last executing test programs: 3.665003475s ago: executing program 3 (id=4172): socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 3.451954762s ago: executing program 3 (id=4174): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000006000000030000000000000006200000", @ANYRES32, @ANYBLOB="d65600006f6a54000000000000000000000000002aa809cfd0fb691dc8893bc25e74cff610fc21c057270845e4c894c3660fd9985c8cac8504ae4d3cf90e9e764ea1b7759239480fa00183d6e3e4c185fa9ff1fa06e5966c8292c8f5985b4c0c942773ae24eed72e01b6db9a9167d420e8b6e06408bba781ab16fdbd6feff61f5a6380c9c035f1faed6a7be0bf28738b69e13bbadaff7bbed4974d922ec9bdf9c50c95063e6022446fb98c2f38cbc60d42a91fd478316ef2ffb590c1be96c44793e4d61633de17ac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000030000000c00"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000016c0)={r0, &(0x7f0000001500)="aff3ad206f89df31f46e6088340a0491625a0913cb8a7548bb07992f59b640370c552df060720331c7a1529250ac4560438cba91328fcdc18c9033f87d991636995da136834457a6461f747732c479cb395d0215c3d59886c7fec864607f44522ab2ecea92c12ea3476a38f2a3e2a4fff84742009056f686e136ea5c3f4ccd13bfc3a4ec3dee0ec0384912e033ea7d8d48", &(0x7f00000015c0)=""/204}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) pipe(0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000005f0600000000000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfff, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 2.634423613s ago: executing program 0 (id=4179): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=@delsa={0x16c, 0x11, 0x800, 0x70bd27, 0x25dfdbfb, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0xa, 0x32}, [@sa={0xe4, 0x6, {{@in6=@remote, @in=@empty, 0x4e22, 0x0, 0x4e24, 0xfffc, 0x0, 0xa0, 0x40, 0x73, r2, r1}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4d3, 0x2b}, @in=@private=0xa010102, {0x4000001, 0x9, 0x2, 0x1, 0x4dc2, 0x7, 0x0, 0xffffffffffff0001}, {0xfffffffffffffffe, 0x5, 0xfffffffffffffff9}, {0x3, 0x9, 0x9}, 0x70bd2a, 0x0, 0x2, 0x0, 0x6, 0x22}}, @iptfs_init_delay={0x8, 0x27, 0x7fffffff}, @sec_ctx={0x58, 0x8, {0x54, 0x8, 0x0, 0xc3, 0x4c, "cc35193e6eb4603ddcb266ff0bdb0cb80f957768dee09fa9dd2683607351c1f3ad462ce901a329ef76cefe1c78ed4d2e9eddca75f1d6a25f0a0ece46b1dc3498cea533c641a6def3433babd2"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000840)={'bond0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000000)={&(0x7f0000000200)={0x1d, r5}, 0x10, &(0x7f00000003c0)={&(0x7f0000000080)=@can={{0x3, 0x1, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "1d97ee3d10e02311"}, 0x10}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) sendto$inet(r3, &(0x7f0000000040)="0b699d02c6af75f4a943e788d10a06e17ca99b6405b9d723c27358b4113f98cf39206d19def9887972bc22fd028fe2f08afcc462056fce02d92964654cde906090f5ed2cd3fd9d9bc630571482c304250e9c1444c1124e4b9078a1fa07f486d0a908ccc2d583466692993de0", 0x6c, 0x20000, &(0x7f00000000c0)={0x2, 0x4e20, @private=0x2}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 2.579305137s ago: executing program 1 (id=4180): syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0xb0, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@nested={0x9c, 0x3, 0x0, 0x1, [@nested={0x95, 0xc9, 0x0, 0x1, [@generic="af1a32d5ac8a58454645e34db8000d05131d4764224e99cada1fa1be6037c2b41cda8b0fe0ff06186691008323af658ef90cc4b96e92cdd3201c9dea1e9ef6f264b0e5a10b957c1aa15c78f7aedad74cedb1b3ef2173b6c600851afbc73df31b649e9e3f0f19f59af54bf0fff17c8dbc74cf32bc7876f4ec101911960d4b60972d41c03abccf39153d3d72f1f868149f53"]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x510d3f49}, {{@in6=@loopback, 0x4d2, 0x2b}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2cd6}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in6=@loopback, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd}, {{@in=@rand_addr=0x64010100, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x2, 0x80, 0x0, 0x2}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x100000000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@remote, r3}, 0x14) r8 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r8, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfee7, &(0x7f0000000140)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x400c0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) 2.577146385s ago: executing program 2 (id=4181): r0 = socket$inet6(0xa, 0x2, 0x0) (async) close(0x3) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x9, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @remote, 0x40}}}, 0x108) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (async) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x2c, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xd3, 0x6a, 0xa, 0xff00}, [@call={0x2e}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x161, &(0x7f0000000180)=""/149, 0x0, 0x284, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd84, 0x10, 0x0, 0x1e}, 0x2a) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000e4ff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r5, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/102, 0x66}], 0x1}, 0x1000}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/79, 0x4f}], 0x1, &(0x7f0000000240)=""/25, 0x19}, 0x9}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)=""/4096, 0xffffffffffffff95}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000004c0)=""/179, 0xb3}, {&(0x7f0000000580)=""/140, 0x8c}, {&(0x7f0000000640)=""/139, 0x8b}], 0x6, &(0x7f0000000780)=""/113, 0x71}, 0x9}], 0x3, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010400001000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005001600000000000600180096060000"], 0x44}}, 0x40000c0) 1.916020586s ago: executing program 4 (id=4182): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)="cb", 0x1}], 0x1, 0x0, 0xe0}}], 0x1, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000140), 0x0}, 0x20) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') 1.753726675s ago: executing program 4 (id=4183): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) unshare(0x22020400) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[], 0x20) 1.643587513s ago: executing program 0 (id=4184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r2, &(0x7f0000000000)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb970a0df15000000cdb70466518907efd04373a0e64e30bbd8", 0x41) getsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="002e1c4a9345c3c48667e7159696d21e587fcd112fc484c9086b073767f181e7277956a0ce6fb90827e7d7f204ff34e5a00ad72f0742c21d9e734e11dbf982f5bdcbd45846a8cfd8e276aac2edcb36ad87e46ace10cca2ec9ac11140d5dcf94f3c6eabae86c32caab52593139e2bd202fa07c46e6876f477508cb1544fa3e1ba69bbbcaf338bcf005f4bcd87aa8a03472041b86562726e4db64598999136e71278f7f06ad48b4b5ffd29cd3b82aa13fbfc2bfdbfebc0e3faa225627dd8e9592aa6d07e869c86bcfb647cd753812fe3"], 0xa8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000013c0)=[@in={0x2, 0x4e1e, @private=0xa010102}, @in6={0xa, 0x4e21, 0x4, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000001080)={0x0, 0x0, "b307b08d06800c5f79fdae284432c1e2"}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) socket$inet6(0xa, 0x2, 0x1ff) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000100037040100"/20, @ANYRES32=r8, @ANYBLOB="c30803000b2ebe2620d51280080001000208000100000000000000000000008000000000", @ANYRES32=r8, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmmsg$inet(r1, &(0x7f00000010c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x8001, 0x0, 0x2, 0x7ff, 0x80, 0x4, 0xfffffff8, r6}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={r6, @in={{0x2, 0x4e23, @multicast2}}, [0x7, 0x9, 0xfffffffffffeffff, 0x3, 0x78, 0x8, 0x7, 0x1, 0x67e, 0x5, 0x1, 0x7, 0x6, 0x4, 0x8]}, &(0x7f0000000440)=0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r10, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) 1.63455881s ago: executing program 3 (id=4185): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r9, 0x6, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4004) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.6078363s ago: executing program 1 (id=4186): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="290000001100010c00000004fcdbdf25000000005bcfde47dae41b575fae03dd4212fee81a35a5d71ce5dbe533f00f3b7ffb720716562e11669e7f36a4e49aedf577d3405cdffd7eba0e9ab7c70ee52d6c44cfd1f1003fc09b16d5b10ddb1beb35d9d84ee55f0c88fc4bc07bbab566fc163637d97cf665a38ce16a5bc73c6a5b9e1f760d075e9a378604b4e144cf8b5b3bb5f43e2c9d6a57c7d67792625a3a4d81b17435c969", @ANYRES32=0x0, @ANYBLOB="570da8000103000014000300626f6e643000"/28], 0x34}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f000000b5c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000003c0)=""/142, 0x8e}, {0x0}], 0x2}, 0x69}], 0x1, 0x40001001, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdb", @ANYRES32, @ANYBLOB="820000007002080008000f00080000001800128008000100736974000c00028006", @ANYBLOB="0400140008001d000200000008002e"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@private, @local}, &(0x7f00000002c0)=0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r4, &(0x7f0000000500), &(0x7f0000000080)=""/12}, 0x20) 1.525763136s ago: executing program 2 (id=4187): sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="9800ffbd7000bbb5ff030000da0c00000dffe4b7", @ANYRES32=0x0, @ANYBLOB="0c009900ff030000670000002400238005000e000100000005001d00000000000500110000000000060010000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000800c000000080001005f0000000c0099000800000027000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8890) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) (async) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000000a01040000000000000000010080032c000000030a05000000000000000000010000000900010073797a30000000000900030073797a320000000078000000060a010400000000000000000100100008000b400000000050000480340001800b000100657874686472000024000280080001400000000e0800034000000000080004400000002205000200890000001800018011000100666c6f775f6f66666c6f6164000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xe0}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000200)=@pppoe, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000700)=""/168, 0xa8}, {&(0x7f00000007c0)=""/10, 0xa}], 0x4, &(0x7f0000000840)=""/52, 0x34}, 0x40000002) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd01000100000008"], 0x18}}, 0x20004018) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x21cc, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x2198, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x4, 0xd9, 0x3ff}, {0x8, 0x98, 0x8, 0x3}, {0x4, 0x3, 0x9, 0xfffffff4}, {0x5, 0x1, 0x2, 0x6}]}}, @TCA_BPF_ACT={0x2140, 0x1, [@m_csum={0x160, 0xb, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0xc, 0x8000}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x2, 0xffffffff}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x7, 0x401}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x20000000, 0x4, 0x1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x20000000, 0x7ff, 0xfffffe5a}, 0x5f}}]}, {0xa6, 0x6, "7248d3ec12973d09fcd027791dae7e2f903439d3a94e9eb7adf72919ec4c43895d5713f19521b6324a537841f1ebc41db34c02bab7cd31fca7f71778c8a4c2b2b35c29cc299424d4bdb1f7005f8e0bcf48d1627fcf40755ab429e041fefbed1968b849aa35d510281cfa8dd35c3b334b628a8f94a14fae1c71694d35b1ee1e35c959b609e0f82b156b61bf6a460ac478758b430e9f29ada12c95a015637c0cc3394b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1cc0, 0x5, 0x0, 0x0, {{0xa}, {0x1c74, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x5, 0xfffffff8, 0x5, 0x8, 0x1}, 0xa, 0x2, [{0xfffffffd, 0x8, 0x5, 0x7023, 0x7ff, 0x3}]}, [{0x8, 0x2, 0x4, 0x9, 0x2, 0x5}, {0xffffffff, 0x1571, 0x7, 0x2, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x3, 0x8}, {0x80000001, 0x8, 0x8, 0x4, 0x1, 0x73}, {0x3, 0x6, 0xe, 0x7, 0x7918f95c, 0x4}, {0x1b, 0x9, 0x62b1dada, 0xfff, 0x7fff, 0x6b}, {0x6, 0x3, 0x1, 0x10001, 0x44, 0x3}, {0x4, 0x4, 0x1, 0xe31, 0x4, 0x68}, {0xffff7b7a, 0x5, 0xffffffff, 0x9, 0x10, 0x1}, {0x1126, 0x4, 0xffffffff, 0x0, 0x2}, {0x40, 0x7, 0xbcc, 0x7, 0x0, 0x3ff}, {0xa, 0x2, 0x4, 0x8001, 0x2, 0x6}, {0xe46, 0x4, 0x7, 0x2, 0x2, 0x57}, {0x7, 0x3d27, 0x4, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x7, 0x5}, {0x5, 0x4d5, 0x3c, 0x2, 0x5, 0x9}, {0x8, 0x2, 0xa5, 0x8, 0xfff, 0x7}, {0x3, 0x5, 0x8001, 0x8}, {0x200, 0x2, 0x1, 0x8, 0xff, 0x5c7b}, {0x28, 0x7, 0x6, 0x10, 0x2}, {0x2, 0x1, 0xffff8000, 0x6, 0x0, 0x3a}, {0x800, 0x2, 0x7, 0x5, 0x7fffffff, 0x8}, {0xc9, 0x3, 0xb, 0x3, 0x7fffffff, 0xff}, {0xfffffffe, 0x5c4, 0x9, 0x0, 0xfffffbff, 0xfffffff7}, {0x1fffc000, 0xffffbf54, 0xea, 0x6, 0x8d7, 0x1}, {0x8, 0x5, 0x6c2, 0x8, 0x7ff, 0x3}, {0x0, 0x3, 0x5, 0x40, 0x4, 0x6}, {0xffffffff, 0x730, 0x4, 0x8001, 0xe0, 0x1ff}, {0xfffffff7, 0x3, 0x8, 0x62f3, 0x5, 0x3}, {0x800, 0x1, 0x1ff, 0x35547e4, 0x6, 0x1000}, {0x1, 0x5, 0x0, 0x4, 0x81, 0x9}, {0x400, 0x101, 0x9, 0x0, 0x2, 0x3}, {0x4, 0x7, 0x401, 0xb, 0x1}, {0x1317, 0x1, 0x0, 0x80000001, 0x7, 0x94d}, {0x2, 0x40, 0x6, 0x19c, 0x9, 0x5}, {0x1, 0xc0fa, 0x2, 0x80, 0x0, 0xff}, {0x81, 0x0, 0x44c, 0x3, 0x1, 0x6}, {0x3, 0xff, 0x5eac1937, 0x100, 0x1}, {0xfffffffe, 0xfff, 0x4, 0x2, 0x28000, 0x7fffffff}, {0x5, 0x1, 0x8, 0x3, 0x1, 0x80}, {0x101, 0x889c, 0xb, 0x8000, 0x0, 0x5}, {0x8, 0x300, 0x1, 0x9, 0x5f80c74e, 0xa59}, {0x6, 0x4, 0x4, 0x4, 0x3, 0x2}, {0x6, 0x0, 0x1, 0x6, 0xade7, 0xfffffffc}, {0x574b, 0x7, 0x4, 0x8}, {0xc, 0x4, 0x8, 0xc1f, 0xf, 0x8000}, {0x5, 0x37f, 0x1000, 0x4, 0x1fc, 0x9}, {0xffff3ecd, 0xffffff45, 0x7f, 0xaee, 0xb, 0x7}, {0x3ff, 0x0, 0xc3, 0x7, 0x80}, {0xc9, 0x9, 0x1, 0x7b0a7f11, 0x200, 0x9}, {0x8, 0xf37, 0x80000001, 0xe, 0x2, 0x500}, {0x0, 0x3, 0x3, 0x8001, 0x2, 0x9}, {0x5, 0x6, 0x1000, 0xfffffff9, 0x8, 0x4}, {0x7, 0x1, 0x5, 0x9, 0xc34, 0x8001}, {0x4, 0x7, 0xcd89, 0x565f, 0x6, 0x1000}, {0x5, 0x3f29cd3c, 0x81, 0x6, 0x6, 0x1ef}, {0x6, 0x9, 0x2, 0x9, 0x1, 0x800}, {0x8ab, 0xd3a, 0x4, 0x3, 0xa, 0x3}, {0x80, 0x7fff, 0xc2c000, 0x1, 0x5f3c, 0x1}, {0x10000, 0x8, 0xffffffff, 0xcf, 0x2, 0x1}, {0x9, 0x86af, 0x7a, 0x3e, 0x1}, {0x2, 0x8000, 0x2, 0x7c, 0x80000001, 0xffffc3d8}, {0xa, 0xb, 0x4, 0x2, 0x4, 0x9}, {0x1, 0x7ff, 0x24, 0x1e, 0x7, 0x1}, {0xffffffff, 0x8, 0x0, 0x8001, 0x89, 0x3}, {0xc, 0x1, 0xfffff182, 0x400, 0x2, 0x7fff}, {0xcc, 0x8000, 0x9, 0xfffffff7, 0x4, 0xd08f}, {0xe, 0x9, 0x8, 0xb, 0x0, 0x8}, {0xdb15, 0x40, 0x46fe, 0x5, 0x4, 0x80}, {0x2, 0x200, 0x3, 0x7, 0xe0, 0xcbc1}, {0x7, 0x3, 0x0, 0xed0, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x1, 0xffffffc0, 0x8}, {0x7, 0x3, 0x5, 0xffffffff, 0x400}, {0x14a, 0x7, 0x0, 0x4df6, 0x2, 0x7}, {0x10, 0x0, 0x4, 0xfffffffc, 0x2, 0x101}, {0x4, 0x6, 0x608d, 0x9427, 0x9, 0x1}, {0x40, 0x3, 0x11, 0x9, 0x80000000, 0x8000}, {0x4, 0x3, 0x32c8, 0xef, 0x9346, 0x800}, {0xf, 0x4, 0xfa6, 0x1, 0x7ff, 0x5}, {0x8, 0x5, 0xc, 0x6, 0x4, 0x7}, {0x0, 0x400, 0x1ff, 0x53, 0x10, 0x7f}, {0x4, 0x8, 0x2, 0x7, 0x40, 0x4}, {0x2, 0x6e, 0x4, 0x7, 0x2, 0xffff039d}, {0x6, 0x7, 0x80000000, 0x5, 0x6d, 0x8}, {0x9, 0x6, 0x7, 0xf1, 0x3, 0x1}, {0x10, 0x2, 0x745, 0xfffffff9, 0x7, 0x7}, {0x8, 0x9, 0x17e6, 0x8, 0x101, 0x9}, {0xd, 0x9, 0x61, 0x0, 0x916, 0xf8}, {0xfffff870, 0x2, 0x4, 0x89, 0x8, 0x8}, {0x1, 0x9, 0x0, 0x0, 0x6, 0x1}, {0x5a, 0xffff0000, 0x80000001, 0x81, 0x9, 0xfffffff4}, {0x1, 0x4, 0x3, 0x0, 0x4, 0xfffffffc}, {0x1, 0x2, 0xe, 0xcd33, 0x9, 0x8}, {0x5, 0x400, 0x1, 0xd, 0x80000001, 0xf}, {0xffff, 0x4, 0x3, 0x6b, 0x5, 0x3}, {0x2, 0x100000, 0x5, 0xcc, 0x88e, 0x2}, {0x7fffffff, 0x80, 0x5de1d231, 0x6, 0x3, 0x3}, {0x0, 0x6, 0x200, 0x2, 0x9, 0x9}, {0x400, 0xd, 0x5, 0x7, 0x0, 0xd9}, {0xf238, 0x4, 0x1, 0xffff, 0xf99, 0x8}, {0x3, 0x401, 0x1, 0xfffffffa, 0x8000}, {0x5, 0xfff, 0x8100000, 0x100, 0x3, 0x2}, {0x39, 0x5, 0x5, 0x9, 0xffffffff, 0x6}, {0x0, 0xb3df, 0x8, 0xffff, 0x2, 0xa1c7}, {0x800, 0x1, 0x2, 0xb8, 0x4, 0x7}, {0xc1, 0x6, 0x8, 0x6, 0x6}, {0x2, 0x8, 0xfffff001, 0x2, 0x10000, 0x53}, {0xd3, 0x10001, 0xf1, 0x9, 0xa9, 0x7b2f}, {0x76, 0x4, 0xb06e, 0x9, 0x70, 0x1}, {0xf, 0x1, 0x8, 0x9668, 0x1fcf, 0xb70}, {0x6, 0xffffffff, 0xfffffff5, 0x7, 0x80000001, 0x3}, {0x8, 0x8, 0x6ad, 0x1fa1, 0x29, 0x1ff}, {0x2e90, 0xffff, 0x58, 0xab, 0x3, 0x5}, {0x7, 0x5, 0x5, 0xffffffff, 0x1, 0x6}, {0xfbbb, 0x0, 0x7, 0x5, 0x8, 0x9}, {0x7, 0x5, 0x2, 0x1000, 0xc}, {0x401, 0xee1, 0xfffffe00, 0x0, 0x2, 0x4}, {0x0, 0x480000, 0x282, 0x6, 0xffff2d43, 0x8}, {0x7, 0x4, 0x9, 0xac6, 0x6, 0x9}, {0xfffffff7, 0x0, 0xd, 0x2, 0x4, 0x6}, {0x7fff, 0x10001, 0x1000, 0xffff, 0x4, 0x4}, {0xffff, 0xecb, 0x5, 0x81, 0xfffffe01, 0x10001}, {0x9, 0x8e01, 0xc5, 0xae06, 0x4000, 0x7f}, {0x2, 0x8, 0x5, 0x2, 0x0, 0x5}, {0x0, 0x3225, 0x41, 0x8, 0x1, 0x4}, {0x3, 0x8, 0xc, 0x1, 0x2c1d, 0x6}, {0xe, 0x1, 0xc, 0xffff, 0x8, 0xfffffe01}, {0x1d, 0x2, 0x7, 0x0, 0x159, 0x1}], [{0x4}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x6f430f49ed6ac6bd}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0xf61cabe603c30892}, {0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {}, {0x4, 0xc6ccb7e81ed9de50}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0xb28d00a83ffcc2c7}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x1}, {0x3, 0x2}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x3, 0x119e686731f243b4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xf9, 0xc, 0x0, 0x0, 0x6}, 0xc5, 0x5, [{0x0, 0x67497ca5, 0x6ba6, 0x80000000, 0x4, 0x3001}]}, [{0x1, 0x8, 0x8, 0x7, 0x5, 0xfffffe74}, {0x1, 0x6, 0x9, 0xfffffffe, 0x7, 0x9}, {0x0, 0x21a, 0x9, 0x1, 0x800, 0x40}, {0x6, 0x24, 0x111, 0xf, 0x1}, {0x7, 0x6a0, 0x400, 0xc7f, 0x5, 0x71}, {0xb40, 0x8, 0xe, 0x9, 0x45a47ecd, 0x1}, {0x3, 0x6b, 0x880, 0x8, 0x1, 0x1000}, {0x9, 0x3, 0xd, 0xfffffff7, 0x4a77, 0x10001}, {0x9, 0x8b5f, 0x2, 0x9, 0xf1a, 0x7}, {0x200, 0xf0000000, 0x3, 0xa6f, 0xb49, 0x7}, {0x8790, 0xffffffb0, 0x7, 0x8, 0xfffff000, 0xffff8000}, {0x3, 0x7, 0x9, 0x7313f36f, 0x1, 0x7ff}, {0xcd9, 0x5c, 0x3ff, 0x7, 0xc0e3, 0xf93e}, {0x4, 0xffffffff, 0x9e, 0xd, 0x3, 0x4}, {0x5, 0xf6, 0x7, 0x1, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x7, 0x2}, {0x82, 0x7c17, 0x770c, 0x4, 0x1, 0x7fff}, {0x5, 0x9, 0x522, 0x7, 0xd23, 0x4}, {0x1, 0x8b29, 0x1, 0x8, 0x8, 0x8}, {0x9, 0x9, 0x9, 0xffff, 0x669, 0xe}, {0x8000, 0x0, 0x6, 0xfb13, 0x291, 0x6}, {0x6, 0x0, 0xc, 0x9}, {0x5658747, 0x3, 0x0, 0x8, 0x6, 0x8}, {0x6, 0x89, 0x5, 0xea, 0x800, 0x7}, {0x4, 0xa, 0x6, 0x3, 0x76, 0x1ff}, {0x7e7, 0x1, 0xd, 0xb9, 0x8, 0x7ff}, {0x3, 0x2, 0x9, 0x7, 0xf72}, {0xe0f, 0x5, 0x800, 0x5, 0x44f5, 0x3}, {0x8, 0x9, 0x1, 0x2a, 0x4, 0x6}, {0x8, 0x9, 0x2, 0x7, 0x3, 0x3}, {0x5, 0x5, 0x1, 0x8, 0x9, 0xfffffffd}, {0x9, 0xe, 0x5, 0x5, 0xfffffe47}, {0x1, 0x7ffc, 0xf, 0x1, 0x8, 0x7ef}, {0x0, 0x5ae, 0x10, 0x4, 0xd8f, 0x6}, {0x9, 0xc, 0x6, 0xd, 0x8, 0x5}, {0x10000, 0x2, 0x4, 0x80, 0x4, 0x2}, {0x100, 0xc, 0x10000, 0x9, 0x6, 0x7fff}, {0x6, 0x3ff800, 0x0, 0xd, 0x8, 0x1d}, {0x80000000, 0x4, 0x8, 0x7819, 0x400, 0x10}, {0x596, 0x1, 0x1, 0x0, 0x4c81ae93, 0x5d4c}, {0x101, 0x0, 0xe, 0x1948, 0x111, 0x1ff}, {0x7, 0x3, 0x5f31, 0x8, 0x8, 0x8a6b}, {0xf1, 0xffffff80, 0x5, 0x6, 0x5, 0x10000}, {0x5, 0xfffff38e, 0x8, 0x0, 0x2, 0xda}, {0x7, 0x5, 0x95, 0x10f, 0xffffffff, 0x8001}, {0x1, 0x6, 0x0, 0x0, 0x1, 0xa}, {0x5, 0x1, 0x0, 0x0, 0x1000, 0x7}, {0x8, 0x2, 0x5, 0xf4, 0xf8, 0xe}, {0x80, 0x8f7, 0x5714, 0x6, 0x7fffffff, 0x7}, {0x8, 0x3, 0xb708, 0x80000001, 0x5, 0xff}, {0x6, 0x80000000, 0x354, 0x1ff, 0x3, 0x1}, {0x1, 0x10, 0x758, 0x1, 0xa, 0xfffffffa}, {0x9, 0x0, 0x5, 0xc15, 0x80000001, 0x9}, {0x3, 0x8, 0x4, 0x6, 0x9, 0x5}, {0x101, 0x9, 0x87, 0x1000, 0x8, 0x1}, {0x9, 0x0, 0xfffff000, 0x9, 0x10, 0x7}, {0x2086a7, 0x1dbe, 0x6e41, 0xfffffff6, 0x7, 0x101}, {0x7, 0x2, 0x2, 0x6, 0x7, 0xdd9a}, {0x3, 0x4, 0x4, 0x5, 0x2, 0x7}, {0x2, 0x9, 0x2d, 0x2, 0x2, 0x8}, {0xded8, 0x6, 0x9a3, 0xffff, 0x67, 0xa}, {0x4, 0x7, 0x1, 0xffffffff, 0xb, 0x9a2}, {0x21641a49, 0x3, 0x1ff, 0x40, 0x5, 0x2}, {0x18e000, 0x6, 0x8001, 0xffffffff, 0x10001, 0x1}, {0x0, 0x7fff, 0x0, 0xffffffb0, 0x0, 0x140000}, {0x9, 0x101, 0x80000000, 0x2, 0xc39, 0xb}, {0x5, 0x1, 0x8000, 0x4, 0x2, 0x3f3}, {0x7, 0x8000, 0x1, 0x0, 0x1, 0x3}, {0xf, 0x9, 0xb, 0x0, 0xfffffffc, 0xc}, {0x1, 0x5, 0x7, 0x8001, 0x0, 0xb}, {0x6b9, 0x4, 0x7, 0x4, 0x9, 0x2}, {0x2, 0x3, 0x4d147f5d, 0x3, 0x7fc00, 0x2}, {0x4, 0x1, 0x9, 0x3ff, 0x3, 0x81}, {0x101, 0x7fff, 0x5, 0x7fff, 0x8, 0x6}, {0x6cc, 0xd, 0xe880, 0x1, 0x3, 0x4}, {0x74f2, 0x1c, 0x5, 0x1aa, 0x1000, 0x7f}, {0x9, 0x1, 0x7fffffff, 0x1, 0x3, 0x6}, {0x100, 0x8, 0x4, 0x7, 0x4, 0x8000000}, {0x4, 0x926, 0x1ff, 0xfffffffb, 0x1, 0x3}, {0x5, 0x6, 0xb, 0x3ff, 0xfffeffff, 0x5}, {0x8, 0x5, 0x6ad, 0x0, 0x5, 0x7}, {0x7, 0x6348, 0xc20, 0xffff7fff, 0xfffffffe, 0x800}, {0x6, 0xa655, 0x7, 0xf4, 0x7, 0x10}, {0x6, 0x5, 0xffff, 0x40, 0x60a45124, 0xd}, {0xec, 0xffffffff, 0x1128, 0x192c, 0xa, 0x800}, {0x5, 0x9, 0x100, 0x8, 0xfffffffa, 0x8}, {0xfff, 0xfff, 0x4, 0x8001, 0x5, 0xe289}, {0xe, 0x1ff, 0x4, 0x4, 0x0, 0x8}, {0x1, 0x9, 0x9, 0x0, 0x6, 0xbfb5}, {0x40000, 0x96, 0xbe5, 0x1ff, 0x8, 0x9}, {0x0, 0x67, 0xff, 0x5, 0x10, 0x8}, {0x20000000, 0x0, 0x7, 0x7, 0x0, 0x8000}, {0x9, 0x4, 0x1, 0x9, 0x3, 0x8000}, {0xb, 0x3, 0x0, 0x8, 0x8b4, 0x7}, {0x86f, 0x1, 0x1, 0x2, 0x3, 0x3}, {0x47, 0x6012, 0x8001, 0xfffffff8, 0x0, 0x5}, {0x0, 0x100, 0x9, 0x6, 0x5, 0x7}, {0xffffffff, 0x8, 0x5a6, 0x8000, 0x2, 0x2}, {0x2e, 0xc7c, 0x4, 0x8000, 0xd, 0xfff}, {0x9, 0x9, 0x0, 0x7, 0x3, 0x6}, {0x4, 0xb3, 0x1, 0x8, 0xf, 0x2}, {0x28a, 0x5, 0x8, 0x4, 0x7, 0x5}, {0x38, 0x4, 0x4, 0x6, 0x81, 0x3}, {0x80000000, 0x1000, 0x8, 0x5, 0x5, 0x2}, {0x400, 0xbb, 0x8, 0x5, 0x5, 0x2}, {0x8, 0x9, 0x1, 0xfff, 0x200, 0x471}, {0x2, 0x0, 0x5, 0x1, 0x0, 0xfffffffe}, {0x1, 0xa, 0x3a, 0x3ff, 0x7, 0x1137}, {0x0, 0x2, 0x8000, 0x5, 0x5, 0x9}, {0x8001, 0x8e2, 0x7, 0x8, 0x4, 0x1b43}, {0x400, 0x4, 0xc, 0x6, 0x698, 0x6}, {0x6314, 0x0, 0x10001, 0x3ff, 0x8000, 0x7fff}, {0x6, 0x1, 0x5, 0x8, 0x88}, {0x2, 0xf22a, 0xe475, 0xa, 0x4, 0x744b8102}, {0x7, 0x2a6, 0x8, 0x5, 0x1, 0xd}, {0x5, 0x2, 0x5, 0x9, 0xd9eb12d, 0x5}, {0xd8, 0x1, 0x7, 0x3d, 0x100}, {0xe, 0x0, 0x10000, 0x3, 0x800, 0x6}, {0x68000000, 0x1, 0xfff, 0x3, 0x67, 0x8}, {0x101, 0x4, 0x8, 0x4, 0x1000, 0xfffffffe}, {0xa28d, 0x4, 0xffffff7e, 0xcf, 0x7fffffff, 0x2}, {0x80b, 0x54, 0xe02, 0xd90a, 0xd, 0x3}, {0x7645, 0x2, 0x4c9, 0x800, 0x3, 0x1}, {0x8, 0x37, 0x3, 0x9, 0x2, 0x3}, {0x3, 0x3, 0xfffffff8, 0x3, 0x0, 0xfffffdbc}, {0xfffffffe, 0x1, 0xd89e, 0x1000, 0x3, 0xffff}, {0x9, 0xf574e1e, 0x3, 0x0, 0x8, 0xb}, {0xfffffff2, 0x8, 0x3, 0x6, 0x5, 0x7ff}], [{0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0xaf8bba8d0517b9e0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x2}, {}, {0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x46ad83950480526d}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}], 0x3}}]}, {0x23, 0x6, "ad708099198a0ec1c38872c6b6baebd4c106afa40a3f91a999ddfd290aff46"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x70, 0xb, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xff, 0xfe, 0x8}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0x7, 0x2, 0x80}]}]}, {0x22, 0x6, "6d36347a1242181465b574a64f523ba2c253db69f9aaae8e13306c1ee24b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xc4, 0x5, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3f800000, 0x5, 0x20000000, 0x9, 0x5}, 0x8}}]}, {0x71, 0x6, "69deacbdb4d5354b30928698782d736f79e7c689cee4c3027b569f62a841f2be5fc5fa659f7c79d435fdb9eb4130bd9a6e3eb3200751586ff5ebdbe62df3b5244259af3f5ab21497e550eb025982bb3aa9d76283e85cc2b6f4eba308b31283715dd3781e328e5a49c8fc610eb9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x1e8, 0x15, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x7, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x3, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0xffffffffffffffff, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x20000003, 0x6, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x480, 0x3, 0x8001, 0x2d5}, 0x1}}]}, {0x79, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7ec"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x21cc}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.460311559s ago: executing program 4 (id=4188): r0 = socket(0x23, 0x80000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18110100", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000100)='syzkaller\x00', 0x8001, 0xec, &(0x7f0000000140)=""/236, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x6, 0x6, 0x1000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9c}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xc5, 0xfffb, 0x0, 0x2, 0x0, 0xffffffff}}, {0xfffffffffffffff4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="c10e000018001f06b9409b0dffff11040018000000fac83888ee1b16f9fbac274404094565360c6473caaf6c26c291a46855cca788deb66e1acbc841756da6214549932fde4a460c7f5090040086c902fc3a10004a320c040e610012000a000000000056ede4ccbe588000"/136, 0x88, 0x0, 0x0, 0x0) 1.370628188s ago: executing program 0 (id=4189): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000205000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000014010000f8ffffffb502020008000000b7030000ffffffff85000000ae00000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) 1.253095406s ago: executing program 4 (id=4190): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@getchain={0x3c, 0x66, 0x10, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x6, 0x10}, {0xf, 0xf}, {0x6, 0xf}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x81}]}, 0x3c}}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0xc, &(0x7f0000000500)=0x6, 0x4) socket$inet(0x2, 0x800, 0xc6a) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=""/8, 0x8}, 0x8000}], 0x1, 0x100, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000040)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0x71e40ca8cee75c11, &(0x7f0000000280)={&(0x7f0000000140)={0x4c, r5, 0xe7e7782dfc9b005d, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200000000000000000000000000240003000000000000000000000000000000000000000000000000000000000000000000480108805400008024000200935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08080003000300000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696bf000008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222400020082a3fee8508b9dedc00d8ccb9cfa517d48a03e6112bfa9074c524b2a05708654a400098028000080060001000a00000014000200fe880000000000000000000000000101050003000300000040000080060001000a0000001400020000000000000000000000ffff7f00000105000300030000000600010002000000080002007f00000105000300010000000c000080060001"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) socketpair(0x2b, 0x6, 0x7, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r3, &(0x7f0000000640)="1e1445ec6c222daac9a68e38f4d25be1d7b1029b9da0a6f00e", &(0x7f00000006c0)=@udp=r9}, 0x20) 1.123249587s ago: executing program 0 (id=4191): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x48, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20044040}, 0x4004001) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) mmap(0x0, 0x0, 0x3, 0x30, r1, 0xe2dfd000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, 0x0, &(0x7f0000000280)=r5}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, r7, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x3a, 0x0, 0x0) 1.080758408s ago: executing program 4 (id=4192): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0xc) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$cgroup_subtree(r4, 0x0, 0x0) write(r4, &(0x7f00000014c0)="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", 0x6bc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0xc000) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000002010500"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="546b4300210001002dbd700000000000ffffffff00000000000000000000f1ff00000000000000000000ffffac2e60cc34846108701414aa0000000004000000000000200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000004001100"], 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="ddddcba501e7bbbbbbbbbbbb0800450000300064000000019078ac1e000a0a771c1656ff7badae01ac141439053490781200183f250000000000fffd0d010694ac14149aac1414bb"], 0x0) recvfrom(r10, &(0x7f0000000040)=""/147, 0x93, 0x40000000, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0800000008440000300012800b00010067656e6576650000200002801400070000000000000000000200000000e2ff01050003000c00000008000a00", @ANYRES32=r9, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.048224755s ago: executing program 0 (id=4193): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d02000003000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000300d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0) r6 = socket(0x1e, 0x4, 0x0) recvfrom$l2tp(r6, &(0x7f0000000340)=""/63, 0x3f, 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)=""/91, 0x5b}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffc}], 0x2, 0x6) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x4840) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x9, 0xfffffffa, 0xa, 0x0, 0xe0ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x1000, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0x40000, 0x0, 0x20000, 0x2, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7f, 0xa847, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x573ecac7, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x3, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x404, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) 751.318127ms ago: executing program 1 (id=4194): epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7fff, &(0x7f00000001c0), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r4 = epoll_create1(0x0) unshare(0x28000600) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, 0x0, 0x0) r6 = socket(0x1, 0x80802, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f00000000c0)={0x10000001}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x12}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000240)={r8, 0x6}, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x40, &(0x7f00000005c0)={0x11, 0x18, 0x0, 0x1, 0x6}, 0x14) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4009, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000091401002abd7000fbdbdf25080001000200000072455776b7c5d62311e65036d912f1c94dc601000000d7eccb2266792ebec252675b8cc6eb4109a94b64fb2864475059749f8b8aad266fc0f9a98bb92eb73dd4594b3789a7498125466d9c0d308b72ca69f0a560"], 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) r9 = socket$kcm(0x2d, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_GETBMAP(r10, 0xc0205826, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xe}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000340)={r9}) recvfrom$inet6(r6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}, 0x1, 0x0, 0x0, 0xc0080}, 0xa040) 661.796175ms ago: executing program 1 (id=4195): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) (async) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x7, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xb}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0xa, 0x1, 0xc53a, 0x9, 0xfff, 0xfffffffa, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) (async) close(0x3) (async) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r11, 0x800442d3, &(0x7f0000000000)={0xfffffe00, 0x69b4, 0x9, @empty, 'veth0_to_hsr\x00'}) 563.641965ms ago: executing program 3 (id=4196): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket(0x1, 0x1, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'syztnl1\x00', r2, 0x7886, 0x7800, 0x8, 0x2, {{0xf, 0x4, 0x2, 0x31, 0x3c, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xf7, 0x1, 0x6, [{@private=0xa010102, 0x4}]}, @end, @rr={0x7, 0x17, 0x16, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010100, @broadcast]}, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000006d02dc8477f547aa000000000000000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="8000000014000300020000000000000000000000000000001400010000000000000000000002"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000400000002003b3e06260085000000000000000003000000070000000d0000000400000067d2"], 0x0, 0x3e, 0x0, 0x1, 0xffffffff}, 0x28) writev(r5, &(0x7f0000000480)=[{&(0x7f00000003c0)}, {&(0x7f00000004c0)="4be6f2ea9dfa48a484c700825ef11448a50952ad318acb278c187f22b6f14ef26df957ae21daa8b4e614e82ce6dfc0ab9060ef0e32fe2809b396673b50e271327bd0aa822d0555079d71f6a66a55", 0x4e}], 0x2) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x7ff, 0x8, 0x0, 0x3ff}, 0x42) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000000c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000180010002bbd7000fbdbdf2580a01402fe02fe0b00200000240016802000010000000000000002000000000000050c0000000300000000000000000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x24004040}, 0x8804) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001a00010d42fae3c1"], 0x24}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffd35, &(0x7f00000003c0)}, 0xfffffffffffffd25) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 504.341311ms ago: executing program 2 (id=4197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003001000000000000000030200000000a3875bd529a8ca481a3a34c36b118a195519446885dc1a15f40e77a3d7631d3852def9bf19647c114005602f3508550e3661e82f10139927025ee18043081c4b36ef65a2c2942f7f9766a0c08b27ad7c79dafc270a3954305dbd7c190cddb0eb61e49d1595a53ab810834b772c5d409ce95a13a1015a9f362e8e178b3dc89e0ac21aa6dd613de6651628b5070f6bf853", @ANYRES32=r0, @ANYBLOB="000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6020823bad875214, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x800, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x9}]}}}]}, 0x40}}, 0x0) 385.648082ms ago: executing program 2 (id=4198): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x91e, 0x44}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f40563ee81902b0dedfbababb9999404"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "02449ad309de849a9be1896648baf49b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "304a04fa3aec6552d91721143a7aff4b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "fb31936d66a1730c9639bbcf138de07f"}, @NL80211_ATTR_MAC={0xa}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000340)={0x111c, r1, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PROBE_RESP={0x78c, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x100, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xfa, 0x3, "f32bfda77c9e0a55b235d67889650c37dfa305e0078b3433b4fdc65df3ef1373cfd818c4daba41d36e9ae7f10bcfe0ff14b3c0c75c92d71203d19efb9a5d6e9040ee4acc311528fae7d479406dcb6b35035d2d2fc854c57d15688845396eb1593ed51f5fc3553bc1526e1fff387df88fe279440a9e5bed66899abff6c3e330d106796607913fcf4f5c9db9eb894415e3e0e9532c1bf3c6a7901b4d3ac077b503c505ba987a9137d39fcf0ba5af76608593f5b48f4aae4c90d39703f64b037e3cda7f44ab86d94cb183e18180a715c3e34af71e2f87bd1e59fe15e5163cce6fc2d01d6cbb1f8f1bce0a1a5e5570bc1f22818bdc2e0846"}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE={0x30, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ssid={0x0, 0x11, @random="50c0342a2653055f4498a530ab9993db8c"}, @erp={0x2a, 0x1}, @dsss={0x3, 0x1, 0xb0}]}, @NL80211_ATTR_IE={0x13, 0x2a, [@ibss={0x6, 0x2, 0xd29f}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}, @NL80211_ATTR_PROBE_RESP={0x5f0, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x22d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_a, @from_mac=@device_b, {0x5, 0xe98}}, 0x1ff, @default, 0x4431, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x13, 0x1}, {0x1}, {0x2}, {0xb167ebb512e2e8e1, 0x1}, {0x4c, 0x1}]}, @val={0x3, 0x1, 0x74}, @void, @val={0x6, 0x2, 0xd9}, @void, @val={0x25, 0x3, {0x0, 0x89, 0xf2}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x4, 0x8}}, @val={0x2d, 0x1a, {0x8000, 0x0, 0x7, 0x0, {0x5, 0x1, 0x0, 0xb0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x300, 0x6, 0x1}}, @void, @void, @val={0x76, 0x6, {0x2, 0x9e, 0x33, 0xa2b}}, [{0xdd, 0xcf, "409c450ac907ee8d9d361adc9ea7f91d8b401c09a65f3dc51aaef5b1049b048fcfeb6cd4e574cd07f6432a07cb8b6f438fadefe8f3ce5d5860e4ad0d11c909422a4ce9c6229553325ec386560b95e5672a8b9a5df8d6062361f041827fbe3f69069a53fc77b748dc74087dd3d7cbedf5beade4795cade1410e84e938c8c02030664c23ae613135b252477c023818e032ea82f03225bc2711c53c43761f394b7ee1724cc3b5577589660c5fe1ac0e4278270fea2249fe4043651d24a1af01ac4f7543272c3ec2f49c223c6174857923"}, {0xdd, 0xed, "11284f10df61d86f8789828a87f460704324074058656d84c9c840900b35c295d3174f7016df3b087a223567067b4301a2425efbb0c302eedcaca2ef49ae74d9ec82ae11a7cb0f76999be503c7c0a95da9f9a84b4524c5cc2a88a3a3665eed5de6494349ee045e7b1d14fd4774ff081c159f7dfa9220d3cfb0bc8abc2669d7cf5ad7fd97b39358fb19575e82879feb4c6caf814c1508ece4a82cc1136ed69e5c6ae086f15198e8e15dbc31f7082b0eb3264a0391da239aa640316020e8910d1b2033874b2ca6cbe4eac720ad9d8bd7bdf490ac87e3f1d54008434a3f33d75d0655f5f75780e184bd46fe2c554a"}]}}]}, 0x111c}, 0x1, 0x0, 0x0, 0x801}, 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001500)={0x8, 0xffffffff80000000, 0x4, 0x8, 0x4, 0x0, [{0xc853, 0xffffffffffffffff, 0x0, '\x00', 0x802}, {0x5b7, 0x100, 0x2, '\x00', 0x390c}, {0x1000, 0xc8, 0x100000001, '\x00', 0x104}, {0x200, 0xa6, 0x7fffffffffffffff}]}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001640), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0xb4, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x8c, 0xa9, @random="028aa83a71b102ccac3f33f5ea01901ec9194a09b4741d40f41271c7dea6f456956db33e1540c85bc436f6599805acad928084f0660a699b1fbc603e801502e07ab30205a35d5874315c529b858359e9de0eb83cd20dfc9f108a4085bc459798525ab7555dfbf283c845c4957ece9adc749be67abbe7629301ec132658cfb645743b659f47adf0b5"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x50}, 0x844) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x60, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1d}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf47}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x112c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12dc}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa0b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x901}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r5, 0x0, 0x27, &(0x7f0000001900)=""/228, &(0x7f0000001a00)=0xe4) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001a40)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001b00)={'ipvlan0\x00', &(0x7f0000001a80)=@ethtool_perm_addr={0x20, 0x4a, "f7e27930e5b219111fca986c76350687d77e8972154b48131c17affd635c2b8fe2eb0d19b4368a7b349e3df684d388288f5aff050188fcd3b0e5950fd48c83e3ad3a8370ff608b4cc02e"}}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001b40), 0x60000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001b80), 0x8) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x80, r1, 0x232, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000c1}, 0x80c0) poll(&(0x7f0000001d00), 0x0, 0x6) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000001d40)=0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000001e00)={'sit0\x00', &(0x7f0000001d80)={'tunl0\x00', 0x0, 0x40, 0x80, 0x9, 0x80, {{0xc, 0x4, 0x0, 0x8, 0x30, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x14}, {[@lsrr={0x83, 0x1b, 0x79, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @empty, @empty]}]}}}}}) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000001f40)={r5, &(0x7f0000001e40)='/dev/rfkill\x00', 0x0, &(0x7f0000001e80)={@_ha_fsid={[0xe, 0x8]}, {0x2, 0xd, 0x6}}, 0x2, &(0x7f0000001ec0), &(0x7f0000001f00)=0x7}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xca, '\x00', r9, r10, 0x4, 0x3, 0x2}, 0x50) setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000002000)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002080)=0x0) r12 = syz_open_procfs$namespace(r8, &(0x7f00000020c0)='ns/cgroup\x00') sendmsg$nl_generic(r7, &(0x7f0000002380)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x4000802}, 0xc, &(0x7f0000002340)={&(0x7f0000002100)={0x210, 0x28, 0x400, 0x70bd2d, 0x25dfdbfb, {0x1}, [@nested={0x51, 0x45, 0x0, 0x1, [@nested={0x4, 0xa3}, @nested={0x4, 0xe8}, @typed={0x8, 0x158, 0x0, 0x0, @uid=r11}, @nested={0x4, 0x5d}, @generic="0905fe7674", @typed={0x8, 0x12d, 0x0, 0x0, @fd=r12}, @generic="b49f1f534f47f3be2e45ffe7c5b280be4e91e12a498a6901eadde388a6fac0b3f1c7784d", @nested={0x4, 0x75}, @nested={0x4, 0xb1}]}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x5}, @nested={0xf2, 0x91, 0x0, 0x1, [@nested={0x4, 0x5}, @nested={0x4, 0x123}, @nested={0x4, 0x75}, @generic="2c7e04ed1a25d1e1d55ce433a1005181df6f8007f6b11ebc60943fcdc06e52a9f2a713de8cefbb7a579b456d4f463a33a7c74ec029ec878cacff901f40827308c6e52d906203665260981eda52f4d347cbd3f67bae4338657306686b841b6b9b7bfad10f6b6c0d7ddc33a3fcefd34bc228d4d47ebac1260683c9b0aa444cc69fe5bf6210e3a20b2eb8a4dda5003aaaf67fd344d8083044ca1c3a7d4b7dbf184df51c5803d80c92cc4808237f272409573ffa7a12f2a234df4e4f24d45f92081812ad82abdc3daf54e949283e25f6f64792dbf2559b2558c9c2baa4ec0d504bdd7611"]}, @generic="0fbcdefeb64cb78112f6a667949f80063caadc80c91bcb44b0d2c1376aef271ed1d4e34c6983437c956a77b6181dd1e09ba71d4f9e757669e0e6334cd4b9ae26a459f209001d5033df8d007be95cd97356a91453fe3175ee0028fe1fa8195c621ac11ddc8e548b247f5d6dfde27dcdd16175a49a5cb0fbfb7b06b9dcdd7b", @nested={0x4, 0x90, 0x0, 0x1, [@generic]}, @generic="ceec029773108b3d656b7bbb9b441563e72bb5ea0b1961f3a8da2433b74897d61321c724c4af2d"]}, 0x210}, 0x1, 0x0, 0x0, 0x401c081}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 377.599373ms ago: executing program 3 (id=4199): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@empty, @private, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'ip_vti0\x00', r1, 0x20, 0x7800, 0x0, 0x30e1803c, {{0x9, 0x4, 0x1, 0x6, 0x24, 0x66, 0x0, 0xc, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@noop, @noop, @timestamp_addr={0x44, 0xc, 0x4d, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}]}}}}}) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r3 = socket(0x1e, 0x2, 0x0) (rerun: 64) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r3, &(0x7f0000000100)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000700)=',d\t', 0x3}], 0x1, 0x0, 0x0, 0x1}, 0x4800) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a4000000002b0000000060a010400000000000000000500000a0900010073797a30000000000900020073797a30000000008400048024000180090001006d6574610000000014000280080001400000000108000240000000012c00018008000100636d700020000280080001400000000108000240000000000c0003800500010000000000300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001"], 0x154}}, 0x8044) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}], {0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 227.684355ms ago: executing program 2 (id=4200): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0xfffffffe, 0x7, 0x5646, 0x151, 0x10000101}, 0x20) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0xfffffffe, 0x7, 0x5646, 0x151, 0x10000101}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000200)=0x4) 214.523399ms ago: executing program 1 (id=4201): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000010205000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000014010000f8ffffffb502020008000000b7030000ffffffff85000000ae00000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) 171.910468ms ago: executing program 1 (id=4202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x3, 0x80001) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) 140.301578ms ago: executing program 2 (id=4203): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x21, 0x0, &(0x7f0000001440)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="f00000001000130725bd700000000000fe8000000000000000000000000000bb00000000000000000000ffffac1414aa4e2200018000000402000060", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe80000000000000000034b51ed500bb0000000032000000fe8000000000000000000000000000aa0000000000000000fcffffffff9179b996fe11760ecaac48aeffffff08000000000000000a0000008b7100002a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000600000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000000ac00000000000000"], 0x35}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'xfrm0\x00'}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000540)="43210098") r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@unspec, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d4, &(0x7f0000000400)) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 73.741266ms ago: executing program 4 (id=4204): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x5, 0xfffffff8, 0x4}, 0xc) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x80000000, @mcast1, 0xf0d}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1400000000000000290000000b00000000400002000000001400000000000000290000000b000000ffffffff00000000"], 0x30}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x1e, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000008a00000095"], &(0x7f00000008c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000c6ea94a4935ff59e6655adab1fe1b15888ebcca518191380179f17eb2fa3f0a1e42df6cccd19222e62eb2d90c0a45710f154d7cd995612b4165fa492864d1cda5cd3be5d49517fac77eb2e8da826dc49a59e200248abb07843dee44671e3e0da0d59a38c1c8a8abde30306fc6d2f2b26f6623fe2dc350a187b07d2f43a97a9f005bbb7042bd8238b7d1f", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8fd00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x11}, 0x94) unshare(0x8040480) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080006110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0be2566c43d72918a8a9323fd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5d82054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fcfcffffffffffffffd442017cfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beac671e8e8fdecb035868a623fa71f871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae991e7f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef8a4fed5c9455640dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d76ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6e257343c1a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabba3c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f3878b1e11316d8ddae1c6c3b8faaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080021000000000090ee7ba4a70a084bd994ac5e00000000000000000000000000351a30cdf57a3d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd68a34e286991f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf6433f76d5af45155536a1a44bfcbfbfd232af000052f9002a5876ed24609d478b4d99ca8bf44b852fed1f3a7f00836d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x8, 0x0, 0x0}}, 0x10) (async) socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0x802e, 0x0, "bb02a3c364ca41d6357e5445244748042f9e4e00f943a92866ef086cf3ee818afaacff1f16c54dc46d8b6d2ccd008a008000000000000000a032000700000000000000000000000000004d00"}, 0xffffff7e) (async) r4 = socket$kcm(0x23, 0x5, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) listen(r4, 0x800) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x15, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) close(r6) (async) r7 = socket$kcm(0x2, 0xa, 0x2) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0x14, r9, 0x8c24381a3d4a0b6f, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) 72.274416ms ago: executing program 0 (id=4205): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048849}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000100000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014006a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020207b1a00fe00000000bfa500000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) 0s ago: executing program 3 (id=4206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@updpolicy={0xb8, 0x19, 0x300, 0x4, 0x0, {{@in=@multicast2, @in6=@empty, 0xfffd, 0xffff, 0x200, 0x0, 0x2, 0x0, 0x20, 0x3c}, {0x0, 0x1, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x1, 0x2dd}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x78, 0x0, 0x0, @dev, @empty, {[@routing={0x2c, 0xe, 0x1, 0xe1, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, @empty, @mcast1]}]}}}}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r2, &(0x7f0000000080)="76631eddb9251eed089c9977fbe17b4b5252ff9d59162cda4a57910bd1229d2ad6ab93b8", 0x24, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x10000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3}, 0x20) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "6988d610dd"}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "ab5b67a3e0"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000014}, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4010, r1}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f00070113a769d500000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) kernel console output (not intermixed with test programs): [ 423.637344][T18345] netlink: 'syz.1.3022': attribute type 1 has an invalid length. [ 423.931313][T18358] netlink: 'syz.3.3026': attribute type 2 has an invalid length. [ 424.158125][T18365] __nla_validate_parse: 13 callbacks suppressed [ 424.158194][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3025'. [ 424.204042][ T26] block nbd6: Possible stuck request ffff8880275f5080: control (read@0,4096B). Runtime 90 seconds [ 424.563308][T18374] netlink: 'syz.2.3031': attribute type 12 has an invalid length. [ 424.575776][T18374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.576248][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'. [ 424.875466][T18391] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3038'. [ 424.990820][T18393] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 425.314291][ T5634] Bluetooth: hci5: command tx timeout [ 425.347195][T18400] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 425.428720][T18335] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.428899][T18335] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.429055][T18335] bridge_slave_0: entered allmulticast mode [ 425.433703][T18335] bridge_slave_0: entered promiscuous mode [ 425.438623][T18335] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.439159][T18335] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.446235][T18335] bridge_slave_1: entered allmulticast mode [ 425.450653][T18335] bridge_slave_1: entered promiscuous mode [ 425.651545][T18335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.662920][T18335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.854690][T18420] netlink: 'syz.2.3034': attribute type 4 has an invalid length. [ 425.859521][T18335] team0: Port device team_slave_0 added [ 425.862475][T18335] team0: Port device team_slave_1 added [ 425.902345][T18424] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3047'. [ 425.963143][T18335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.963187][T18335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.963430][T18335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.980966][T18335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.980984][T18335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.981007][T18335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.230861][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3048'. [ 426.266627][T18335] hsr_slave_0: entered promiscuous mode [ 426.267661][T18335] hsr_slave_1: entered promiscuous mode [ 426.270229][T18335] debugfs: 'hsr0' already exists in 'hsr' [ 426.270248][T18335] Cannot create hsr debugfs directory [ 426.339284][T18428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3048'. [ 426.625185][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'. [ 426.809521][T18451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3054'. [ 426.987690][T18456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3055'. [ 427.124189][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.124252][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.124305][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.124338][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.361132][T18335] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.404178][ T5634] Bluetooth: hci5: command tx timeout [ 427.696157][T18494] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 427.721802][T18494] netlink: 'syz.2.3062': attribute type 9 has an invalid length. [ 427.851345][T18335] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.923430][T18502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3063'. [ 428.512076][T18518] netlink: 'syz.1.3068': attribute type 14 has an invalid length. [ 429.484266][ T5634] Bluetooth: hci5: command tx timeout [ 431.557801][ T5634] Bluetooth: hci5: command tx timeout [ 431.810147][T18335] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.888038][T18523] __nla_validate_parse: 1 callbacks suppressed [ 431.888097][T18523] netlink: 544 bytes leftover after parsing attributes in process `syz.2.3067'. [ 431.948415][T18335] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.422125][T18551] netlink: 'syz.2.3076': attribute type 4 has an invalid length. [ 432.424631][T18553] netlink: 'syz.2.3076': attribute type 4 has an invalid length. [ 432.433984][T18553] netlink: 'syz.2.3076': attribute type 4 has an invalid length. [ 432.737101][T18576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.796769][T18335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 432.822732][T18335] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.856595][T18335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 432.869676][T18335] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.878453][T18578] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 432.898929][T18578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3081'. [ 432.908145][T18335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 432.922402][T18335] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.933248][T18335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 432.959473][T18335] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.048650][T18578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3081'. [ 433.148792][T18335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.188234][T18335] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.242409][T18603] netlink: 'syz.1.3084': attribute type 1 has an invalid length. [ 433.345862][T18603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.373321][ T6986] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.373439][ T6986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.426887][ T6986] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.427001][ T6986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.638956][T18623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3088'. [ 433.639223][T18623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3088'. [ 433.639410][T18623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3088'. [ 433.639715][T18623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3088'. [ 433.639883][T18623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3088'. [ 433.640041][T18623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3088'. [ 433.640232][T18623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3088'. [ 433.708150][T18618] syzkaller0: entered promiscuous mode [ 433.708173][T18618] syzkaller0: entered allmulticast mode [ 434.356837][T18663] syzkaller0: entered promiscuous mode [ 434.356886][T18663] syzkaller0: entered allmulticast mode [ 434.381565][T18663] 0: reclassify loop, rule prio 0, protocol 800 [ 434.550463][T18335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.613716][T18672] gretap0: entered promiscuous mode [ 434.669868][T18672] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 434.669953][T18672] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 434.669988][T18672] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 434.715311][T18672] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 434.720719][T18676] 0ªî{X¹¦: renamed from gretap0 [ 434.738267][T18676] 0ªî{X¹¦: left promiscuous mode [ 434.738311][T18676] 0ªî{X¹¦: entered allmulticast mode [ 434.746359][T18676] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 434.773851][T18672] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 435.320204][T18695] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 435.331417][T18695] bond1 (unregistering): Released all slaves [ 435.401715][T18696] netlink: 'syz.1.3102': attribute type 12 has an invalid length. [ 435.401752][T18696] netlink: 'syz.1.3102': attribute type 29 has an invalid length. [ 435.401799][T18696] netlink: 'syz.1.3102': attribute type 1 has an invalid length. [ 435.401816][T18696] netlink: 'syz.1.3102': attribute type 2 has an invalid length. [ 435.500013][T18335] veth0_vlan: entered promiscuous mode [ 435.544932][T18335] veth1_vlan: entered promiscuous mode [ 435.620043][T18335] veth0_macvtap: entered promiscuous mode [ 435.645810][T18335] veth1_macvtap: entered promiscuous mode [ 435.672804][T18335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.730694][T18335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.805242][ T6970] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.805341][ T6970] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.805385][ T6970] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.805418][ T6970] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.822859][T18715] netlink: 'syz.3.3110': attribute type 1 has an invalid length. [ 435.973367][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.973401][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.060306][T10477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.068542][T10477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.167075][T18735] netlink: 'syz.4.3021': attribute type 4 has an invalid length. [ 436.698252][T18749] syzkaller0: entered promiscuous mode [ 436.698293][T18749] syzkaller0: entered allmulticast mode [ 436.742061][T18751] block nbd2: NBD_DISCONNECT [ 436.742111][T18751] block nbd2: Send disconnect failed -32 [ 436.742129][T18751] block nbd2: Send disconnect failed -32 [ 436.742148][T18751] block nbd2: shutting down sockets [ 436.897363][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 436.906331][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.913894][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.926546][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.934823][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 437.027115][T18754] syzkaller0: entered promiscuous mode [ 437.027159][T18754] syzkaller0: entered allmulticast mode [ 437.248589][T18767] __nla_validate_parse: 48 callbacks suppressed [ 437.252468][T18751] 8021q: adding VLAN 0 to HW filter on device bond6 [ 437.262294][T18767] netlink: 328 bytes leftover after parsing attributes in process `syz.2.3116'. [ 437.274537][T18767] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3116'. [ 437.288455][T18767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3116'. [ 437.438305][T18775] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3121'. [ 437.469486][T18756] bond6: (slave veth5): Enslaving as an active interface with a down link [ 437.970155][T18800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3127'. [ 438.512589][T18816] x_tables: duplicate underflow at hook 3 [ 438.538706][T18817] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20003 [ 438.706135][T18809] syz_tun: entered allmulticast mode [ 438.706377][T18809] syz_tun: left allmulticast mode [ 438.901290][T18828] gtp0: entered promiscuous mode [ 438.906803][T18828] gtp0: entered allmulticast mode [ 438.994645][ T5634] Bluetooth: hci3: command tx timeout [ 439.093438][T18840] xt_policy: output policy not valid in PREROUTING and INPUT [ 439.289333][T18846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3135'. [ 439.299769][T18846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3135'. [ 439.319595][T18846] validate_nla: 2 callbacks suppressed [ 439.327424][T18846] netlink: 'syz.1.3135': attribute type 1 has an invalid length. [ 439.335935][T18846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.348018][T18845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3136'. [ 439.597736][T18869] sch_tbf: burst 7 is lower than device bridge0 mtu (1294) ! [ 439.675779][T18869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3142'. [ 439.675820][T18869] sch_tbf: burst 0 is lower than device bridge0 mtu (1294) ! [ 439.805594][T18880] tipc: Started in network mode [ 439.805629][T18880] tipc: Node identity , cluster identity 4711 [ 439.805659][T18880] tipc: Failed to set node id, please configure manually [ 439.805703][T18880] tipc: Enabling of bearer rejected, failed to enable media [ 439.819222][T18757] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.819400][T18757] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.819538][T18757] bridge_slave_0: entered allmulticast mode [ 439.821348][T18757] bridge_slave_0: entered promiscuous mode [ 439.824989][T18757] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.825149][T18757] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.825311][T18757] bridge_slave_1: entered allmulticast mode [ 439.827008][T18757] bridge_slave_1: entered promiscuous mode [ 439.918331][T18873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3143'. [ 439.936881][T18757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.956088][T18757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.988371][T18886] netlink: 'syz.3.3147': attribute type 1 has an invalid length. [ 440.205278][T18892] gretap1: entered allmulticast mode [ 440.277455][T18757] team0: Port device team_slave_0 added [ 440.292902][T18757] team0: Port device team_slave_1 added [ 440.330536][T18904] hsr0: entered allmulticast mode [ 440.336149][T18904] hsr_slave_0: entered allmulticast mode [ 440.336201][T18904] hsr_slave_1: entered allmulticast mode [ 440.405696][T18757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.413047][T18757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.439606][T18757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.441691][T18757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.441706][T18757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.441730][T18757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.802625][T18918] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 440.802682][T18918] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 440.960693][T18924] bond2: option resend_igmp: invalid value (2878) [ 440.967613][T18924] bond2: option resend_igmp: allowed values 0 - 255 [ 440.980286][T18924] bond2 (unregistering): Released all slaves [ 441.074618][ T5634] Bluetooth: hci3: command tx timeout [ 441.099912][T18757] hsr_slave_0: entered promiscuous mode [ 441.113206][T18757] hsr_slave_1: entered promiscuous mode [ 441.123505][T18757] debugfs: 'hsr0' already exists in 'hsr' [ 441.129409][T18757] Cannot create hsr debugfs directory [ 441.134354][T18910] netlink: 'syz.3.3154': attribute type 10 has an invalid length. [ 441.458661][T18945] netlink: 'syz.1.3161': attribute type 1 has an invalid length. [ 441.583632][T18945] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.691151][T18950] bond2: (slave veth3): Enslaving as an active interface with a down link [ 441.812647][T18945] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 441.844995][T18945] bond2: (slave batadv1): making interface the new active one [ 441.859098][T18945] batadv1: entered promiscuous mode [ 441.859561][T18945] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 442.097848][T18961] syzkaller1: entered promiscuous mode [ 442.097889][T18961] syzkaller1: entered allmulticast mode [ 442.207969][T18980] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 442.448433][T18757] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.682385][T18996] netlink: 'syz.2.3171': attribute type 2 has an invalid length. [ 442.746334][T18757] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.795133][T19003] netlink: 'syz.2.3171': attribute type 2 has an invalid length. [ 442.869994][T18996] : entered promiscuous mode [ 442.883871][T19009] netlink: 'syz.1.3172': attribute type 30 has an invalid length. [ 442.928356][T18757] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.045907][T18757] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.065316][T19010] netlink: 'syz.1.3172': attribute type 30 has an invalid length. [ 443.080698][T18993] syzkaller0: entered promiscuous mode [ 443.080740][T18993] syzkaller0: entered allmulticast mode [ 443.157715][ T5634] Bluetooth: hci3: command tx timeout [ 443.731548][T19036] __nla_validate_parse: 2 callbacks suppressed [ 443.733668][T19036] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.3177'. [ 444.956461][T18968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.031354][T18757] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 445.108276][T18757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.112919][T18757] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 445.134032][T18757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.147975][T18757] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 445.172065][T18757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.178482][T18757] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 445.204572][T18757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.246234][ T5634] Bluetooth: hci3: command tx timeout [ 445.530825][T19079] openvswitch: netlink: Missing valid actions attribute. [ 445.569852][T19079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3186'. [ 445.670229][T18757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.697841][T18757] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.708787][T10477] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.708931][T10477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.732666][T10477] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.732809][T10477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.764428][T19089] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 446.132766][T18757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.182417][T18757] veth0_vlan: entered promiscuous mode [ 446.196079][T18757] veth1_vlan: entered promiscuous mode [ 446.229448][T18757] veth0_macvtap: entered promiscuous mode [ 446.233604][T18757] veth1_macvtap: entered promiscuous mode [ 446.249928][T18757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.255350][T18757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.304612][ T6986] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.313755][ T6986] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.321739][ T6986] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.375462][ T6970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.568683][T19083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.606340][T19089] netlink: 'syz.2.3188': attribute type 1 has an invalid length. [ 448.606396][T19089] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3188'. [ 448.713350][ T6986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.713396][ T6986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.780140][T19107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3190'. [ 448.853062][ T6980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.853107][ T6980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.033364][T19118] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 449.096348][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3196'. [ 449.171414][T19133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3194'. [ 449.379202][T19138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3195'. [ 449.479016][ T722] IPVS: starting estimator thread 0... [ 449.532684][T19144] batman_adv: batadv0: Adding interface: veth0 [ 449.532732][T19144] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.532761][T19144] batman_adv: batadv0: Interface activated: veth0 [ 449.559580][T19144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.559608][T19144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.568068][T19144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.568090][T19144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.580335][T19144] batman_adv: batadv0: Interface deactivated: veth0 [ 449.580367][T19144] batman_adv: batadv0: Removing interface: veth0 [ 449.595681][T19142] IPVS: using max 37 ests per chain, 88800 per kthread [ 449.815069][T19144] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3197'. [ 449.815113][T19144] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3197'. [ 449.903769][T19156] bond7: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 449.922221][T19156] bond7 (unregistering): Released all slaves [ 450.003679][T19166] netlink: NAT attribute has 8 unknown bytes [ 450.010016][T19166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.030331][T19168] netlink: NAT attribute has 8 unknown bytes [ 450.030399][T19168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.273809][T19178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3208'. [ 450.392366][T19181] xt_IDLETIMER: timeout value is zero [ 450.709198][T19188] syzkaller0: entered promiscuous mode [ 450.709241][T19188] syzkaller0: entered allmulticast mode [ 450.831713][T19192] netlink: 'syz.1.3213': attribute type 1 has an invalid length. [ 450.937964][T19192] 8021q: adding VLAN 0 to HW filter on device bond5 [ 451.027292][T19204] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3215'. [ 451.066808][T19208] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 451.078915][T19208] x_tables: duplicate underflow at hook 1 [ 451.100681][T19192] bond5: (slave ip6erspan0): making interface the new active one [ 451.133526][T19192] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 451.269181][T19214] netlink: 'syz.0.3221': attribute type 1 has an invalid length. [ 451.345848][T19214] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3221'. [ 451.442047][T19224] netlink: 'syz.4.3220': attribute type 4 has an invalid length. [ 451.510788][T19219] syzkaller0: entered promiscuous mode [ 451.510839][T19219] syzkaller0: entered allmulticast mode [ 451.663906][T19197] netlink: 'syz.3.3214': attribute type 2 has an invalid length. [ 451.672205][T19197] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3214'. [ 451.789208][T19237] dvmrp0: entered allmulticast mode [ 451.891988][T19239] batadv_slave_1: entered promiscuous mode [ 452.015774][T19242] netlink: 'syz.1.3229': attribute type 1 has an invalid length. [ 452.082465][T19234] batadv_slave_1: left promiscuous mode [ 452.546627][T19269] netlink: 'syz.3.3238': attribute type 10 has an invalid length. [ 452.710284][T19269] xt_connbytes: Forcing CT accounting to be enabled [ 452.802122][T19272] syzkaller0: entered promiscuous mode [ 452.840190][T19272] syzkaller0: entered allmulticast mode [ 453.074785][T19281] sctp: [Deprecated]: syz.2.3241 (pid 19281) Use of int in maxseg socket option. [ 453.074785][T19281] Use struct sctp_assoc_value instead [ 454.028722][T19294] __nla_validate_parse: 3 callbacks suppressed [ 454.028778][T19294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3246'. [ 454.297503][ T26] block nbd6: Possible stuck request ffff8880275f5080: control (read@0,4096B). Runtime 120 seconds [ 454.421726][T19298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3247'. [ 456.975056][ T6970] batadv1: left promiscuous mode [ 457.081323][T19306] netlink: 4084 bytes leftover after parsing attributes in process `syz.3.3248'. [ 457.293690][T19327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3251'. [ 457.437320][T19331] bridge_slave_0: left allmulticast mode [ 457.437378][T19331] bridge_slave_0: left promiscuous mode [ 457.437611][T19331] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.451004][T19317] netlink: 'syz.1.3252': attribute type 1 has an invalid length. [ 457.486539][T19331] bridge_slave_1: left allmulticast mode [ 457.486588][T19331] bridge_slave_1: left promiscuous mode [ 457.486790][T19331] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.509348][T19331] bond0: (slave bond_slave_0): Releasing backup interface [ 457.546522][T19331] bond0: (slave bond_slave_1): Releasing backup interface [ 457.567309][T19331] team0: Port device team_slave_0 removed [ 457.581738][T19331] team0: Port device team_slave_1 removed [ 457.588760][T19331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.588802][T19331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.590513][T19331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.590534][T19331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.598906][T19331] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 457.687856][T19317] 8021q: adding VLAN 0 to HW filter on device bond6 [ 457.712836][T19329] bond6: (slave gretap0): Enslaving as a backup interface with an up link [ 457.797347][ T722] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 457.851446][T19345] syzkaller0: entered promiscuous mode [ 457.851486][T19345] syzkaller0: entered allmulticast mode [ 457.868946][T19345] FAULT_INJECTION: forcing a failure. [ 457.868946][T19345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.883596][T19345] CPU: 0 UID: 0 PID: 19345 Comm: syz.2.3257 Not tainted syzkaller #0 PREEMPT(full) [ 457.883625][T19345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.883637][T19345] Call Trace: [ 457.883645][T19345] [ 457.883654][T19345] dump_stack_lvl+0xe8/0x150 [ 457.883691][T19345] should_fail_ex+0x410/0x560 [ 457.883727][T19345] _copy_from_iter+0x3b0/0x1660 [ 457.883768][T19345] ? __pfx__copy_from_iter+0x10/0x10 [ 457.883801][T19345] ? dev_get_by_index+0x22/0x2d0 [ 457.883959][T19345] ? dev_get_by_index+0x22/0x2d0 [ 457.883990][T19345] packet_sendmsg+0x2eb0/0x4f80 [ 457.884104][T19345] ? up_write+0x19d/0x4a0 [ 457.884133][T19345] ? __lock_acquire+0x6df/0x2e50 [ 457.884155][T19345] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 457.884182][T19345] ? __pfx_process_measurement+0x10/0x10 [ 457.884271][T19345] ? lock_acquire+0x115/0x350 [ 457.884291][T19345] ? __lock_acquire+0x6df/0x2e50 [ 457.884319][T19345] ? __pfx_packet_sendmsg+0x10/0x10 [ 457.884340][T19345] ? aa_sk_perm+0x713/0x900 [ 457.884357][T19345] ? __lock_acquire+0x6df/0x2e50 [ 457.884379][T19345] ? lockdep_unlock+0x60/0xd0 [ 457.884405][T19345] ? __pfx_aa_sk_perm+0x10/0x10 [ 457.884425][T19345] ? aa_sock_msg_perm+0x144/0x210 [ 457.884450][T19345] ? apparmor_socket_sendmsg+0x98/0x360 [ 457.884475][T19345] ? __pfx_packet_sendmsg+0x10/0x10 [ 457.884497][T19345] sock_sendmsg_nosec+0x13a/0x180 [ 457.884524][T19345] ____sys_sendmsg+0x54e/0x850 [ 457.884545][T19345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.884569][T19345] ? import_iovec+0x73/0xa0 [ 457.884589][T19345] ___sys_sendmsg+0x2a5/0x360 [ 457.884604][T19345] ? __lock_acquire+0x6df/0x2e50 [ 457.884623][T19345] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.884668][T19345] ? __fget_files+0x2a/0x420 [ 457.884689][T19345] ? __fget_files+0x3a2/0x420 [ 457.884716][T19345] __x64_sys_sendmsg+0x1b1/0x290 [ 457.884735][T19345] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.884769][T19345] do_syscall_64+0x166/0x520 [ 457.884794][T19345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.884811][T19345] ? clear_bhb_loop+0x70/0xc0 [ 457.884830][T19345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.884847][T19345] RIP: 0033:0x7f8afcf9e159 [ 457.884877][T19345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.884892][T19345] RSP: 002b:00007f8afddd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.884912][T19345] RAX: ffffffffffffffda RBX: 00007f8afd225fa0 RCX: 00007f8afcf9e159 [ 457.884922][T19345] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 457.884932][T19345] RBP: 00007f8afddd3090 R08: 0000000000000000 R09: 0000000000000000 [ 457.884942][T19345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.884952][T19345] R13: 00007f8afd226038 R14: 00007f8afd225fa0 R15: 00007ffc3b26cb48 [ 457.884983][T19345] [ 457.910275][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3256'. [ 457.917446][ T722] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 457.919690][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3256'. [ 457.921249][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3256'. [ 457.973574][T19347] syzkaller0: entered promiscuous mode [ 457.973600][T19347] syzkaller0: entered allmulticast mode [ 458.430148][T19366] netlink: 'syz.0.3262': attribute type 4 has an invalid length. [ 458.712295][T19376] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3263'. [ 459.009849][T19386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3266'. [ 459.562729][T19402] sctp: [Deprecated]: syz.4.3268 (pid 19402) Use of int in max_burst socket option. [ 459.562729][T19402] Use struct sctp_assoc_value instead [ 459.680666][T19407] syzkaller0: entered promiscuous mode [ 459.680706][T19407] syzkaller0: entered allmulticast mode [ 459.698678][T19405] netlink: 'syz.2.3272': attribute type 30 has an invalid length. [ 459.709791][T19407] FAULT_INJECTION: forcing a failure. [ 459.709791][T19407] name failslab, interval 1, probability 0, space 0, times 0 [ 459.726337][T19407] CPU: 0 UID: 0 PID: 19407 Comm: syz.1.3271 Not tainted syzkaller #0 PREEMPT(full) [ 459.726367][T19407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 459.726379][T19407] Call Trace: [ 459.726387][T19407] [ 459.726395][T19407] dump_stack_lvl+0xe8/0x150 [ 459.726429][T19407] should_fail_ex+0x410/0x560 [ 459.726462][T19407] ? __alloc_skb+0x1db/0x7a0 [ 459.726569][T19407] should_failslab+0xa8/0x100 [ 459.726594][T19407] ? __alloc_skb+0x1db/0x7a0 [ 459.726618][T19407] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 459.726646][T19407] ? __alloc_skb+0x18d/0x7a0 [ 459.726672][T19407] ? __alloc_skb+0x1db/0x7a0 [ 459.726702][T19407] __alloc_skb+0x1db/0x7a0 [ 459.726729][T19407] alloc_skb_with_frags+0xc6/0x760 [ 459.726757][T19407] sock_alloc_send_pskb+0x878/0x990 [ 459.726804][T19407] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 459.726825][T19407] ? dev_get_by_index+0x22/0x2d0 [ 459.726845][T19407] ? dev_get_by_index+0x22/0x2d0 [ 459.726870][T19407] packet_sendmsg+0x31bb/0x4f80 [ 459.726891][T19407] ? up_write+0x19d/0x4a0 [ 459.726922][T19407] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 459.726950][T19407] ? __pfx_process_measurement+0x10/0x10 [ 459.726980][T19407] ? lock_acquire+0x115/0x350 [ 459.727001][T19407] ? __lock_acquire+0x6df/0x2e50 [ 459.727027][T19407] ? __pfx_packet_sendmsg+0x10/0x10 [ 459.727048][T19407] ? aa_sk_perm+0x713/0x900 [ 459.727064][T19407] ? __lock_acquire+0x6df/0x2e50 [ 459.727087][T19407] ? lockdep_unlock+0x66/0xd0 [ 459.727112][T19407] ? __pfx_aa_sk_perm+0x10/0x10 [ 459.727133][T19407] ? aa_sock_msg_perm+0x144/0x210 [ 459.727156][T19407] ? apparmor_socket_sendmsg+0x98/0x360 [ 459.727196][T19407] ? __pfx_packet_sendmsg+0x10/0x10 [ 459.727219][T19407] sock_sendmsg_nosec+0x13a/0x180 [ 459.727246][T19407] ____sys_sendmsg+0x54e/0x850 [ 459.727271][T19407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.727302][T19407] ? import_iovec+0x73/0xa0 [ 459.727326][T19407] ___sys_sendmsg+0x2a5/0x360 [ 459.727344][T19407] ? __lock_acquire+0x6df/0x2e50 [ 459.727366][T19407] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.727418][T19407] ? __fget_files+0x2a/0x420 [ 459.727441][T19407] ? __fget_files+0x3a2/0x420 [ 459.727470][T19407] __x64_sys_sendmsg+0x1b1/0x290 [ 459.727490][T19407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.727527][T19407] do_syscall_64+0x166/0x520 [ 459.727550][T19407] ? trace_irq_disable+0x3b/0x140 [ 459.727566][T19407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.727582][T19407] ? clear_bhb_loop+0x70/0xc0 [ 459.727603][T19407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.727618][T19407] RIP: 0033:0x7f8c83b9e159 [ 459.727636][T19407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.727650][T19407] RSP: 002b:00007f8c84aec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.727669][T19407] RAX: ffffffffffffffda RBX: 00007f8c83e25fa0 RCX: 00007f8c83b9e159 [ 459.727681][T19407] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 459.727692][T19407] RBP: 00007f8c84aec090 R08: 0000000000000000 R09: 0000000000000000 [ 459.727703][T19407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.727714][T19407] R13: 00007f8c83e26038 R14: 00007f8c83e25fa0 R15: 00007ffe540d62b8 [ 459.727741][T19407] [ 460.202666][T19420] veth2: entered allmulticast mode [ 460.276611][T19414] syzkaller0: entered promiscuous mode [ 460.282288][T19414] syzkaller0: entered allmulticast mode [ 460.519656][T19429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3278'. [ 460.519716][T19429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3278'. [ 460.847007][T19429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3278'. [ 461.056987][T15511] udevd[15511]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 464.237337][T19433] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3279'. [ 464.557279][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3283'. [ 464.849521][T19476] syzkaller0: entered promiscuous mode [ 464.855814][T19476] syzkaller0: entered allmulticast mode [ 464.865517][T19476] FAULT_INJECTION: forcing a failure. [ 464.865517][T19476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.879460][T19476] CPU: 0 UID: 0 PID: 19476 Comm: syz.3.3287 Not tainted syzkaller #0 PREEMPT(full) [ 464.879491][T19476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.879505][T19476] Call Trace: [ 464.879514][T19476] [ 464.879524][T19476] dump_stack_lvl+0xe8/0x150 [ 464.879561][T19476] should_fail_ex+0x410/0x560 [ 464.879594][T19476] _copy_from_iter+0x3b0/0x1660 [ 464.879676][T19476] ? __pfx__copy_from_iter+0x10/0x10 [ 464.879735][T19476] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 464.879763][T19476] skb_copy_datagram_from_iter+0xe6/0x720 [ 464.879787][T19476] ? dev_get_by_index+0x22/0x2d0 [ 464.879811][T19476] ? skb_put+0x112/0x210 [ 464.879831][T19476] packet_sendmsg+0x35e2/0x4f80 [ 464.879857][T19476] ? up_write+0x19d/0x4a0 [ 464.879893][T19476] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 464.879922][T19476] ? __pfx_process_measurement+0x10/0x10 [ 464.879956][T19476] ? lock_acquire+0x115/0x350 [ 464.879978][T19476] ? __lock_acquire+0x6df/0x2e50 [ 464.880006][T19476] ? __pfx_packet_sendmsg+0x10/0x10 [ 464.880029][T19476] ? aa_sk_perm+0x713/0x900 [ 464.880045][T19476] ? __lock_acquire+0x6df/0x2e50 [ 464.880068][T19476] ? lockdep_unlock+0x66/0xd0 [ 464.880096][T19476] ? __pfx_aa_sk_perm+0x10/0x10 [ 464.880118][T19476] ? aa_sock_msg_perm+0x144/0x210 [ 464.880150][T19476] ? apparmor_socket_sendmsg+0x98/0x360 [ 464.880179][T19476] ? __pfx_packet_sendmsg+0x10/0x10 [ 464.880198][T19476] sock_sendmsg_nosec+0x13a/0x180 [ 464.880225][T19476] ____sys_sendmsg+0x54e/0x850 [ 464.880248][T19476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.880273][T19476] ? import_iovec+0x73/0xa0 [ 464.880295][T19476] ___sys_sendmsg+0x2a5/0x360 [ 464.880312][T19476] ? __lock_acquire+0x6df/0x2e50 [ 464.880333][T19476] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.880382][T19476] ? __fget_files+0x2a/0x420 [ 464.880407][T19476] ? __fget_files+0x3a2/0x420 [ 464.880441][T19476] __x64_sys_sendmsg+0x1b1/0x290 [ 464.880466][T19476] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.880538][T19476] do_syscall_64+0x166/0x520 [ 464.880567][T19476] ? trace_irq_disable+0x3b/0x140 [ 464.880603][T19476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.880624][T19476] ? clear_bhb_loop+0x70/0xc0 [ 464.880647][T19476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.880666][T19476] RIP: 0033:0x7fbfc839e159 [ 464.880686][T19476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.880702][T19476] RSP: 002b:00007fbfc65f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.880804][T19476] RAX: ffffffffffffffda RBX: 00007fbfc8625fa0 RCX: 00007fbfc839e159 [ 464.880819][T19476] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 464.880842][T19476] RBP: 00007fbfc65f6090 R08: 0000000000000000 R09: 0000000000000000 [ 464.880855][T19476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.880866][T19476] R13: 00007fbfc8626038 R14: 00007fbfc8625fa0 R15: 00007ffd59a3dff8 [ 464.880898][T19476] [ 465.508304][T19461] ip_tables: iptables: counters copy to user failed while replacing table [ 465.793153][T19498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3294'. [ 465.925219][T19504] wg2 speed is unknown, defaulting to 1000 [ 465.925433][T19504] wg2 speed is unknown, defaulting to 1000 [ 465.928448][T19504] wg2 speed is unknown, defaulting to 1000 [ 465.960528][T19504] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 465.976209][T19504] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 465.994875][T19504] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 466.021795][T19504] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 466.274669][T19526] netlink: 'syz.1.3299': attribute type 1 has an invalid length. [ 466.533314][T19504] wg2 speed is unknown, defaulting to 1000 [ 466.684156][T19504] wg2 speed is unknown, defaulting to 1000 [ 466.889881][T19504] wg2 speed is unknown, defaulting to 1000 [ 466.891720][T19504] wg2 speed is unknown, defaulting to 1000 [ 466.893457][T19504] wg2 speed is unknown, defaulting to 1000 [ 466.904770][T19504] wg2 speed is unknown, defaulting to 1000 [ 466.906734][T19504] wg2 speed is unknown, defaulting to 1000 [ 466.923273][T19504] wg2 speed is unknown, defaulting to 1000 [ 466.942853][T19504] wg2 speed is unknown, defaulting to 1000 [ 466.980584][T19540] syzkaller0: entered promiscuous mode [ 466.980630][T19540] syzkaller0: entered allmulticast mode [ 466.992088][T19540] FAULT_INJECTION: forcing a failure. [ 466.992088][T19540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.992121][T19540] CPU: 1 UID: 0 PID: 19540 Comm: syz.0.3302 Not tainted syzkaller #0 PREEMPT(full) [ 466.992142][T19540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.992153][T19540] Call Trace: [ 466.992160][T19540] [ 466.992168][T19540] dump_stack_lvl+0xe8/0x150 [ 466.992201][T19540] should_fail_ex+0x410/0x560 [ 466.992235][T19540] _copy_from_iter+0x3b0/0x1660 [ 466.992274][T19540] ? __pfx__copy_from_iter+0x10/0x10 [ 466.992308][T19540] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 466.992342][T19540] skb_copy_datagram_from_iter+0xe6/0x720 [ 466.992367][T19540] ? dev_get_by_index+0x22/0x2d0 [ 466.992389][T19540] ? skb_put+0x112/0x210 [ 466.992407][T19540] packet_sendmsg+0x35e2/0x4f80 [ 466.992448][T19540] ? up_write+0x19d/0x4a0 [ 466.992481][T19540] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 466.992508][T19540] ? __pfx_process_measurement+0x10/0x10 [ 466.992537][T19540] ? lock_acquire+0x115/0x350 [ 466.992555][T19540] ? __lock_acquire+0x6df/0x2e50 [ 466.992580][T19540] ? __pfx_packet_sendmsg+0x10/0x10 [ 466.992603][T19540] ? aa_sk_perm+0x713/0x900 [ 466.992618][T19540] ? __lock_acquire+0x6df/0x2e50 [ 466.992641][T19540] ? lockdep_unlock+0x66/0xd0 [ 466.992664][T19540] ? __pfx_aa_sk_perm+0x10/0x10 [ 466.992680][T19540] ? aa_sock_msg_perm+0x144/0x210 [ 466.992703][T19540] ? apparmor_socket_sendmsg+0x98/0x360 [ 466.992731][T19540] ? __pfx_packet_sendmsg+0x10/0x10 [ 466.992754][T19540] sock_sendmsg_nosec+0x13a/0x180 [ 466.992781][T19540] ____sys_sendmsg+0x54e/0x850 [ 466.992804][T19540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.992831][T19540] ? import_iovec+0x73/0xa0 [ 466.992853][T19540] ___sys_sendmsg+0x2a5/0x360 [ 466.992871][T19540] ? __lock_acquire+0x6df/0x2e50 [ 466.992893][T19540] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.992944][T19540] ? __fget_files+0x2a/0x420 [ 466.992968][T19540] ? __fget_files+0x3a2/0x420 [ 466.993004][T19540] __x64_sys_sendmsg+0x1b1/0x290 [ 466.993027][T19540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.993062][T19540] do_syscall_64+0x166/0x520 [ 466.993088][T19540] ? trace_irq_disable+0x3b/0x140 [ 466.993105][T19540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.993122][T19540] ? clear_bhb_loop+0x70/0xc0 [ 466.993144][T19540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.993161][T19540] RIP: 0033:0x7fc9f6d9e159 [ 466.993179][T19540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.993192][T19540] RSP: 002b:00007fc9f4ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.993210][T19540] RAX: ffffffffffffffda RBX: 00007fc9f7025fa0 RCX: 00007fc9f6d9e159 [ 466.993222][T19540] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 466.993232][T19540] RBP: 00007fc9f4ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 466.993242][T19540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.993252][T19540] R13: 00007fc9f7026038 R14: 00007fc9f7025fa0 R15: 00007ffdda51d508 [ 466.993282][T19540] [ 467.480777][T19545] tipc: Started in network mode [ 467.480834][T19545] tipc: Node identity ac14140f, cluster identity 4711 [ 467.481069][T19545] tipc: New replicast peer: 255.255.255.255 [ 467.481752][T19545] tipc: Enabled bearer , priority 10 [ 467.544789][T19559] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3308'. [ 467.686731][T19564] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 467.891320][T19581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3315'. [ 467.919489][T19582] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3314'. [ 468.200548][T19594] netlink: 'syz.1.3316': attribute type 4 has an invalid length. [ 468.392020][T19600] syzkaller0: entered promiscuous mode [ 468.392065][T19600] syzkaller0: entered allmulticast mode [ 468.403115][T19600] FAULT_INJECTION: forcing a failure. [ 468.403115][T19600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.403146][T19600] CPU: 0 UID: 0 PID: 19600 Comm: syz.2.3319 Not tainted syzkaller #0 PREEMPT(full) [ 468.403165][T19600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.403176][T19600] Call Trace: [ 468.403184][T19600] [ 468.403192][T19600] dump_stack_lvl+0xe8/0x150 [ 468.403223][T19600] should_fail_ex+0x410/0x560 [ 468.403255][T19600] _copy_from_iter+0x4ff/0x1660 [ 468.403293][T19600] ? __pfx__copy_from_iter+0x10/0x10 [ 468.403328][T19600] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 468.403353][T19600] skb_copy_datagram_from_iter+0xe6/0x720 [ 468.403376][T19600] ? dev_get_by_index+0x22/0x2d0 [ 468.403399][T19600] ? skb_put+0x112/0x210 [ 468.403418][T19600] packet_sendmsg+0x35e2/0x4f80 [ 468.403443][T19600] ? up_write+0x19d/0x4a0 [ 468.403476][T19600] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 468.403503][T19600] ? __pfx_process_measurement+0x10/0x10 [ 468.403533][T19600] ? lock_acquire+0x115/0x350 [ 468.403552][T19600] ? __lock_acquire+0x6df/0x2e50 [ 468.403578][T19600] ? __pfx_packet_sendmsg+0x10/0x10 [ 468.403600][T19600] ? aa_sk_perm+0x713/0x900 [ 468.403615][T19600] ? __lock_acquire+0x6df/0x2e50 [ 468.403648][T19600] ? lockdep_unlock+0x66/0xd0 [ 468.403673][T19600] ? __pfx_aa_sk_perm+0x10/0x10 [ 468.403693][T19600] ? aa_sock_msg_perm+0x144/0x210 [ 468.403716][T19600] ? apparmor_socket_sendmsg+0x98/0x360 [ 468.403744][T19600] ? __pfx_packet_sendmsg+0x10/0x10 [ 468.403766][T19600] sock_sendmsg_nosec+0x13a/0x180 [ 468.403792][T19600] ____sys_sendmsg+0x54e/0x850 [ 468.403824][T19600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.403851][T19600] ? import_iovec+0x73/0xa0 [ 468.403872][T19600] ___sys_sendmsg+0x2a5/0x360 [ 468.403889][T19600] ? __lock_acquire+0x6df/0x2e50 [ 468.403910][T19600] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.403961][T19600] ? __fget_files+0x2a/0x420 [ 468.403983][T19600] ? __fget_files+0x3a2/0x420 [ 468.404014][T19600] __x64_sys_sendmsg+0x1b1/0x290 [ 468.404036][T19600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.404074][T19600] do_syscall_64+0x166/0x520 [ 468.404098][T19600] ? trace_irq_disable+0x3b/0x140 [ 468.404115][T19600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.404133][T19600] ? clear_bhb_loop+0x70/0xc0 [ 468.404155][T19600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.404172][T19600] RIP: 0033:0x7f8afcf9e159 [ 468.404189][T19600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.404204][T19600] RSP: 002b:00007f8afddd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.404223][T19600] RAX: ffffffffffffffda RBX: 00007f8afd225fa0 RCX: 00007f8afcf9e159 [ 468.404237][T19600] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 468.404248][T19600] RBP: 00007f8afddd3090 R08: 0000000000000000 R09: 0000000000000000 [ 468.404258][T19600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.404269][T19600] R13: 00007f8afd226038 R14: 00007f8afd225fa0 R15: 00007ffc3b26cb48 [ 468.404298][T19600] [ 468.822878][T14564] tipc: Node number set to 2886997007 [ 469.004687][T19616] netlink: 'syz.4.3323': attribute type 7 has an invalid length. [ 469.099077][T19619] macsec0: entered promiscuous mode [ 469.105580][T19619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3325'. [ 469.117993][T19619] veth1_macvtap: left promiscuous mode [ 469.152609][T19619] macsec0 (unregistering): left promiscuous mode [ 469.422933][T19631] nbd: must specify a device to reconfigure [ 469.474416][T19635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3329'. [ 469.520815][T19635] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 469.590867][T19638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3330'. [ 469.835548][T19643] syzkaller0: entered promiscuous mode [ 469.835594][T19643] syzkaller0: entered allmulticast mode [ 469.996556][T19649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3333'. [ 470.188554][T19657] syzkaller0: entered promiscuous mode [ 470.188591][T19657] syzkaller0: entered allmulticast mode [ 470.203616][T19657] FAULT_INJECTION: forcing a failure. [ 470.203616][T19657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.217679][T19657] CPU: 1 UID: 0 PID: 19657 Comm: syz.1.3335 Not tainted syzkaller #0 PREEMPT(full) [ 470.217705][T19657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 470.217715][T19657] Call Trace: [ 470.217723][T19657] [ 470.217731][T19657] dump_stack_lvl+0xe8/0x150 [ 470.217760][T19657] should_fail_ex+0x410/0x560 [ 470.217792][T19657] _copy_from_iter+0x3b0/0x1660 [ 470.217830][T19657] ? __pfx__copy_from_iter+0x10/0x10 [ 470.217865][T19657] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 470.217890][T19657] skb_copy_datagram_from_iter+0xe6/0x720 [ 470.217915][T19657] ? dev_get_by_index+0x22/0x2d0 [ 470.217935][T19657] ? skb_put+0x112/0x210 [ 470.217950][T19657] packet_sendmsg+0x35e2/0x4f80 [ 470.217969][T19657] ? up_write+0x19d/0x4a0 [ 470.217995][T19657] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 470.218018][T19657] ? __pfx_process_measurement+0x10/0x10 [ 470.218042][T19657] ? lock_acquire+0x115/0x350 [ 470.218058][T19657] ? __lock_acquire+0x6df/0x2e50 [ 470.218078][T19657] ? __pfx_packet_sendmsg+0x10/0x10 [ 470.218095][T19657] ? aa_sk_perm+0x713/0x900 [ 470.218116][T19657] ? __lock_acquire+0x6df/0x2e50 [ 470.218134][T19657] ? lockdep_unlock+0x66/0xd0 [ 470.218153][T19657] ? __pfx_aa_sk_perm+0x10/0x10 [ 470.218169][T19657] ? aa_sock_msg_perm+0x144/0x210 [ 470.218190][T19657] ? apparmor_socket_sendmsg+0x98/0x360 [ 470.218212][T19657] ? __pfx_packet_sendmsg+0x10/0x10 [ 470.218229][T19657] sock_sendmsg_nosec+0x13a/0x180 [ 470.218251][T19657] ____sys_sendmsg+0x54e/0x850 [ 470.218270][T19657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.218292][T19657] ? import_iovec+0x73/0xa0 [ 470.218309][T19657] ___sys_sendmsg+0x2a5/0x360 [ 470.218323][T19657] ? __lock_acquire+0x6df/0x2e50 [ 470.218340][T19657] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.218381][T19657] ? __fget_files+0x2a/0x420 [ 470.218398][T19657] ? __fget_files+0x3a2/0x420 [ 470.218424][T19657] __x64_sys_sendmsg+0x1b1/0x290 [ 470.218440][T19657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 470.218472][T19657] do_syscall_64+0x166/0x520 [ 470.218491][T19657] ? trace_irq_disable+0x3b/0x140 [ 470.218505][T19657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.218519][T19657] ? clear_bhb_loop+0x70/0xc0 [ 470.218537][T19657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.218551][T19657] RIP: 0033:0x7f8c83b9e159 [ 470.218565][T19657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.218578][T19657] RSP: 002b:00007f8c84aec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.218594][T19657] RAX: ffffffffffffffda RBX: 00007f8c83e25fa0 RCX: 00007f8c83b9e159 [ 470.218605][T19657] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 470.218616][T19657] RBP: 00007f8c84aec090 R08: 0000000000000000 R09: 0000000000000000 [ 470.218624][T19657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.218632][T19657] R13: 00007f8c83e26038 R14: 00007f8c83e25fa0 R15: 00007ffe540d62b8 [ 470.218656][T19657] [ 470.343968][T19665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3337'. [ 470.630626][T19686] nbd: must specify a device to reconfigure [ 470.746785][T19676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3338'. [ 470.815400][T19671] syzkaller0: entered promiscuous mode [ 470.821169][T19671] syzkaller0: entered allmulticast mode [ 477.728649][T19728] vlan3: entered allmulticast mode [ 477.735868][T19728] bond0: entered allmulticast mode [ 477.735903][T19728] bond_slave_0: entered allmulticast mode [ 477.735925][T19728] bond_slave_1: entered allmulticast mode [ 477.892671][T19755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.080544][T19766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3359'. [ 478.190432][T19774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3360'. [ 478.307202][T19780] Bluetooth: hci0: unsupported parameter 5135 [ 478.307250][T19780] Bluetooth: hci0: unsupported parameter 8192 [ 478.307875][T19780] Bluetooth: hci0: unsupported parameter 5135 [ 478.307894][T19780] Bluetooth: hci0: unsupported parameter 8192 [ 478.633107][T19798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3365'. [ 478.802095][T19807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.968293][ T4006] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 481.822485][T19823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.187342][T19862] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3377'. [ 483.638490][T19865] ÿ: renamed from bond_slave_0 [ 483.845560][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3380'. [ 484.247670][T19904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 484.360858][ T26] block nbd6: Possible stuck request ffff8880275f5080: control (read@0,4096B). Runtime 150 seconds [ 484.477132][T19924] can: request_module (can-proto-0) failed. [ 484.497299][T19926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3390'. [ 484.767055][T19951] ip_tables: iptables: counters copy to user failed while replacing table [ 484.783852][T19951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3398'. [ 485.116822][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3400'. [ 485.116881][T19971] netlink: 'syz.4.3400': attribute type 30 has an invalid length. [ 485.149866][T19971] vxlan0: entered promiscuous mode [ 485.155467][T19971] vxlan0: entered allmulticast mode [ 485.164412][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.165431][ T50] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.165474][ T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.165505][ T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.173525][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3400'. [ 485.173562][T19971] netlink: 'syz.4.3400': attribute type 30 has an invalid length. [ 485.227079][T19971] vxlan1: entered promiscuous mode [ 485.232558][T19971] vxlan1: entered allmulticast mode [ 485.321218][T19976] netlink: 'syz.4.3402': attribute type 10 has an invalid length. [ 487.675151][T19945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.930364][T20014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3412'. [ 487.989875][T20014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3412'. [ 488.038233][ T6965] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.084537][ T6965] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.091823][T10469] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.091868][T10469] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.144998][T20025] netlink: 400 bytes leftover after parsing attributes in process `syz.1.3415'. [ 488.191673][T20030] netlink: 'syz.3.3416': attribute type 1 has an invalid length. [ 488.681767][T20012] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 488.808206][T20030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.843247][T20033] bond2: (slave veth3): Enslaving as an active interface with a down link [ 488.860590][T20035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.867675][T20035] bond2: (slave batadv0): making interface the new active one [ 488.870528][T20035] batadv0: entered promiscuous mode [ 488.875437][T20035] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 489.169181][T20061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3420'. [ 489.275071][T20066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3423'. [ 489.293890][T20063] bridge_slave_0: left allmulticast mode [ 489.300007][T20063] bridge_slave_0: left promiscuous mode [ 489.306738][T20063] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.325253][T20063] bridge_slave_1: left allmulticast mode [ 489.331527][T20063] bridge_slave_1: left promiscuous mode [ 489.337563][T20063] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.351060][T20063] bond0: (slave bond_slave_0): Releasing backup interface [ 489.373774][T20063] bond0: (slave bond_slave_1): Releasing backup interface [ 489.409434][T20063] team0: Port device team_slave_0 removed [ 489.428463][T20063] team0: Port device team_slave_1 removed [ 489.430061][T20063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.430083][T20063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.437976][T20063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.438001][T20063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.448277][T20063] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 489.520673][T18836] syz1: Port: 1 Link DOWN [ 489.535286][T20054] syz_tun: entered allmulticast mode [ 489.584595][T20078] block nbd2: not configured, cannot reconfigure [ 489.592105][T20051] syz_tun: left allmulticast mode [ 489.768696][T20085] netlink: 'syz.1.3426': attribute type 1 has an invalid length. [ 489.809783][T20085] 8021q: adding VLAN 0 to HW filter on device bond9 [ 489.819048][T20088] netlink: 'syz.2.3427': attribute type 13 has an invalid length. [ 489.960472][T20085] macvlan2: entered promiscuous mode [ 489.960512][T20085] macvlan2: entered allmulticast mode [ 489.961231][T20085] bond9: entered allmulticast mode [ 489.961271][T20085] bond9: entered promiscuous mode [ 489.962490][T20085] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 489.969045][T20085] team0: Port device macvlan2 added [ 490.052836][T20094] bond9: (slave ip6gretap1): making interface the new active one [ 490.052870][T20094] ip6gretap1: entered promiscuous mode [ 490.059014][T20094] ip6gretap1: entered allmulticast mode [ 490.074466][T20094] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 490.191669][T20091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3429'. [ 490.200877][T20105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3430'. [ 490.321324][T20107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3431'. [ 490.703911][T20117] veth1_virt_wifi: entered allmulticast mode [ 490.961474][T20141] IPv6: sit1: Disabled Multicast RS [ 491.133326][T20147] veth1_to_bond: entered allmulticast mode [ 491.319170][T20146] pim6reg: entered allmulticast mode [ 491.319403][T20146] pim6reg: left allmulticast mode [ 491.370198][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3441'. [ 491.384509][T20162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3444'. [ 491.428021][T20145] veth1_to_bond: left allmulticast mode [ 491.551930][T20168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3445'. [ 491.823942][T20173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3446'. [ 492.091301][T20184] veth1_virt_wifi: entered allmulticast mode [ 492.204831][T20190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3460'. [ 492.305120][T20204] ip6erspan0: entered allmulticast mode [ 492.588854][T20210] netlink: 'syz.2.3457': attribute type 4 has an invalid length. [ 492.864982][T20231] netlink: 'syz.3.3463': attribute type 1 has an invalid length. [ 492.920947][T20231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 493.092682][T20231] bond3: (slave dummy0): making interface the new active one [ 493.106799][T20231] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 493.213736][T20246] netlink: 'syz.4.3468': attribute type 1 has an invalid length. [ 493.395566][ T5634] Bluetooth: hci3: command tx timeout [ 493.588379][T20270] sctp: [Deprecated]: syz.3.3475 (pid 20270) Use of struct sctp_assoc_value in delayed_ack socket option. [ 493.588379][T20270] Use struct sctp_sack_info instead [ 493.669495][T20272] netlink: 'syz.1.3479': attribute type 62 has an invalid length. [ 493.834495][T20282] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 493.996717][T20285] ÿ: renamed from bond_slave_0 [ 494.119224][T20288] syzkaller1: entered promiscuous mode [ 494.119268][T20288] syzkaller1: entered allmulticast mode [ 495.474253][ T5634] Bluetooth: hci3: command tx timeout [ 496.122348][T20343] __nla_validate_parse: 6 callbacks suppressed [ 496.130899][T20343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3492'. [ 496.148674][T20348] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3493'. [ 496.212894][T20349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3491'. [ 496.282999][T20353] netlink: 'syz.0.3497': attribute type 1 has an invalid length. [ 496.383191][T20360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3497'. [ 496.403174][T20353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.417384][T20357] hsr0: entered allmulticast mode [ 496.417412][T20357] hsr_slave_0: entered allmulticast mode [ 496.417443][T20357] hsr_slave_1: entered allmulticast mode [ 496.536778][T20353] bond1: (slave dummy0): making interface the new active one [ 496.549514][T20353] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 496.651090][T20362] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 496.651141][T20362] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 496.777834][T20357] bond4: option resend_igmp: invalid value (2878) [ 496.784827][T20357] bond4: option resend_igmp: allowed values 0 - 255 [ 496.793853][T20357] bond4 (unregistering): Released all slaves [ 497.072439][T20381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3500'. [ 497.683621][T20419] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.3506'. [ 497.810594][T20424] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20004 [ 497.873380][T20421] netlink: 'syz.3.3507': attribute type 16 has an invalid length. [ 497.873421][T20421] netlink: 'syz.3.3507': attribute type 17 has an invalid length. [ 498.093918][T20421] hsr0: left allmulticast mode [ 498.093967][T20421] hsr_slave_0: left allmulticast mode [ 498.093982][T20421] hsr_slave_1: left allmulticast mode [ 498.158711][T20421] mac80211_hwsim hwsim41 wlan0: left promiscuous mode [ 498.158759][T20421] mac80211_hwsim hwsim41 wlan0: left allmulticast mode [ 498.195632][T20421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.212153][T20421] gretap1: left allmulticast mode [ 498.257317][T20421] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 498.286103][T20421] ip6erspan0: left allmulticast mode [ 498.365352][T10472] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.366835][T10472] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 498.368826][ T4006] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.368883][ T4006] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.368992][ T4006] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.635565][T20462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3520'. [ 498.720465][T20465] netlink: 'syz.1.3522': attribute type 210 has an invalid length. [ 498.937934][T20473] tunl0: Caught tx_queue_len zero misconfig [ 499.151946][T20479] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 499.217854][T20460] wg2 speed is unknown, defaulting to 1000 [ 499.355174][T20485] netlink: 'syz.2.3529': attribute type 19 has an invalid length. [ 499.355213][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3529'. [ 499.374246][T20485] netlink: 'syz.2.3529': attribute type 19 has an invalid length. [ 499.383657][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3529'. [ 499.634595][T20501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3533'. [ 499.645939][T20501] bridge_slave_1: Caught tx_queue_len zero misconfig [ 500.016929][T10485] batadv0: left promiscuous mode [ 500.432050][T20524] syzkaller0: entered promiscuous mode [ 500.432090][T20524] syzkaller0: entered allmulticast mode [ 500.999852][T20553] ipvlan3: entered promiscuous mode [ 501.095362][T20549] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 501.151626][T20565] __nla_validate_parse: 1 callbacks suppressed [ 501.153441][T20565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3552'. [ 501.183740][T20565] block nbd3: Unsupported socket: should be TCP or UNIX. [ 501.198428][T20569] openvswitch: netlink: Missing valid actions attribute. [ 501.215145][T20569] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3554'. [ 501.228244][T20569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3554'. [ 501.351636][T20572] syzkaller0: entered promiscuous mode [ 501.351688][T20572] syzkaller0: entered allmulticast mode [ 501.421883][T20581] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 501.468724][T20581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3557'. [ 501.471713][T20581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3557'. [ 501.753581][T20583] veth5: entered promiscuous mode [ 501.753634][T20583] veth5: entered allmulticast mode [ 501.802089][T20584] veth7: entered promiscuous mode [ 501.802133][T20584] veth7: entered allmulticast mode [ 502.432202][T20604] netlink: 'syz.0.3566': attribute type 4 has an invalid length. [ 502.472048][T20604] netlink: 'syz.0.3566': attribute type 4 has an invalid length. [ 502.532402][T20604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3566'. [ 502.532446][T20604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3566'. [ 502.888228][T20617] syzkaller0: entered promiscuous mode [ 502.888264][T20617] syzkaller0: entered allmulticast mode [ 502.889296][T20608] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.3567'. [ 503.520595][T20631] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3573'. [ 503.572766][T20631] vlan2: entered allmulticast mode [ 503.580363][T20631] erspan0: entered allmulticast mode [ 503.628338][T20637] tipc: Cannot configure node identity twice [ 503.631685][T20638] bridge0: port 1(wlan1) entered blocking state [ 503.698350][T20638] bridge0: port 1(wlan1) entered disabled state [ 503.703309][T20638] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 503.724585][T20638] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 503.725321][T20638] bridge0: port 1(wlan1) entered blocking state [ 503.725500][T20638] bridge0: port 1(wlan1) entered forwarding state [ 503.731346][T20637] tipc: Enabled bearer , priority 10 [ 503.744843][T20640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3576'. [ 504.093969][T20653] syzkaller0: entered promiscuous mode [ 504.101155][T20653] syzkaller0: entered allmulticast mode [ 504.516758][ T6986] bridge0: port 1(wlan1) entered disabled state [ 504.572829][T20668] bond1: (slave dummy0): Releasing active interface [ 504.641671][T20668] bridge_slave_0: left allmulticast mode [ 504.649243][T20668] bridge_slave_0: left promiscuous mode [ 504.656238][T20668] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.683508][T20668] bridge_slave_1: left allmulticast mode [ 504.690381][T20668] bridge_slave_1: left promiscuous mode [ 504.696723][T20668] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.740316][T20668] bond0: (slave bond_slave_0): Releasing backup interface [ 504.755979][T20668] bond0: (slave bond_slave_1): Releasing backup interface [ 504.776888][T20668] team0: Port device team_slave_0 removed [ 504.795581][T20668] team0: Port device team_slave_1 removed [ 504.805689][T20668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.813418][T20668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.830022][T20668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.839819][T20668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.856434][T20668] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 504.951281][ T5790] tipc: Node number set to 40309702 [ 505.077276][T20682] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 505.931116][T20687] wg2 speed is unknown, defaulting to 1000 [ 505.948511][T20578] Set syz1 is full, maxelem 65536 reached [ 506.295299][ T5634] Bluetooth: hci3: link tx timeout [ 506.295558][ T5634] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 506.315473][ T5634] Bluetooth: hci3: link tx timeout [ 506.315509][ T5634] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 506.328473][ T5634] Bluetooth: hci3: link tx timeout [ 506.328494][ T5634] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 506.337724][ T5634] Bluetooth: hci3: link tx timeout [ 506.337752][ T5634] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 506.343023][ T5634] Bluetooth: hci3: link tx timeout [ 506.343044][ T5634] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 506.354190][ T5634] Bluetooth: hci3: link tx timeout [ 506.354210][ T5634] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 506.391175][ T5634] Bluetooth: hci3: link tx timeout [ 506.391218][ T5634] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 506.404369][ T5634] Bluetooth: hci3: link tx timeout [ 506.404391][ T5634] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 506.422777][ T5634] Bluetooth: hci3: link tx timeout [ 506.422821][ T5634] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 506.815195][T20739] xt_hashlimit: overflow, rate too high: 0 [ 507.236068][T20755] syz_tun: entered allmulticast mode [ 507.266945][T20751] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 507.301951][T20751] __nla_validate_parse: 5 callbacks suppressed [ 507.302007][T20751] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3607'. [ 507.449031][T20765] syz_tun (unregistering): left allmulticast mode [ 507.469442][T20761] erspan0: left allmulticast mode [ 507.472673][T20767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.488154][T20761] erspan0: left promiscuous mode [ 507.488410][T20761] bridge2: port 1(erspan0) entered disabled state [ 507.510676][T20761] bridge_slave_0: left allmulticast mode [ 507.516858][T20761] bridge_slave_0: left promiscuous mode [ 507.524478][T20761] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.851541][T20761] bridge_slave_1: left allmulticast mode [ 507.851571][T20761] bridge_slave_1: left promiscuous mode [ 507.852131][T20761] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.871934][T20761] bond0: (slave 17ÿ): Releasing backup interface [ 507.881073][T20761] ÿ: left allmulticast mode [ 507.890368][T20761] bond0: (slave bond_slave_1): Releasing backup interface [ 507.902673][T20761] bond_slave_1: left allmulticast mode [ 507.903361][T20761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.912125][T20761] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 508.284976][T20791] nbd: couldn't find a device at index 0 [ 508.285112][T20791] FAULT_INJECTION: forcing a failure. [ 508.285112][T20791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.285138][T20791] CPU: 1 UID: 0 PID: 20791 Comm: syz.0.3615 Not tainted syzkaller #0 PREEMPT(full) [ 508.285154][T20791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.285164][T20791] Call Trace: [ 508.285170][T20791] [ 508.285177][T20791] dump_stack_lvl+0xe8/0x150 [ 508.285205][T20791] should_fail_ex+0x410/0x560 [ 508.285239][T20791] _copy_to_user+0x31/0xb0 [ 508.285263][T20791] simple_read_from_buffer+0xe1/0x170 [ 508.285294][T20791] proc_fail_nth_read+0x1bb/0x230 [ 508.285321][T20791] ? common_file_perm+0x20e/0x2b0 [ 508.285345][T20791] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 508.285375][T20791] ? rw_verify_area+0x24a/0x4c0 [ 508.285401][T20791] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 508.285428][T20791] vfs_read+0x213/0xa80 [ 508.285459][T20791] ? __pfx___mutex_lock+0x10/0x10 [ 508.285488][T20791] ? __pfx_vfs_read+0x10/0x10 [ 508.285514][T20791] ? __fget_files+0x2a/0x420 [ 508.285543][T20791] ? __fget_files+0x3a2/0x420 [ 508.285565][T20791] ? __fget_files+0x2a/0x420 [ 508.285597][T20791] ksys_read+0x150/0x270 [ 508.285624][T20791] ? __pfx_ksys_read+0x10/0x10 [ 508.285661][T20791] do_syscall_64+0x166/0x520 [ 508.285687][T20791] ? trace_irq_disable+0x3b/0x140 [ 508.285709][T20791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.285728][T20791] ? clear_bhb_loop+0x70/0xc0 [ 508.285751][T20791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.285770][T20791] RIP: 0033:0x7fc9f6d5e98e [ 508.285787][T20791] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 508.285804][T20791] RSP: 002b:00007fc9f4ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 508.285823][T20791] RAX: ffffffffffffffda RBX: 00007fc9f4ff66c0 RCX: 00007fc9f6d5e98e [ 508.285838][T20791] RDX: 000000000000000f RSI: 00007fc9f4ff60a0 RDI: 0000000000000003 [ 508.285851][T20791] RBP: 00007fc9f4ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 508.285863][T20791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.285875][T20791] R13: 00007fc9f7026038 R14: 00007fc9f7025fa0 R15: 00007ffdda51d508 [ 508.285907][T20791] [ 508.356890][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 508.599640][T20790] trusted_key: syz.1.3616 sent an empty control message without MSG_MORE. [ 509.278479][T20835] Bluetooth: MGMT ver 1.23 [ 509.388034][T20832] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 510.321023][T20884] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 510.767977][T20903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3637'. [ 510.847720][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3637'. [ 511.499975][T20903] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 511.544682][T20903] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 512.091926][T20948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3645'. [ 512.092122][T20948] unsupported nla_type 140 [ 512.569654][T20960] syzkaller0: entered promiscuous mode [ 512.569700][T20960] syzkaller0: entered allmulticast mode [ 512.651855][T20965] netlink: 'syz.1.3649': attribute type 1 has an invalid length. [ 512.820620][T20965] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 513.060626][T20980] macsec1: entered promiscuous mode [ 513.060677][T20980] macsec1: entered allmulticast mode [ 513.087110][T20982] syzkaller0: entered promiscuous mode [ 513.092706][T20982] syzkaller0: entered allmulticast mode [ 513.102310][T20982] tipc: Started in network mode [ 513.107994][T20982] tipc: Node identity ae09417d30a, cluster identity 4711 [ 513.117692][T20982] tipc: Enabled bearer , priority 0 [ 513.125844][T20984] netlink: 'syz.2.3658': attribute type 4 has an invalid length. [ 513.130598][T20984] netlink: 'syz.2.3658': attribute type 1 has an invalid length. [ 513.197656][T20981] tipc: Resetting bearer [ 513.223530][T20981] tipc: Disabling bearer [ 513.260675][T20987] tipc: Enabled bearer , priority 0 [ 513.262684][T20988] tipc: Enabling of bearer rejected, already enabled [ 513.265799][T20987] syzkaller0: entered promiscuous mode [ 513.265819][T20987] syzkaller0: entered allmulticast mode [ 513.360237][T20987] tipc: Resetting bearer [ 513.366731][T20985] tipc: Resetting bearer [ 513.422883][T20985] tipc: Disabling bearer [ 513.625728][T21001] netlink: 'syz.4.3664': attribute type 11 has an invalid length. [ 513.698936][T21005] netlink: 'syz.4.3664': attribute type 1 has an invalid length. [ 513.841833][T21005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.921502][T21001] bond1: (slave veth5): Enslaving as an active interface with a down link [ 513.957615][T21010] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 513.965111][T21010] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 514.110737][T21016] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 514.178584][T21020] netlink: 'syz.1.3666': attribute type 7 has an invalid length. [ 514.208924][T21029] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 514.254918][T21038] netlink: 'syz.1.3666': attribute type 7 has an invalid length. [ 514.293260][T21020] netlink: 'syz.1.3666': attribute type 7 has an invalid length. [ 514.294354][ T722] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.294398][ T722] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.294431][ T722] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.294463][ T722] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.422081][T21038] netlink: 'syz.1.3666': attribute type 7 has an invalid length. [ 514.437563][ T26] block nbd6: Possible stuck request ffff8880275f5080: control (read@0,4096B). Runtime 180 seconds [ 514.498982][T21043] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3671'. [ 514.801499][T21057] netlink: 'syz.2.3675': attribute type 1 has an invalid length. [ 514.900376][T21057] 8021q: adding VLAN 0 to HW filter on device bond8 [ 515.041065][T21059] bond8: (slave veth7): Enslaving as a backup interface with a down link [ 515.099346][T21062] bond8: (slave dummy0): Enslaving as a backup interface with a down link [ 515.151180][T21067] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3677'. [ 515.230311][T21070] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 515.230430][T21070] syzkaller1: linktype set to 769 [ 515.309892][T21078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3679'. [ 515.352852][T21078] 8021q: adding VLAN 0 to HW filter on device bond9 [ 515.376535][T21078] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 515.378420][T21078] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 515.691572][T21085] xt_CT: No such helper "netbios-ns" [ 515.911132][T21096] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 515.942098][T21113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3688'. [ 515.967904][T21102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3686'. [ 516.012448][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3688'. [ 516.870465][T21142] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3694'. [ 516.880512][T21142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3694'. [ 516.895170][T21144] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3694'. [ 516.895273][T21144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3694'. [ 517.546298][T21163] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20003 [ 517.622458][T21165] syzkaller0: entered promiscuous mode [ 517.629958][T21165] syzkaller0: entered allmulticast mode [ 517.691227][T21167] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 517.691285][T21167] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 517.696147][T21167] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 517.997032][T21172] x_tables: duplicate underflow at hook 2 [ 518.412220][T21187] netlink: 'syz.4.3706': attribute type 4 has an invalid length. [ 518.421705][T21187] netlink: 'syz.4.3706': attribute type 4 has an invalid length. [ 518.957618][T21204] syzkaller0: entered promiscuous mode [ 518.957662][T21204] syzkaller0: entered allmulticast mode [ 519.429849][T21227] netlink: zone id is out of range [ 519.429887][T21227] netlink: zone id is out of range [ 519.429905][T21227] netlink: zone id is out of range [ 519.429913][T21227] netlink: zone id is out of range [ 519.429920][T21227] netlink: zone id is out of range [ 519.429926][T21227] netlink: zone id is out of range [ 519.429932][T21227] netlink: zone id is out of range [ 519.429938][T21227] netlink: zone id is out of range [ 519.429964][T21227] netlink: zone id is out of range [ 519.766281][T21244] __nla_validate_parse: 6 callbacks suppressed [ 519.766333][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3725'. [ 519.783580][T21245] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3724'. [ 519.933657][T21255] syzkaller0: entered promiscuous mode [ 519.933713][T21255] syzkaller0: entered allmulticast mode [ 520.057077][T21260] netlink: 'syz.0.3729': attribute type 2 has an invalid length. [ 520.327261][T21270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3732'. [ 520.520341][T21279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3734'. [ 520.564930][T21279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3734'. [ 520.750902][T21291] syzkaller0: entered promiscuous mode [ 520.756823][T21291] syzkaller0: entered allmulticast mode [ 520.903594][T21296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3742'. [ 520.915063][T21296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3742'. [ 521.043880][T21294] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 521.252951][T21307] syzkaller1: entered promiscuous mode [ 521.265032][T21307] syzkaller1: entered allmulticast mode [ 521.584277][T21326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3751'. [ 521.729674][T21326] §: renamed from sit0 (while UP) [ 521.851964][T21331] syzkaller0: entered promiscuous mode [ 521.852017][T21331] syzkaller0: entered allmulticast mode [ 522.366933][T21356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3755'. [ 522.685154][T21378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3756'. [ 525.028664][ T4983] udevd[4983]: worker [14862] /devices/virtual/block/nbd6 timeout; kill it [ 525.037893][ T4983] udevd[4983]: seq 19011 '/devices/virtual/block/nbd6' killed [ 526.411419][T21346] syzkaller0: entered promiscuous mode [ 526.423617][T21346] syzkaller0: entered allmulticast mode [ 526.425059][T21370] bridge_slave_0: default FDB implementation only supports local addresses [ 526.455917][T21360] vlan3: entered promiscuous mode [ 526.461081][T21360] hsr0: entered promiscuous mode [ 526.468629][T21360] vlan3: entered allmulticast mode [ 526.493371][T21378] hsr_slave_0: left promiscuous mode [ 526.501047][T21378] hsr_slave_1: left promiscuous mode [ 526.572291][T21391] netlink: 'syz.3.3760': attribute type 5 has an invalid length. [ 526.615373][T21393] net_ratelimit: 5 callbacks suppressed [ 526.615435][T21393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.043385][T21412] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3765'. [ 529.314564][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 530.841623][T21421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3767'. [ 532.085183][T21456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3773'. [ 532.158475][T21456] ip_tables: iptables: counters copy to user failed while replacing table [ 532.158802][T21456] x_tables: duplicate underflow at hook 1 [ 532.320785][T21455] ip_tables: iptables: counters copy to user failed while replacing table [ 535.264922][T18835] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 535.391722][T21436] syzkaller0: entered promiscuous mode [ 535.391769][T21436] syzkaller0: entered allmulticast mode [ 535.486572][T18835] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 535.667930][T21483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3778'. [ 539.243165][ T722] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 539.287250][T21486] bridge0: entered allmulticast mode [ 539.390363][T21497] netlink: 'syz.2.3781': attribute type 21 has an invalid length. [ 539.510557][T21499] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3783'. [ 539.555346][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 539.720474][T21510] netlink: 'syz.2.3786': attribute type 13 has an invalid length. [ 539.720520][T21510] netlink: 'syz.2.3786': attribute type 17 has an invalid length. [ 539.831628][T21522] openvswitch: netlink: Message has 8 unknown bytes. [ 539.882179][T21510] syz_tun: left promiscuous mode [ 539.943356][T21510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.015419][T21510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.171106][T21510] tipc: Resetting bearer [ 540.171468][T21510] tipc: Resetting bearer [ 540.222567][T21510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 540.222616][T21510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.238588][T21510] veth1_virt_wifi: left allmulticast mode [ 540.276514][T21510] veth1_vlan: left promiscuous mode [ 540.282326][T21510] veth0_vlan: left promiscuous mode [ 540.293152][T21510] veth0_vlan: entered promiscuous mode [ 540.301612][T21510] veth1_vlan: entered promiscuous mode [ 540.325332][T21510] batman_adv: batadv0: Interface activated: ipvlan2 [ 540.334880][T21510] 8021q: adding VLAN 0 to HW filter on device eth0 [ 540.345838][T21510] 8021q: adding VLAN 0 to HW filter on device eth1 [ 540.365758][T21510] 8021q: adding VLAN 0 to HW filter on device eth2 [ 540.379877][T21510] 8021q: adding VLAN 0 to HW filter on device eth3 [ 540.391105][T21510] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 540.393186][T21510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.412401][T21510] 8021q: adding VLAN 0 to HW filter on device bond2 [ 540.420812][T21510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 540.451799][T21510] batman_adv: batadv0: Interface activated: ip6gretap2 [ 540.471859][T21510] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 540.561916][T14564] wg2 speed is unknown, defaulting to 1000 [ 540.561959][T14564] syz2: Port: 1 Link ACTIVE [ 540.564383][T14563] syz0: Port: 1 Link ACTIVE [ 540.564812][T10474] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.569045][T10472] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.569084][T10472] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.589546][ T4006] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 540.589949][ T4006] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 540.594641][ T4006] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.685043][T14563] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 540.844689][T21550] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3799'. [ 540.855928][T21551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3799'. [ 541.030949][T21555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3800'. [ 541.031104][T21555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3800'. [ 541.031203][T21555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3800'. [ 541.031314][T21555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3800'. [ 541.031418][T21555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3800'. [ 541.031531][T21555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3800'. [ 541.031641][T21555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3800'. [ 541.176336][T10474] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 541.527394][T21571] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 541.547408][T21574] netlink: 'syz.2.3805': attribute type 4 has an invalid length. [ 541.583706][T21556] bridge0: port 1(wlan1) entered disabled state [ 542.331010][T21604] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 542.331010][T21604] Please contact the netfilter-devel mailing list or update your nftables rules. [ 542.432307][T21606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.577986][T21616] netlink: 'syz.1.3818': attribute type 4 has an invalid length. [ 543.094842][T21637] 0ªî{X¹¦: entered promiscuous mode [ 543.095021][T21637] vlan3: entered promiscuous mode [ 544.435253][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 544.519161][ T26] block nbd6: Possible stuck request ffff8880275f5080: control (read@0,4096B). Runtime 210 seconds [ 544.914564][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 544.933074][T21667] netlink: 'syz.1.3831': attribute type 1 has an invalid length. [ 546.155197][T21667] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 546.544943][T21701] gretap1: entered promiscuous mode [ 546.575197][T21701] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 546.645948][T21699] __nla_validate_parse: 79 callbacks suppressed [ 546.646002][T21699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3838'. [ 546.993874][T21708] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3843'. [ 547.207217][T21724] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3847'. [ 547.207288][T21724] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3847'. [ 547.207304][T21724] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3847'. [ 547.286924][T21723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.358384][T21727] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3848'. [ 547.689673][T21735] sctp: [Deprecated]: syz.2.3850 (pid 21735) Use of int in max_burst socket option. [ 547.689673][T21735] Use struct sctp_assoc_value instead [ 547.799765][T21743] netlink: 'syz.4.3855': attribute type 13 has an invalid length. [ 548.347546][T21756] netlink: 616 bytes leftover after parsing attributes in process `syz.1.3860'. [ 548.819832][T21792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3864'. [ 548.966204][T21797] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3868'. [ 549.280065][T21795] smc: removing ib device syz0 [ 549.356423][T21795] smbdirect: ib_dev[syz0] removed [ 549.707608][T21817] netlink: 'syz.4.3874': attribute type 1 has an invalid length. [ 549.796355][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 549.998355][T21832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3878'. [ 550.062868][T21827] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 550.062928][T21827] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 550.062962][T21827] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 550.110794][T21827] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 550.283348][T21839] netlink: 'syz.3.3880': attribute type 13 has an invalid length. [ 550.827450][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 550.828732][T18835] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 550.848157][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 550.858814][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 550.871335][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 550.879678][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 551.234916][ T9226] syz_tun (unregistering): left allmulticast mode [ 551.267785][T21853] Cannot find set identified by id 0 to match [ 551.357663][T18835] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 551.587266][T21865] xt_TPROXY: Can be used only with -p tcp or -p udp [ 551.597677][T21865] xt_TPROXY: Can be used only with -p tcp or -p udp [ 551.604752][T21865] xt_TPROXY: Can be used only with -p tcp or -p udp [ 551.613202][T21865] xt_TPROXY: Can be used only with -p tcp or -p udp [ 551.622923][T21865] xt_TPROXY: Can be used only with -p tcp or -p udp [ 551.629994][T21865] xt_TPROXY: Can be used only with -p tcp or -p udp [ 551.638643][T21865] xt_TPROXY: Can be used only with -p tcp or -p udp [ 552.149830][T21843] wg2 speed is unknown, defaulting to 1000 [ 552.500051][T21905] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20000 [ 552.741552][T21910] syzkaller0: entered promiscuous mode [ 552.749790][T21910] syzkaller0: entered allmulticast mode [ 552.836226][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 552.838629][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 552.995101][ T5635] Bluetooth: hci1: command tx timeout [ 555.085422][ T5635] Bluetooth: hci1: command tx timeout [ 557.158212][ T5635] Bluetooth: hci1: command tx timeout [ 557.782167][T21941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3901'. [ 558.261579][T21843] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.261770][T21843] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.264256][T21843] bridge_slave_0: entered allmulticast mode [ 558.266557][T21843] bridge_slave_0: entered promiscuous mode [ 558.273652][T21843] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.273752][T21843] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.273889][T21843] bridge_slave_1: entered allmulticast mode [ 558.276355][T21843] bridge_slave_1: entered promiscuous mode [ 558.337543][T21843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.340880][T21843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.401229][T21968] syzkaller0: entered promiscuous mode [ 558.407555][T21968] syzkaller0: entered allmulticast mode [ 558.469241][T21843] team0: Port device team_slave_0 added [ 558.475025][T21843] team0: Port device team_slave_1 added [ 558.493041][T21968] tipc: Enabled bearer , priority 0 [ 558.533883][T21968] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3907'. [ 558.548191][T21843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.548241][T21843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.548281][T21843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.551795][T21843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.551817][T21843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.551841][T21843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.597211][T21968] tipc: Resetting bearer [ 558.710470][T21976] netlink: 524 bytes leftover after parsing attributes in process `syz.0.3908'. [ 558.733286][T21967] tipc: Resetting bearer [ 558.783952][T21967] tipc: Disabling bearer [ 558.805877][T21843] hsr_slave_0: entered promiscuous mode [ 558.806927][T21843] hsr_slave_1: entered promiscuous mode [ 558.807569][T21843] debugfs: 'hsr0' already exists in 'hsr' [ 558.807588][T21843] Cannot create hsr debugfs directory [ 558.860551][T21978] syzkaller0: entered promiscuous mode [ 558.860600][T21978] syzkaller0: entered allmulticast mode [ 559.241871][ T5635] Bluetooth: hci1: command tx timeout [ 559.343021][T21843] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.343060][T21843] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.503143][T21843] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.503177][T22002] netlink: 'syz.3.3917': attribute type 8 has an invalid length. [ 559.503209][T21843] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.640714][T21843] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.652060][T21843] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.793936][T21843] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.804633][T21843] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.984653][T22010] syzkaller1: entered promiscuous mode [ 559.984699][T22010] syzkaller1: entered allmulticast mode [ 560.116781][ T5349] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 560.635828][T21843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 560.663102][T21843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 560.806727][T21843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 560.879972][T21843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 560.901439][T21843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 560.940820][T21843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 560.942280][T21843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 560.963506][T21843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 560.981823][T22053] syzkaller0: entered promiscuous mode [ 560.981894][T22053] syzkaller0: entered allmulticast mode [ 560.994628][ T5790] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 561.069089][T22068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3931'. [ 561.125449][T22066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3932'. [ 561.230312][T22068] ipvlan0: entered promiscuous mode [ 561.240429][T22068] ipvlan0: left promiscuous mode [ 561.314310][ T5635] Bluetooth: hci1: command tx timeout [ 561.378693][T21843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.425466][T21843] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.468857][T10472] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.468972][T10472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.491280][ T722] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.491404][ T722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.621993][T22082] nbd: must specify a size in bytes for the device [ 562.016049][T22093] netlink: 'syz.4.3936': attribute type 1 has an invalid length. [ 562.360535][T22105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3939'. [ 562.693104][T22122] netlink: 'syz.3.3941': attribute type 1 has an invalid length. [ 562.753963][T22124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3944'. [ 562.789489][T22121] syzkaller0: entered promiscuous mode [ 562.789541][T22121] syzkaller0: entered allmulticast mode [ 562.858943][T22116] gretap2: entered allmulticast mode [ 562.883134][T22116] bond4: (slave gretap2): making interface the new active one [ 562.894470][T22116] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 563.012980][T22131] syzkaller1: entered promiscuous mode [ 563.013023][T22131] syzkaller1: entered allmulticast mode [ 563.109194][T21843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.212666][T22141] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3947'. [ 563.212722][T22141] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3947'. [ 563.212738][T22141] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3947'. [ 563.371859][T21843] veth0_vlan: entered promiscuous mode [ 563.397472][T21843] veth1_vlan: entered promiscuous mode [ 563.465665][T22148] netlink: 'syz.1.3949': attribute type 1 has an invalid length. [ 563.515497][T22154] ip_tables: iptables: counters copy to user failed while replacing table [ 563.526824][T22154] openvswitch: netlink: Duplicate or invalid key (type 0). [ 563.526912][T22154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.567031][T21843] veth0_macvtap: entered promiscuous mode [ 563.712577][T22155] veth5: entered allmulticast mode [ 563.746882][T22148] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 563.804080][T22162] macvlan3: entered promiscuous mode [ 563.804125][T22162] macvlan3: entered allmulticast mode [ 563.804822][T22162] bond10: entered promiscuous mode [ 563.811146][T22162] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 563.818247][T22162] bond10: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 563.848314][T22162] bond10: left promiscuous mode [ 564.071805][T21843] veth1_macvtap: entered promiscuous mode [ 564.161058][T22180] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3955'. [ 564.221926][T21843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.244739][T21843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.279039][T10485] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.324326][ T722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.325293][ T722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.325330][ T722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.476883][ T6986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.476930][ T6986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.700594][ T4006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.700642][ T4006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.816219][T22188] wg2 speed is unknown, defaulting to 1000 [ 564.853107][T22192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3957'. [ 565.196104][T22204] netlink: 'syz.3.3959': attribute type 9 has an invalid length. [ 565.459916][T22211] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3962'. [ 565.765319][T22212] veth1_macvtap: left promiscuous mode [ 565.765369][T22212] macsec0: entered promiscuous mode [ 565.815976][T22212] veth1_macvtap: entered promiscuous mode [ 565.816280][T22212] macsec0: left promiscuous mode [ 565.992867][T22236] syzkaller0: entered promiscuous mode [ 565.992913][T22236] syzkaller0: entered allmulticast mode [ 566.051733][T22245] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3966'. [ 566.056334][T22245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3966'. [ 566.109745][T22247] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 566.207152][T22247] xt_CT: No such helper "netbios-ns" [ 568.477281][T22214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.834262][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 568.835567][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 568.930715][T22270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3973'. [ 569.022110][T22273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3973'. [ 569.022153][T22273] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3973'. [ 569.022187][T22273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3973'. [ 569.022376][T22273] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3973'. [ 569.043839][T22273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3973'. [ 569.269278][T22287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3977'. [ 569.488167][T22293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3977'. [ 569.670820][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3979'. [ 569.755816][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3979'. [ 571.132120][T22379] netlink: 'syz.0.4001': attribute type 4 has an invalid length. [ 571.298506][T22379] syzkaller0: entered promiscuous mode [ 571.306365][T22379] syzkaller0: entered allmulticast mode [ 572.182822][T10472] IPVS: starting estimator thread 0... [ 572.274565][T22433] IPVS: using max 32 ests per chain, 76800 per kthread [ 572.543601][T22449] bond1: option updelay: invalid value (18446744073709518847) [ 572.543641][T22449] bond1: option updelay: allowed values 0 - 2147483647 [ 572.574902][T22449] bond1 (unregistering): Released all slaves [ 572.702902][T22451] bond11: entered allmulticast mode [ 572.721036][T22442] geneve2: entered promiscuous mode [ 572.727532][T22442] geneve2: entered allmulticast mode [ 572.784674][T22454] macvlan3: entered promiscuous mode [ 572.784714][T22454] macvlan3: entered allmulticast mode [ 572.804326][T22454] bond11: (slave macvlan3): Opening slave failed [ 573.530043][T22486] x_tables: duplicate underflow at hook 1 [ 573.787977][T22484] syzkaller0: entered promiscuous mode [ 573.788024][T22484] syzkaller0: entered allmulticast mode [ 574.123561][T22504] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 574.311821][T22516] __nla_validate_parse: 21 callbacks suppressed [ 574.311877][T22516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4038'. [ 574.311902][T22516] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 574.436523][T22522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4039'. [ 574.606892][ T26] block nbd6: Possible stuck request ffff8880275f5080: control (read@0,4096B). Runtime 240 seconds [ 575.065864][T22536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4043'. [ 575.152121][T22546] xt_cgroup: path and classid specified [ 575.259378][T22558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4050'. [ 575.324620][ T5726] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 575.479848][ T5790] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 575.498536][T22564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4051'. [ 575.513559][T22558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4050'. [ 575.575442][T22558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4050'. [ 575.575646][T22558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4050'. [ 575.575827][T22558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4050'. [ 575.576007][T22558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4050'. [ 575.835246][ T5349] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 575.925138][T22583] tunl0: Caught tx_queue_len zero misconfig [ 576.038579][T22590] netlink: 'syz.2.4060': attribute type 39 has an invalid length. [ 576.310051][T22599] netlink: 'syz.0.4064': attribute type 1 has an invalid length. [ 576.470181][T22599] bond2: entered promiscuous mode [ 576.478520][T22599] 8021q: adding VLAN 0 to HW filter on device bond2 [ 576.581477][ T722] IPVS: starting estimator thread 0... [ 576.641316][T22625] IPVS: sed: FWM 3 0x00000003 - no destination available [ 576.646805][T22611] 8021q: adding VLAN 0 to HW filter on device bond3 [ 576.658743][T22611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 576.678312][T22623] IPVS: using max 33 ests per chain, 79200 per kthread [ 576.690441][T22611] 8021q: adding VLAN 0 to HW filter on device bond7 [ 576.694577][T10474] bond6: (slave gretap0): link status up again after 0 ms [ 576.703251][T22611] 8021q: adding VLAN 0 to HW filter on device bond8 [ 576.718017][T10484] bond6: (slave gretap0): link status up again after 0 ms [ 576.734678][T10474] bond6: (slave gretap0): link status up again after 0 ms [ 576.755573][T10469] bond6: (slave gretap0): link status up again after 0 ms [ 576.764468][T22611] 8021q: adding VLAN 0 to HW filter on device bond10 [ 576.766383][T22611] 8021q: adding VLAN 0 to HW filter on device bond11 [ 576.777168][T22611] 8021q: adding VLAN 0 to HW filter on device bond12 [ 576.779911][T22615] lo: Caught tx_queue_len zero misconfig [ 576.786350][T10469] bond6: (slave gretap0): link status up again after 0 ms [ 576.806321][T10469] bond6: (slave gretap0): link status up again after 0 ms [ 576.815319][T22630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.835437][T10474] bond6: (slave gretap0): link status up again after 0 ms [ 576.997952][ T6986] bond10: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 577.080341][ T6986] bond10: (slave veth0_to_bond): making interface the new active one [ 577.120254][ T6986] bond10: active interface up! [ 577.127162][T22620] netlink: 'syz.2.4069': attribute type 4 has an invalid length. [ 577.151734][T10484] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 577.297705][T22648] netlink: 'syz.3.4075': attribute type 1 has an invalid length. [ 577.457112][T22656] netlink: 'syz.3.4079': attribute type 2 has an invalid length. [ 577.466188][T22657] netlink: 'syz.3.4079': attribute type 2 has an invalid length. [ 577.717285][T22674] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 577.998632][T22664] lo: Caught tx_queue_len zero misconfig [ 578.159456][ T12] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 578.161705][T22672] syzkaller1: entered promiscuous mode [ 578.161727][T22672] syzkaller1: entered allmulticast mode [ 578.593523][T22698] tc_dump_action: action bad kind [ 578.681564][ T722] lo: left allmulticast mode [ 578.837608][T22722] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 579.228803][ T722] bond10 (unregistering): (slave geneve2): Releasing active interface [ 579.388433][ T722] bond0 (unregistering): Released all slaves [ 579.416718][ T722] bond1 (unregistering): (slave bond2): Releasing backup interface [ 579.425296][ T722] bond2 (unregistering): left promiscuous mode [ 579.438270][ T722] bond1 (unregistering): Released all slaves [ 579.458420][ T722] bond2 (unregistering): Released all slaves [ 579.481657][ T722] bond3 (unregistering): Released all slaves [ 579.495854][T22738] __nla_validate_parse: 64 callbacks suppressed [ 579.496050][T22738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4093'. [ 579.522006][ T722] bond4 (unregistering): Released all slaves [ 579.540300][ T722] bond5 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 579.558439][ T722] bond5 (unregistering): Released all slaves [ 579.569455][ T722] bond6 (unregistering): Released all slaves [ 579.579587][ T722] bond7 (unregistering): Released all slaves [ 579.592866][ T722] bond8 (unregistering): (slave veth9): Releasing active interface [ 579.592906][ T722] batadv0: entered promiscuous mode [ 579.608407][ T722] bond8 (unregistering): (slave batadv0): Releasing active interface [ 579.608459][ T722] batadv0: left promiscuous mode [ 579.626249][ T722] bond8 (unregistering): Released all slaves [ 579.638270][ T722] bond9 (unregistering): Released all slaves [ 579.682526][ T722] bond10 (unregistering): Released all slaves [ 579.705679][ T722] bond11 (unregistering): (slave veth13): Releasing active interface [ 579.705739][ T722] batadv1: entered promiscuous mode [ 579.723334][ T722] bond11 (unregistering): (slave batadv1): Releasing active interface [ 579.723374][ T722] batadv1: left promiscuous mode [ 579.734316][ T722] bond11 (unregistering): Released all slaves [ 579.746886][ T722] bond12 (unregistering): Released all slaves [ 579.758470][ T722] bond13 (unregistering): Released all slaves [ 579.785945][ T6979] net_ratelimit: 16 callbacks suppressed [ 579.786005][ T6979] bond6: (slave gretap0): failed to get link speed/duplex [ 579.812280][ T6979] bond3: (slave dummy0): link status definitely down, disabling slave [ 579.958708][ T6979] bond3: now running without any active interface! [ 579.967104][T22743] x_tables: duplicate underflow at hook 2 [ 579.982608][T10469] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.986322][ T12] bond6: (slave gretap0): failed to get link speed/duplex [ 579.986371][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.987925][T10469] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.987953][T10469] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.183517][ T722] tipc: Left network mode [ 580.644526][ T4006] bond6: (slave gretap0): failed to get link speed/duplex [ 580.756249][ T4006] bond6: (slave gretap0): failed to get link speed/duplex [ 580.869580][ T4006] bond6: (slave gretap0): failed to get link speed/duplex [ 580.974315][ T6979] bond6: (slave gretap0): failed to get link speed/duplex [ 581.075748][T22776] netlink: 'syz.1.4100': attribute type 1 has an invalid length. [ 581.213209][T22778] syzkaller0: entered promiscuous mode [ 581.213252][T22778] syzkaller0: entered allmulticast mode [ 581.245238][ T12] bond6: (slave gretap0): failed to get link speed/duplex [ 581.355061][T10484] bond6: (slave gretap0): failed to get link speed/duplex [ 581.410251][T22796] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4102'. [ 581.410295][T22796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4102'. [ 581.689210][T22803] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 581.729894][ T6979] bond6: (slave gretap0): failed to get link speed/duplex [ 581.739119][T22790] tipc: Enabling of bearer rejected, failed to enable media [ 581.752256][T22799] syzkaller0: entered promiscuous mode [ 581.752302][T22799] syzkaller0: entered allmulticast mode [ 582.274724][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 582.709469][T22869] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4106'. [ 583.045409][T22888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4108'. [ 583.057128][T22888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4108'. [ 583.661323][ T722] hsr_slave_0: left promiscuous mode [ 585.387232][T10485] net_ratelimit: 7 callbacks suppressed [ 585.387284][T10485] bond6: (slave gretap0): failed to get link speed/duplex [ 585.500532][T10485] bond6: (slave gretap0): failed to get link speed/duplex [ 585.609477][T10474] bond6: (slave gretap0): failed to get link speed/duplex [ 585.956653][T10474] bond6: (slave gretap0): failed to get link speed/duplex [ 586.064432][ T4006] bond6: (slave gretap0): failed to get link speed/duplex [ 586.093381][T22967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4124'. [ 586.174318][T10474] bond6: (slave gretap0): failed to get link speed/duplex [ 586.332124][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4129'. [ 586.341412][T22983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4129'. [ 586.406260][ T6979] bond6: (slave gretap0): failed to get link speed/duplex [ 586.475006][T22989] netlink: 'syz.1.4125': attribute type 1 has an invalid length. [ 586.475045][T22989] netlink: 'syz.1.4125': attribute type 2 has an invalid length. [ 586.519890][T22997] netlink: 'syz.1.4125': attribute type 1 has an invalid length. [ 586.528784][T22995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4126'. [ 586.541538][T22997] netlink: 'syz.1.4125': attribute type 2 has an invalid length. [ 586.561478][T22988] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.573730][T22988] bond2: (slave bond3): Enslaving as an active interface with an up link [ 586.639861][T22975] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 586.710550][T22995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 586.720277][T10469] bond6: (slave gretap0): failed to get link speed/duplex [ 586.829736][ T6973] bond6: (slave gretap0): failed to get link speed/duplex [ 586.934245][T22976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4125'. [ 586.977437][T10485] bond6: (slave gretap0): failed to get link speed/duplex [ 587.106863][ T722] IPVS: stop unused estimator thread 0... [ 587.709836][ T6979] tipc: Subscription rejected, illegal request [ 587.739909][T23019] vlan0: entered promiscuous mode [ 587.745830][T23019] bridge0: entered promiscuous mode [ 587.875401][T23029] siw: device registration error -23 [ 587.942870][T23035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4138'. [ 588.737393][T23062] syzkaller0: entered promiscuous mode [ 588.737439][T23062] syzkaller0: entered allmulticast mode [ 588.749617][T23062] tipc: Started in network mode [ 588.749648][T23062] tipc: Node identity 9eac4bcd6d43, cluster identity 4711 [ 588.750254][T23062] tipc: Enabled bearer , priority 0 [ 589.121403][T23073] syzkaller0: entered promiscuous mode [ 589.121446][T23073] syzkaller0: entered allmulticast mode [ 589.550879][T23060] tipc: Resetting bearer [ 589.609349][T23060] tipc: Disabling bearer [ 589.830869][T23105] nbd: couldn't find a device at index 0 [ 589.992640][T23111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4152'. [ 590.110542][T23111] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.112377][T23111] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.296791][T23111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.324272][T23111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.426489][T23139] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4153'. [ 590.604252][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 590.614782][ T722] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.623816][ T722] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.637745][ T722] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.647423][ T722] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.656600][ T722] net_ratelimit: 21 callbacks suppressed [ 590.663865][ T722] bond6: (slave gretap0): failed to get link speed/duplex [ 590.774797][ T4006] bond6: (slave gretap0): failed to get link speed/duplex [ 590.884117][ T722] bond6: (slave gretap0): failed to get link speed/duplex [ 590.892391][T23144] sctp: [Deprecated]: syz.1.4155 (pid 23144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 590.892391][T23144] Use struct sctp_sack_info instead [ 590.995809][ T722] bond6: (slave gretap0): failed to get link speed/duplex [ 591.106490][ T722] bond6: (slave gretap0): failed to get link speed/duplex [ 591.214204][ T4006] bond6: (slave gretap0): failed to get link speed/duplex [ 591.324179][ T4006] bond6: (slave gretap0): failed to get link speed/duplex [ 591.436150][ T4006] bond6: (slave gretap0): failed to get link speed/duplex [ 591.473806][T23159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4160'. [ 591.473835][T23159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4160'. [ 591.545080][ T6986] bond6: (slave gretap0): failed to get link speed/duplex [ 591.559881][T23168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4160'. [ 591.559925][T23168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4160'. [ 591.656473][T10485] bond6: (slave gretap0): failed to get link speed/duplex [ 592.190103][T23201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4169'. [ 592.236663][T23203] veth0: entered promiscuous mode [ 592.239048][T23203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4167'. [ 592.358862][T23208] netlink: 'syz.0.4170': attribute type 1 has an invalid length. [ 592.367960][T23208] netlink: 1368 bytes leftover after parsing attributes in process `syz.0.4170'. [ 592.420423][T23209] x_tables: duplicate underflow at hook 1 [ 592.590605][T23213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4172'. [ 592.651595][T23216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4173'. [ 592.816227][T23217] bond13: option arp_validate: invalid value (8192) [ 592.842774][T23217] bond13 (unregistering): Released all slaves [ 593.053338][T23226] netlink: 'syz.4.4175': attribute type 1 has an invalid length. [ 593.391802][T23223] syzkaller0: entered promiscuous mode [ 593.391841][T23223] syzkaller0: entered allmulticast mode [ 593.412433][T23223] tipc: Started in network mode [ 593.417555][T23223] tipc: Node identity e2b447066dc4, cluster identity 4711 [ 593.425094][T23223] tipc: Enabled bearer , priority 0 [ 593.455333][T23238] x_tables: duplicate entry at hook 3 [ 593.457360][T23237] x_tables: duplicate entry at hook 3 [ 594.181661][T23222] tipc: Resetting bearer [ 594.303436][T23222] tipc: Disabling bearer [ 594.348955][T23246] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 594.361115][T23246] bond1 (unregistering): Released all slaves [ 594.711010][T23258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4184'. [ 594.799501][T23267] ip6tnl0: Caught tx_queue_len zero misconfig [ 595.260379][T23289] netlink: 'syz.4.4192': attribute type 1 has an invalid length. [ 595.346878][T23289] 8021q: adding VLAN 0 to HW filter on device bond4 [ 595.428062][T23292] bond4: (slave geneve2): making interface the new active one [ 595.441192][T23292] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 595.624328][ T722] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.624390][ T722] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.624438][ T722] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.624473][ T722] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.710674][T23305] netlink: 'syz.3.4196': attribute type 3 has an invalid length. [ 595.844130][ T4006] net_ratelimit: 18 callbacks suppressed [ 595.844174][ T4006] bond6: (slave gretap0): failed to get link speed/duplex [ 595.932923][T23313] netlink: Only one type of NAT may be specified [ 595.932974][T23313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.955660][T10474] bond6: (slave gretap0): failed to get link speed/duplex [ 596.065898][T10474] bond6: (slave gretap0): failed to get link speed/duplex [ 596.143432][T23324] ------------[ cut here ]------------ [ 596.143506][T23324] UBSAN: array-index-out-of-bounds in kernel/bpf/disasm.c:306:6 [ 596.143582][T23324] index 3 is out of range for type 'const char *const[3]' [ 596.143597][T23324] CPU: 0 UID: 0 PID: 23324 Comm: syz.4.4204 Not tainted syzkaller #0 PREEMPT(full) [ 596.143616][T23324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 596.143628][T23324] Call Trace: [ 596.143636][T23324] [ 596.143646][T23324] dump_stack_lvl+0xe8/0x150 [ 596.143681][T23324] ubsan_epilogue+0xa/0x30 [ 596.143720][T23324] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 596.143858][T23324] print_bpf_insn+0x21f1/0x2910 [ 596.143884][T23324] ? __pfx_disasm_print+0x10/0x10 [ 596.143911][T23324] ? __pfx_print_bpf_insn+0x10/0x10 [ 596.143940][T23324] ? vscnprintf+0x5c/0x90 [ 596.143966][T23324] ? bpf_verifier_vlog+0x3c7/0x900 [ 596.144005][T23324] diag_print_insn_context+0x433/0xd00 [ 596.144042][T23324] ? __pfx_diag_print_insn_context+0x10/0x10 [ 596.144071][T23324] ? __pfx_diag_write+0x10/0x10 [ 596.144094][T23324] ? __pfx_disasm_print+0x10/0x10 [ 596.144117][T23324] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 596.144144][T23324] ? diag_print_wrapped_prefixed+0x207/0x240 [ 596.144175][T23324] bpf_diag_source+0x639/0x18d0 [ 596.144198][T23324] ? vsnprintf+0xe42/0xef0 [ 596.144230][T23324] ? vscnprintf+0x5c/0x90 [ 596.144251][T23324] ? bpf_verifier_vlog+0x3c7/0x900 [ 596.144278][T23324] ? __pfx_bpf_diag_source+0x10/0x10 [ 596.144315][T23324] ? __pfx_diag_write+0x10/0x10 [ 596.144343][T23324] ? kfree+0x1c5/0x650 [ 596.144367][T23324] ? bpf_diag_program_structure+0x28a/0x430 [ 596.144396][T23324] bpf_diag_program_structure+0x31c/0x430 [ 596.144424][T23324] ? verbose+0x11d/0x1a0 [ 596.144451][T23324] ? __pfx_bpf_diag_program_structure+0x10/0x10 [ 596.144476][T23324] ? bpf_prepare_btf_info+0x639/0x1200 [ 596.144496][T23324] ? rcu_is_watching+0x16/0xb0 [ 596.144524][T23324] check_subprogs+0x6d3/0x740 [ 596.144557][T23324] bpf_check+0x17ba/0x2e10 [ 596.144585][T23324] ? ktime_get_with_offset+0x93/0x2d0 [ 596.144608][T23324] ? __pfx_bpf_check+0x10/0x10 [ 596.144630][T23324] ? bpf_obj_name_cpy+0x194/0x1e0 [ 596.144658][T23324] bpf_prog_load+0x14d6/0x1c20 [ 596.144696][T23324] ? __pfx_bpf_prog_load+0x10/0x10 [ 596.144740][T23324] __sys_bpf+0xd0d/0xd90 [ 596.144767][T23324] ? __pfx___sys_bpf+0x10/0x10 [ 596.144789][T23324] ? do_futex+0x3e7/0x4e0 [ 596.144851][T23324] ? rcu_is_watching+0x16/0xb0 [ 596.144877][T23324] __x64_sys_bpf+0xba/0xd0 [ 596.144898][T23324] do_syscall_64+0x166/0x520 [ 596.144923][T23324] ? trace_irq_disable+0x3b/0x140 [ 596.144940][T23324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.144961][T23324] ? clear_bhb_loop+0x70/0xc0 [ 596.144982][T23324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.145000][T23324] RIP: 0033:0x7f08a299e159 [ 596.145020][T23324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.145036][T23324] RSP: 002b:00007f08a378c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 596.145057][T23324] RAX: ffffffffffffffda RBX: 00007f08a2c26090 RCX: 00007f08a299e159 [ 596.145070][T23324] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 596.145083][T23324] RBP: 00007f08a2a3503b R08: 0000000000000000 R09: 0000000000000000 [ 596.145094][T23324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.145105][T23324] R13: 00007f08a2c26128 R14: 00007f08a2c26090 R15: 00007ffc26f651a8 [ 596.145135][T23324] [ 596.186141][T23324] ---[ end trace ]--- [ 596.186199][T23324] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 596.498693][T23324] CPU: 0 UID: 0 PID: 23324 Comm: syz.4.4204 Not tainted syzkaller #0 PREEMPT(full) [ 596.508063][T23324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 596.518217][T23324] Call Trace: [ 596.521539][T23324] [ 596.524465][T23324] vpanic+0x56d/0xa60 [ 596.528460][T23324] ? __pfx_vpanic+0x10/0x10 [ 596.532964][T23324] ? irqentry_exit+0x218/0x910 [ 596.537744][T23324] panic+0xc5/0xd0 [ 596.541482][T23324] ? __pfx_panic+0x10/0x10 [ 596.545904][T23324] ? __pfx__printk+0x10/0x10 [ 596.550511][T23324] check_panic_on_warn+0x89/0xb0 [ 596.555520][T23324] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 596.561275][T23324] print_bpf_insn+0x21f1/0x2910 [ 596.566154][T23324] ? __pfx_disasm_print+0x10/0x10 [ 596.571191][T23324] ? __pfx_print_bpf_insn+0x10/0x10 [ 596.576397][T23324] ? vscnprintf+0x5c/0x90 [ 596.580733][T23324] ? bpf_verifier_vlog+0x3c7/0x900 [ 596.585957][T23324] diag_print_insn_context+0x433/0xd00 [ 596.591448][T23324] ? __pfx_diag_print_insn_context+0x10/0x10 [ 596.597452][T23324] ? __pfx_diag_write+0x10/0x10 [ 596.602309][T23324] ? __pfx_disasm_print+0x10/0x10 [ 596.607365][T23324] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 596.612830][T23324] ? diag_print_wrapped_prefixed+0x207/0x240 [ 596.618815][T23324] bpf_diag_source+0x639/0x18d0 [ 596.623675][T23324] ? vsnprintf+0xe42/0xef0 [ 596.628207][T23324] ? vscnprintf+0x5c/0x90 [ 596.632542][T23324] ? bpf_verifier_vlog+0x3c7/0x900 [ 596.637663][T23324] ? __pfx_bpf_diag_source+0x10/0x10 [ 596.642966][T23324] ? __pfx_diag_write+0x10/0x10 [ 596.647820][T23324] ? kfree+0x1c5/0x650 [ 596.651985][T23324] ? bpf_diag_program_structure+0x28a/0x430 [ 596.657971][T23324] bpf_diag_program_structure+0x31c/0x430 [ 596.663803][T23324] ? verbose+0x11d/0x1a0 [ 596.668074][T23324] ? __pfx_bpf_diag_program_structure+0x10/0x10 [ 596.674342][T23324] ? bpf_prepare_btf_info+0x639/0x1200 [ 596.679815][T23324] ? rcu_is_watching+0x16/0xb0 [ 596.684611][T23324] check_subprogs+0x6d3/0x740 [ 596.689317][T23324] bpf_check+0x17ba/0x2e10 [ 596.693767][T23324] ? ktime_get_with_offset+0x93/0x2d0 [ 596.699170][T23324] ? __pfx_bpf_check+0x10/0x10 [ 596.703982][T23324] ? bpf_obj_name_cpy+0x194/0x1e0 [ 596.709040][T23324] bpf_prog_load+0x14d6/0x1c20 [ 596.713836][T23324] ? __pfx_bpf_prog_load+0x10/0x10 [ 596.718980][T23324] __sys_bpf+0xd0d/0xd90 [ 596.723247][T23324] ? __pfx___sys_bpf+0x10/0x10 [ 596.728040][T23324] ? do_futex+0x3e7/0x4e0 [ 596.732427][T23324] ? rcu_is_watching+0x16/0xb0 [ 596.737236][T23324] __x64_sys_bpf+0xba/0xd0 [ 596.741678][T23324] do_syscall_64+0x166/0x520 [ 596.746288][T23324] ? trace_irq_disable+0x3b/0x140 [ 596.751326][T23324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.757410][T23324] ? clear_bhb_loop+0x70/0xc0 [ 596.762120][T23324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.768114][T23324] RIP: 0033:0x7f08a299e159 [ 596.772560][T23324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.792180][T23324] RSP: 002b:00007f08a378c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 596.800603][T23324] RAX: ffffffffffffffda RBX: 00007f08a2c26090 RCX: 00007f08a299e159 [ 596.808584][T23324] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 596.816653][T23324] RBP: 00007f08a2a3503b R08: 0000000000000000 R09: 0000000000000000 [ 596.824652][T23324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.832638][T23324] R13: 00007f08a2c26128 R14: 00007f08a2c26090 R15: 00007ffc26f651a8 [ 596.840639][T23324] [ 596.843993][T23324] Kernel Offset: disabled [ 596.848319][T23324] Rebooting in 86400 seconds..