dc3e75dd9f7520766a6cc76c87e9693f96abf0c4cb9962eb203cae45ad1d19f71427c43e86992f1216e3292fb80c1241544f335f23532f08eb89974d068df2cce51f39f91567dd6e588f80ab73bd076d0d5275bc6e756453152a42dbb4fdf565a41f49366dee7228da131d0c56a4262a467832058a2941bd38f8391c2237b9a563a18c13f847d3e8f1aff1c63c7a31d51d502714cd3a2cadf8fc0b20dc23e65ef3dcc6cd5eb9e2d63073d5ab3186b3c7fbf12c00089707035e78ea0d515ba3be1b2fcb649797dadf15c1cda081f033872795787c530c0b587cd54da51a2cd3a592473a8b1367f1879720e26d8bde0432575356d58c8158e8208ee11fd165ee53fd5465f541f23ba8d2c33165f9ed60486b290daa9dd42cea076442334fdda2d1bde47c263726595bee08d2348744ee3112000d7611fa89a000b470cd6a80a4628ec1e8dd60281f3038472abccae11ba5fa66412626649423451a3f460f86e21258a4caa031f9128e795bff5a886d9fcd1430f4d58a6ac5fef9e5771039a6da522915813e42880083d5ca570b7dc2c994a1c2495601050d25d7591f159c73ad7fa69cb9bd528f680159bcaa14955bf605e48d5b709a9fc483e42f972d729a959d0687e02b2ef7398f5f0edbae616de4c24901534695fd969c60b0220a429a303537f3f5b96f7280623ed263a6e315fe8cbffeaab713342a43a7d9a61231f8ce82f2b636e0e0e5bb9ef3ee27175520eb23ad82ec525cd3410c25a5f60c5ce95b4048f61ce1fd4b623fd0c8df3986c26ec2a83fea130a0c18613720526a9c4b81c327fcbda37309cebf407bfac17cd135b36fe053d44342b782fab8999cfa5b71f7e46043e0ab46eafe800c76b72f68c688ce4979964994d432cb17a19c67a264b3e4d86f8b7eb97cdcd223152f1c4be82ea16c64a4917190fc1d7d175d99608fbea3ebcb5ecdee6365a557f482d293d0bac22c491832b6e28d2bac986f129ac19a152db3c95f1cc89ea7012bfdc198b4dc15389d7a5460a47287881b0dd62b134863d5154b8e69e6883c62866e74746f5d855f08b2f38c20895e3a033fdac974e26976cc0961060a6ac78d74e798f5b0ca842ec64f77e7f91a07ddeb8862f8def64368f773ea37b256dde35677fc906082e5b1726ffe08a3df052e6df9565a780109d2cafd7b0b93af82199dee38907dd9168ec24a34cbe1ef4e319bdc275b253317c5e5a5d68eeb8a563c2e837a6a93dd10e21ad1b4d820e262c24fc694c24a746d3a7fa0cc92f0b24b9d5c38e145e376c3f25e8175f8597d9142e07fbfc0be66f08a49d4dca0a1c9433829d24ea5168a24f511e1c35201a87fe4adf419b4b6395f9cdc8b0145456be92af720ccb257d5cb0a034e24150bb2841e1155949beaedf19676dff264f48a4cee9398c0afbfb51abd2b26409b9fbdd15b8812d211f415ea3f1c5b425b9d8a46084ea89bc0cf597fb4e756a92599fe8a6eaae7723e82b7427449e536b1775818e38c5cf657bb17f7a6af8d6170c41306ffed99123cc5a876db7ae1e28e6ad2b168c5511f54e7280fb489ee31a54f4b79383bcfd6f723709f4d6fb33fe06ad5cd6548e10d127ed2b5f4184289179b01204c388b6cd5aadcd32dd4082d1707f1ab320bd6990394e2b4574d79bcd50437d29e07e87473191b737195c18b44b799e98c045d50e5841e57546e8d1784239c81dcd5243dc09cfafa68e5bd28ae5081b4f6abcd6cd03d7472d933162fd58810838ac75ec331664cbe2a8571f790f1ddd5994d2da18cca8c4a564b085183610207544c2cf9506e63a0d61be904b4014515d5de5aa6b2ccb64233574f1234d8c926de6761335d6ae487237e466361c440ffb65c7c80370a97ffdfeeae55eb240ee023e1627809a02efd1ce23df7580900758d5e621d719a5b077f9e6e7e0317c90cc4a8a01a844740aecbbdfaf43c0016c8fe2fd4b597c1b79f658cd7ab290a72a3b8edbbe9ec18c24bad78027a3b6e68f476c4351bdd68808e558dd200c0f61d10192b62310104aeb58f44c87540749651707c3088f24c2f9a45bbca9d7d23f5cb85683bb886189be44d0a351bf30e89d8a0605f8ec1adbded054a9a854980b353f4bd309fa754aaaef279ffb91087c3bdefc3a8a4b6a83a4f1cbc0b7a411e8320b618fcfe6ff3cb16842b17a8f35ca44a21368ac21fda9358b2b7ef4b066c7129b3d9e80f6cec2c531ece589467a0b1e41dff34139b3325ee8a61926b7f14485f111bf1186b14fc3e76bfe1035a6570fd73bca20237cecaec183332d98705ea5bfda030840197749a13dae0ba0b8d5dd15b6d3460e9edb705861257208e3a8a7573e59203485f042be95ac389128113563005e413a5041068fb3ad9834e5e6568d21fd661e175df6c093760507b93b775e56a4ab7183904534f6d866dc49bfdce8d305337bc62db7d09f8ebbaf852f16b1466655e2758de900c8f834ca6f42ec6012bcd2539ae70dbb11d77b19d4b3be56fdb4644248a08f1fc6c36d4bd586a51b5d8381bbdc21babd4ee375021eb081f350369e2728e5b2f8511329bdc9fde812f55744b6f0ac50c3e6fe08d9b981177d58136c84cd16f058624ee3e1c78344cab7cc26589d7f150740c59336d4ce9e19c3ecd8de2f76f52797f0174645c6cd53990b5f2709b6f91080137f6dacc2bb03a5856e350c7d9b7e162fd2592c4a43c38bc9091dbce74da83dc85b8e4cf3a40c1f065d91de05ee41a87b0aebd21614737928dedc3d3f12d5b2922218c5ec3f2c7442d57fc3c7d5f0a67a5736844a07c2e8584df0e68d7c0113a51c27ddb54fbee61e5faf964024109e19414b56b06aa58d0504166f9948c080f09ceab0fe8a58a3637aa8dca3cd669831e38b7aa6b4510c20c5748d34f8846b4d1875943a9dadde6513a67ed6c5157af7ba48427b68d7760bbe00b0e629829ba2d359a56687ee17ed435e91cf7da46d8f52a1e5efc16350610de1cf780518f75ee0eb5d02614005411891db4270e0c8f76aa51e06d9ffa993d2d71ae1de38d812804d118a69e1bc462d5dd03e41258e75c4e535bf5ef8a1267b3cf8d1af8764a0754c654a8c23b7cc02bd4f1bd0f4c2637f4dd3d2e4b5cc308d0fe1a1ec5a40b9b0b143e1ed503e9a4b5bc8ec009509df2b93766aac192f7c83eef70c69129eb21a100c615fbd962f66ebcb56e6de2786aeffcf840c8e180753e5a0d9feb9bcd7ab695c8c136b03cf3f54577628fb6d182581d1068cab5509819106d26360dd9e399dc6f2040bf5b8914805d268ef5cd2296135712271b311e1d9d435a665a435a74077582caf3ecbee348d9ae6f27ad06d429c92c79aabea40de469f8a8e7ce9a82754a445be18b4a356825e98cbdb64a9b572031dbec487fcf4b395ffbec33dfa8855a0f92a3648bafabcccd92f4c01d04a4af99c5e3801fc1d0a20022823974f7e674c3cb60b0daa4952e82911d547813dcfa91543f0de24a03c642210b95599541b72eca7a1a40ebd85d7c8834b5700f6771035875c9ec15411c2fc81a9884d", @nested={0x4, 0x9a}, @typed={0x8, 0x71, 0x0, 0x0, @fd=r0}, @generic="15fbf274912c95769831ea8f1ba734c7c27d7f71ff8c93e2ab7d93694bdb8e9031ea6e113201ee2b894559dbc209db34d4bde8ceb4ed6342a877d582d47c9578f907168530089012c07719f845457ee580fef0e2fdbab442e25ecdd55a67e217bb1d4126eb6afd25931c81130523c05f7423cd09f552dedd29308b7be20419f3da3eef", @generic="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"]}, @typed={0xc, 0xae, 0x0, 0x0, @u64=0x9}, @generic="05b101b072de50af5ebefd9430", @generic="2429d605c7d8ca453f62f708796c929e8c5aa62c77154158609d8dd8b2e7c742bb7071d85a23db85196aa5e35defafa181fd2395e26c082803ac5059", @generic="def56e38f579935ca36617ef0a1c3f2af2caa705b3967b0b2345ebd4cfd46a361d22642d92892def36a2f48c1aa62a62bbdc29990160b4c716207cec5bb97ecb026ae10a519b5b34b360daef1693f41ddce8344e366616a8dd08927ad9c36cca002f008613dd4330d1c73d9f30443312ea6aec018dccdf087e183f6a3d1c4fa9bea814e2f06cbfe6c9dea6ce4f8a90e1e336712ba320d15f59b1f2069e57cfc06cfec51075b2ef50"]}, 0x1338}], 0x1, &(0x7f0000001980)=[@rights={{0x24, 0x1, 0x1, [r7, r2, r8, r0, r2]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r2, r3]}}], 0x48, 0x4090}, 0x814) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000b4000000b4000000040000000600000005000084020000000f00000003000000008000000a00000005000000ffff00000d00000000000000060000000d0000000100000005000000100000000100000001000000100000000000000c030000000700000005000013000000000e000000000200000100000009000000040000003a0000000d000000008000000400000006000000fdffffff0700000010000000080200000008000000000000020300"/208], &(0x7f0000000000), 0xd0, 0x0, 0x1, 0x8, 0x10000, @value=r2}, 0x28) 1.833359829s ago: executing program 4 (id=7799): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x10, 0x10001, 0xfffffffffffffffc}, {0x5}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0xfffffffd, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04200506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b00", 0x3c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYBLOB="0000000000000000b55ef1cd4e3eaab793c5d1791d8b8b1e036790f01264c16a49cc552c087d8438ba66d5cc02123f2a1e206da04fb99c13f761be3e1430d9c02463ebf81b74cc65a985b4cbcd0edf93f672ad9db97ed2b13fa449002b4d61ea7b9803b929359bb347b03de5a9b8ca7a4cb07248aafb532a38e62a5e3b3ecea44be3cc1de0a96835b24347d0d81aa1c300f7116a069852"], 0x2c}, 0x1, 0x0, 0x0, 0x4000015}, 0x40040) socket$inet6(0xa, 0x8da44eac26cfd618, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x20000800, 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000180)=""/250, 0xfa}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000440)=""/4096, 0x108000, 0x2000, 0x8}, 0x20) 1.832636521s ago: executing program 2 (id=7800): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x5, 0x18, {0x4e21, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7c, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x4, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x7b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xd, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x7b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x200}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0x9, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0x1, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x0, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x4}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0xe, 0x101, 0x2, 0xc88}], [{}, {0x5}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r5, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x31}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc004}, 0x2400c810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d4800800", 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x1c}, {0xc, 0x3}, {0xc}}}]}]}, 0x60}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24048800) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x5, 0x18, {0x4e21, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7c, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x4, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x7b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xd, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x7b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x200}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0x9, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0x1, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x0, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x4}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0xe, 0x101, 0x2, 0xc88}], [{}, {0x5}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r5, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x31}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc004}, 0x2400c810) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d4800800", 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x1c}, {0xc, 0x3}, {0xc}}}]}]}, 0x60}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24048800) (async) 1.769763883s ago: executing program 4 (id=7802): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4b, 0x101, 0x9}) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x100, 0x70bd28, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000088}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.689134694s ago: executing program 0 (id=7803): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f00000010c0)=""/4100, &(0x7f0000000200)=0x1004) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000001c0)={0x401, 0x8000, 0x0, 0x8, 0x1, [0x5, 0x7, 0x5, 0x6]}) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000240)=0x30) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f00000002c0)=@can, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)="2e41edb55649e4103b7d107150a17a8c84a0a1b29d88106479b2eb1167b3", 0x1e}], 0x1, &(0x7f0000000480)=[{0xf0, 0x84, 0x5, "f59540b2e02da53e830858eb86b943876e5eed5a027811ddc3c2928f0dd105aa7f335b7105fb7082ca9863cfad16d040f56d0b0473b29d7c0232f690f85e5aca76878de38b30c7a20e342ebf184f74268cb6601c0d3954721899f81c866b6402e51539fd6572cda947c36290038dbca1de29c11034884f815e0ae44f5a1c9565f86a668ffb40c1ce5c61507ea8ad538371459269428cf1f308ec0e5ba0dd026e4223063bee920f863ef54bde6ccd3625239932356ced2722bc805b9ede8f630c26adfb04cb5e3c93212f2429d91d785879fc400bae3a514181a0c5"}, {0x70, 0x108, 0x5, "3c202d6e0970f83c1641fd40be3604a8a47738753d5255f754cc859e36ac7e72eb5e9ccdc6d9e7c8736d018a14191cebc3d9bf875d754851b1f55c7670962213e80d0fde54dee5915afba8dfccd9906494c58f01ff2fc6eb63c98ea3"}], 0x160}, 0x4000040) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x10, 0x0}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="b4000000000000007911b8000000000095007400000000002fb9dcb344ab021f51c99c2137d0e448a1500abe955b01626b144028f1ce58f5cf6c08f5e50bb6500c81917ef6b395d69b6952172b595dc4462915e518fa3c4bb7b043dbd27d70e5710fe0a4e4cfbe4dfd69e5b9106f4be00975d74a5d0bcb7566313350e949f86738ed298918e3bb8e81db7f81763386c66bf26776a7630c88496b206740e1ebf3213fc401b3d557f9a7973f5ef32ab5a23955dbc3d858ef4f00ae129ffe8d1389cce6f477b939bec8ae7d9147575c083183edefc8fa4987766e87c9c66b6f3402ca2727b06431c78517a0f3cfe6dae9bd4764c4868f0a95356f20c8bf504eb55054d5c2652738ef210f6a6cf980"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r6, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r4, 0x0) sendmmsg(r3, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)="313f7ac12164f7", 0x7}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x773c1000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078008000840000000200600044000000000060005"], 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x30, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, {[], {0x4e22, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "aaf43bbacf0d7d4dd62d252269d4c77febb30ee631ad1be1a15e592d3678edb6aaec874e"}}}}}}}, 0x0) 1.609868665s ago: executing program 4 (id=7804): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x9, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xfc56}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000030811"], 0xfdef) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000001c0)={{r0}, "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"}) 1.496238073s ago: executing program 0 (id=7805): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x1, 0x1, 0x10}, &(0x7f0000000140)=0x14) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000200)=""/51, 0x33}], 0x2}}], 0x1, 0x2001, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x43c, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0xdc2, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) 1.405246125s ago: executing program 3 (id=7806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x3, 0x8e}}) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r3, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x200) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'macvtap0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x58, r6, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x66}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4f}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4015}, 0x60044800) socketpair(0x8, 0x6, 0x72, &(0x7f0000000400)) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x2b, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@dev}, {@empty}, {@dev}, {@broadcast}]}, @cipso={0x86, 0x11, 0x0, [{0x0, 0x2}, {0x0, 0x9, "7bd145794862b0"}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}}, 0x0) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000280)=@req3={0x6, 0x3ff, 0x3, 0x2, 0x2, 0x8, 0x80}, 0x1c) 1.389734319s ago: executing program 1 (id=7807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x4, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x70, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, [{0x0, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af2602"}, {0x0, 0x1, "00000500000000002600"}, {}]}}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 1.321272568s ago: executing program 4 (id=7808): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffe}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2, 0x13, 0x2, 0x0, 0x1b, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_x_sec_ctx={0xd, 0x18, 0x2, 0x63, 0x59, "a797afe1a0cf4261e45c5312a289d81181ad20691c0e3c492c608f270b01948e558b24236e5c9a98a57051d3698cab53d11e8efa6f57c89fd4ea9e72edd39894c6654595df305bc4d200daa4d4ab327cba16cab5189c5c1bbc"}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in=@loopback, 0x26, 0x4}, @sadb_x_sa2={0x2, 0x13, 0xfb, 0x0, 0x0, 0x70bd28, 0x3501}, @sadb_x_filter={0x5, 0x1a, @in6=@private0, @in=@multicast1, 0xb, 0x10}]}, 0xd8}}, 0x40c0045) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb, 0x0, 0xfffffffffffffffa}}}, 0xb8}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r5, 0x891a, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0x6c, &(0x7f00000005c0)={&(0x7f0000000440)={0x5c, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_SYNPROXY={0x0, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x0, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x4}]}, @CTA_NAT_SRC]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4044814) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8000, 0x3e}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r10, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000740)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r12, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@cgroup, 0x26, 0x1, 0x8000, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000900)={r10, r12, 0x26, 0x0, @val=@netkit={@void, @value=r1, @void, @void, r13}}, 0x1c) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000140)={@empty, 0x2, 0x0, 0x3, 0x8, 0x5, 0xfff9}, 0x20) 1.132655666s ago: executing program 1 (id=7809): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x18) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000014b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='a', 0x1}, {0x0, 0x10}], 0x2) 1.132423804s ago: executing program 0 (id=7810): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 1.047654667s ago: executing program 0 (id=7811): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r2, @ANYBLOB="0100400000000000000001937ea272bbe9732b79"], 0x38}}, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r0, 0x0, 0x0, 0x80800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x40, 0x80, 0x80, 0x2, {{0x7, 0x4, 0x0, 0x8, 0x1c, 0x64, 0x0, 0x6, 0x233d0795a9fdca42, 0x0, @rand_addr=0x64010100, @loopback, {[@noop, @ra={0x94, 0x4}, @end, @end]}}}}}) sendto$packet(r3, &(0x7f00000003c0)="e8af54f3843ce8b71e5e8cc0a93ba9636525aab7c713cda62e9509175821cdf5312439a931b6741e8aa0d305caabf28eedd290c89a2635c4f2530d7b539311ff5f4fa802bdd44c8d1de6ed3c07e7b1bbc780b154bcd65c3cb55a58933704a2e558f96869fa405b496429dc6c4463645eaf49b5f786ff30dd8e416ddcbf2d85eb85fdfde2701ae3b6736ecde244ba6115981778b1fdecbd6f099eab35797cd4307535521aa6c5ec7057685c985706dd75aa3fb9c84190d368f5cb287b7f8082a2f5ce98e554d899648f77e7d6f15d756f9efe6d6e349aca68cedec1", 0xdb, 0x4040, &(0x7f00000005c0)={0x11, 0x4, r5, 0x1, 0x9, 0x6, @random="6997132d1806"}, 0x14) (async) r6 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) (async, rerun: 64) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000280)={{r9}, 0x0, &(0x7f0000000240)}, 0x20) (async, rerun: 64) r10 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r12, 0x0, r11, 0x0, 0xffffffff, 0x4) (async) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000100)='@u\x00', 0x612000, &(0x7f0000000140)={@align=0xaf, {0x3, 0x3, 0x947, 0x9}}, 0x5, &(0x7f0000000180), &(0x7f0000000200)}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r13, 0x84, 0xc, &(0x7f0000000280)=0x5, 0x4) (async) sendmmsg$alg(r3, &(0x7f00000035c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x84) (async) recvmsg$can_raw(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/127, 0x7f}], 0x1}, 0x42) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x5, 0x45, 0x5, 0xfffffff9, 0x2}) 1.040357045s ago: executing program 4 (id=7812): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000140)={{r0, &(0x7f0000000040)='$:\x00', 0x90000, &(0x7f0000000080)={@align=0x7f, {0x3, 0xfffe, 0x10000, 0x80}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x4}, {[0x4, 0xac, 0xab, 0x200]}, 0xffffff66, 0xd0, &(0x7f0000000200)=""/208}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000003c0)=@buf={0x95, &(0x7f0000000300)="27e53b4b7f79bc31efed7a8e737c8d4b340aae71cc67bb93a7dd73ab45f7b7e3508f22e87b7af3c61a7baa1b4d0f863ccd9fa9a69990d3a9b809203eac34af3be5cd34094034d6d497ef787ca76afa4f88d38b15233ab88ad57576b4996b26415550f38e988041ffc9a7a116ec9b96939565ffd893bafce7fe40abf38247dffa08d29ccfaa02a98039c728dc6344f0b20643b48a22"}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)={0x514, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x504, 0xf2, 0x0, 0x1, [@nested={0x415, 0x9, 0x0, 0x1, [@generic="102feac198785ba6069a2315b12bcdb555b23ad272136fb0f1b7bf24cbe2475d7e47b567c67e8206764a2b7fe8d24e4511a1217be4d745bf52250ee015697e166f9bfebf", @nested={0x69, 0xfe, 0x0, 0x1, [@nested={0x4, 0x7a}, @generic="0cba6006f4bd1742669cffea9c468a302339fdc6e5ebe982f01fca95e5130a030de38ba88c22cabbd5ab444781be3b9ef7354e6110f279d89ed928c3ec7262d99c6ec4b5fed9e3241d1af742772004a1890d48e1d8e17bafdc7dd83637453605ba"]}, @nested={0x4, 0x68}, @nested={0x1b1, 0x35, 0x0, 0x1, [@typed={0x8, 0xd9, 0x0, 0x0, @ipv4=@multicast2}, @generic="18d1cc04e027df777f58d2b9f290fc4953808ad1be9a3080380daea68df269cfe7a69abf3f6dbca0e1e6e0947652cb00ef9b36d61ff4dcc0a673b81067bf67a9dbeff194a587f348b7200a4f84de5d77161702671bcce59db97c0118cfedf73d3242c9e3e9d4875ff2cb61d745394c5848687da93ed4ca2f480ee3fa9bba6fb95453dcd7ed493536c78bf3aed5e605bcf9ced64c1b1130709d383b65f5383053b1243545f1b559e953f71148cc701d66b22a", @generic="e26ae98187095816191cd93789b69ce6398095113d3363efb9683805d0b47c5c3414", @typed={0x8, 0xbe, 0x0, 0x0, @pid}, @generic="66e1b9a3bd46edf8cb89890c4b3fa9511d2d6ab6849479dce4de677b564c2463b139", @typed={0x5, 0x129, 0x0, 0x0, @str='\x00'}, @generic="1de6e91f777aad387b97857eb8257eeea20ff00436e4b4789ab18044dab020e5ae87dfa208b175c33cf2c71428dcad74c6f7b81f05ff19cb8f71b30d224560584b9c7b871a699b898f314f7b732df048e57f614d0762ae28ae27e93c0d460cd15a4caa020e0fcef4b5619a505140ba87dcb55fe4d3ad9a63418c6e5e5871cbeff9ee5e7b68dab17c239ea48cb2cd2aea9c98f0ea83193c58da20c555bc1c7c"]}, @nested={0xe1, 0x9f, 0x0, 0x1, [@generic="643f66a472ab6b53c398fb4523ddf91d84c300000000000000000000000000000000b195e656b4ea1779748f4d8e5deb82e614c311022800000000ad1699982a09a1fe94c5e121c0c556b0136dfb97d13a30270582582f69367749d09e10a1a21399d01c653bc4d02e68477d499bd7dc5b2c1a86afaaffe0133f64dbc9f35fb7bc0d7322724c09b51b26940e3a666be7cf15c3faf673c91246bec038e471c56f3134ef0eff5f19e857697c", @typed={0x8, 0x120, 0x0, 0x0, @pid}, @nested={0x4, 0x26}, @generic="73b712b7ea46d927874ae80e42270e23707ff496287e1b0013f6e43a720eddc9cdaa29cc7abc"]}, @typed={0xc, 0x13f, 0x0, 0x0, @u64=0x2000000000000}, @nested={0xd, 0xd8, 0x0, 0x1, [@generic="fc8cd828b7", @nested={0x4, 0x18}]}, @generic="872dbabf04e79912548c2fe9ac2b28ebb91a02adeb0e89fac194f81a94f00d8e4c5c27ae6d83671d383ee2612e5764749d234069aa3b81f4e5707b7bfa7c7e67c9dfbb2ee974b282aa79b6c69c56debaf4749d43354e5db6bff424d6d15abe353a582bd87dab76a6075566a419610127a2f2a4df7c3d8407b73c667770f5445674871db43e2b7304405587059b16717bcdcfad1267b1f34563f9369d0aa5da4007", @typed={0x8, 0x105, 0x0, 0x0, @fd=r0}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640d", @typed={0x4, 0x145}]}]}, 0x514}], 0x1, 0x0, 0x0, 0x1}, 0x0) 960.772584ms ago: executing program 1 (id=7813): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) socket(0x2b, 0x80000, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="8400000010ffff042bbd5f000920000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000005c00128009000100766c616e000000004c00028006000100020000000c0002000d00000000000000340004800c00010000690000060000000c000100ba8500000a0000000c00010001000100962b00000c000100090000000004000008000500", @ANYRES32=r1, @ANYBLOB="8c26212e8601d8e9abc6c8abf735a5283c7f60d82e13801ee699a4cbecb518602d01d1afedc648fb8f54614c66ab4259d1d36af5d0a5e1dcb00edd93d37b19821cb9573206c8e2fa7e8b0b0445dde764847f04c3815119849e11104a6ba3aaacabc90cfc7ef20ab9dd7c47122167b760e70b2006b40f2456674240ec103f8c355e4e20379e3fc381c50000000000000000"], 0x84}}, 0x0) 960.381684ms ago: executing program 3 (id=7814): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f00000000c0)=0x80000000, 0x4) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002e000900270900000000000000000000080018000cad0f007b0e9e34cdc5784452cb1e8abfdc823b462b6ba1995acefd8c6158399c684258e3b03804e653f91fb6dea3c775724f53d2ac4a5ef634269a3b6e4188e264837b8e22146640f296"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x12, 0x0, &(0x7f0000000180)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000100c0b3111779c4242900000000000a6c000000060a0b04000000000043a75fcb7e1c6dba000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300fa00000008000240000000000900010073797a300000000009000296d00fc2320000000008000a4000000002140000001100010000000000"], 0x94}}, 0x4000080) (async) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 959.362065ms ago: executing program 2 (id=7815): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3d250ac2, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000004e090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000107baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 824.704234ms ago: executing program 1 (id=7816): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xcc, 0xf0, &(0x7f0000000080)="b9d6f70655d9f61260b0161d64665acaf3039abaff5e2458f00f7590670963b8aa7fcb79424874042a7959a45aca685bd77bfb6d4d2cab9cf9244a1a12ab5dc2d437598c4ec7d95b7205653903451c35b28ed6cc6e7b6981726e174a186df70429f4f4095a3012f3d22f88dc3c4ddd3f1cd40050727a82ac5825cb4cb02d0460aab66a6c2a32bbf8e25714ce915b937a16f6a57ff39369d02f57b6a3887c867330f64009491583897f05e4eca5d4f09e610b6b680d91ee3b48278c577ff77f0ba5117281e8d92370b43d5a02", &(0x7f0000000180)=""/240, 0x9, 0x0, 0x0, 0xf8, &(0x7f0000000280), &(0x7f00000002c0)="62b3fe6d81c55977edf85de251a3bf5b0e4397aaf3bb9309bf2caa1093dbbb3e00b8a3729f01a834b74156cb0eb82e9669a88491fe017d1b7d75b3cae8dc86c0dc7ec308909dbe02a58483cb6cc81ca7c783dc9709e10a3148aa6b1cc26b87ee409a3a937dea3a7e0b05acf0c0688d65006b8069167ed11fef602f5fc010855244e46f1320aaab30361f3735506ff9481dd818ef833a325e743769f6512c8cbd239d0773f57005a6e134963c2d8204360658a8ee5a9330e72c2568ef4af25c213607f9f33514c42e9d274308af0e028f5d512d62d65e45438fb049c10094eaedbeb5c95899d1887b34284e22bc5ce01558cedaf3459e28c6", 0x4, 0x0, 0x3}, 0x50) 785.522087ms ago: executing program 0 (id=7817): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x1, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffff9}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x42}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASK={0x48, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x40040080}, 0x4004001) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x7f, 0x5, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x5, 0x37a}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000280)={0x64c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x120, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'Q.931\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xe4, 0x5, "caaa061d2077967822a31b44aae223f5a5791605be5a534f9f520aeed4439ed4b8ed1fb5607845ad3572a7c2adffb4178e43e03886228ab03075fd032a22cd3510c213615719096114e6f67386dc4816ba4bcc38ded935089acd1b0487da7e99afa6db7d74adf839653695b1c9af1b5e6396a6021adea6968b37875f522ef498e79c327cbff7fe58c9ab7d6e38bed993a8d98e08455de6458033cd8ba897c7ef90c44ec36eab60c9e85bc68322874e6fca59a4e01013743055adfb4d8c49735d1fa639bd451281a8e86b981627293f345f33a0b451b4c6129fa9612c5d584ab8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffa}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x208, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x80, 0x5, "abd4715a6a870ffa90b28e9f311655d9d20a5487e35ded655b1e09fa95360368ac3f1afb3246307c44ee44e5c19d2b0569b942533a8f21b15981c740fd4c37d887c125b2376b38ec83cdeaaa88ccbc0a505c8f4ce9977e03652555e56522c9dfdd2862abdecefee451e77b43ebc655c66b078df3ba9122d588d1552d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x4b, 0x5, "78615588ee06f1992f52dac149242a8eafb300a12947176800ec2de6a9a7f41d1722aa2be9896044fd3ad7122bf23c7a6fd69ccdeacad1290b2f21915de58d81ed61e724422e4e"}, @ETHTOOL_A_BITSET_MASK={0x52, 0x5, "7ae65212648ffafb25bb610e05fd34111bbcc338763dd346876f047fd23a6a4dc9380876b0e33daa4012e736b95a4f0f9d43069e2ee40a23ca3622ee1859769ee8a1990cd1c048b1d3687982f0de"}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x374}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xc1]\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf6d}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'Q.931\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'Q.931\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'Q.931\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}]}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x18}, @ETHTOOL_A_LINKMODES_OURS={0x2c8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'Q.931\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '$@[\xca*)[+-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'Q.931\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'Q.931\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf4c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x42, 0x5, "b082fada15d30861357c516a786a98f35090786846921c0656e8f58cf78b9cc5f94d712e1e68e9a1c0ed543fe9eae05da593e5190fa51cac11cdd6b42296"}, @ETHTOOL_A_BITSET_MASK={0x97, 0x5, "1fa10d8fb7ddb625967f534694c4bdd789b83354433188816961142dbfe43f53f23b31c6ea10bae24c44f9d7481c152a2a3da1f0028c7d2655c914bc43816fdb54968606f2e5a8bf38d01790e255ec9073257e65487cb719e378cd8eb86a4c36a769fb489b41b3aca61a7912490ffdc7b488674c095a5d44313218be83a034e7fc4c84830ff5c95a2e73de0f16ffaf61a60554"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$/^/,8\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'Q.931\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'Q.931\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x420}]}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}]}, 0x64c}, 0x1, 0x0, 0x0, 0x805}, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000ac0)={r0, &(0x7f00000009c0)='\x00', 0x101000, &(0x7f0000000a00)={@align=0x4, {0x7ff, 0x2, 0x81, 0x5}}, 0x8, &(0x7f0000000a40)={@_ha_fsid}, &(0x7f0000000a80)=0xbd53}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000b00)={'netdevsim0\x00', @multicast}) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000b40)) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000f40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x308, 0x13, 0x2, 0x70bd26, 0x25dfdbfe, {0x21, 0x2, 0xa, 0x9, {0x4e20, 0x4e24, [0x5, 0x0, 0x1, 0x8000], [0x749, 0xfe, 0x8, 0x3], r1, [0x8, 0x6]}, 0x4, 0x29b}, [@INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "70e9ff1c39335865320d59756f8754895873920b6ea2d01a463f94cde46e63338fbb1f6f1032a07875e0733d637095f7ff0d8e7e467c87820c551fbd9485ae591593d3602e7d2d62f7360008a9b1e0ccc0880a6c9f9f440427a177d1df4ab4a045e8d4ce667b9d2b52b85b877ed3154216b6a4e3af2636b715c32706f607c4abd61a7afe3e6170b7f26641635f5f64628040d90310831d66acdfc1274f1290faa9d60af1756a1b0d5be408513d0757a5d26de35c04ee8599597bf829df92138da2e61ee0c1ade94b39cb648e0b908b9071c1ab70d52471c477b44adc6655e8"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "259e98a627f1d1cb94258b72de200d2fd1b740c2362d1dd3a92b1fc8fafbbf33b8412e841f86f2f2b4fe6b14cdd3a50bd74295bf3eb622a9aebd5cb60c69217b783a0e211b567e47a3275e6e0a8c11fb345fe17b2299748c942c6910ede0550eb660d763fb36bc7b4078d2e7290cba74378fec816de95345488365e55d878fbe69fa41555ea4959e1c9544bea9718ba41678caeb9b5783a086524418f1a918b48f54c7b559fcff0332c2ddaf772691793483e44250c44a1d9752b7d6c28d62ecb910a22d"}, @INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "185c7266266a0812f3328eca5bb4d7bd0953489342673d69f4229194d65d7a65202b66d71e95e391886d44753ce51f6a84f798243bb93489fc632841426211d8ab222d57ae5ce9"}, @INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "5f0dbf1132aafb041fcea8f15bd81202924c24e73c7e67ed99f0e64a19528916d7c7a09805c17a88f8627633cd8b0c389ca239664ce0b14581782e0e7ca3d339a92f4e6883a522dc89f4d6e8d781c81e4f7183d4c2a4c9b7fba069beb7d3e535d8b574d03819376530e4bee475d9e17c5eb4eb53802c9c1b5da3d85d75e41ac305ae4e35bd338ae5c907860dc2eaa9e501e603d9c72446c8d648150221caeccf6032afef3fa6ad279a22e664b103d8ceb6bd3696bcfe640533cb03"}]}, 0x308}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000fc0)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000f80), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)=@ipv6_getnetconf={0x44, 0x52, 0x205, 0x70bd25, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x4}, @NETCONFA_FORWARDING={0x8, 0x2, 0x64a}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x4000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x40, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000011c0)=r3) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000001200)={'veth1_virt_wifi\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001240)={@local, 0x3, r1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000001280)={0x3, [0x0, 0x0, 0x0]}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000012c0)=0x101, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000001300)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$tun(r2, &(0x7f0000001340)={@val={0x0, 0x6005}, @void, @ipv6=@udp={0x6, 0x6, "92ad79", 0xcc, 0x11, 0x1, @remote, @private0, {[@routing={0x73, 0xc, 0x1, 0x2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @private0, @dev={0xfe, 0x80, '\x00', 0x39}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x80}}]}], {0x4e23, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "61cdca37abfded5687e94167549d9e8a70264a1893b8a6b2a5470a2e64982d64", "112fcf90c2a62d9c4c050d91b5958f62", {"7aef11bf83f87aada7fd0212b8905f75", "d74ce28e601d84a93cb050b191051d0e"}}}}}}, 0xf8) setsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f0000001440)=0x3a85, 0x4) socket$packet(0x11, 0x3, 0x300) r7 = openat$cgroup_ro(r3, &(0x7f0000001480)='memory.current\x00', 0x0, 0x0) sendto$inet6(r7, &(0x7f00000014c0)="8a891f7eee601c286978af7d3a30a337ede7b5d9e2b17a60358891e15266453ac36befb669384ac82db999f818eb75c5937df922a9b7881e4b42412316d3f30218dc3b9f08eff8791c8823691b383f08512885f5d3c650c10b46d6469947514a73dca6394238a9d18b", 0x69, 0x4880, &(0x7f0000001540)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) ioctl$NILFS_IOCTL_SYNC(r5, 0x80086e8a, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x10, 0x3fb, 0x8, 0x70bd2a, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000800) 784.731877ms ago: executing program 4 (id=7818): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20004000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3], 0x7c}}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$pptp(0x18, 0x1, 0x2) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d"], 0x0) socket(0x2b, 0x80801, 0x1) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20004000) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3], 0x7c}}, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$pptp(0x18, 0x1, 0x2) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d"], 0x0) (async) socket(0x2b, 0x80801, 0x1) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) (async) 712.818723ms ago: executing program 3 (id=7819): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000), 0x10) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}]}, 0x24}}, 0x0) 712.529192ms ago: executing program 2 (id=7820): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x13, 0x0, 0x0) splice(r2, &(0x7f0000000000)=0x380000, r3, &(0x7f0000000040)=0xfbde, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r7, &(0x7f0000000440), &(0x7f0000000040)=@udp=r6}, 0x20) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x1}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/13, @ANYRES32=r5, @ANYBLOB="c3040500000000004c0012800b00010067726574617000003c0002800400120005001700d9000000080005000600000008000600ac141427060018000500000005000900b5000000080014000400000004001200"], 0x6c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 657.888075ms ago: executing program 3 (id=7821): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@fwd={0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x5f]}}, 0x0, 0x3f, 0x0, 0x1}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000140)) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r5 = socket(0x6, 0x2, 0x3) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000200)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x1b4, 0x1, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x486c6c5f}, @NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_TUPLE={0xd4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x404c040}, 0x50) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e20, 0x3, 'none\x00', 0x7, 0x660f537f, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0xcd, 0x1}}, 0x44) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 539.232884ms ago: executing program 3 (id=7822): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r5, @ANYBLOB="cc060900000000ea1c40128009c59059b677ca6ddcb1e145d34e064600010062", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={0x0, 0xffbd, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xffffffffffffffb8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004000) 92.942051ms ago: executing program 1 (id=7823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000840000000000000000900611000000000509aa56925ce0000000058b3a7340d1c4b53b218"], &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x40f00, 0x5}, 0x94) 941.307µs ago: executing program 1 (id=7824): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket(0x200000000000011, 0x2, 0xd) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005200010000000000000000001c000000040008"], 0x18}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) pipe(&(0x7f0000000100)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x11, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0x8}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0xa}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x7, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) 0s ago: executing program 2 (id=7825): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x4bfc, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 32) socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) socket(0xa, 0x3, 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x20) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) kernel console output (not intermixed with test programs): ort 6081 - 0 [ 628.756226][T29216] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.986772][T29216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.005948][T29216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.007219][T29370] netlink: 'syz.4.6058': attribute type 10 has an invalid length. [ 629.041514][T29370] bridge_slave_1: left allmulticast mode [ 629.078986][T29370] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 629.215553][ T1347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.242704][ T1347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.347197][T29380] netlink: 'syz.4.6059': attribute type 142 has an invalid length. [ 629.381383][T29380] __nla_validate_parse: 8 callbacks suppressed [ 629.381405][T29380] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6059'. [ 629.600154][T29389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6060'. [ 629.725706][T29394] netlink: 'syz.0.6062': attribute type 2 has an invalid length. [ 629.767467][T29394] netlink: 'syz.0.6062': attribute type 2 has an invalid length. [ 629.789452][T29398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6063'. [ 629.896841][T29402] 8021q: adding VLAN 0 to HW filter on device .` [ 629.945070][T29402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.981022][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 629.982346][T29398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6063'. [ 629.989093][ C0] lec:lec_tx_timeout: lec0 [ 630.730412][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 630.742141][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 630.753632][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 630.763131][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 630.771528][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 630.847222][T29435] netlink: 'syz.3.6070': attribute type 1 has an invalid length. [ 630.859357][T29435] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6070'. [ 631.299366][T29447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6072'. [ 631.331991][T29444] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6071'. [ 631.361534][T29444] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6071'. [ 631.383597][T29444] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6071'. [ 631.631884][T29461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6074'. [ 632.188051][T29479] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 632.475779][T29501] team_slave_0: entered promiscuous mode [ 632.496298][T29501] team_slave_0: entered allmulticast mode [ 632.584813][T29431] chnl_net:caif_netlink_parms(): no params data found [ 632.620078][T29501] netlink: 'syz.0.6083': attribute type 5 has an invalid length. [ 632.863133][T28853] Bluetooth: hci2: command tx timeout [ 633.010900][T29513] syzkaller0: entered promiscuous mode [ 633.047971][T29513] syzkaller0: entered allmulticast mode [ 633.465602][T29550] netlink: 'syz.0.6092': attribute type 21 has an invalid length. [ 633.488215][T29550] IPv6: NLM_F_CREATE should be specified when creating new route [ 634.951420][T28853] Bluetooth: hci2: command tx timeout [ 635.297055][T29431] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.304585][T29431] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.312352][T29431] bridge_slave_0: entered allmulticast mode [ 635.322690][T29431] bridge_slave_0: entered promiscuous mode [ 635.350311][T29431] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.377220][T29431] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.399844][T29431] bridge_slave_1: entered allmulticast mode [ 635.418219][T29431] bridge_slave_1: entered promiscuous mode [ 635.548092][T29560] xt_nat: multiple ranges no longer supported [ 635.564227][T29431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.583016][T29560] __nla_validate_parse: 2 callbacks suppressed [ 635.583033][T29560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6095'. [ 635.601772][T29431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.607531][T29559] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6096'. [ 635.708053][T29431] team0: Port device team_slave_0 added [ 635.755439][T29431] team0: Port device team_slave_1 added [ 635.859344][T29431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.870916][T29431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.900118][T29431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.940843][T29583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 636.076731][T29431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.085723][T29431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.121798][T29431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.248164][T29601] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6105'. [ 636.287753][T29431] hsr_slave_0: entered promiscuous mode [ 636.305791][T29431] hsr_slave_1: entered promiscuous mode [ 636.314625][T29431] debugfs: 'hsr0' already exists in 'hsr' [ 636.320900][T29431] Cannot create hsr debugfs directory [ 636.422535][T29611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6107'. [ 636.759069][T29629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6111'. [ 637.023024][T28853] Bluetooth: hci2: command tx timeout [ 637.175757][T29654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6116'. [ 637.642195][T29670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6119'. [ 637.766698][T29431] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 637.840652][T29431] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 637.873417][T29431] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 637.908512][T29431] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 638.117904][T29693] netlink: 'syz.0.6124': attribute type 17 has an invalid length. [ 638.139367][T29693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6124'. [ 638.160475][T29693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6124'. [ 638.213747][T29700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6124'. [ 638.294946][T29695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.365080][T29431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.367267][T29695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.396107][T29431] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.423524][T29221] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.425487][T29709] netlink: 'syz.1.6127': attribute type 1 has an invalid length. [ 638.431141][T29221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.445417][T29695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.497594][T29709] 8021q: adding VLAN 0 to HW filter on device bond7 [ 638.513663][T29221] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.521494][T29221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.546913][T29713] 8021q: adding VLAN 0 to HW filter on device bond7 [ 638.558547][T29713] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 638.576082][T29713] bond7: (slave vcan0): Error -95 calling set_mac_address [ 638.660770][T29709] bond7: (slave gretap2): making interface the new active one [ 638.673981][T29709] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 638.699818][T29709] macvlan5: entered promiscuous mode [ 638.706072][T29709] macvlan5: entered allmulticast mode [ 638.713314][T29709] bond7: entered promiscuous mode [ 638.718761][T29709] gretap2: entered promiscuous mode [ 638.725747][T29709] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 638.737380][T29709] bond7: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 638.750537][T29709] bond7: left promiscuous mode [ 638.755790][T29709] gretap2: left promiscuous mode [ 638.835346][T29431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 639.104451][T28853] Bluetooth: hci2: command tx timeout [ 639.225787][T29734] syzkaller1: entered promiscuous mode [ 639.241355][T29734] syzkaller1: entered allmulticast mode [ 639.447745][T29743] netlink: 'syz.3.6132': attribute type 9 has an invalid length. [ 639.554380][T29431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.720803][T29760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.745591][T29764] openvswitch: netlink: IP tunnel dst address not specified [ 639.808148][T29772] openvswitch: netlink: IP tunnel dst address not specified [ 640.238407][T29792] netlink: 'syz.2.6143': attribute type 1 has an invalid length. [ 640.484854][T29792] bond11: entered promiscuous mode [ 640.541613][T29792] 8021q: adding VLAN 0 to HW filter on device bond11 [ 640.687828][T29799] 8021q: adding VLAN 0 to HW filter on device bond11 [ 640.713022][T29799] bond11: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 640.741826][T29799] bond11: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 640.779338][T29799] bond11: (slave ip6gre1): making interface the new active one [ 640.797405][T29799] ip6gre1: entered promiscuous mode [ 640.806033][T29799] bond11: (slave ip6gre1): Enslaving as an active interface with an up link [ 640.977393][T29431] veth0_vlan: entered promiscuous mode [ 641.029812][T29431] veth1_vlan: entered promiscuous mode [ 641.142635][T29431] veth0_macvtap: entered promiscuous mode [ 641.154135][T29830] veth1_to_bridge: left allmulticast mode [ 641.225120][T29431] veth1_macvtap: entered promiscuous mode [ 641.325596][T29431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.373365][T29431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.422451][T20739] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.458128][T20739] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.500850][T20739] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.543927][T20739] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.573827][T29849] __nla_validate_parse: 8 callbacks suppressed [ 641.573849][T29849] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6154'. [ 641.623172][T29849] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6154'. [ 641.653812][T29849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6154'. [ 641.722016][T29853] sctp: [Deprecated]: syz.1.6155 (pid 29853) Use of int in max_burst socket option. [ 641.722016][T29853] Use struct sctp_assoc_value instead [ 641.818069][T29211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.836713][T29211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.959482][T20739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.988975][T20739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.325077][T29870] netlink: 'syz.0.6159': attribute type 10 has an invalid length. [ 642.522279][T29880] netlink: 'syz.4.6161': attribute type 4 has an invalid length. [ 642.704229][T29888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6163'. [ 642.733051][T29890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6164'. [ 642.780277][T29892] netlink: 'syz.3.6163': attribute type 21 has an invalid length. [ 642.789951][T29892] IPv6: NLM_F_CREATE should be specified when creating new route [ 642.799175][T29892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 642.806669][T29892] IPv6: NLM_F_CREATE should be set when creating new route [ 642.813986][T29892] IPv6: NLM_F_CREATE should be set when creating new route [ 642.821340][T29892] IPv6: NLM_F_CREATE should be set when creating new route [ 643.103551][T29903] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 643.141803][T29903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6168'. [ 643.167899][T29906] sctp: [Deprecated]: syz.0.6167 (pid 29906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 643.167899][T29906] Use struct sctp_sack_info instead [ 643.292520][T29911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6170'. [ 643.383905][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 643.394845][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 643.404236][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 643.415458][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 643.425776][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 643.533060][T29925] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6172'. [ 643.542956][T29925] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6172'. [ 643.695654][T29925] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6172'. [ 643.859650][T29935] openvswitch: netlink: Missing valid actions attribute. [ 643.903459][T29935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.521500][T29954] hsr_slave_0: left promiscuous mode [ 644.540668][T29954] hsr_slave_1: left promiscuous mode [ 645.056991][T29990] openvswitch: netlink: IPv4 tunnel dst address is zero [ 645.148665][T29992] syzkaller0: entered promiscuous mode [ 645.172514][T29992] syzkaller0: entered allmulticast mode [ 645.314629][T29914] chnl_net:caif_netlink_parms(): no params data found [ 645.491578][T29968] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 645.501377][T28853] Bluetooth: hci0: command tx timeout [ 645.638308][T29914] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.646035][T29914] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.654448][T29914] bridge_slave_0: entered allmulticast mode [ 645.663587][T29914] bridge_slave_0: entered promiscuous mode [ 645.673776][T29914] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.681233][T29914] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.689364][T29914] bridge_slave_1: entered allmulticast mode [ 645.715120][T29914] bridge_slave_1: entered promiscuous mode [ 645.875279][T29914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.926160][T29914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.097428][T29914] team0: Port device team_slave_0 added [ 646.137412][T29914] team0: Port device team_slave_1 added [ 646.354684][T29914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.371650][T29914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.407399][T29914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.426204][T29914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.433569][T29914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.478384][T29914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.687370][T29914] hsr_slave_0: entered promiscuous mode [ 646.718659][T29914] hsr_slave_1: entered promiscuous mode [ 646.743831][T29914] debugfs: 'hsr0' already exists in 'hsr' [ 646.762297][T29914] Cannot create hsr debugfs directory [ 646.932805][T30079] __nla_validate_parse: 8 callbacks suppressed [ 646.932827][T30079] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6206'. [ 647.348269][T30088] netlink: 'syz.3.6209': attribute type 12 has an invalid length. [ 647.578745][T29914] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.599337][T28853] Bluetooth: hci0: command tx timeout [ 647.641958][T29914] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.723667][T30093] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 647.731674][T30093] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 647.739644][T30093] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 647.747614][T30093] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 647.755589][T30093] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 647.763565][T30093] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 647.866703][T29914] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.894628][T29914] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.963876][T30117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6218'. [ 647.984517][T30118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6218'. [ 648.022366][T30121] netlink: 'syz.4.6217': attribute type 3 has an invalid length. [ 648.043589][T30121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6217'. [ 648.068182][T30117] xfrm1: entered promiscuous mode [ 648.073441][T30117] xfrm1: entered allmulticast mode [ 648.197161][T29914] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.248045][T29914] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.304636][T30138] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6222'. [ 648.327259][T30138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6222'. [ 648.364224][T29914] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.386202][T30142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6222'. [ 648.390306][T29914] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.524814][T30149] tipc: Enabling of bearer rejected, failed to enable media [ 648.796875][T29914] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 648.832882][T29914] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 648.867138][T29914] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 648.899260][T30166] netlink: 'syz.3.6230': attribute type 39 has an invalid length. [ 649.004031][T29914] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 649.223629][T30188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6235'. [ 649.247674][T29914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.318129][T30192] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6234'. [ 649.355389][T29914] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.365737][T30200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6235'. [ 649.494272][T29219] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.501515][T29219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.566081][T29219] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.573627][T29219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.671851][T28853] Bluetooth: hci0: command tx timeout [ 649.887956][T30224] net_ratelimit: 48 callbacks suppressed [ 649.887979][T30224] openvswitch: netlink: Key type 30 is not supported [ 650.487758][T30246] netlink: 'syz.2.6245': attribute type 1 has an invalid length. [ 650.625941][T30246] 8021q: adding VLAN 0 to HW filter on device bond12 [ 650.643564][T30246] netlink: 'syz.2.6245': attribute type 3 has an invalid length. [ 650.651617][T30255] mac80211_hwsim hwsim63 ÿ: renamed from wlan1 [ 650.830513][T30252] syzkaller0: entered promiscuous mode [ 650.844089][T30252] syzkaller0: entered allmulticast mode [ 651.741399][T28853] Bluetooth: hci0: command tx timeout [ 652.105951][T30333] __nla_validate_parse: 3 callbacks suppressed [ 652.105972][T30333] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6259'. [ 654.055854][T29914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.328346][T29914] veth0_vlan: entered promiscuous mode [ 654.373718][T30368] netlink: 'syz.0.6261': attribute type 11 has an invalid length. [ 654.376340][T29914] veth1_vlan: entered promiscuous mode [ 654.408360][T30368] netlink: 'syz.0.6261': attribute type 11 has an invalid length. [ 654.429243][T30370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6264'. [ 654.470399][T30368] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6261'. [ 654.627985][T29914] veth0_macvtap: entered promiscuous mode [ 654.667775][T30375] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6265'. [ 654.685839][T29914] veth1_macvtap: entered promiscuous mode [ 654.705851][T30383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6266'. [ 654.725168][T30383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6266'. [ 654.757720][T30383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6266'. [ 654.830750][T29914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.874257][T30383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6266'. [ 654.909748][T29914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.928355][T30383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6266'. [ 654.945658][T30383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6266'. [ 655.017281][T20732] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.061194][T20732] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.092182][T20732] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.120903][T20732] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.407225][T29211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.440251][T29211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.519142][T29211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.547839][T29211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.124941][T30488] macvtap1: entered promiscuous mode [ 657.130494][T30488] macvtap1: entered allmulticast mode [ 657.312370][T30500] __nla_validate_parse: 29 callbacks suppressed [ 657.312394][T30500] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6297'. [ 657.352927][T30503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6296'. [ 657.523401][T30513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6298'. [ 657.784529][T30526] netlink: 'syz.1.6301': attribute type 3 has an invalid length. [ 657.998901][T30536] syzkaller0: entered promiscuous mode [ 658.005222][T30536] syzkaller0: entered allmulticast mode [ 658.043599][T30545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6307'. [ 658.053613][T30545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6307'. [ 658.094820][T30545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6307'. [ 658.177449][T30550] netlink: zone id is out of range [ 658.183336][T30550] netlink: zone id is out of range [ 658.200366][T30550] netlink: zone id is out of range [ 658.230539][T30550] netlink: zone id is out of range [ 658.259678][T30550] netlink: zone id is out of range [ 658.277662][T30550] netlink: zone id is out of range [ 658.278657][T30556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6311'. [ 658.294642][T30550] netlink: zone id is out of range [ 658.311209][T30550] netlink: zone id is out of range [ 658.313109][T30556] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.6311'. [ 658.325646][T30550] netlink: zone id is out of range [ 658.325664][T30550] netlink: zone id is out of range [ 658.403400][T30562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6312'. [ 658.467591][T30560] netlink: 'syz.3.6311': attribute type 2 has an invalid length. [ 658.495928][T30560] netlink: 'syz.3.6311': attribute type 1 has an invalid length. [ 660.622185][T30587] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6318'. [ 660.668604][T29215] bridge_slave_1: left allmulticast mode [ 660.678278][T29215] bridge_slave_1: left promiscuous mode [ 660.686751][T30593] netlink: 'syz.2.6320': attribute type 16 has an invalid length. [ 660.696211][T29215] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.708516][T30593] netlink: 'syz.2.6320': attribute type 17 has an invalid length. [ 660.720883][T29215] bridge_slave_0: left allmulticast mode [ 660.727227][T29215] bridge_slave_0: left promiscuous mode [ 660.734233][T29215] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.751508][T29215] tipc: Resetting bearer [ 660.909330][T29215] tipc: Disabling bearer [ 661.146972][T29215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.158641][T29215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.169288][T29215] bond0 (unregistering): Released all slaves [ 661.179975][T29215] bond1 (unregistering): Released all slaves [ 661.196966][T29215] bond2 (unregistering): (slave veth3): Releasing active interface [ 661.205599][T29215] veth0_to_bond: entered promiscuous mode [ 661.214430][T29215] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 661.228656][T29215] bond2 (unregistering): (slave veth5): Releasing active interface [ 661.238519][T29215] bond2 (unregistering): Released all slaves [ 661.255353][T29215] bond3 (unregistering): (slave vxcan5): Releasing backup interface [ 661.265870][T29215] bond3 (unregistering): Released all slaves [ 661.279859][T29215] bond4 (unregistering): Released all slaves [ 661.296771][T29215] bond5 (unregistering): Released all slaves [ 661.312298][T29215] bond6 (unregistering): Released all slaves [ 661.331355][T29215] bond7 (unregistering): Released all slaves [ 661.355089][T29215] bond8 (unregistering): Released all slaves [ 661.375679][T29215] bond9 (unregistering): Released all slaves [ 661.390244][T29215] bond10 (unregistering): (slave lo): Releasing backup interface [ 661.398819][T29215] bond10 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 661.418209][T29215] bond10 (unregistering): Released all slaves [ 661.434758][T29215] bond11 (unregistering): Released all slaves [ 661.456050][T30593] tunl0: left allmulticast mode [ 661.475715][T30593] gre0: left allmulticast mode [ 661.511247][T30593] gretap0: left allmulticast mode [ 661.554520][T30593] ip_vti0: left allmulticast mode [ 661.578054][T30593] ip6_vti0: left allmulticast mode [ 661.605797][T30593] sit0: left allmulticast mode [ 661.620664][T30593] ip6tnl0: left allmulticast mode [ 661.629127][T30593] ip6gre0: left allmulticast mode [ 661.637714][T30593] ip6gretap0: left allmulticast mode [ 661.667470][T30606] netlink: 'syz.4.6322': attribute type 10 has an invalid length. [ 661.676985][T30593] bond0: left allmulticast mode [ 661.685638][T30593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.695960][T30593] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.705861][T30593] H: left allmulticast mode [ 661.713247][T30593] nlmon0: left allmulticast mode [ 661.720262][T30593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.730639][T30593] veth0: left allmulticast mode [ 661.737020][T30593] veth1: left allmulticast mode [ 661.744980][T30593] wg0: left allmulticast mode [ 661.756102][T30593] wg1: left allmulticast mode [ 661.764025][T30593] wg2: left allmulticast mode [ 661.773368][T30593] veth0_to_bridge: left allmulticast mode [ 661.784831][T30593] bond_slave_0: left allmulticast mode [ 661.792171][T30593] veth1_to_bond: left allmulticast mode [ 661.800376][T30593] bond_slave_1: left allmulticast mode [ 661.807070][T30593] veth1_to_team: left allmulticast mode [ 661.816967][T30593] veth0_to_batadv: left allmulticast mode [ 661.824232][T30593] batadv_slave_0: left allmulticast mode [ 661.832126][T30593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.839836][T30593] veth1_to_batadv: left allmulticast mode [ 661.847132][T30593] batadv_slave_1: left allmulticast mode [ 661.853726][T30593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.862380][T30593] xfrm0: left allmulticast mode [ 661.868894][T30593] veth1_to_hsr: left allmulticast mode [ 661.876522][T30593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 661.886949][T30593] hsr0: left allmulticast mode [ 661.892070][T30593] hsr_slave_1: left allmulticast mode [ 661.898969][T30593] veth1_virt_wifi: left allmulticast mode [ 661.906459][T30593] veth0_virt_wifi: left allmulticast mode [ 661.913558][T30593] virt_wifi0: left allmulticast mode [ 661.924469][T30593] veth0_vlan: left promiscuous mode [ 661.930355][T30593] veth0_vlan: entered promiscuous mode [ 661.939280][T30593] vlan0: left allmulticast mode [ 661.944693][T30593] vlan1: left allmulticast mode [ 661.950026][T30593] macvlan0: left allmulticast mode [ 661.956632][T30593] macvlan1: left allmulticast mode [ 661.963544][T30593] ipvlan0: left allmulticast mode [ 661.970006][T30593] ipvlan1: left allmulticast mode [ 661.975182][T30593] veth0_vlan: left allmulticast mode [ 661.983271][T30593] veth1_macvtap: left allmulticast mode [ 661.990255][T30593] veth0_macvtap: left promiscuous mode [ 661.995877][T30593] veth0_macvtap: left allmulticast mode [ 662.002835][T30593] veth0_macvtap: entered promiscuous mode [ 662.008561][T30593] veth0_macvtap: entered allmulticast mode [ 662.014509][T30593] macvtap0: left allmulticast mode [ 662.019645][T30593] veth0_macvtap: left allmulticast mode [ 662.026997][T30593] veth1_macvtap: entered promiscuous mode [ 662.032823][T30593] veth1_macvtap: entered allmulticast mode [ 662.039480][T30593] macsec0: left allmulticast mode [ 662.044714][T30593] veth1_macvtap: left allmulticast mode [ 662.052213][T30593] geneve0: left allmulticast mode [ 662.059247][T30593] geneve1: left allmulticast mode [ 662.067233][T30593] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 662.075690][T30593] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 662.084953][T30593] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 662.094363][T30593] netdevsim netdevsim2 netdevsim3: left allmulticast mode [ 662.104562][T30593] mac80211_hwsim hwsim46 ÿ: left allmulticast mode [ 662.112424][T30593] batadv0.5: left allmulticast mode [ 662.117637][T30593] batadv0: left allmulticast mode [ 662.123784][T30593] : left allmulticast mode [ 662.129597][T30593] gtp0: left allmulticast mode [ 662.135963][T30593] ip6tnl1: left allmulticast mode [ 662.144409][T30593] gre1: left allmulticast mode [ 662.169377][T30593] ip6erspan0: left allmulticast mode [ 662.177156][T30593] bond1: left allmulticast mode [ 662.182962][T30593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 662.190736][T30593] veth2: left allmulticast mode [ 662.197959][T30593] veth3: left allmulticast mode [ 662.204171][T30593] bond2: left allmulticast mode [ 662.209317][T30593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 662.219421][T30593] bridge1: left allmulticast mode [ 662.228144][T30593] gre2: left allmulticast mode [ 662.259770][T30593] bridge2: left allmulticast mode [ 662.266640][T30593] gtp1: left allmulticast mode [ 662.273648][T30593] bridge3: left allmulticast mode [ 662.280780][T30593] bridge4: left allmulticast mode [ 662.288331][T30593] gtp2: left allmulticast mode [ 662.300248][T30593] ip6tnl2: left allmulticast mode [ 662.308532][T30593] ip6tnl3: left allmulticast mode [ 662.316137][T30593] gretap1: left allmulticast mode [ 662.323843][T30593] 9: left allmulticast mode [ 662.330541][T30593] bridge6: left allmulticast mode [ 662.338039][T30593] bond3: left allmulticast mode [ 662.344181][T30593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 662.352968][T30593] bond4: left allmulticast mode [ 662.358138][T30593] 8021q: adding VLAN 0 to HW filter on device bond4 [ 662.366747][T30593] geneve2: left allmulticast mode [ 662.374462][T30593] bridge7: left allmulticast mode [ 662.383873][T30593] bridge8: left allmulticast mode [ 662.391813][T30593] vxlan0: left allmulticast mode [ 662.398553][T30593] bond5: left allmulticast mode [ 662.404589][T30593] 8021q: adding VLAN 0 to HW filter on device bond5 [ 662.414430][T30593] bond6: left allmulticast mode [ 662.419598][T30593] 8021q: adding VLAN 0 to HW filter on device bond6 [ 662.428227][T30593] geneve3: left allmulticast mode [ 662.435429][T30593] veth1_macvtap: entered allmulticast mode [ 662.441551][T30593] macsec1: left allmulticast mode [ 662.447391][T30593] veth1_macvtap: left allmulticast mode [ 662.454329][T30593] vxlan1: left allmulticast mode [ 662.461851][T30593] bond7: left allmulticast mode [ 662.466970][T30593] veth0_to_bond: left allmulticast mode [ 662.475168][T30593] 8021q: adding VLAN 0 to HW filter on device bond7 [ 662.484993][T30593] bond8: left allmulticast mode [ 662.490284][T30593] 8021q: adding VLAN 0 to HW filter on device bond8 [ 662.498730][T30593] ip6tnl4: left allmulticast mode [ 662.507132][T30593] gtp3: left promiscuous mode [ 662.512403][T30593] gtp3: left allmulticast mode [ 662.519502][T30593] bond9: left promiscuous mode [ 662.525292][T30593] 8021q: adding VLAN 0 to HW filter on device bond9 [ 662.535969][T30593] 8021q: adding VLAN 0 to HW filter on device bond10 [ 662.546968][T30593] bond11: left promiscuous mode [ 662.554060][T30593] ip6gre1: left promiscuous mode [ 662.563631][T30593] macvtap1: left promiscuous mode [ 662.568892][T30593] macvtap1: left allmulticast mode [ 662.574797][T30593] veth1_vlan: left allmulticast mode [ 662.600380][T20732] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.607675][T20732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.634292][T20732] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.641799][T20732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.715007][T20732] bridge0: port 3(team0) entered blocking state [ 662.721468][T20732] bridge0: port 3(team0) entered forwarding state [ 662.760394][T20739] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 662.811633][T12190] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 662.821719][T20739] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 662.829422][T29215] : left promiscuous mode [ 662.876560][T30606] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.894388][T30606] bridge_slave_1: left allmulticast mode [ 662.906526][T30606] bridge_slave_1: left promiscuous mode [ 662.927639][T30606] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.962351][T30606] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 663.006039][T19367] syz2: Port: 1 Link ACTIVE [ 663.006036][T29220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.006072][T29220] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 663.067589][T29215] tipc: Left network mode [ 663.074425][T29220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.086948][ T6384] lec:lec_start_xmit: lec0:No lecd attached [ 663.119313][T29220] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 663.154528][T29220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.167655][T29220] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 663.197312][T20739] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 663.213369][T20739] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 663.233776][T12182] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 663.265745][T29220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.289762][T29220] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 663.383637][ T6535] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 663.400051][ T6535] bond1: (slave veth3): making interface the new active one [ 663.408193][T12190] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 663.436195][ T6535] bond1: active interface up! [ 663.550162][T30648] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 663.626247][T30655] netlink: 'syz.0.6335': attribute type 1 has an invalid length. [ 663.661656][T12182] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 663.675029][T30655] netlink: 'syz.0.6335': attribute type 7 has an invalid length. [ 663.721640][T30655] netlink: 'syz.0.6335': attribute type 8 has an invalid length. [ 663.754838][T30655] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6335'. [ 663.791508][T30655] NCSI netlink: No device for ifindex 65584 [ 663.818452][T30668] netlink: 79 bytes leftover after parsing attributes in process `syz.3.6338'. [ 664.064234][T12190] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 664.128684][T30695] net_ratelimit: 184 callbacks suppressed [ 664.128707][T30695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.168315][T30698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.222235][T12190] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 664.260449][T30677] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.567339][T30677] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.612353][T29215] hsr_slave_0: left promiscuous mode [ 664.618428][T29215] 1·: left promiscuous mode [ 664.626002][T29215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.633797][T29215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.645751][T29215] veth1_vlan: left allmulticast mode [ 664.654443][T29215] veth1_macvtap: left promiscuous mode [ 664.660056][T29215] veth0_macvtap: left promiscuous mode [ 664.666195][T29215] veth1_vlan: left promiscuous mode [ 665.110229][T29215] team0 (unregistering): Port device team_slave_1 removed [ 665.142975][T29215] team0 (unregistering): Port device team_slave_0 removed [ 665.259430][T29215] team0 (unregistering): Port device dummy0 removed [ 665.385237][T30677] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.427899][T30719] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6349'. [ 665.457097][T30722] syzkaller0: entered promiscuous mode [ 665.471646][T30722] syzkaller0: entered allmulticast mode [ 665.647875][T30677] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.726192][T30743] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6355'. [ 665.736005][T30743] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6355'. [ 665.997819][T29215] IPVS: stop unused estimator thread 0... [ 666.006530][T30758] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6359'. [ 666.042944][T29216] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.066881][T29216] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.140768][ T6535] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.162292][ T6535] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.186470][T30765] block nbd0: Unsupported socket: should be TCP or UNIX. [ 666.213176][T30765] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6361'. [ 666.321497][T30768] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 666.333579][T30768] bond1 (unregistering): Released all slaves [ 666.422186][T30777] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 666.531404][T30781] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.6367'. [ 666.869373][T30805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6373'. [ 666.890183][T30805] netlink: 15 bytes leftover after parsing attributes in process `syz.2.6373'. [ 667.254667][T30824] netlink: 'syz.4.6380': attribute type 1 has an invalid length. [ 667.298947][T30830] netlink: 'syz.2.6384': attribute type 22 has an invalid length. [ 667.415089][T30830] netlink: 'syz.2.6384': attribute type 22 has an invalid length. [ 667.763793][T30863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 667.858504][T30872] netlink: 'syz.1.6396': attribute type 62 has an invalid length. [ 667.872667][T30872] netlink: 'syz.1.6396': attribute type 62 has an invalid length. [ 668.017570][T30881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.062561][T29215] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.087724][T29215] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.099810][T29215] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.108765][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 668.108794][ C0] lec:lec_tx_timeout: lec0 [ 668.146921][T29215] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.246248][T30893] netlink: 'syz.4.6401': attribute type 1 has an invalid length. [ 668.426556][T30899] netlink: 'syz.1.6404': attribute type 5 has an invalid length. [ 668.617166][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 668.638930][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 668.653979][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 668.670249][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 668.682942][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 669.050384][T30926] __nla_validate_parse: 10 callbacks suppressed [ 669.050406][T30926] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6410'. [ 669.146050][T29211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.161457][T29211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.173738][T29211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 669.209566][T30933] syzkaller0: entered promiscuous mode [ 669.232255][T30933] syzkaller0: entered allmulticast mode [ 669.273049][T30935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6413'. [ 669.325385][T29211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.336694][T29211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.348607][T29211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 669.448380][T30945] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6415'. [ 669.508225][T29211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.551285][T29211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.554651][T30949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6415'. [ 669.577713][T29211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 669.756950][T29211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.767551][T29211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.778849][T29211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 670.054031][T30912] chnl_net:caif_netlink_parms(): no params data found [ 670.272024][T29211] team0: left allmulticast mode [ 670.277808][T29211] team_slave_1: left allmulticast mode [ 670.284165][T29211] bridge5: left allmulticast mode [ 670.289875][T29211] team0: left promiscuous mode [ 670.295009][T29211] team_slave_1: left promiscuous mode [ 670.310920][T29211] bridge5: left promiscuous mode [ 670.316949][T29211] bridge0: port 3(team0) entered disabled state [ 670.342899][T29211] bridge_slave_1: left allmulticast mode [ 670.358935][T29211] bridge_slave_1: left promiscuous mode [ 670.369292][T29211] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.388429][T29211] bridge_slave_0: left allmulticast mode [ 670.398819][T29211] bridge_slave_0: left promiscuous mode [ 670.410068][T29211] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.783947][T28853] Bluetooth: hci3: command tx timeout [ 670.850421][T29211] bond11 (unregistering): (slave ip6gre1): Releasing backup interface [ 671.815788][T29211] team0: Port device bridge5 removed [ 672.116541][T29211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.127383][T29211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.138499][T29211] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 672.150500][T29211] bond0 (unregistering): Released all slaves [ 672.162621][T29211] bond1 (unregistering): (slave veth3): Releasing active interface [ 672.174570][T29211] bond1 (unregistering): Released all slaves [ 672.190296][T29211] bond2 (unregistering): Released all slaves [ 672.205342][T29211] bond3 (unregistering): Released all slaves [ 672.218756][T29211] bond4 (unregistering): Released all slaves [ 672.236638][T29211] bond5 (unregistering): Released all slaves [ 672.255797][T29211] bond6 (unregistering): Released all slaves [ 672.270393][T29211] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 672.285115][T29211] bond7 (unregistering): (slave bond8): Releasing active interface [ 672.294004][T29211] bond7 (unregistering): Released all slaves [ 672.314443][T29211] bond8 (unregistering): Released all slaves [ 672.328726][T29211] bond9 (unregistering): Released all slaves [ 672.346841][T29211] bond10 (unregistering): Released all slaves [ 672.362878][T29211] bond11 (unregistering): Released all slaves [ 672.379038][T29211] bond12 (unregistering): Released all slaves [ 672.401666][T30971] batadv_slave_1: entered promiscuous mode [ 672.408164][T30978] batadv_slave_1: left promiscuous mode [ 672.670695][T29211] : left promiscuous mode [ 672.740137][T30912] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.773996][T30912] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.791896][T30912] bridge_slave_0: entered allmulticast mode [ 672.810427][T30912] bridge_slave_0: entered promiscuous mode [ 672.835149][T29211] 9: left promiscuous mode [ 672.869890][T28853] Bluetooth: hci3: command tx timeout [ 672.911699][T30912] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.929295][T30912] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.965940][T30912] bridge_slave_1: entered allmulticast mode [ 672.975430][T30912] bridge_slave_1: entered promiscuous mode [ 673.044833][T29211] tipc: Left network mode [ 673.048285][T30912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.104918][T30912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.389351][T31047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6436'. [ 673.397689][T30912] team0: Port device team_slave_0 added [ 673.425736][T31049] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6437'. [ 673.511278][T30912] team0: Port device team_slave_1 added [ 673.516982][T31049] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6437'. [ 673.664711][T30912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.686008][T30912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.686662][T31061] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6439'. [ 673.791189][T30912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.860632][T30912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.882047][T30912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.916544][T30912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.164989][T31078] validate_nla: 1 callbacks suppressed [ 674.165011][T31078] netlink: 'syz.0.6444': attribute type 3 has an invalid length. [ 674.214658][T30912] hsr_slave_0: entered promiscuous mode [ 674.234935][T30912] hsr_slave_1: entered promiscuous mode [ 674.243910][T30912] debugfs: 'hsr0' already exists in 'hsr' [ 674.249910][T30912] Cannot create hsr debugfs directory [ 674.259727][T31079] netlink: 'syz.0.6444': attribute type 3 has an invalid length. [ 674.325334][T31087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6445'. [ 674.475908][T31094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6447'. [ 674.567579][T31098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6448'. [ 674.578205][T31098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6448'. [ 674.826865][T29211] hsr_slave_1: left promiscuous mode [ 674.843877][T29211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.851761][T29211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.867555][T29211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.877113][T29211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.895670][T29211] veth1_macvtap: left promiscuous mode [ 674.903947][T29211] veth0_macvtap: left promiscuous mode [ 674.909717][T29211] veth1_vlan: left promiscuous mode [ 674.916840][T29211] veth0_vlan: left promiscuous mode [ 674.942022][T28853] Bluetooth: hci3: command tx timeout [ 675.199995][T29219] smc: removing ib device syz2 [ 675.273289][T31125] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002 [ 675.291431][T31125] IPVS: rr: FWM 3 0x00000003 - no destination available [ 675.392031][T29211] team0 (unregistering): Port device team_slave_1 removed [ 675.488585][T29211] lo (unregistering): left allmulticast mode [ 675.587419][T31121] tipc: Started in network mode [ 675.595291][T31121] tipc: Node identity b6d5ac28d614, cluster identity 4711 [ 675.616990][T31121] tipc: Enabled bearer , priority 0 [ 675.744391][T31127] syzkaller0: entered promiscuous mode [ 675.759686][T31127] syzkaller0: entered allmulticast mode [ 675.782430][T31127] tipc: Resetting bearer [ 675.790419][T12190] syz2: Port: 1 Link DOWN [ 675.829821][T31135] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 675.872899][T20739] tipc: Resetting bearer [ 675.990852][T31109] tipc: Resetting bearer [ 677.031327][T28853] Bluetooth: hci3: command tx timeout [ 678.647265][T31109] tipc: Disabling bearer [ 678.682816][T12190] tipc: Node number set to 1623305256 [ 679.105007][T31169] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6462'. [ 679.133623][T29211] IPVS: stop unused estimator thread 0... [ 679.152907][T31171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6463'. [ 679.857963][T31205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6473'. [ 679.915405][T30912] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 679.981866][T30912] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 680.000893][T30912] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 680.038693][T30912] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 680.345584][T30912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.449883][T30912] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.484836][T29216] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.492104][T29216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.660798][T29216] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.668071][T29216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.728960][T31249] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6480'. [ 680.799384][T31262] bridge_slave_0: left allmulticast mode [ 680.818146][T31262] bridge_slave_0: left promiscuous mode [ 680.839536][T31262] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.842385][T31268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6484'. [ 680.874231][T31262] bridge_slave_1: left allmulticast mode [ 680.900470][T31270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.905275][T31262] bridge_slave_1: left promiscuous mode [ 680.919295][T31262] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.947775][T31262] bond0: (slave bond_slave_0): Releasing backup interface [ 680.965020][T31262] bond0: (slave bond_slave_1): Releasing backup interface [ 680.987131][T31262] team0: Port device team_slave_0 removed [ 681.003282][T31262] team0: Port device team_slave_1 removed [ 681.010823][T31262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.018800][T31262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.032618][T31262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.040273][T31262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.052268][T31262] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 681.070065][T31259] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6484'. [ 681.132728][T31268] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 681.160380][T31274] team_slave_1: entered promiscuous mode [ 681.369600][T31289] netlink: 404 bytes leftover after parsing attributes in process `syz.1.6489'. [ 681.403775][T31289] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20001 [ 681.645358][T31300] netlink: 'syz.4.6492': attribute type 51 has an invalid length. [ 681.733098][T31300] Bluetooth: MGMT ver 1.23 [ 681.998577][T30912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.005127][T31325] netlink: 'syz.4.6496': attribute type 39 has an invalid length. [ 682.338163][T31343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6499'. [ 682.508572][T30912] veth0_vlan: entered promiscuous mode [ 682.548217][T30912] veth1_vlan: entered promiscuous mode [ 682.643938][T30912] veth0_macvtap: entered promiscuous mode [ 682.689634][T30912] veth1_macvtap: entered promiscuous mode [ 682.777781][T30912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.806698][T31363] netlink: 'syz.1.6506': attribute type 4 has an invalid length. [ 682.836427][T30912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.858064][T31365] netlink: 'syz.1.6506': attribute type 4 has an invalid length. [ 682.939347][T29211] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.977114][T29211] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.117517][T31369] syzkaller0: entered promiscuous mode [ 683.140581][T31369] syzkaller0: entered allmulticast mode [ 683.159415][T31382] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 683.378149][T31397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.468413][T31397] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6513'. [ 685.405889][T29211] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.415286][T29211] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.636406][T31421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6516'. [ 685.788509][T20739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.825443][T20739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.896326][ T6535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.912187][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 685.942094][T31431] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 685.955643][ T6535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.005402][T31427] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6520'. [ 686.237309][T31441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6523'. [ 686.247276][T31445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6524'. [ 686.433312][T31470] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 686.552136][T31475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6531'. [ 686.613709][T31475] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6531'. [ 686.659737][T31474] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6531'. [ 686.728458][T31489] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.6536'. [ 686.774463][T31489] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 686.797734][T31490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6536'. [ 687.164062][T31511] ipt_REJECT: TCP_RESET invalid for non-tcp [ 687.243977][T31516] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6543'. [ 687.580127][T31536] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 687.889948][T31551] bond0: (slave gre0): Error: Device type is different from other slaves [ 687.916655][T31557] tipc: Enabling of bearer rejected, failed to enable media [ 688.113062][T31568] Bluetooth: MGMT ver 1.23 [ 688.275836][T31585] netlink: 'syz.1.6559': attribute type 1 has an invalid length. [ 688.817093][T31613] netlink: 'syz.2.6567': attribute type 1 has an invalid length. [ 688.842824][T31613] openvswitch: netlink: EtherType 50a is less than min 600 [ 688.904370][T31614] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.916704][T31614] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.166032][T31614] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.209656][T31614] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.258718][T31638] block nbd0: Unsupported socket: should be TCP or UNIX. [ 689.295447][T31614] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.306268][T31614] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.453398][T31614] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.465226][T31614] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.027224][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 691.035335][ C0] lec:lec_tx_timeout: lec0 [ 691.518510][T31669] netlink: 'syz.1.6582': attribute type 1 has an invalid length. [ 691.647443][T31678] __nla_validate_parse: 9 callbacks suppressed [ 691.647466][T31678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6582'. [ 691.664734][T29216] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.688604][T29216] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.701339][T31680] Bluetooth: MGMT ver 1.23 [ 691.741326][T31676] bond1: (slave geneve2): making interface the new active one [ 691.755517][T31676] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 691.786572][T31678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 691.796053][T29220] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 691.814515][T31692] netlink: 'syz.2.6585': attribute type 1 has an invalid length. [ 691.815767][T29220] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 691.834171][T29220] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 691.845041][T29220] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 691.854060][T31692] netlink: 'syz.2.6585': attribute type 11 has an invalid length. [ 691.874284][T31692] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6585'. [ 691.888651][T29220] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.899853][T29220] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.960011][T29220] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.991415][T29220] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.002776][T31696] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6587'. [ 692.024561][T29220] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.043371][T29220] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.772182][T31687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 694.784266][T31703] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6590'. [ 695.049852][T31728] netlink: 'syz.0.6593': attribute type 1 has an invalid length. [ 695.064867][T31728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6593'. [ 695.134860][T31727] netlink: 'syz.3.6596': attribute type 1 has an invalid length. [ 695.231703][T31736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6599'. [ 695.233889][T31729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6596'. [ 695.342276][T31746] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6601'. [ 695.515681][T31751] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6604'. [ 695.608948][T31757] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x46 [ 696.325109][T31787] netlink: 'syz.4.6614': attribute type 4 has an invalid length. [ 696.358251][T31789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6615'. [ 696.376889][T31787] netlink: 'syz.4.6614': attribute type 4 has an invalid length. [ 696.952989][T31807] netlink: 'syz.4.6620': attribute type 1 has an invalid length. [ 697.016508][T31812] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6620'. [ 697.032987][T31807] bond1: entered promiscuous mode [ 697.038663][T31807] 8021q: adding VLAN 0 to HW filter on device bond1 [ 697.061691][T31807] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6620'. [ 697.615968][T31816] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6622'. [ 697.994779][T31839] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6628'. [ 698.582758][T31867] veth3: entered promiscuous mode [ 698.598376][T31867] veth3: entered allmulticast mode [ 698.725416][T31870] veth5: entered promiscuous mode [ 698.738219][T31870] veth5: entered allmulticast mode [ 698.762748][T31872] netlink: 'syz.3.6637': attribute type 29 has an invalid length. [ 699.052910][T31885] bond1: Removing last arp target with arp_interval on [ 699.362416][T28853] Bluetooth: hci3: command tx timeout [ 699.680263][T31919] openvswitch: netlink: IP tunnel dst address not specified [ 699.761287][T31921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6652'. [ 700.129229][T31917] lo speed is unknown, defaulting to 1000 [ 700.135641][T31921] bridge0: entered promiscuous mode [ 700.142794][T31921] macsec1: entered promiscuous mode [ 700.148216][T31921] macsec1: entered allmulticast mode [ 700.155273][T31921] bridge0: entered allmulticast mode [ 700.162396][T31921] bridge0: port 1(macsec1) entered blocking state [ 700.169062][T31921] bridge0: port 1(macsec1) entered disabled state [ 700.179494][T31921] bridge0: left allmulticast mode [ 700.185580][T31921] bridge0: left promiscuous mode [ 700.199708][T31923] IPv6: sit1: Disabled Multicast RS [ 700.205880][T31923] sit1: entered allmulticast mode [ 700.305256][T31917] lo speed is unknown, defaulting to 1000 [ 700.312364][T31917] lo speed is unknown, defaulting to 1000 [ 700.492032][T31934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6657'. [ 700.616246][T31942] --map-set only usable from mangle table [ 700.838242][T31954] xt_l2tp: missing protocol rule (udp|l2tpip) [ 700.848481][T31956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6664'. [ 700.873286][T31955] netlink: 'syz.1.6662': attribute type 1 has an invalid length. [ 700.924684][T31917] infiniband syz2: set active [ 700.930211][T31917] infiniband syz2: added lo [ 700.975922][T27268] lo speed is unknown, defaulting to 1000 [ 701.006056][T31917] RDS/IB: syz2: added [ 701.010243][T31917] smc: adding ib device syz2 with port count 1 [ 701.018524][T31917] smc: ib device syz2 port 1 has no pnetid [ 701.045679][T27266] lo speed is unknown, defaulting to 1000 [ 701.060883][T31917] lo speed is unknown, defaulting to 1000 [ 701.175696][T31971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6667'. [ 701.361579][T31977] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6669'. [ 701.739923][T31917] lo speed is unknown, defaulting to 1000 [ 701.860892][T31999] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6674'. [ 701.891636][T32006] x_tables: duplicate underflow at hook 2 [ 702.462687][T32038] netlink: 'syz.1.6687': attribute type 1 has an invalid length. [ 702.488063][T32034] ip6gretap0: mtu less than device minimum [ 702.505231][T32038] netlink: 'syz.1.6687': attribute type 1 has an invalid length. [ 702.535630][T32038] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6687'. [ 702.593890][T31917] lo speed is unknown, defaulting to 1000 [ 702.950868][T32059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 703.349430][T31917] lo speed is unknown, defaulting to 1000 [ 703.365559][T32082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6696'. [ 704.177357][T31917] lo speed is unknown, defaulting to 1000 [ 704.423861][T32109] syzkaller0: entered promiscuous mode [ 704.429580][T32109] syzkaller0: entered allmulticast mode [ 704.454732][T32106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6701'. [ 704.455684][T32110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6703'. [ 704.521749][T32106] dvmrp0: entered allmulticast mode [ 704.546453][T32110] bond0: entered promiscuous mode [ 704.589963][T32110] gretap0: entered promiscuous mode [ 704.607210][T32110] hsr1: entered promiscuous mode [ 704.744409][T32127] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.6705'. [ 704.800590][T32132] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.6705'. [ 704.811460][T32131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6706'. [ 704.917805][T31917] lo speed is unknown, defaulting to 1000 [ 705.248079][T32151] netlink: 'syz.1.6712': attribute type 3 has an invalid length. [ 705.271623][T32151] netlink: 'syz.1.6712': attribute type 3 has an invalid length. [ 705.303372][T32151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6712'. [ 705.631350][T31917] lo speed is unknown, defaulting to 1000 [ 706.176731][T32185] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6718'. [ 706.274599][T31917] lo speed is unknown, defaulting to 1000 [ 706.349327][T32192] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 706.386747][T32198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6722'. [ 706.553143][T32200] netlink: 'syz.0.6723': attribute type 1 has an invalid length. [ 706.692567][T32200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 706.960285][T32216] syzkaller0: entered promiscuous mode [ 707.037635][T32216] syzkaller0: entered allmulticast mode [ 708.649954][T32256] netlink: 'syz.4.6734': attribute type 23 has an invalid length. [ 710.715614][T32308] __nla_validate_parse: 2 callbacks suppressed [ 710.715638][T32308] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6748'. [ 710.947789][T32322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.030281][T32328] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6747'. [ 711.040478][T32330] nbd: couldn't find device at index 242 [ 711.041452][T32328] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6747'. [ 711.048252][T32330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6755'. [ 711.057580][T32328] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6747'. [ 711.068921][T32330] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6755'. [ 711.076258][T32328] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6747'. [ 711.093613][T32330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6755'. [ 711.412982][T32343] lo speed is unknown, defaulting to 1000 [ 711.562359][T32351] tipc: Enabling of bearer rejected, media not registered [ 711.744857][T32360] "syz.0.6764" (32360) uses obsolete ecb(arc4) skcipher [ 711.796888][T32366] openvswitch: netlink: EtherType 50a is less than min 600 [ 711.869162][T32368] netlink: 512 bytes leftover after parsing attributes in process `syz.1.6766'. [ 711.944786][T32372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6768'. [ 712.341367][T32384] netlink: 'syz.2.6772': attribute type 18 has an invalid length. [ 712.421110][ T6535] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.452483][ T6535] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.514869][ T6535] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.589841][ T6535] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.974616][T32428] openvswitch: netlink: Message has 1 unknown bytes. [ 713.011648][T32428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.518084][T32459] netlink: 'syz.4.6788': attribute type 4 has an invalid length. [ 714.699283][T32514] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 714.998828][T32528] veth0: entered promiscuous mode [ 715.029456][T32527] veth0: left promiscuous mode [ 715.056241][T32532] netlink: 'syz.3.6808': attribute type 1 has an invalid length. [ 715.184291][T32536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 715.203129][T32548] netlink: 'syz.3.6808': attribute type 16 has an invalid length. [ 715.212631][T32548] netlink: 'syz.3.6808': attribute type 17 has an invalid length. [ 715.608755][T32548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 715.799239][T32574] "syz.0.6818" (32574) uses obsolete ecb(arc4) skcipher [ 715.818142][T32575] tls_set_device_offload: netdev not found [ 715.982285][T32586] netlink: 'syz.3.6821': attribute type 1 has an invalid length. [ 716.005048][T32586] netlink: 'syz.3.6821': attribute type 7 has an invalid length. [ 716.022667][T32586] netlink: 'syz.3.6821': attribute type 8 has an invalid length. [ 716.051324][T32586] __nla_validate_parse: 15 callbacks suppressed [ 716.051345][T32586] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6821'. [ 716.110394][T32586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6821'. [ 716.140266][T32586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6821'. [ 716.156372][T32594] netlink: 'syz.2.6824': attribute type 6 has an invalid length. [ 716.165153][T32586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6821'. [ 716.174830][T32593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.185488][T32586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6821'. [ 716.732214][T32627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6833'. [ 717.151722][T32659] netlink: 'syz.0.6840': attribute type 13 has an invalid length. [ 717.179264][T32661] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 717.206695][T32659] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6840'. [ 717.301793][T32673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6845'. [ 717.387496][T32679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.807207][T32713] validate_nla: 1 callbacks suppressed [ 717.807231][T32713] netlink: 'syz.1.6855': attribute type 1 has an invalid length. [ 718.073879][T32719] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6857'. [ 718.262691][T32725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6858'. [ 718.324454][T32725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 718.351421][T32725] macvlan3: entered promiscuous mode [ 718.357035][T32725] macvlan3: entered allmulticast mode [ 718.363132][T32725] bond2: entered allmulticast mode [ 718.378766][T32725] bond2: entered promiscuous mode [ 718.389670][T32725] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 718.399736][T32725] team0: Port device macvlan3 added [ 721.197074][ T304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.505608][ T326] __nla_validate_parse: 1 callbacks suppressed [ 721.505632][ T326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6876'. [ 721.531294][ T326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6876'. [ 721.593432][ T334] nbd: couldn't find device at index 242 [ 721.614585][ T336] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.6879'. [ 721.629101][ T326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6876'. [ 721.639184][ T326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6876'. [ 721.648723][ T326] netlink: 'syz.0.6876': attribute type 3 has an invalid length. [ 721.840705][ T344] tipc: Enabling of bearer rejected, failed to enable media [ 721.864674][ T351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6883'. [ 722.153158][ T363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6886'. [ 722.175363][ T369] netlink: 'syz.0.6888': attribute type 1 has an invalid length. [ 722.266255][ T376] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6886'. [ 722.416445][ T382] netlink: 'syz.0.6890': attribute type 1 has an invalid length. [ 722.471416][ T382] netlink: 'syz.0.6890': attribute type 11 has an invalid length. [ 722.489644][ T382] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6890'. [ 722.622359][ T393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.711957][ T395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6895'. [ 722.858358][ T404] netlink: 'syz.2.6898': attribute type 9 has an invalid length. [ 722.953885][ T410] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 722.970814][ T410] netlink: 'syz.1.6900': attribute type 28 has an invalid length. [ 722.979506][ T410] netlink: 'syz.1.6900': attribute type 3 has an invalid length. [ 723.298044][ T431] netlink: 'syz.1.6907': attribute type 1 has an invalid length. [ 723.387242][ T436] xt_hashlimit: invalid interval [ 723.958676][ T458] netlink: 'syz.1.6913': attribute type 2 has an invalid length. [ 723.967701][ T458] netlink: 'syz.1.6913': attribute type 2 has an invalid length. [ 724.039689][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055d0a800: rx timeout, send abort [ 724.139519][ T471] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20003 [ 724.334311][ T482] only policy match revision 0 supported [ 724.334335][ T482] unable to load match [ 724.473762][ T488] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 724.496936][ T488] team1: entered promiscuous mode [ 724.502683][ T488] team1: entered allmulticast mode [ 724.549551][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055d0a800: abort rx timeout. Force session deactivation [ 724.619599][ T492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.913116][ T512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.039389][ T518] SET target dimension over the limit! [ 726.517038][ T521] hsr1: left promiscuous mode [ 726.537618][ T521] bond2: left allmulticast mode [ 726.547861][ T521] bond2: left promiscuous mode [ 726.553273][ T521] macvlan3: left promiscuous mode [ 726.558320][ T521] macvlan3: left allmulticast mode [ 726.620801][ T562] __nla_validate_parse: 19 callbacks suppressed [ 726.620816][ T562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6939'. [ 726.675687][T29220] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.688159][T29220] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.699371][T29220] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 726.709547][T29220] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.718876][T29220] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.728280][T29220] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 726.764710][T29220] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.784759][T29220] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.809435][T29220] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 726.829159][T29220] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.850818][T29220] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.871824][T29220] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 726.970017][ T6384] lec:lec_start_xmit: lec0:No lecd attached [ 727.340280][ T599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6948'. [ 727.369925][ T597] netlink: zone id is out of range [ 727.382289][ T597] netlink: zone id is out of range [ 727.403650][ T597] netlink: zone id is out of range [ 727.419169][ T597] netlink: zone id is out of range [ 727.426814][ T597] netlink: zone id is out of range [ 727.436100][ T597] netlink: zone id is out of range [ 727.481813][ T597] netlink: zone id is out of range [ 727.569476][ T609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6954'. [ 727.597901][ T607] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6951'. [ 727.623201][ T607] netlink: 'syz.2.6951': attribute type 1 has an invalid length. [ 727.719175][ T620] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6958'. [ 727.737378][ T624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6957'. [ 727.747325][ T625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6957'. [ 727.749028][ T618] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6958'. [ 727.960882][ T632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6959'. [ 728.155442][ T644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6965'. [ 728.211763][ T645] bond1: option fail_over_mac: invalid value (16) [ 728.220612][ T645] bond1 (unregistering): Released all slaves [ 728.763006][ T687] netlink: 'syz.0.6979': attribute type 10 has an invalid length. [ 728.818622][ T687] team0: Device vxcan1 is of different type [ 728.838994][ T698] netlink: 'syz.1.6980': attribute type 1 has an invalid length. [ 728.863171][ T698] netlink: 'syz.1.6980': attribute type 1 has an invalid length. [ 728.890880][ T698] netlink: 'syz.1.6980': attribute type 8 has an invalid length. [ 728.910570][ T701] Cannot find add_set index 2 as target [ 729.170245][ T716] bond3: option all_slaves_active: invalid value (222) [ 729.193083][ T716] bond3 (unregistering): Released all slaves [ 729.258498][T29215] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.280632][T29215] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.308436][T29215] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.347611][T29215] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.470718][ T734] xt_bpf: check failed: parse error [ 729.548692][ T745] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 729.595490][ T745] syzkaller1: entered promiscuous mode [ 729.601902][ T745] syzkaller1: entered allmulticast mode [ 729.844392][ T765] netlink: 'syz.1.6999': attribute type 1 has an invalid length. [ 729.920738][ T765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 729.971985][ T771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 729.994400][ T771] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 730.008905][ T771] bond3: (slave vcan1): Error -95 calling set_mac_address [ 730.047488][ T775] sctp: [Deprecated]: syz.2.7002 (pid 775) Use of int in max_burst socket option. [ 730.047488][ T775] Use struct sctp_assoc_value instead [ 730.173168][ T784] netlink: 'syz.1.7005': attribute type 4 has an invalid length. [ 730.187218][ T785] netlink: 'syz.1.7005': attribute type 4 has an invalid length. [ 731.981268][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 731.989322][ C0] lec:lec_tx_timeout: lec0 [ 744.301160][T28853] Bluetooth: hci5: command 0x0406 tx timeout [ 747.356354][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 750.695391][ T807] netlink: 'syz.4.7011': attribute type 1 has an invalid length. [ 750.766005][ T813] __nla_validate_parse: 12 callbacks suppressed [ 750.766028][ T813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7013'. [ 750.939843][ T828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7015'. [ 751.163411][ T840] netlink: 'syz.2.7020': attribute type 10 has an invalid length. [ 751.185084][ T850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7021'. [ 751.369045][ T860] netlink: 'syz.1.7021': attribute type 1 has an invalid length. [ 751.699251][T19326] IPVS: starting estimator thread 0... [ 751.705693][ T881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7028'. [ 751.825897][ T882] IPVS: using max 25 ests per chain, 60000 per kthread [ 751.921712][ T893] netlink: 'syz.3.7031': attribute type 2 has an invalid length. [ 751.978922][ T894] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7031'. [ 752.155781][ T901] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 752.234400][ T908] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7036'. [ 752.255014][ T904] net_ratelimit: 187 callbacks suppressed [ 752.255034][ T904] syzkaller0: mtu less than device minimum [ 752.338923][ T904] syzkaller0: entered promiscuous mode [ 752.363337][ T904] syzkaller0: entered allmulticast mode [ 752.373631][ T5831] Bluetooth: hci3: link tx timeout [ 752.391219][ T5831] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 752.400759][ T5831] Bluetooth: hci3: link tx timeout [ 752.407001][ T5831] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 752.699188][ T913] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7033'. [ 753.023959][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 753.032047][ C0] lec:lec_tx_timeout: lec0 [ 754.407266][ T5831] Bluetooth: hci3: link tx timeout [ 754.412596][ T5831] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 754.420278][ T5831] Bluetooth: hci3: link tx timeout [ 754.425526][ T5831] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 754.451839][ T5831] Bluetooth: hci3: link tx timeout [ 754.457015][ T5831] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 754.467113][ T5831] Bluetooth: hci3: link tx timeout [ 754.472458][ T5831] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 754.480141][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 754.785605][ T954] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7044'. [ 754.794961][ T954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7044'. [ 754.871641][ T959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7048'. [ 754.932735][ T959] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 754.996477][ T959] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 755.049728][ T959] gretap1: entered promiscuous mode [ 755.072451][ T959] gretap1: entered allmulticast mode [ 755.276273][ T984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 755.317004][ T990] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 755.894187][ T1031] netlink: 'syz.4.7065': attribute type 1 has an invalid length. [ 755.919544][ T1036] netlink: zone id is out of range [ 755.935491][ T1040] __nla_validate_parse: 4 callbacks suppressed [ 755.935589][ T1040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7068'. [ 755.941954][ T1036] netlink: zone id is out of range [ 755.941970][ T1036] netlink: zone id is out of range [ 755.941983][ T1036] netlink: zone id is out of range [ 755.941993][ T1036] netlink: zone id is out of range [ 755.942003][ T1036] netlink: zone id is out of range [ 755.942013][ T1036] netlink: zone id is out of range [ 755.942022][ T1036] netlink: zone id is out of range [ 755.942032][ T1036] netlink: zone id is out of range [ 755.945722][ T1036] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 756.623172][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 757.122169][ T1108] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7080'. [ 757.170833][ T1108] bond2: entered promiscuous mode [ 757.177882][ T1108] bond2: entered allmulticast mode [ 757.185355][ T1108] 8021q: adding VLAN 0 to HW filter on device bond2 [ 757.264388][ T1111] netlink: 'syz.2.7081': attribute type 1 has an invalid length. [ 757.287779][ T1111] vlan2: entered promiscuous mode [ 757.293247][ T1111] geneve1: entered promiscuous mode [ 757.299043][ T1111] vlan2: entered allmulticast mode [ 757.306434][ T1111] geneve1: entered allmulticast mode [ 757.451926][ T1115] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 757.755200][ T1133] IPVS: set_ctl: invalid protocol: 15 255.255.255.255:0 [ 757.847342][ T1137] block nbd2: Unsupported socket: should be TCP or UNIX. [ 757.885986][ T1143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7090'. [ 758.053439][ T1143] team0: Port device team_slave_0 removed [ 758.094279][ T1154] netlink: 'syz.4.7096': attribute type 1 has an invalid length. [ 758.134141][ T1156] net_ratelimit: 186 callbacks suppressed [ 758.134156][ T1156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.149764][ T1158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7096'. [ 758.187785][ T1154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 758.294229][ T1167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7096'. [ 758.336495][ T1154] bond2: (slave ip6gretap1): making interface the new active one [ 758.358779][ T1154] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 758.626759][ T1185] 8021q: VLANs not supported on lo [ 758.648484][ T1190] netlink: 'syz.1.7107': attribute type 1 has an invalid length. [ 758.663597][ T1190] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7107'. [ 758.681174][ T1190] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7107'. [ 758.721185][ T1190] netlink: 'syz.1.7107': attribute type 1 has an invalid length. [ 758.728987][ T1190] netlink: 'syz.1.7107': attribute type 8 has an invalid length. [ 758.764923][ T1190] netlink: 606 bytes leftover after parsing attributes in process `syz.1.7107'. [ 758.813588][ T1196] netlink: 332 bytes leftover after parsing attributes in process `syz.2.7109'. [ 759.155808][ T1215] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 759.210297][ T1215] bond3: (slave lo): Enslaving as an active interface with an up link [ 759.284282][ T1215] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 759.345601][T19326] lo speed is unknown, defaulting to 1000 [ 759.368497][T19326] lo speed is unknown, defaulting to 1000 [ 759.385055][ T1224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7114'. [ 759.394031][T12189] lo speed is unknown, defaulting to 1000 [ 759.438245][ T1224] netlink: 'syz.3.7114': attribute type 1 has an invalid length. [ 759.451264][ T1224] netlink: 'syz.3.7114': attribute type 2 has an invalid length. [ 759.661218][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 759.749678][ T1251] syzkaller0: entered promiscuous mode [ 759.769172][ T1251] syzkaller0: entered allmulticast mode [ 759.850495][ T1249] syzkaller0: entered promiscuous mode [ 759.871185][ T1249] syzkaller0: entered allmulticast mode [ 760.888224][ T1266] netlink: 'syz.2.7126': attribute type 9 has an invalid length. [ 761.106949][ T1317] bridge_slave_0: left allmulticast mode [ 761.121010][ T1317] bridge_slave_0: left promiscuous mode [ 761.127098][ T1317] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.164114][ T1317] bond0: (slave bridge_slave_1): Releasing backup interface [ 761.186958][ T1317] bond0: (slave bond_slave_0): Releasing backup interface [ 761.208274][ T1317] bond0: (slave bond_slave_1): Releasing backup interface [ 761.249531][ T1317] team0: Port device team_slave_0 removed [ 761.268571][ T1317] team0: Port device team_slave_1 removed [ 761.277530][ T1317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.287043][ T1317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.310460][ T1317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.331925][ T1317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.378460][ T1317] bond2: (slave ip6gretap1): Releasing active interface [ 761.812725][ T1351] netlink: 'syz.4.7145': attribute type 10 has an invalid length. [ 761.856048][ T1351] bond0: (slave wlan1): Opening slave failed [ 761.887273][ T1359] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.895249][ T1359] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.920063][ T1362] __nla_validate_parse: 2 callbacks suppressed [ 761.920086][ T1362] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7149'. [ 762.148277][ T1376] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7151'. [ 762.191338][ T1375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7151'. [ 762.223943][ T1379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7153'. [ 762.336744][ T1381] bond2: Removing last arp target with arp_interval on [ 762.450369][ T1376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.526166][ T1376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.556674][ T1376] bond0 (unregistering): Released all slaves [ 762.601574][ T1384] bond_slave_1: mtu less than device minimum [ 762.997983][ T1404] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7157'. [ 763.146032][ T1410] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7158'. [ 763.406784][ T1421] netlink: 'syz.1.7163': attribute type 1 has an invalid length. [ 763.437714][ T1421] netlink: 'syz.1.7163': attribute type 11 has an invalid length. [ 763.466518][ T1421] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7163'. [ 763.469143][ T1424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7165'. [ 763.738781][ T1447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7172'. [ 764.039621][ T1470] xt_hashlimit: size too large, truncated to 1048576 [ 764.102612][ T1478] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7179'. [ 764.399096][ T1493] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 764.414309][ T1499] xt_addrtype: ipv6 does not support BROADCAST matching [ 764.505770][ T1506] gretap2: entered promiscuous mode [ 764.521212][ T1506] gretap2: entered allmulticast mode [ 764.810290][ T1532] xt_hashlimit: size too large, truncated to 1048576 [ 765.169730][ T1550] bond0: entered promiscuous mode [ 765.185080][ T1550] batadv0: entered promiscuous mode [ 765.199543][ T1550] debugfs: 'hsr1' already exists in 'hsr' [ 765.223569][ T1550] Cannot create hsr debugfs directory [ 765.236169][ T1550] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 765.261370][ T1550] hsr1: entered promiscuous mode [ 765.266384][ T1550] hsr1: entered allmulticast mode [ 765.274430][ T1550] bond0: entered allmulticast mode [ 765.279595][ T1550] batadv0: entered allmulticast mode [ 765.289558][ T1550] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 765.331900][ T1550] bond0: left promiscuous mode [ 765.347336][ T1550] batadv0: left promiscuous mode [ 765.434687][ T821] udevd[821]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 765.513320][ T815] udevd[815]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 766.059885][ T1582] veth0: entered promiscuous mode [ 766.151853][ T1593] veth0: left promiscuous mode [ 766.244525][ T1606] netlink: 'syz.4.7208': attribute type 1 has an invalid length. [ 766.888093][ T1656] netlink: 'syz.4.7212': attribute type 1 has an invalid length. [ 767.237460][ T1667] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 767.268233][ T1667] bond3: (slave lo): Enslaving as an active interface with an up link [ 767.280837][ T1667] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 767.322426][ T1671] netlink: 'syz.1.7219': attribute type 3 has an invalid length. [ 767.566489][ T1701] __nla_validate_parse: 12 callbacks suppressed [ 767.566517][ T1701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7228'. [ 767.616215][ T1701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7228'. [ 767.775812][ T1716] ±ÿ=–a²š«: renamed from lo (while UP) [ 767.877397][ T1723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7234'. [ 768.081781][ T1730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7237'. [ 768.206109][ T1733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7238'. [ 768.535174][ T1754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7246'. [ 768.892707][ T1768] vlan3: entered allmulticast mode [ 769.200109][ T1784] netlink: 'syz.1.7255': attribute type 15 has an invalid length. [ 769.360201][ T1792] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20002 [ 769.378274][ T1761] lec:lec_atm_close: lec0: Shut down! [ 769.731406][ T1795] syzkaller0: entered promiscuous mode [ 769.791098][ T1795] syzkaller0: entered allmulticast mode [ 770.111774][ T1800] syzkaller0: entered promiscuous mode [ 770.656618][ T1819] lo speed is unknown, defaulting to 1000 [ 770.698371][ T1828] IPVS: sh: FWM 3 0x00000003 - no destination available [ 770.714611][T19326] IPVS: starting estimator thread 0... [ 770.831198][ T1830] IPVS: using max 26 ests per chain, 62400 per kthread [ 770.986190][ T1841] netlink: 'syz.2.7270': attribute type 4 has an invalid length. [ 771.787881][ T1863] syz_tun: refused to change device tx_queue_len [ 772.325502][ T1881] netlink: 'syz.1.7283': attribute type 16 has an invalid length. [ 772.333985][ T1881] netlink: 'syz.1.7283': attribute type 17 has an invalid length. [ 772.372529][ T1883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7282'. [ 772.423464][ T1881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.433099][ T1881] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.444816][ T1881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 772.681639][ T1900] syzkaller0: entered promiscuous mode [ 772.696676][ T1900] syzkaller0: entered allmulticast mode [ 772.719534][ T1900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7287'. [ 772.751684][ T1905] netlink: 'syz.0.7290': attribute type 11 has an invalid length. [ 772.759555][ T1905] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7290'. [ 772.769787][ T1900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7287'. [ 772.769918][ T1907] batadv_slave_1: mtu less than device minimum [ 773.265389][ T1937] netlink: 'syz.3.7297': attribute type 1 has an invalid length. [ 773.272240][ T1938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 773.384890][ T1943] ip6gre1: entered promiscuous mode [ 773.390645][ T1943] ip6gre1: entered allmulticast mode [ 773.517528][ T1948] lo speed is unknown, defaulting to 1000 [ 773.697769][ T1956] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.870131][ T1972] netlink: 'syz.1.7307': attribute type 1 has an invalid length. [ 773.897389][ T1972] netlink: 476 bytes leftover after parsing attributes in process `syz.1.7307'. [ 773.920692][ T1972] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.7307'. [ 773.948506][ T1972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7307'. [ 773.960115][ T1972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7307'. [ 773.994670][ T1948] lo speed is unknown, defaulting to 1000 [ 774.084081][ T1977] netlink: 'syz.3.7308': attribute type 2 has an invalid length. [ 774.107888][ T1977] netlink: 'syz.3.7308': attribute type 1 has an invalid length. [ 774.182813][ T1977] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7308'. [ 774.258892][ T1981] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7309'. [ 774.265192][ T1985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7310'. [ 774.359813][ T1985] bond4: entered promiscuous mode [ 774.365838][ T1985] 8021q: adding VLAN 0 to HW filter on device bond4 [ 774.455436][ T1985] vlan2: entered allmulticast mode [ 774.460720][ T1985] bond4: entered allmulticast mode [ 775.021012][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5650 ms [ 775.029203][ C0] lec:lec_tx_timeout: lec0 [ 775.168821][ T1347] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.193265][ T1347] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.212591][ T1347] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.236074][ T1347] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.643586][ T2050] 8021q: VLANs not supported on ip6gre0 [ 776.079198][ T2073] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 776.219959][ T2082] delete_channel: no stack [ 776.531738][ T2097] bridge4: entered promiscuous mode [ 776.537021][ T2097] bridge4: entered allmulticast mode [ 776.683824][ T2108] bridge5: entered promiscuous mode [ 776.701795][ T2108] bridge5: entered allmulticast mode [ 777.166857][ T2146] bridge7: entered promiscuous mode [ 777.184933][ T2146] bridge7: entered allmulticast mode [ 778.114289][ T2210] __nla_validate_parse: 12 callbacks suppressed [ 778.114314][ T2210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7373'. [ 778.150357][ T2210] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7373'. [ 778.167734][ T2210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7373'. [ 778.178658][ T2210] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7373'. [ 778.188347][ T2210] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7373'. [ 778.374438][ T2224] netlink: 'syz.4.7380': attribute type 61 has an invalid length. [ 778.407442][ T2224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7380'. [ 778.429571][ T2228] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode [ 778.469877][ T2224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7380'. [ 778.511325][ T2224] netlink: 120 bytes leftover after parsing attributes in process `syz.4.7380'. [ 778.560803][ T2224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7380'. [ 778.584630][ T2235] netlink: 'syz.1.7384': attribute type 10 has an invalid length. [ 779.004646][ T2253] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7389'. [ 779.935823][ T2319] netlink: 'syz.3.7407': attribute type 1 has an invalid length. [ 779.944751][ T2319] netlink: 'syz.3.7407': attribute type 1 has an invalid length. [ 779.953885][ T2319] netlink: 'syz.3.7407': attribute type 8 has an invalid length. [ 780.424379][ T2356] macsec1: entered promiscuous mode [ 780.429874][ T2356] bridge0: entered promiscuous mode [ 780.436476][ T2356] macsec1: entered allmulticast mode [ 780.442291][ T2356] bridge0: entered allmulticast mode [ 780.448534][ T2356] bridge0: port 1(macsec1) entered blocking state [ 780.455552][ T2356] bridge0: port 1(macsec1) entered disabled state [ 780.468654][ T2357] netlink: 'syz.4.7418': attribute type 11 has an invalid length. [ 780.477557][ T2356] bridge0: left allmulticast mode [ 780.483242][ T2356] bridge0: left promiscuous mode [ 780.608502][ T2361] nftables ruleset with unbound set [ 781.115018][ T2384] ipt_REJECT: ECHOREPLY no longer supported. [ 781.352864][ T2399] syzkaller1: entered promiscuous mode [ 781.360727][ T2399] syzkaller1: entered allmulticast mode [ 781.628254][ T2422] vcan0: tx address claim with different name [ 781.842274][ T2431] netlink: 'syz.2.7440': attribute type 1 has an invalid length. [ 781.910590][ T2431] : entered promiscuous mode [ 781.946278][ T2437] netlink: 'syz.4.7442': attribute type 3 has an invalid length. [ 782.304092][ T2470] tipc: Started in network mode [ 782.309029][ T2470] tipc: Node identity e0000001, cluster identity 4711 [ 782.328865][ T2470] tipc: Enabling of bearer rejected, failed to enable media [ 782.606583][ T2490] IPVS: length: 114 != 8 [ 782.857356][ T2493] team_slave_1: left promiscuous mode [ 782.896266][ T2493] bond1: left promiscuous mode [ 782.912301][ T2493] veth3: left promiscuous mode [ 782.930362][ T2493] veth5: left promiscuous mode [ 783.463831][ T2518] netlink: 'syz.0.7462': attribute type 1 has an invalid length. [ 783.547877][ T2518] 8021q: adding VLAN 0 to HW filter on device bond5 [ 783.631568][ T2526] bond5: (slave geneve3): making interface the new active one [ 783.674927][ T2526] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 783.722349][ T1347] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 783.759070][ T1347] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 783.791856][ T1347] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 783.838523][ T1347] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 783.895582][ T2542] __nla_validate_parse: 25 callbacks suppressed [ 783.895606][ T2542] netlink: 348 bytes leftover after parsing attributes in process `syz.1.7467'. [ 783.971797][ T2550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7468'. [ 784.070307][ T2550] 8021q: adding VLAN 0 to HW filter on device bond6 [ 784.411181][ T2568] sctp: [Deprecated]: syz.4.7472 (pid 2568) Use of int in maxseg socket option. [ 784.411181][ T2568] Use struct sctp_assoc_value instead [ 784.468526][ T2568] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20002 [ 784.714860][ T2584] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7476'. [ 784.741948][ T2582] netlink: 'syz.4.7475': attribute type 25 has an invalid length. [ 784.750723][ T2589] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7478'. [ 784.880362][ T2592] netlink: 'syz.1.7479': attribute type 13 has an invalid length. [ 784.900440][ T2602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7480'. [ 784.928079][ T2592] macvtap0: entered allmulticast mode [ 784.947300][ T2600] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7481'. [ 785.243166][ T2629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7488'. [ 785.347188][ T2629] netlink: 'syz.0.7488': attribute type 2 has an invalid length. [ 785.635091][ T2647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7491'. [ 785.647674][ T2647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7491'. [ 785.666287][ T2647] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 785.859160][ T2664] syzkaller0: entered promiscuous mode [ 785.865396][ T2664] syzkaller0: entered allmulticast mode [ 786.362691][ T2698] netlink: 'syz.2.7504': attribute type 11 has an invalid length. [ 786.383049][ T2698] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.7504'. [ 786.538855][ T2711] veth0: entered promiscuous mode [ 786.595054][ T2710] veth0: left promiscuous mode [ 786.991617][ T2751] IPVS: set_ctl: invalid protocol: 12 100.1.1.2:0 [ 787.949715][ T2827] netlink: 'syz.3.7525': attribute type 1 has an invalid length. [ 788.008717][ T2827] 8021q: adding VLAN 0 to HW filter on device bond4 [ 788.113953][ T2828] vlan2: entered promiscuous mode [ 788.119161][ T2828] bond4: entered promiscuous mode [ 788.126750][ T2828] vlan2: entered allmulticast mode [ 788.134752][ T2828] bond4: entered allmulticast mode [ 788.148150][ T2812] IPv6: sit1: Disabled Multicast RS [ 788.242857][ T2868] xt_hashlimit: size too large, truncated to 1048576 [ 788.485185][ T2882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.499751][ T2882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.629297][ T2882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.641547][ T2882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.902305][ T2882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.912856][ T2882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.948917][ T2894] lo speed is unknown, defaulting to 1000 [ 789.014053][ T2882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.030311][ T2882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.264484][ T6535] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.291222][ T6535] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.293635][ T2910] __nla_validate_parse: 9 callbacks suppressed [ 789.293653][ T2910] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.7542'. [ 789.299500][ T6535] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.299535][ T6535] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.325943][ T2910] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 789.372093][ T6535] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.380324][ T6535] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.431300][ T2915] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7542'. [ 789.459990][ T1347] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.481408][ T1347] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.006675][ T2948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7554'. [ 790.092853][ T2950] netlink: 'syz.3.7555': attribute type 13 has an invalid length. [ 790.121192][ T2953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7556'. [ 790.259607][ T2965] netlink: 'syz.2.7558': attribute type 5 has an invalid length. [ 790.426433][ T2970] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7560'. [ 790.604066][ T2984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7563'. [ 790.659485][ T2990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7563'. [ 790.687977][ T2986] netlink: 'syz.2.7564': attribute type 1 has an invalid length. [ 790.880628][ T3002] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7567'. [ 790.904471][ T6384] lec:lec_start_xmit: lec0:No lecd attached [ 790.912800][ T3002] netlink: 'syz.1.7567': attribute type 4 has an invalid length. [ 790.945841][ T3006] netlink: 'syz.4.7569': attribute type 2 has an invalid length. [ 790.969793][ T3010] netlink: 'syz.1.7567': attribute type 4 has an invalid length. [ 791.085350][ T2986] syzkaller0: entered promiscuous mode [ 791.091224][ T2986] syzkaller0: entered allmulticast mode [ 791.121934][ T3013] sctp: [Deprecated]: syz.3.7570 (pid 3013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 791.121934][ T3013] Use struct sctp_sack_info instead [ 793.154730][ T3027] syzkaller1: entered promiscuous mode [ 793.160436][ T3027] syzkaller1: entered allmulticast mode [ 793.276353][ T3034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7573'. [ 793.293552][ T3039] tipc: Started in network mode [ 793.311294][ T3039] tipc: Node identity ac14140f, cluster identity 4711 [ 793.340359][ T3039] tipc: New replicast peer: 255.255.255.255 [ 793.347660][ T3039] tipc: Enabled bearer , priority 10 [ 793.354210][ T3042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7575'. [ 793.595572][ T3061] x_tables: unsorted underflow at hook 3 [ 793.767087][ T3071] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 794.074549][ T3091] netlink: 'syz.1.7591': attribute type 2 has an invalid length. [ 794.091259][ T3091] netlink: 'syz.1.7591': attribute type 1 has an invalid length. [ 794.111987][ T3091] netlink: 'syz.1.7591': attribute type 1 has an invalid length. [ 794.119773][ T3091] netlink: 'syz.1.7591': attribute type 1 has an invalid length. [ 794.410456][ T3113] __nla_validate_parse: 4 callbacks suppressed [ 794.410478][ T3113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7594'. [ 794.461528][T12189] tipc: Node number set to 2886997007 [ 794.532772][ T3097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.537250][ T3127] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 794.551529][ T3128] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 794.563168][ T3127] mac80211_hwsim hwsim68 syzkaller0: entered promiscuous mode [ 794.570696][ T3127] mac80211_hwsim hwsim68 syzkaller0: entered allmulticast mode [ 794.586920][ T3127] tipc: Started in network mode [ 794.592036][ T3127] tipc: Node identity 080211000001, cluster identity 4711 [ 794.599366][ T3127] tipc: Enabled bearer , priority 0 [ 794.692466][ T3136] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7603'. [ 794.703471][ T3136] netlink: Unknown conntrack attr (0) [ 794.895582][ T3144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7607'. [ 794.965956][ T3148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7607'. [ 795.008167][ T3151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7609'. [ 795.155286][ T3156] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7611'. [ 795.335300][ T3169] validate_nla: 2 callbacks suppressed [ 795.335322][ T3169] netlink: 'syz.0.7615': attribute type 1 has an invalid length. [ 795.580647][ T3179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7616'. [ 795.647269][ T3189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.651582][ T3192] netlink: 'syz.0.7622': attribute type 11 has an invalid length. [ 795.682430][ T3192] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7622'. [ 795.823082][ T1211] tipc: Node number set to 134418688 [ 795.969673][ T3204] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7625'. [ 795.980986][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5080 ms [ 795.989039][ C0] lec:lec_tx_timeout: lec0 [ 796.030379][ T3206] netlink: 'syz.2.7627': attribute type 1 has an invalid length. [ 796.184211][ T3206] bond5: entered promiscuous mode [ 796.205111][ T3206] 8021q: adding VLAN 0 to HW filter on device bond5 [ 796.265975][ T3229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7632'. [ 796.782901][ T3273] netlink: 'syz.2.7644': attribute type 13 has an invalid length. [ 796.796472][ T3273] veth0_macvtap: left promiscuous mode [ 796.803081][ T3273] macvtap0: entered allmulticast mode [ 796.814065][ T3273] macvtap0: refused to change device tx_queue_len [ 797.635810][ T3329] openvswitch: netlink: IP tunnel dst address not specified [ 797.681650][ T3332] bond5: entered promiscuous mode [ 797.686901][ T3332] bond5: entered allmulticast mode [ 797.695326][ T3332] 8021q: adding VLAN 0 to HW filter on device bond5 [ 797.794337][ T3337] netlink: 'syz.4.7664': attribute type 1 has an invalid length. [ 797.807176][ T3337] netlink: 'syz.4.7664': attribute type 1 has an invalid length. [ 798.117787][ T3308] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 798.126770][ T3308] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 798.167367][ T3308] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 798.181960][ T3308] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 798.209218][ T3308] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 798.223901][ T3308] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 798.349771][ T3375] netlink: 'syz.1.7677': attribute type 10 has an invalid length. [ 798.398913][ T3375] veth0_vlan: left promiscuous mode [ 798.409758][ T3375] veth0_vlan: entered promiscuous mode [ 798.444005][ T3375] team0: Device veth0_vlan failed to register rx_handler [ 798.745210][ T3391] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 798.774679][ T3391] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 798.819104][ T3391] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 798.853986][ T3384] netlink: 'syz.3.7678': attribute type 10 has an invalid length. [ 798.862495][ T3384] dummy0: entered promiscuous mode [ 798.868359][ T3384] bridge0: port 1(dummy0) entered blocking state [ 798.879981][ T3384] bridge0: port 1(dummy0) entered disabled state [ 798.886933][ T3384] dummy0: entered allmulticast mode [ 799.278549][ T3431] 0·: renamed from hsr_slave_1 (while UP) [ 799.292646][ T3431] 0·: entered allmulticast mode [ 799.304358][ T3431] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 799.455449][ T3435] __nla_validate_parse: 20 callbacks suppressed [ 799.455471][ T3435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7689'. [ 800.086416][ T3480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 800.184042][ T3486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7706'. [ 800.486308][ T3485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 800.893140][ T3500] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7710'. [ 801.130814][ T3515] syzkaller1: entered promiscuous mode [ 801.141517][ T3515] syzkaller1: entered allmulticast mode [ 801.151526][ T3519] tipc: Enabling of bearer rejected, failed to enable media [ 801.180300][ T3517] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7717'. [ 801.215467][ T3523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7720'. [ 801.354280][ T3532] netlink: 'syz.0.7721': attribute type 1 has an invalid length. [ 801.388274][ T3532] netlink: 'syz.0.7721': attribute type 7 has an invalid length. [ 801.396464][ T3532] netlink: 'syz.0.7721': attribute type 8 has an invalid length. [ 801.404967][ T3532] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7721'. [ 801.419270][ T3532] netlink: 'syz.0.7721': attribute type 178 has an invalid length. [ 801.450174][ T3536] netlink: 'syz.3.7725': attribute type 2 has an invalid length. [ 801.537998][ T3540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7725'. [ 801.590213][ T3540] dummy0: left allmulticast mode [ 801.613600][ T3540] bridge0: port 1(dummy0) entered disabled state [ 801.647498][ T3549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7727'. [ 801.725674][ T3540] bridge0 (unregistering): left allmulticast mode [ 801.886561][ T3571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7730'. [ 801.924567][ T3559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7727'. [ 801.958018][ T3560] lo speed is unknown, defaulting to 1000 [ 802.028931][ T3568] netlink: 'syz.0.7730': attribute type 10 has an invalid length. [ 802.050440][ T6537] syzkaller0: tun_net_xmit 76 [ 802.057599][ T3568] netlink: 'syz.0.7730': attribute type 2 has an invalid length. [ 802.081459][ T6537] syzkaller0: tun_net_xmit 48 [ 802.086522][T12182] syzkaller0: tun_net_xmit 76 [ 802.110615][ T3565] syzkaller0: create flow: hash 4050447989 index 1 [ 802.261271][T19366] syzkaller0: tun_net_xmit 76 [ 802.391487][T19326] syzkaller0: tun_net_xmit 76 [ 802.429906][ T3592] netlink: 'syz.3.7736': attribute type 11 has an invalid length. [ 802.517971][ T3564] syzkaller0: delete flow: hash 4050447989 index 1 [ 802.790215][ T3610] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 804.915351][ T3635] openvswitch: netlink: Tunnel attr 266 out of range max 16 [ 805.048412][ T3644] netlink: 'syz.4.7749': attribute type 3 has an invalid length. [ 805.089977][ T3645] netlink: 'syz.0.7744': attribute type 9 has an invalid length. [ 805.149051][ T3647] netlink: 'syz.0.7744': attribute type 1 has an invalid length. [ 805.167874][T29220] bond7 (unregistering): (slave gretap2): Releasing active interface [ 805.354938][T29220] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 805.363510][T29220] bridge4 (unregistering): left promiscuous mode [ 805.556772][T29220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.568454][T29220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.580161][T29220] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 805.589947][T29220] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 805.602926][T29220] bond0 (unregistering): Released all slaves [ 805.614858][T29220] bond1 (unregistering): (slave veth3): Releasing active interface [ 805.624796][T29220] bond1 (unregistering): Released all slaves [ 805.645059][T29220] bond2 (unregistering): Released all slaves [ 805.666053][T29220] bond3 (unregistering): Released all slaves [ 805.679904][T29220] bond4 (unregistering): Released all slaves [ 805.696285][T29220] bond5 (unregistering): Released all slaves [ 805.717703][T29220] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 805.727293][T29220] bond6 (unregistering): Released all slaves [ 805.746523][T29220] bond7 (unregistering): Released all slaves [ 806.051377][T29220] vþ: left promiscuous mode [ 806.172006][ T3663] __nla_validate_parse: 6 callbacks suppressed [ 806.172027][ T3663] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7753'. [ 806.189518][T29220] tipc: Left network mode [ 806.252647][ T3663] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7753'. [ 806.495769][ T3670] netlink: 'syz.0.7756': attribute type 12 has an invalid length. [ 806.522902][ T3670] netlink: 'syz.0.7756': attribute type 29 has an invalid length. [ 806.553712][ T3670] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7756'. [ 806.594925][ T3670] netlink: 59 bytes leftover after parsing attributes in process `syz.0.7756'. [ 807.085396][ T3693] mac80211_hwsim hwsim68 syzkaller0: left promiscuous mode [ 807.093229][ T3693] mac80211_hwsim hwsim68 syzkaller0: left allmulticast mode [ 807.315055][ T3713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7767'. [ 807.545395][T19366] IPVS: starting estimator thread 0... [ 807.652292][ T3728] IPVS: using max 24 ests per chain, 57600 per kthread [ 807.667711][ T3724] lo speed is unknown, defaulting to 1000 [ 807.904707][T29220] hsr0: left allmulticast mode [ 807.916311][T29220] vlan0: left allmulticast mode [ 807.925707][T29220] veth0_vlan: left allmulticast mode [ 807.938356][T29220] vlan0: left promiscuous mode [ 807.948642][T29220] veth1_macvtap: left promiscuous mode [ 807.968766][ T3736] netlink: 'syz.1.7775': attribute type 26 has an invalid length. [ 807.971005][T29220] veth0_macvtap: left promiscuous mode [ 808.001980][T29220] veth1_vlan: left promiscuous mode [ 808.009574][T29220] veth0_vlan: left promiscuous mode [ 808.102165][ T3744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7778'. [ 808.110263][ T3745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7777'. [ 808.790494][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 808.873903][T29220] team0 (unregistering): Port device team_slave_1 removed [ 808.888316][T29220] team0 (unregistering): Port device team_slave_0 removed [ 808.899272][T29220] veth0_to_team (unregistering): left allmulticast mode [ 809.402543][ T3760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.423843][ T3760] bond0: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 809.442897][ T3760] bond0: (slave ip6tnl3): Error -95 calling set_mac_address [ 809.486853][ T3775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7787'. [ 809.511023][ T3775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7787'. [ 809.514290][ T3768] syzkaller0: entered promiscuous mode [ 809.528982][ T3768] syzkaller0: entered allmulticast mode [ 809.647335][T29220] IPVS: stop unused estimator thread 0... [ 809.678777][ T3783] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7789'. [ 810.380837][ T3816] lo speed is unknown, defaulting to 1000 [ 810.473103][ T3816] lo speed is unknown, defaulting to 1000 [ 810.516212][ T3816] lo speed is unknown, defaulting to 1000 [ 810.624383][ T3816] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 810.820114][ T3816] lo speed is unknown, defaulting to 1000 [ 810.827271][ T3845] netlink: 'syz.4.7808': attribute type 1 has an invalid length. [ 810.882094][ T3845] 8021q: adding VLAN 0 to HW filter on device bond5 [ 810.889509][ T3816] lo speed is unknown, defaulting to 1000 [ 810.918167][ T3853] x_tables: duplicate underflow at hook 2 [ 810.918607][ T3854] x_tables: duplicate underflow at hook 2 [ 810.975425][ T3816] lo speed is unknown, defaulting to 1000 [ 810.983573][ T3816] lo speed is unknown, defaulting to 1000 [ 810.994761][ T3816] lo speed is unknown, defaulting to 1000 [ 811.003356][ T3816] lo speed is unknown, defaulting to 1000 [ 811.011901][ T3816] lo speed is unknown, defaulting to 1000 [ 811.102399][ T3861] netlink: 'syz.4.7812': attribute type 1 has an invalid length. [ 811.353859][ T3882] netlink: 'syz.4.7818': attribute type 9 has an invalid length. [ 811.547542][ T3894] netlink: 'syz.3.7822': attribute type 1 has an invalid length. [ 811.555934][ T3896] __nla_validate_parse: 6 callbacks suppressed [ 811.555955][ T3896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7822'. [ 811.890499][ T3894] 8021q: adding VLAN 0 to HW filter on device bond6 [ 812.031651][ C0] ------------[ cut here ]------------ [ 812.037749][ C0] sk->sk_forward_alloc [ 812.037767][ C0] WARNING: net/ipv4/af_inet.c:163 at inet_sock_destruct+0x62d/0x740, CPU#0: syz-executor/30912 [ 812.052330][ C0] Modules linked in: [ 812.056914][ C0] CPU: 0 UID: 0 PID: 30912 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 812.066547][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 812.076674][ C0] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 812.082582][ C0] Code: 0f 0b 90 e9 58 fe ff ff e8 70 c3 9f f7 90 0f 0b 90 e9 8b fe ff ff e8 62 c3 9f f7 90 0f 0b 90 e9 b1 fe ff ff e8 54 c3 9f f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 812.102270][ C0] RSP: 0018:ffffc90000007d48 EFLAGS: 00010246 [ 812.108379][ C0] RAX: ffffffff8a25eb1c RBX: dffffc0000000000 RCX: ffff888024e8db80 [ 812.116420][ C0] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000 [ 812.124447][ C0] RBP: 0000000000000f70 R08: ffff88801df27127 R09: 1ffff11003be4e24 [ 812.132467][ C0] R10: dffffc0000000000 R11: ffffed1003be4e25 R12: ffff88801df26e80 [ 812.140460][ C0] R13: dffffc0000000000 R14: ffff88801df2710c R15: ffffffff8fcac5c0 [ 812.148486][ C0] FS: 000055555c87c500(0000) GS:ffff88812545a000(0000) knlGS:0000000000000000 [ 812.157499][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 812.164142][ C0] CR2: 00007f8a7dd456b8 CR3: 0000000050122000 CR4: 00000000003526f0 [ 812.172171][ C0] Call Trace: [ 812.175453][ C0] [ 812.178295][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 812.183812][ C0] __sk_destruct+0x85/0x880 [ 812.188342][ C0] ? rcu_core+0x751/0x1070 [ 812.192807][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 812.197955][ C0] rcu_core+0x7cd/0x1070 [ 812.202296][ C0] ? __pfx_rcu_core+0x10/0x10 [ 812.207000][ C0] ? sched_clock_cpu+0x74/0x440 [ 812.211906][ C0] handle_softirqs+0x22a/0x870 [ 812.216712][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 812.221576][ C0] __irq_exit_rcu+0x5f/0x150 [ 812.226227][ C0] irq_exit_rcu+0x9/0x30 [ 812.230508][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 812.236241][ C0] [ 812.239195][ C0] [ 812.242261][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 812.248309][ C0] RIP: 0010:lock_is_held_type+0x106/0x150 [ 812.254071][ C0] Code: 18 00 00 b8 ff ff ff ff 65 0f c1 05 04 90 6d 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cb e2 02 00 cc 90 0f 0b 90 48 c7 [ 812.273834][ C0] RSP: 0018:ffffc90005b97700 EFLAGS: 00000206 [ 812.279919][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046 [ 812.287954][ C0] RDX: ffff888024e8db80 RSI: ffffffff8e16a5c2 RDI: ffffffff8c27cb00 [ 812.296002][ C0] RBP: 0000000000000000 R08: ffff888024e8db80 R09: 0000000000000004 [ 812.304048][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000246 [ 812.312111][ C0] R13: ffff888024e8db80 R14: ffff88806bf6ccc0 R15: 0000000000000001 [ 812.320124][ C0] __vma_start_write+0x87/0x290 [ 812.325065][ C0] dup_mmap+0x66b/0x1d90 [ 812.329444][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 812.334217][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 812.339467][ C0] copy_mm+0x13b/0x4a0 [ 812.343639][ C0] copy_process+0x18b6/0x3cd0 [ 812.348389][ C0] ? copy_process+0x921/0x3cd0 [ 812.353260][ C0] ? __pfx_copy_process+0x10/0x10 [ 812.358335][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 812.363439][ C0] kernel_clone+0x248/0x8e0 [ 812.367990][ C0] ? cgroup1_freezing+0x20/0x350 [ 812.373026][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 812.378089][ C0] __x64_sys_clone+0x1b6/0x230 [ 812.382914][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 812.388238][ C0] ? do_user_addr_fault+0xc6f/0x1340 [ 812.393615][ C0] do_syscall_64+0x14d/0xf80 [ 812.398257][ C0] ? trace_irq_disable+0x3b/0x150 [ 812.403343][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.409440][ C0] ? clear_bhb_loop+0x40/0x90 [ 812.414188][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.420114][ C0] RIP: 0033:0x7f8a7cfc5212 [ 812.424614][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 812.444386][ C0] RSP: 002b:00007ffe66c6d370 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 812.452876][ C0] RAX: ffffffffffffffda RBX: 00007ffe66c6d370 RCX: 00007f8a7cfc5212 [ 812.460928][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 812.469053][ C0] RBP: 00007ffe66c6d4fc R08: 0000000000000000 R09: 0000000000000001 [ 812.477111][ C0] R10: 000055555c87c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 812.485179][ C0] R13: 00000000000927c0 R14: 00000000000c6327 R15: 00007ffe66c6d550 [ 812.493266][ C0] [ 812.496326][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 812.503735][ C0] CPU: 0 UID: 0 PID: 30912 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 812.513288][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 812.523525][ C0] Call Trace: [ 812.526809][ C0] [ 812.529662][ C0] vpanic+0x56c/0xa60 [ 812.533832][ C0] ? __pfx__printk+0x10/0x10 [ 812.538439][ C0] ? __pfx_vpanic+0x10/0x10 [ 812.542956][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 812.548245][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 812.553457][ C0] panic+0xc5/0xd0 [ 812.557198][ C0] ? __pfx_panic+0x10/0x10 [ 812.561637][ C0] __warn+0x315/0x4f0 [ 812.565743][ C0] ? inet_sock_destruct+0x62d/0x740 [ 812.570947][ C0] ? inet_sock_destruct+0x62d/0x740 [ 812.576158][ C0] __report_bug+0x29a/0x540 [ 812.580668][ C0] ? kasan_save_track+0x3e/0x80 [ 812.585519][ C0] ? kasan_save_free_info+0x46/0x50 [ 812.590730][ C0] ? __kasan_slab_free+0x5c/0x80 [ 812.595678][ C0] ? inet_sock_destruct+0x62d/0x740 [ 812.600881][ C0] ? __pfx___report_bug+0x10/0x10 [ 812.606007][ C0] ? copy_mm+0x13b/0x4a0 [ 812.610268][ C0] ? copy_process+0x18b6/0x3cd0 [ 812.615121][ C0] ? kernel_clone+0x248/0x8e0 [ 812.619804][ C0] ? __x64_sys_clone+0x1b6/0x230 [ 812.624757][ C0] ? do_syscall_64+0x14d/0xf80 [ 812.629525][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.635698][ C0] ? inet_sock_destruct+0x62d/0x740 [ 812.640904][ C0] report_bug+0x16a/0x220 [ 812.645239][ C0] ? inet_sock_destruct+0x62d/0x740 [ 812.650438][ C0] ? inet_sock_destruct+0x62f/0x740 [ 812.655639][ C0] handle_bug+0x9c/0x200 [ 812.659898][ C0] exc_invalid_op+0x1a/0x50 [ 812.664409][ C0] asm_exc_invalid_op+0x1a/0x20 [ 812.669264][ C0] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 812.675087][ C0] Code: 0f 0b 90 e9 58 fe ff ff e8 70 c3 9f f7 90 0f 0b 90 e9 8b fe ff ff e8 62 c3 9f f7 90 0f 0b 90 e9 b1 fe ff ff e8 54 c3 9f f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 812.694699][ C0] RSP: 0018:ffffc90000007d48 EFLAGS: 00010246 [ 812.700771][ C0] RAX: ffffffff8a25eb1c RBX: dffffc0000000000 RCX: ffff888024e8db80 [ 812.708765][ C0] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000 [ 812.716769][ C0] RBP: 0000000000000f70 R08: ffff88801df27127 R09: 1ffff11003be4e24 [ 812.724780][ C0] R10: dffffc0000000000 R11: ffffed1003be4e25 R12: ffff88801df26e80 [ 812.732774][ C0] R13: dffffc0000000000 R14: ffff88801df2710c R15: ffffffff8fcac5c0 [ 812.740861][ C0] ? inet_sock_destruct+0x62c/0x740 [ 812.746090][ C0] ? inet_sock_destruct+0x62c/0x740 [ 812.751298][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 812.756769][ C0] __sk_destruct+0x85/0x880 [ 812.761281][ C0] ? rcu_core+0x751/0x1070 [ 812.765706][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 812.770820][ C0] rcu_core+0x7cd/0x1070 [ 812.775081][ C0] ? __pfx_rcu_core+0x10/0x10 [ 812.779764][ C0] ? sched_clock_cpu+0x74/0x440 [ 812.784643][ C0] handle_softirqs+0x22a/0x870 [ 812.789417][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 812.794196][ C0] __irq_exit_rcu+0x5f/0x150 [ 812.799228][ C0] irq_exit_rcu+0x9/0x30 [ 812.803479][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 812.809115][ C0] [ 812.812049][ C0] [ 812.814981][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 812.820964][ C0] RIP: 0010:lock_is_held_type+0x106/0x150 [ 812.826735][ C0] Code: 18 00 00 b8 ff ff ff ff 65 0f c1 05 04 90 6d 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cb e2 02 00 cc 90 0f 0b 90 48 c7 [ 812.846344][ C0] RSP: 0018:ffffc90005b97700 EFLAGS: 00000206 [ 812.852421][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046 [ 812.860488][ C0] RDX: ffff888024e8db80 RSI: ffffffff8e16a5c2 RDI: ffffffff8c27cb00 [ 812.868497][ C0] RBP: 0000000000000000 R08: ffff888024e8db80 R09: 0000000000000004 [ 812.876560][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000246 [ 812.884537][ C0] R13: ffff888024e8db80 R14: ffff88806bf6ccc0 R15: 0000000000000001 [ 812.892545][ C0] __vma_start_write+0x87/0x290 [ 812.897514][ C0] dup_mmap+0x66b/0x1d90 [ 812.901815][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 812.906542][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 812.911777][ C0] copy_mm+0x13b/0x4a0 [ 812.915874][ C0] copy_process+0x18b6/0x3cd0 [ 812.920571][ C0] ? copy_process+0x921/0x3cd0 [ 812.925355][ C0] ? __pfx_copy_process+0x10/0x10 [ 812.930394][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 812.935354][ C0] kernel_clone+0x248/0x8e0 [ 812.939951][ C0] ? cgroup1_freezing+0x20/0x350 [ 812.944900][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 812.950033][ C0] __x64_sys_clone+0x1b6/0x230 [ 812.954812][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 812.960138][ C0] ? do_user_addr_fault+0xc6f/0x1340 [ 812.965441][ C0] do_syscall_64+0x14d/0xf80 [ 812.970037][ C0] ? trace_irq_disable+0x3b/0x150 [ 812.975152][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.981226][ C0] ? clear_bhb_loop+0x40/0x90 [ 812.985909][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.991802][ C0] RIP: 0033:0x7f8a7cfc5212 [ 812.996223][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 813.015915][ C0] RSP: 002b:00007ffe66c6d370 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 813.024347][ C0] RAX: ffffffffffffffda RBX: 00007ffe66c6d370 RCX: 00007f8a7cfc5212 [ 813.032325][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 813.040299][ C0] RBP: 00007ffe66c6d4fc R08: 0000000000000000 R09: 0000000000000001 [ 813.048271][ C0] R10: 000055555c87c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 813.056250][ C0] R13: 00000000000927c0 R14: 00000000000c6327 R15: 00007ffe66c6d550 [ 813.064250][ C0] [ 813.067421][ C0] Kernel Offset: disabled [ 813.071741][ C0] Rebooting in 86400 seconds..