last executing test programs: 5.104788219s ago: executing program 2 (id=10157): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e22, 0x3, 0xa, 0xa0, 0x20, 0x67}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x10001, 0x4, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000680)={0x8, 'bridge_slave_0\x00', {'macsec0\x00'}, 0x2}) socketpair(0x1f, 0x6, 0x101, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000840)={@mcast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x16, 0x16}}) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a"], 0x38}}, 0x40408c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000600)={r3, &(0x7f0000000140)='\x00', 0x200004, &(0x7f00000001c0)={@_ha_fsid={[0x101, 0x6]}, {0x2, 0x5, 0x78f, 0xfff}}, 0x80, &(0x7f0000000240), &(0x7f00000005c0)=0xf}) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f0000000640)) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="440000000001010400005f595d1c398727510000300002802c00018014000300fe80000000000000000000000000f5a914000400fe8000"/68], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00', 0x400}) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000200081dc2abd70000300000002000000000000031b0000000500160004000000080017004e224e2323f9978b0d1ce78cbb2ad2b70e450000fb6621b56a35ccf5910c14d279d051b9a53975cb86c4e5f07d84fd2f47d40db7df642000cff2b7f9c17c1996c07d7b5099278f58b3f1ddea45aee698b81432f625f734cf9b3c2c711444d90499f0cb1fa85a9f10373e2af66b7a023192dd9540d2e1ec99fa5531de8c085d39c4c4cc617493fb836ce7f70b174ed5f512d5cc36c96e715aaef7b6b861bb3a730b81af6afa9e1dab92979a63532cd92dc19c6efbf0e5cd6a5987131dc3d45ea17b9a0db155c7987d9ceeda6b130a595c009a6ec851734f8c8d7c98a2e095157ac1a91f2bc80a2f7af8a0f0fc02bc63b9954c14e46097b062540db0a5e527eb1670f507"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtaction={0x68, 0x30, 0x48b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) recvfrom$rose(r7, &(0x7f0000000480)=""/252, 0xfc, 0x40000000, &(0x7f0000000580)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @null}, 0x1c) 4.080026397s ago: executing program 2 (id=10166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbdf25020000000a0009000180c2000002000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00\v'], 0x5a}, 0x1, 0x0, 0x0, 0x20000050}, 0x4048080) (async) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbdf25020000000a0009000180c2000002000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00\v'], 0x5a}, 0x1, 0x0, 0x0, 0x20000050}, 0x4048080) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r6, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x44040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x5b8, 0xffffffff, 0x418, 0x418, 0x0, 0xffffffff, 0xffffffff, 0x4e8, 0x4e8, 0x4e8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x62, 0x4, 0x7f, 0x7, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, [0xffffffff, 0xff, 0xff000000, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff, 0xff], 0x2000, 0x1406}}, @common=@rt={{0x138}, {0xd, [0x4a, 0x80], 0xa, 0x1, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast1, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, @loopback, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2f}, @private2, @remote], 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x18, "fa548d5559f952a2fcbdf61ca71bce7cbad1f0e4a04ceb67ec5850d7ef1d"}}}, {{@uncond, 0x0, 0xf8, 0x168, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}, @common=@mh={{0x28}, {'\v?', 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0xff, 0xdc6, 0x1, 0x0, "b0ad6ea4a5d698d9a479ee44086b543176c38d1a8dfbe56d9e5196f2d2e50d951e26c79e721211a2d1ce9ee3766b6140f4fec88c2967d9576a29f8c589e9575b"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x2}, {0x0, 0x6, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) (async) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x5b8, 0xffffffff, 0x418, 0x418, 0x0, 0xffffffff, 0xffffffff, 0x4e8, 0x4e8, 0x4e8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x62, 0x4, 0x7f, 0x7, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, [0xffffffff, 0xff, 0xff000000, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff, 0xff], 0x2000, 0x1406}}, @common=@rt={{0x138}, {0xd, [0x4a, 0x80], 0xa, 0x1, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast1, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, @loopback, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2f}, @private2, @remote], 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x18, "fa548d5559f952a2fcbdf61ca71bce7cbad1f0e4a04ceb67ec5850d7ef1d"}}}, {{@uncond, 0x0, 0xf8, 0x168, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}, @common=@mh={{0x28}, {'\v?', 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0xff, 0xdc6, 0x1, 0x0, "b0ad6ea4a5d698d9a479ee44086b543176c38d1a8dfbe56d9e5196f2d2e50d951e26c79e721211a2d1ce9ee3766b6140f4fec88c2967d9576a29f8c589e9575b"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x2}, {0x0, 0x6, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x8, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x8, 0xffe0}, {0xe, 0xffe0}, {0xfff1, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.971033654s ago: executing program 2 (id=10171): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000001e00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[], 0x1248}, 0x1, 0x0, 0x0, 0x804}, 0x1) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x14, 0x2c, 0x107, 0xfffffffc, 0x25dfdbff, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, 0x0, 0x4000850) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000180)={0x5, 0x72}) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x14, 0x0, 0x120, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) bind$tipc(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r4, 0x7d3a532c78f1abd1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40060) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000000), 0x8) setsockopt$inet6_buf(r7, 0x29, 0x39, 0x0, 0x0) socket(0x1, 0x803, 0x0) 2.96928898s ago: executing program 2 (id=10173): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001740)={{r0, &(0x7f0000000000)='streebog256\x00', 0x20080, &(0x7f0000000040)={@_ha_fsid={[0xe, 0x617e]}, {0xfff7, 0x6, 0xd}}, 0x9, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x6}, 0x6, &(0x7f0000001680)=[{0x2, 0x0, &(0x7f0000000100)='\x00', &(0x7f0000000140)="eed68cb6c55ec2a3b0578f4bce8dd4f536c403b25c5edd316fed6244c51d5cd4ca1a3aa3d50ba3bec48d8096d32dbc5a3ccd3aca991eb46fdfde3c47c02d1ce2ef641e8383b1af81688d42f486052ebed439ba2f35a93db75e3a8b3c5dd3d47bacf5123e943dc22d8b97b498ccbb4be95d4b0c126dd77823cc8fa628ab658575aab7ff98dc509ec8bef41d4c0856f759207c09749b59c2d79ffdfe90411e83790a023fd1a7a6a98ba6dab44524fe92b518eb3cd0466dd5584563d55d63675c050542f16284bddfd2", 0xc8, 0x8}, {0x1, 0x2, &(0x7f0000000240)='#\x00', &(0x7f0000000380)="4c60fc4dbb4b3b7149dd855c52d195fdfffdcb68c82f8305a577bacb08731602a054e641727a331ebb5e6e90aca8426c177632d2586ab012963a8f1f5e1b0be28a0b3e05b1b14c1db79038fa0d93c8e33b508b233404e3e9c02cbdc79e598cbb1af485dfb9c755cdacdfc49beb87b34880680d6362036201c2bc5a07124dd01c6b1c367bcdd844684bd3482208d60bd909ca9b8dd6eb09e43f27b2916fcb836f2ec0a249301306d82637fd6f2535432144d4", 0xb2}, {0x3, 0x4, &(0x7f0000000440)='hash\x00', &(0x7f0000000480)="91120c46c6135c5f305654800ba45563e2d7249e5cac03024436b49f9e37f11bb9026baa2f605635d6781e1bd02b17b4cabae85b2faf33c2bb5846e82bdeffce0b0544615a1fca068f60ab7921a6def32d27c0951ce97a2bf3a3d556c3f29630d7b037309f0163d473a97818b28ce8a1d6e2b20f4224716de5d7e641ac411cdbc59d76487336ab87fc084d103ffeac952c4da93318", 0x95, 0x1e}, {0x3, 0x7, &(0x7f0000000540)='\xea\x00', &(0x7f0000000580)="1fd2c124a6135951072895e7", 0xc, 0x18}, {0x2, 0x2, &(0x7f00000005c0)=',^)+:\x00', &(0x7f0000000600)="338662571b3c18d8e4fe006e9f093446fe62fba5cb3a50c4", 0x18, 0x2}, {0x2, 0x1, &(0x7f0000000640)=':\\)+-\x00', &(0x7f0000000680)="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", 0x1000, 0x6a}]}) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2.947129886s ago: executing program 2 (id=10176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000740)={0x0, 0x4, 0x0, [0x4, 0xb, 0x100, 0xb, 0xffffffffffffff98], [0x8, 0x8, 0x3ff, 0x1, 0x7ffd, 0x3, 0x0, 0x6, 0x7, 0x4000000000000008, 0xffffffffffffffc0, 0x7fff, 0x7fffffff, 0x200000000000000, 0xfffffffffffffffb, 0x6, 0x80, 0x401, 0x6, 0x0, 0x10, 0x3, 0xa89, 0x6, 0xf54, 0x1ff, 0x100000001, 0x1, 0x35c9e2a4, 0x0, 0x9, 0x4, 0x6, 0x5, 0x1, 0x9, 0x8, 0x8, 0xc551, 0x401, 0x6, 0x4, 0xff, 0x9, 0x700000, 0x5, 0x8, 0x8, 0x97, 0x10001, 0x6, 0xee, 0x76070dcd, 0x9, 0x1, 0x2, 0x10000, 0x8, 0x6, 0x1, 0x6, 0x3, 0x7, 0x80000001, 0x7ff, 0x6, 0x5, 0x6, 0x78, 0x7f, 0x1, 0x2, 0x6, 0x4, 0x2, 0xad8, 0x8, 0x3, 0x301, 0x7, 0x8, 0x1a, 0x10001, 0xfffffffffffffff8, 0x2, 0x6, 0x6, 0x4000000, 0x6, 0x7fff, 0x6, 0x9, 0x8, 0xa, 0x7, 0x3, 0xa, 0x1, 0x2, 0x2, 0x0, 0xf, 0x845, 0xe, 0x25fd2099, 0x8daf, 0x2, 0xfffffffffffffff7, 0x1, 0x8, 0x1, 0x6, 0x1000, 0xb0, 0x5584e61b, 0x8000000000000000, 0x1, 0x7, 0x7fff, 0x0, 0x800]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000cc0)={r3, 0x3, 0x1, [0x2, 0x7, 0x0, 0x2, 0x4], [0x5, 0x8000000000000001, 0x2, 0x117, 0x8001, 0x1, 0x400, 0x4, 0x2, 0xfffffffffffffffe, 0x3, 0x7, 0xc12, 0x4, 0x5, 0x5, 0x7, 0x7e0, 0x8, 0x6, 0x9, 0x5, 0x2, 0x7, 0x3, 0x1, 0x3, 0x7, 0x7d, 0x6, 0x6, 0x7, 0x91a, 0x4, 0x651, 0x9, 0x240c5c74, 0x9, 0x9, 0x2, 0x6, 0x7, 0x8, 0x800, 0x2000005, 0xbeea, 0x3ff, 0x1, 0x5, 0x40, 0x200, 0x6, 0x92b, 0x2, 0xe6f3, 0x3, 0x100000000, 0x3, 0x3, 0x8, 0x8001, 0x5, 0x401, 0x6, 0x7, 0x8, 0x1ff, 0x2, 0x7fff, 0x4, 0x80000001, 0x6, 0xfffffffffffffffb, 0x8000000000000000, 0xfffffffffffffe00, 0x7, 0x0, 0x1, 0x100000000000031a, 0x8, 0x5, 0x3, 0x6, 0x800, 0x4, 0x8, 0xead, 0x6, 0x6, 0x9, 0xfff, 0x8000, 0x3, 0x5, 0x100000000, 0x6, 0xfffffffffffffffd, 0x0, 0x8, 0x6, 0x0, 0x1, 0x3, 0xcd, 0x6, 0x0, 0x1, 0xfffffffffffffffd, 0xffff, 0x1, 0x4b2, 0xd4, 0x8, 0x4, 0xb, 0x4, 0xffffffff, 0x9, 0x3ff, 0xfffffffffffffff7, 0x80000000]}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x4000) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001}], 0x1, 0x44804) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="0000000018004000000000000100000001000000", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}], 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01009656b49b470222580500000200000008", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000180), 0xc, &(0x7f0000001240)={&(0x7f0000001100)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf251d1b00000d001f00ed68d21a3d8b6a2c6100000008001d000100000008000100", @ANYRES32=r11, @ANYBLOB="ee001f007b97688f1f7ef858ea8c8bffa9fd648a9f1397cb05ac9bd2bcc40a38024b8f123ddebeaa20ceea54c994d20fb95117f218a519058f6e15930155315225c209ea02a511c43b1fe9bae1f312cc1fd6b82b1c8966e3ef7cbd216da74529e775d4876d9cb176a1d9466b0b52d568f1a1826538006d6e7ddb6bdfeada55447658555b3114005eeebfe7c4e7321279090088533db7c0fd1b6f198eb0c4d1bccf57d10033509397428d82af189bf71c3eb2760a0bb993e749b11903e53009b7b91799c434ba9560443806ca7cea3e01b368132871b1825d88773a69f9882d4d3407524e387e1a2d342b0deb25b40000"], 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x2200c015) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000100000adc1af6bbd14ed4ee9305b61cf61f5dd6a41244e85a4c68eeecc141ea4c7627f4f169be08fa10545426208a8b33c1b352f107b0c01474733167eed6373ce1e561ba96360f651e7b9173ac9eb8e2d793a4738967615f98dc4a73f793b8dd42a839bfa11a407e1fd63ae31042e9bdcd86c815c1f9dd4491d11af98b250fd1fb"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x28, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048014}, 0x24004000) socket$nl_route(0x10, 0x3, 0x0) 2.453732308s ago: executing program 3 (id=10180): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @multicast1}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$key(r3, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x7}, 0x0) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@default, @netrom, @null, @remote, @null, @rose, @rose]}, 0x0, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r7, 0x8b20, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000180)={0x0, 0x9}, 0x8) 2.287198376s ago: executing program 2 (id=10182): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xd, &(0x7f0000000180)=0x1f, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x6) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/245, 0xf5}], 0x1}, 0x1ff}], 0x1, 0x20022, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028190000bca30000000000003403000040feffff720af1ff0000000071a4f1ff000000001f030000000000002e0a0200000000002604fdffffff000e61144400000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 2.239213108s ago: executing program 3 (id=10183): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ac41, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xf}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x804) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x220000, 0x0) write$tun(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r12, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="6cb1e91ac709cf89ffffaaaaaaaaaa0208004500002040000000002f907800001fe1e0000001a0006558000c907841090000"], 0x32) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.116248898s ago: executing program 0 (id=10185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x9d}, 0x50) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006a0083130000000000000000000000010000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) pipe(&(0x7f0000000740)) r5 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0xf, 0x1, 0x1, 0x93}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) syz_emit_ethernet(0x4e, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYRES32=r5, @ANYBLOB="baff55da5b430ec9b1ad7b"], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0xfffffffffffffdcc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=r2], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x841) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000180), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.779036894s ago: executing program 4 (id=10187): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd29, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xb, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000340)=0x31, 0x4) (async) close(r1) (async) socket(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='K\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd700100800000340000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 1.680438135s ago: executing program 3 (id=10188): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000002010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.647294031s ago: executing program 4 (id=10189): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=ANY=[@ANYBLOB="2c00000019000100000000fbc65b595e73f5d1e804614b8f8124cea72e22237b04d98627939ba4ccc912ca65b4e84bbc71201a53b694c15433cf6692c144b1c5d659f5e5dc715d2adad97d9b10f536cb3df90c69600d05708e498da38f8fde08e4d3dd88ccc94f2732e8c09c49320868000000000000000000c5d25164fca9fceff74f5fc7776932aee126a049065b848312b5c84e91be9a4cc11aaf5b21ff07ebaebf525e318bd6eb18c2126d90959def0c93bbe477c5e6a3c4f2f97564203a64da9ca6ed2e10305d5e02e2d615773d867f93a5391b7f20ed59da796cfeb928465ddc0db84756d5011e7709fb7f8ed8a34fb81906daeb9edfe210442ee073cfc2f722b41801f8"], 0x2c}, 0x1, 0x0, 0x0, 0xa800}, 0x4008411) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={@broadcast, 0x1}}) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000190001090000000000000000021800000000fd000000000008000100ac141400080005000a0101020c00168008000300e00000020600152006"], 0x48}, 0x1, 0x0, 0x0, 0x20084005}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000000000dd4e5cfab95a28000e01000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000ffff00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000de9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000300)=0xffffffff, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b510092e7dbe48014c2be7983a4e4e11a8906105f36f652d7135bda20b8a9abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff971", 0x49}, {&(0x7f0000000500)="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", 0x137}, {&(0x7f00000007c0)="a96a428426d96522dbf395b96cda5289bbfe3d97be8f413c48ec17c91194c66443ac9ed513c32242f54abb9a8ad671c6786dd7161962a8cf0dc4c7c0a1f86f7d1b17cc1660980f64e0b66a61b77eed3c8497ff551a20db0aa749c5ed3d49c05b1f787665fc8ed059d872289988b78549f8e5f01c2dab0e462f618669d1ca60666c010a55e46421284abe14fdfa39da550161c5410c37fbd11866c3e2f710e557408f5c4a5d494e87bcacc70ecbc69322da9f6a2388ffece43aeee909aa68d00e2137407fbcf0e749eb6ef98960c1ed54e532722c05c0038e8a9c25a560b3569cc7928a66d41c3dcf80263869467cd8a905d56a7b327d0354d81554f98b1e85ae5d86502a1b3ed1e250f71cb5c5b7aa755326d9d6ab836db15f6107023fe99229e48a9008bd8ed0141577f1f1ea58b10e6ceeacfe98ff142e57f0dd1c88ae37752e200657282cda4177730d24a77a941e21675fa53da47992cce0a954ae826fff35039dc74bd9d0e5973ee99b00200cff625fb828ebc36189f3013291fe121a0810e1008854633b5890b810817609e8311f2e34cf3b78d666a1207a4fdbf77cc2d87410bb8533054f39eeff0602c72476ea86bbd68e3bf4976c16a3a8d60b4fa1c1ff02275718e1f7028119bcb785b0d95369dea71f559a32891ad8b3ef21b0f43f8db1f88fc0984c24ea1a38bc89b3b23c4cf9a67ad08f3fb635736350dfb726f8177efadd377073ba05878ab62d2a18481922e6c48f09f057aba001fb8eb233eb23a67e74d006bdaad1fa9a8a622c17947f34b89d0fc0a6dd3a7b6fa0beabb98875112036ab1ec22090369dc72d3c385b2679f0b99af9bcc6ef785c0b51473d8864ec867ea3c754856199152f000b2afe739b5c568c1619d2af08fb2fc6844fac0035cceb0d0656d3af9bbd686fd99275e7f81aeafd33481c5778b279e5870348ec4495684bdcb71c0c8131cdc8330159d8c92adb613dac99fedb3c50c22243ee61ebb8645f94cd0994b02c5f5b544887b11b2fd3655e115889ebeb8617eb1cdb5dbec30c407ee4f09d17d2ecca77b25604cfbd308a91b0b2e8cd1249a2e1f441989657efc8584ceb7e443f2ae30191c5623b06fac91bab61a40f31f2863b4b508998ded6abd8f55e503401c2e9e298655d50ab3f775f9159d0765b4ee1fef3aa1fe608d5dade41cd16a3c1ec7868b18ff3f1449d3900f7d77489c1bb4cdb99beac51942f8a7c4ab3e3a43e13b6c69b63623a970aec5426b58c63d9ffc229efb58e7b58eb27a12b91c4a0f253e1d5f13e59ffcecb003c5e46b1cc236b9fe508b37c3f2046c53eabbc2a7b1f2c0d04a86ba8918239e1dda997c5612fb43dc86905f79f1503ac47d5ea8399dc5d5cc284a3a789d77cc5e887ce3c25ae3f7a636429873970930ebdeec9690b62f46f480a4a102cfa3ce2a61f056bedf3ca698c4f2666bf55f035daca9fb2efcfd96d18cb7afd6e2592e460c4638f261a4a7a85c290c78a921edbc01e2d7a60c6b6a2608fb52f31b73471dd610f3703242273de21261656df6cd8c3847c730819e402933a40a4c560d9651a95764179f4a1a39e60c80deece7b0eacbafd5efe40eee56424b3e0921524397bd4f554e4a0ccc6e9b2be09e0ae6810a9fef7b027ee3cff9b5e674f793579eac25cee7c4e9351a8d7412e2c6cf9ba4082059a35878771744b8d0c572e10250035630b30db9030bf67c6dca054f6a219c51984f37ec9a2e2ac6e85d97475e5821bbb376af98e1e180cd94c22a2246dc757da46421b85487b7291f68fa595451999c32c869cbabcfe6be628f0909bb62ee174c97bef3f92fbb1072d66b5d28427b1695913bb86759fc20c74acf75df87ded19a81966e7dda1be3cec73f23df8b255ceff270af0ee99253426f5d4866afd89766c498652d5c5f6d4d3d6fbb52931b10613ba80a3d8a23464c30414e89897b90d5e0c90f0c72931b5ad4cbf69c0fc2eda242a56a789af5f4f0f0fb51f26c7a102ce6e0b76cf3a1f84de55f21df446ec9b9409cd1fb919b02a515994166e7ae29ad0783e0adf2c4296ed7fc19c84378a35e83f739a3e370faef047ef39fc7926ebf06f09db535aae1d5558f83f1e434556de25e6d2aa78d4eac784a7407521e1626d038d652d0320c0558c42e9e9ac731404c26248934d23dd3a8812de7622c230888db650f7846770ddc8059447fd03ccf862574d9b548054afb63e32986caf80a57fc2fa01d904ec94ad1c8b6cb56cb782b47b5a5626ab094c196e2e1f9fd25a39ec1ad45a7ae94c9ae64ac4bb45c828295c195fbfed9171d142fb8ece8af614953ad5ca1e5d65c52c4d9633c458b5e788bfd3469328b9e6e4df03f3da9e5d3d11284e791a67d0856666ee21f8ea4b1d76d7a1f07863756029a4b5cb820edb63dc0efe6fc2577a79383f280f241b35dff9cfb92cf04451f5767f95e5d5ff0c808acddf406127e9ceb8d1f55749a5781e9b185e45072d181d069c715febebc1ab63126697d145d63b3a41ba202a387dcfdfbb96de0d05454fecc28637dfac86ce61641ee7105f4b441031bea7ae0d1787bf772cfa2f48c3062d232b23b5b328e6ea9e0de0130db2500e37d28a52c490b2fa9d39c3d5c9b8a298f2aeb348b962fee1d6a7d6d2c661113c2b8101f39dba91a3199bab5b70f5bed7871580b54bf34f2851c14b69e16ad97223ab8eb0b2725e00efa7b1e75264a65ad61cfca62f6d5d651c193c123f9bf77b3aed591e8161b767fc2977b56f3849362559dffd3414ef1e5cb2d611f7bb3d7d4c28c0a6de2993eb89c0805622f9fe4136e856e103d931aae07469efc077f9dd6df11c1eeba7468ca78e2e8027b2f672f9b965a6d88756b531321fb181702794ce58299b0cd34e481dc6760b4f9b32cfae5e0a35b4a19a4dbd26870bcb8ccb7724a294b10697763d6b3f7141bf7ca09d0871dceaf364f5aca649d77203328b8ad463a144961595e978043be434cd08dd5120bc36c5d895745ce5cc10f9a7f22baad125d60beaeb8c98279f5b3a363eda42bfc9fef669b2f4fb663700dcc5a47515b9adec65cc99cfea4cc2246dcdff878eae17441c69f4127c49fdd7935bb0c0c8053c9b788aa74a7ff174b7fc8b36ddc5ffa89fe7a98a14805ce96447e00a8b32b3f46af448aa29f326d03477bde78b147fec195cc5b253becf53a80f08ddde4529c2f53f40eb59f8598ed0c045dd60cb8ee90669091d1e2e970791f687db9b28c43c74813b6364b3a0f5762bfaa867bcdd7d44d0eccc1e0149b6ba5c4412b16493330a41352c682dfd88aff599459c6d7beb392925338e9bb1469f59dc833d0e685dc8ac9fc708123d1a1d483e6ccd45f58edac266f5517f5711402a83bacb634e4a28e8d32121be30a2aaeb2adc5cc3e2b0d15cd94b4fab7f37ffa77e477099ea6dd6167e292921f5957fc4e2f3c7a1396e60154bb638dccb5fd0d7bedc36591901dbd5cf63914c401fc79036f4a26f7b4df5fd776b7ef156c33a180ec8615ec6f24659794da3af2cb75a5905b891a0b269405d4471fbeb3e90b19f502f0b36a32f9f8bbac6a1fa6fb7a50cb563b4fa41d0f2639da50773356cce00000000000000016721701a47a54d76c93fbd00f408c270897159bf168ab2ec326978f48f7d845b6e64d856de829fd8b45b86489abb7537e372df0ddc96ed4826ee76b28d8999d7e170b1db1dc9316d51504f7cf7740f354f0255f83a31ef9c8e70d33a256e909bad11ae1217f66260dc5c52682a6e84fec98221de47463b6d37b6a100fe5893b668d316b78f1cc0f67c481c50e275d4613a0b2acf73f86898b2506dc72b427e0476ab342f3c18b0949ee09c2d56154fc7b36a44c0771851186e83619f73945258dfe80304a591b2fe7057e80a2127c5e8b00c6d4809e72d931ffd7bce4b4d9fce0cf6135c47ad63fd7f9ed8beba4de84c087fcd42eaf8474a01bd752bba36dd487c0ae725f8e7ec695aa2958616f6c59413f235f176300a9457d3caf0b4e972b6b9339b4de6e7bf29aa1af48de7a834700a9c999c0198b3f6234aee737c96e02120b79725322aafe19139cc725db0b578cfccd8666b66ae8e034e4240768f03e0ff8ee072245b28f42ceb784133e99071b36709992fa81a9736d89018a2b361877a2fb05bceb0bfa5ee0eb7fc5d78c534f6ea4edcd0f530067c530f7bea92bddc9c61b268d5bc1ad3ff852ab93f3e810002133d0d8e16b1d71e1db2bdb91d416a6bfcb4864d58da1758abff7ca03d379bd48b03f019c33c434bdf25822465ae322b38ae83dd90597db8c781f48efedb66da368f3d9f67f27612c51c07b9aeb419c32ff028a77e3abc5bd531d7bb29bd1c6c1119820abfd881f660e5a7072cdbc0e888d97cbc2105782204f34d093c1e0e6195e51e2e8b639a0f656aa21e29d0fa2a2f868b77995e7ada252a30a31b219be7c1b107ddd737654546340e424f13521ed73f0ed33ad3664f1b9b68ee60f7255119d585c09a2467b22de08104a37202cb737e934b1bdb83102b680d9cfd21c55fd00e33fba7651b2c36a87272945c371303c7e4ca181c1f7d2fe09815c1732d8d777e7b9a430d6b237c7c9fc8758e8456fb4e6ffc2aa421ab5942204e54cb52197e14aae9ae34376ac1d56d009f07babcb3d3492c87faf3e44bdd7d16dbce8148e2c7cb44d30ca29908aaf7c9ef39e791a9a988a5381942e3daf05f85be245f4ef26b08d83b1c1b58892b462783dc27602d8931d3232e5be295d479f9600cc4c3ed2e6a2fbb925c602d251b13f2ec2b7ca99fcd4bc2aa6115ddb0b842ed35c70d867734ee7518fd5299e07818f024a1682aacaa4e28d9f5db71006beb8bcc1e3a43cf27fb3d9475fbd632912d83f4e95b4390068f55f2f832a2e2c9f4ba5ca59d185a655375c6f5779d9fe5a47d1f417cf6f6405eab89f755f9a90623270c2b2a444b6b79662964199f7bedd2a2939e03ec6a334b78a6166ebf70562819a273bb6de9a3d7c2383a569cbeb08859e742ec5f947d1817c2dbfa3b72e5d3afdc45", 0xde5}, {&(0x7f0000000000)="b6bfe5d12e5894a76921d2adc0f0f58aa1e55520876e89106f675fa786894a977f03a578cd0952", 0x27}, {&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdcc16d17eb847d268f96dbef0cb2788f69128e5807cabf5febbea9f3af1728c43010321fe35ab1bd50b26531473ec12eeb24c15f6247c30b4ba41347fd2ecb64c7f2f254c5566f8dad74e53cad7bf18ef03acc9475cbecaca73d4f425247fb72e587a4df6f89a99da2f70b36cecaf4192de5b95d59528bf443cb2eea28def8c0e2afe6d20317e6018103ed06b2fd36f473043435594f7910a5b4810ee7", 0xb4}, {&(0x7f0000002600)="6de2ad991180fdf63972d8b28d2348a933440abe6418b02f8fed6806f5973b257436cd50704587a0f1f6cd2b3d71cfb6cc4eb6786cd2ad7f2c9e4a5d2ed3c33037c349e2baf8048ebbbed07816856a940f59ed91c887442447d8dbdf05b772a895ce53fba04044b92d2d9466e4ac3fdf7bc680cc3aa9402f4cef565720a0a7eb3f01da68fa61c24d9a74cfbf7abecd67a002528e56e705d831d1cb0989b6b30cf790442b2e5208fe76cb9b416f4785d3a361a3f9216bd392b3fc199899fdca91f3eb96f00fad0caa9d0977f1c61b27b832faf93b6b044fa607ad71f08aab166619a730ff244a78bf2328d12208a04a1612109343318e775a80df3af4836c6191f81cbcac91875679ed73710b5f5e99d6172e64209ca1493afa7b9135e0e904fb35bab4371c249673233d98823939a333b762218db06407426d309174d7ed5bb3dd0ac713d36a3d9a85bcf9e3675c9506309596f679edb5e92560eb92c965599aa3bdcf070e1d307dcafcc4c9dfe944c2c1cbc904e5817c5f9c3d6735d40b63fec54df4d861e2136202f9af474dab418d4eb78848f20bd029ad42fb5909123ed00d19d05ce1139db9e12dd79965a0a73c72fd326e1364efe773abb76ec65d46619510788f7d9e9263298eec264b128c34a482439ebbcf0cf86846fd2609efe058c96519dc961cc19f596ddeb92f4bda028bda069346e755c463376fce50d40411080565589aa11b25ce661be87074fa51ccc5b132777d33fdb73cb6c4525bd17e5dbc0dd3aa453fec3206b25fffd40332e1ee170d8aa818da3f5228c06131f985e29d3424a5966688455a3643720de2cfb8114021624d7be24f06cbe1b6a29702e9de2fa87676e4ef5cfd1278b5120e8cdead7b3320bf4cbf6a3303b9601a0eb9f88e1c3a4a6c226e556969a4a6a3c12f4c7cc661ab0e623f004c56dd1b10dc7850989a4241f6998ce87dba11de74a74d2afaab98e42537e491bc0ddc50d8483c0bc5f8d3ae581d1d1507119c1b053dc22815ddb339becedf527fe60dc6f2fdcb357eeb3e007e1ca66d380677e5d656805a1bf470c49bf4f3702476686fe258d192cf0635e64fe5cc90ff79de16d6a7a873acff87c46d33cf22e8ffb5e53b06ee3d62b5c1df8428d0062e2e7ce07913037957f778d8f9ec469aa4f73c0a153b1cd911ee3c5803673c0210753060ab480c9676e166b31cf0e6677f4fbab0d39fdaec75bdd1a8b8c76856c0112b404f78af304dfecb49c0b1df6aed32f262ba0d444792e49757b73270fd02b63cf2044ec51b1a1ccc9f51af8f9ee6de419102579f3a149099cce8a8e7fcfa2fbd3ab0160c0de78e1330f7e0beecd30f8377380e4a0af902b9b615a202e15585ecc5959a0908d4cadd552bb7ba5a7c3de6a77e04030f1dee3e954c21d1d902c733b908804c83bdc7dd49d0a8cae86891108923a7639a2a78d5846154d62147bedc08171fcacfc53d1999d5375977486e403c5d383db8eb3b7c2657d05c5e0e0f4ac8716faa7180017190eb7c90170355376cc0d2dc6992338d959a9945b4785d2787e517c6f7e0a43523adc8cb7471dfc60565bd5112fcce7b07cf41bf4d8367c02eab256b9f9da8354edcb67ea50c84648611ced66b3d21a91188ace3e51c4d32c766ecee335ea06f3f709171c326c2176eec8931634f3fc16305daf4ead52a504f73d210b07a36f2e647cbf8eec8dbe660d2b3ffeb3c8f048a14e63dbcff4cc59686c4edf7862d227802d40d35e40fe606d44e9398240e144a77990d23c420e38a69ae5180d57f994df78c211d30e0e2439581d0e41e0008d4e35d9047a27970853171d25e45c35cfbbb46e6932e240eb451532a8fc798ec72b7f24c6089e489457a1f6152969f753bf53623db441cd63dc63da5295dbe01efad92eac91e7b3b0dc3402cf85d03f729898e0a6a2ae0cd09dfb6aa95fe158a84097a58cbed50f59cac0d30fd118393e83a9e63a84c394cfb359a62ce555f88b976acbdadd38965de9915472d63b6faa3fdcf4787dd5857470383c600219bf873a7ad9481385723c2b6f820a744b6f2de54ec4174398fdb24ee4dbe866e4cdeabadaf22b900f31b36d981e34dea08d9c43bf4512aeff2ae80a3ca0c7fdc1d85daab73d20fec2101ea559a69adb4f0ad66f90738f40206b1e6e208e965106f4b82f5df891b4dee1a935aa28fb8723231ffb5a14a635726f1a8937b7ccc61fe79719ebe283c181aeaa34f5b5cff5aa4ed1729714dc89d708c074a7e2f7f41d534c15cc60f25a378d5debd12c163f03a08d298777a525b2e055fb527da56703287597d60af522807e9e429a9866fd218af60bc62f1a1392d8d53d5e9c61c398ea9eab996fd72b79601be6bdf0ce3cfc6f0743607c4c1030bf625b0767eda60f14b943c4283c0e504e03c5fc97aa6a456bfa63b73210661fe5c8980080b1c76bfbdc11f1439c5dbfabe874a59ed5c2ea49abb622c552f3e64792c04afed216e931962711fd96e7721b9146d91fd6a204b5df56b1c36f9d2038fee7486fdb9ec7653b340edf20e1e535525b8f2b9639b0256924eeecd51f7334eec465a8dcc4876bc46e6f25e49af1dbc776d817202f984777b46abf30d4bff21bff1e2f3800e6fef65b1379512e981faf6b69bfe04fedb222c4e7ee3400586bc6b608ef6e063f90feb2f28bf1dcccbb436d087861f19cd2e439f64f3dd7736bc3a3854394d08bf8a665308c37b85c2730772363c5dbbafca9e20dc72418f8dd4c7fc100969a2d0b69d0620d0e23c3e19b966dc6fdbdd581ad52247adaea0b30ec0f3095e79bc2fdbc820943e0e56569b0897b0061ca009a8f86083bc85fe28f5f321ad2742bbb65d11681fd929b9a34213424bdc51d868361732b8a7b7c6cf68bc9833921f0618be05a3ff9e6e50f6c645e6942e416fdf54a89f81622c9efa784373767828af7aae034270a7cd451369276e2aa778d4213bf83a371c4d3c5e9d604179004e207e5e22ee19bbdf2e4de976595b90a871bcd5e86cea2b98189b67ddfe9f010e74495d180bd89a312e201a160def46681295f9c48d798c1743bd7448b14d54e71e933fcc01c7a00cf862da0b96955493f2f6d6b3d8a1d160eb12cabd85a1b67e32f0712765300215ba656c91dabe74faa3aaa24e1581732c11429dcee04033e00e64b19835d29ad5b68a983869797931916c90972b1235783be3a971f25ecc40aa49f4618e5df6741c00e761d32e90f609ac2a94192ce1dc34afc8f28ac0263d4323fd735ab6788cbca70cc88612da3776c5bffa79c405ff6dac80464ef1b1a4012da074bcd8473d265d81c29c60d3a7cc4a361030989fe531bf406ed75c4b160bee84ad1714a6946ef5730af23fe4219a7e74ca3f25128ee3bd3b5efd57157d1ec56f15d65ef84aeb6dc020cfb8039d11cadcac06d82a92657c0c60719bbb8edfcedbe0b6ebc33b340035e2c924504d6c950e8578f5d4ec0b1921ccee8a156202e15b88eb6db4bae2e508805883a6b459541cbfa54970079c76d0cc20d09ed7f4b296d277d49e3ff8c5786e5666604dad3ca851fd28b0110c73c5d18ca3c781f11bd2e4a0ee8dba3bafeb1ca72fbb88ef75e8153e019f8502f0c8e472dd9733c7bf4931b5ea0f1e1a4d682ecff99b03965ef920ba07651940cb67ffd1e58c9766528edf8eb7d35c5609b517f7540e51aea92501f7795e45661c50a370c4a28f5d2a5c9e3009c1598874d382bab3ad237f4205b766becb6d64d7b20b3e845feb39598418cadd936285aa0322f32b99855c726d0e97388b974464b1339748e1b217bfce1e1caea66fa5cfa47b8b181390b01bc61518d339009ad160775cca7370cccab7fd9f34d50339f5907b287e32871ed8cac8721606cd554ac2071f5a921afeb76d2897407a9e27b68cddbc6639b06ded77234c03ebe2fd6c0d2abbaa4d7fe0ed09a9199d34a873e77e5b66e136ba77c7cfab86714e78cc066c71be5daeed78609c4e45401759eb6e82a2a2e6d73bde6a0e5fb228162160b81c486f03daa96848f62ef354dd1ca4d803d1794b171d03f7eab9f1c3300f40007aa875c494b99ba20bb45eeeed7a464d7d24d101bbab3b88bf76ca12e6f60850675d42e0f1f0477db5606ddf4b8814709f381e19bbd6b0f853fddcd0dd010f05f05114a5d09ab2fde629e7de76b1f4c6264e936aefaefd4dd0feb6bc93d72fe53d7bd7d62f1e7f35c8de2abe67a7f50ddc52b741eb0eef4195f622b1c2b8c075538dd23dfb514c8eeda0276b61f13b156a92bf23f7a3e5db637301c2d2df1b3417fd7877f5187f48ce2d0f103f20e3334fd64f0bf7ba14ef72829eee8a3fc295b36de57c43399bd34fba193a2b315ed486c5f56512074295204297b648b3cfbb3ba27240becbed753d853451680ee6d92672afd05187e61099f457a366ea8f69a9907440cc0838d6dc8aa77e7e6bbe2c1c22d8304c832e84b74ab5fe74ef6b0e32f0016834836b85b97461da300144707f3757dee4874e409d7067d3f98b537b70711eaab022283ed8e1b5b02c340ac41ce8a522f67e44d8fedea24524dccd4569961236f94dd85aec010778151c4c0268f72f85faae6184ec2e9df62bcb7fa8181bd7162d246773595fd4b6144862c39747b96bc258c3ba9c85d9b202a656ec4902dba1d50f63b3f98022a73178aec0b0a2168c08a633465ee6004810d9f244aaaca1c27cc485cced11b674f1c4355310dbec18036211669bc2d11f07807b21dca61f878011bfb0bdb78211556f6a5c99f709abf12bb9649889892034667bf404e21dfd4f3275f0bab2918c4cdad10dc50f71abfa44cf078162fbf6f74a712a9dda80861ec4e3cad2fd8acc575f5eeeb0d4d6d8a313ed79e46b9c77fb90b960b9ee3b31884dcf456f91c545ef9d64574de9bc35c7b41a12f8caa5e5bf6d34856c92ac39db92214f8c5dcd90c06a2a4a693b97cde135d598d1b613ee6e1e6db360aad82176422c16e5590ee97e3f3b1ee1363492ecdd1dbb703630b2b7234d5315abec89067455aae483634f63f66c7c3adc6ccb4fd35c34b1b03db57f605eec3c887946ab87dbfc2488a468f006e6cf9761ee8cd06c061ac310c3792cb13989e1e319e76950f0ff07c22d32114396e5b39bc9162a65ec2224be7a55f171a4815a126fffc470748792a89ac8401799cbcb53ee15b76422e77259a01ccc0f70857baa8cb5e496171fc29b9c2727551ff8ef9240928e6159030d69b4d37f271a9991231595a491882aff19bd0586e16ae0d368be8cb96e5d6939c6342c2f7e060de7c12a893dff8af69d9f4923517d9951a745c3f8bc0a16d99a415b417f2c795c3b6ba4cc514cba8f0c329143efb38feceab789bda8c583c9874c2c0775d2bbab90ffe1e4b5151cf69d25e65de6c2e86a3cbacee3084a4d548987c9882c303cd6134d136618282e4935b92953d1cb63c6e46b0d74f40c0cc72bc27ed0346faeffea6e781bb138df5f7a98", 0xf25}], 0x7}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000640)="fb", 0x1}], 0x1}}], 0x2, 0x4044805) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) splice(r4, 0x0, r7, 0x0, 0x8000000000025a5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (async) r8 = accept4(r3, 0x0, 0x0, 0x800) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x8, 0x0, 0x4, @loopback, @dev={0xfe, 0x80, '\x00', 0x17}, 0x1, 0x7, 0xfffff214}}) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000680)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa69357b4fe0f8bbb09587304879e662a5218c51d4a6fa1334b93e0e41533d4f997b141ee4161f32b74eb1e45800ccb36d54282434331074d84f7fe4f0421018b898240e72bb45f58163f8ae759f8b521a40e63ccb516d540907c1bb908ec1885a9d9dbb39c7bfcc9705fdf87b9f2de38aa46842a172364435878a89752f245ae7b30a8ffd1e757bf4c11e1ffcd0accc530962827c042666fc7f532c814ea4f4", 0xd1}, {&(0x7f00000015c0)="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", 0x144}], 0x3, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038014000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800010062"], 0xfc}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 1.472359964s ago: executing program 3 (id=10191): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x24008004) unshare(0x20400) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x100) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 1.403694494s ago: executing program 4 (id=10192): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x22, 0x0, &(0x7f0000000080)="3d25ab555b19c4cbd0017085080040fee5a990ec7661bcf85f9871eb5f7eef2d45f0", 0x0, 0x304a0000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.212294585s ago: executing program 0 (id=10194): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r0, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x3c}, @in=@broadcast, {0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x4, 0xfffffffffffffff8}, {0x0, 0x3}, 0x0, 0x0, 0xa}, 0x5, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 1.153843061s ago: executing program 0 (id=10195): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x31, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x7ff}}, 0x30) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1ff73331", @ANYRES16, @ANYBLOB="010000000000fcdbdf251200000018000180"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)}, {&(0x7f0000000680)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76702dc0c3cfdc0d70ce8014884e6f55a35fb35bf6b5d934fe9d84c31cead100b35712c94abe6d869d6c8b49410bc05d9279a4ea2f4bf7a560e2fb975857c9b9e03a1b4fc02f34aeaa4e97d8b5a685978682a442b15c99d8ef5efb361727a9e960d3959e2618100ffffff0000000060f2edb20b84bc9a3e5708ca61000000008d222b44d02501c33b991234ea0431fea95ee4f0d6b4bb70827f1a59574d0e481b1653d5a2be", 0xc4}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xdca4}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x0, 0x80}, 0x28) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$xdp(r4, &(0x7f0000000040)={0x2c, 0x5, r6, 0x17, r4}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f0000000540)=0x1) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="296f045c94771463574a3449dbb54bae6a09c48fa1acf1a41c300fe093c71ffd419de629405a81494af91023b1f8652b29cbaf5f44be05f824294bdddf6bc505c6e1fc013ab55e20fa3f5f92343804f334a2d134dc7ea4354c82d883006a8e91e8e1031fb294b461d689d8a58954fa1bdd173f81ccd387bc93b34dbddee97a78f090377b2de5addad59fda0481979f148ef69c0dad2949e69212813d01152b73b000bb51f974d6", @ANYRES16, @ANYRES8=r7, @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000019e2000049e118980f41b1edb9d5bcf7000000000000000002180c1217ceb77a863b2805f7126b46fb9e740bc55c87d623faf9e2c564cdd424db5fc3dbc151a59b3bc9ce50f27571d645948f129e73ceb7e647bee6c7c28a21660e2138f794c12e7503a5fb45ce5704e0209e6dc312c4b4045125078d902a5e60998902c7c61db053ef9e0642de827209572475ce2f32eadcc1b796154c43206403fdb73b62adb8ab4423f19a36cf649af83c39f0badcb7f6dd3e49c1c2df92784f398dd4d03463566c7738891578b59c7500653118a585e8da937be4a7969d0a00ca3c5798ebe3feebab0000000000dfffffff000000000000027c16aa336eeda8edc2dd68069e05c3364409be3944c760f174454205d22f4a9ca44d7f77d158d9fc2a700944285ccefe4db82d6445a505a2c796a5d531da058f0c64c2859f8251dcb62d34014c60e5e26d6eab271b4be5b04012624f6de2"], 0x2c}}, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) poll(&(0x7f0000001d00)=[{r10, 0x1}], 0x1, 0x2) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.135179734s ago: executing program 1 (id=10196): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="114a", 0x2}], 0x1, 0x0, 0x0, 0x400e815}}], 0x2, 0x4) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 912.552992ms ago: executing program 0 (id=10197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3}], 0x1, 0x40800) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000040) r4 = socket$kcm(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x240b02, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000440)={[{0x2d, 'hugetlb'}, {0x2d, 'blkio'}, {0x2d, 'cpuset'}, {0x2b, 'memory'}, {0x2d, 'io'}]}, 0x24) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0xfc0, 0x65, 0x0, 0xd, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}}, "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"}}, 0xfce) 808.161418ms ago: executing program 1 (id=10198): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x5c, 0x14, 0x5, 0x0, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, @in6=@mcast2, 0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x32}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1}}]}, 0x5c}}, 0x4004040) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) ppoll(&(0x7f0000000100)=[{r1, 0x5082}], 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r4], 0x1c}}, 0x0) 677.577415ms ago: executing program 1 (id=10199): unshare(0x20000400) (async) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x50962, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_buf(r3, 0x1, 0x31, &(0x7f0000000040)=""/219, &(0x7f0000000140)=0xdb) 498.486012ms ago: executing program 1 (id=10200): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x11, 0x10000004, 0x8}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="1400000016000194d2432c00000000000a"], 0x14}}, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e1f, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x8) setsockopt$inet6_opts(r4, 0x29, 0x3b, 0xfffffffffffffffc, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000001600)=ANY=[@ANYBLOB="18000000010000000000000000000000b7080000000000007baaf8ff00000000b5080000ffffffff7b8af0ff00000000bfa000000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000800) 412.647547ms ago: executing program 4 (id=10201): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000820000000000000060b4000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r8, r4, 0x25, 0x0, @val=@tracing={0x0, 0xa}}, 0x20) syz_emit_ethernet(0x42, &(0x7f0000001380)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0xb, 0x6, "ec95a8", 0xc, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0, {[], {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x8, 0x100, @void}}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20100002}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8845}, 0x40010) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x124, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffb7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}]}, 0x124}}, 0x850) 326.149846ms ago: executing program 0 (id=10202): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000100)={0x2, 0xfffd, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f0000001b40)="08ba810a10d69bfad8c22e8786d8ad9993d210135222cf43a16774cdcf28376516", 0x21, 0x0, &(0x7f0000002400)={0x2, 0x4e23, @multicast2}, 0x10) 310.423212ms ago: executing program 4 (id=10203): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308c"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) (async, rerun: 64) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000) (async, rerun: 32) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (rerun: 32) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="332000000000000004002b800700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 224.367052ms ago: executing program 1 (id=10204): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r2, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003"], 0x5c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r3) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="29082dbd701e0000000a0004007770f80d9c05b3616e3a000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}]}, 0x50}}, 0x2000c080) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x1) 220.927716ms ago: executing program 3 (id=10205): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x8040, 0x1, 0x8, 0x7, {{0x1e, 0x4, 0x0, 0x1a, 0x78, 0x68, 0x0, 0xf8, 0x29, 0x0, @broadcast, @private=0xa010102, {[@ssrr={0x89, 0x1b, 0xa6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback, @multicast1, @rand_addr=0x64010100, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0x8, 0x3, 0x7, [{@empty, 0x675bc53f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010100, 0x4}, {@rand_addr=0x64010100, 0x1}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x2a, 0x0, 0x7, [0x3, 0x3]}, @noop, @generic={0x88, 0xc, "b74e6e7ae440cca28327"}, @rr={0x7, 0x7, 0xd0, [@multicast1]}]}}}}}) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @ldst={0x0, 0x1, 0x4, 0x3, 0x8, 0xffffffffffffffff, 0x9}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe}, @exit, @ldst={0x3, 0x1, 0x2, 0x5, 0x5, 0xffffffffffffffe0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f0000000540)='syzkaller\x00', 0x101, 0xe7, &(0x7f0000000580)=""/231, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xf, 0x1, 0x9}, 0x10, 0x1e8bf, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000700)=[{0x1, 0x1, 0xf, 0x8}, {0x5, 0x5, 0x4, 0xa}]}, 0x94) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x63, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0xffffffffffffffff, 0xec2, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x28, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4fc}, {}, {}, [@call={0x85, 0x0, 0x0, 0x9d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc78}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x6, 0x0, 0x2, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1fc0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x4, 0x52, &(0x7f00000002c0)=""/82, 0x41000, 0x20, '\x00', r2, @fallback=0x32, r3, 0x8, &(0x7f0000000480)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, &(0x7f00000008c0)=[r5, r6, r7]}, 0x94) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f00000009c0)={0x3b, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x3, 0xf, 0x4e}, 0x2c) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x144, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x100000001}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xdae}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '*\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_IFACE={0x14, 0x17, 'dummy0\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3d}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) r10 = accept(r8, &(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000cc0)=0x80) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r10, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r11, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x841) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f00000010c0)={{r9, &(0x7f0000000e40)=']\x00', 0x321700, &(0x7f0000000e80)={@align=0xee0e, {0x0, 0x5, 0x10000, 0xffffffffffffff7f}}, 0x9, &(0x7f0000000ec0), &(0x7f0000000f00)=0x80000001}, 0x1, &(0x7f0000001080)=[{0x0, 0x4, &(0x7f0000000f40)='GPL\x00', &(0x7f0000000f80)="7045e811d0ea377356500e9f3c27fd0a823456920203b05b77326f3c30ee8c8fff82794761d65023e2896ae741627a5871108627fa14fc18f9f0df251af8f843d7a7ccfed6cdd2964efcef084802119d693d5ed91acbebf365e862ee3701b3a1db03df5cbc125ce21fb6c3d7b2a3ca2c6ff35ac5bcb844bb960eb264137bbf67f8eff3d50e7f4d8efc28ab857375d09e1b7a0eaba43326a11eefa78c14a59fba93eb4c566b4e6acb3a18a91e4c59b0bff0e7461137e777705318a15c703465c1e020e7a7941b6da2bc4c6200128c3ca322e66dd144f389abded9405a397333f71c25fca67e9a054743b1aa1db01d", 0xee, 0x10}]}) bind$alg(r12, &(0x7f0000001140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-x86\x00'}, 0x58) (async) recvmsg(r12, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000011c0)=""/168, 0xa8}], 0x1, &(0x7f00000012c0)=""/205, 0xcd}, 0x40010120) (async) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000001400)={0x5, 0x5}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=@base={0x0, 0xd96e, 0x1a, 0x6, 0x20c4, 0xffffffffffffffff, 0x6, '\x00', r2, r3, 0x3, 0x5, 0x4}, 0x50) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000014c0)=r0, 0x4) ioctl$sock_netrom_SIOCADDRT(r12, 0x890b, &(0x7f0000001500)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8001, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001580)={0x5}, 0x8) (async) getuid() sendmmsg(r10, &(0x7f0000001fc0)=[{{&(0x7f00000015c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001640)="db6403ffc0db79fce76e6dd56da3a1aea9bad7f2b68ca46abef49b6cb45654ef30e5383fa53f6198e448781d30d18e18cde4e557cb43fd3a1bc1940c95e905fa0168425c353129dc7e18d95624643595811c03580a4c0bb27be129affa7744edadbebed5dbb914af9b98b63eb13c4e", 0x6f}, {&(0x7f00000016c0)="904d27459908eb6f0f8c4dc0", 0xc}, {&(0x7f0000001700)="86843ae5ecf85eb7d898847953592fbd7ab60968c00d6582fb38ca3ddbbb17ecb50d6968e0b755cdc1f42d2a6e60540bcdb0c717f1c66ec08b44a07e93427f17c77e446a97017382e496c59a85d831ae7fb6c9de519cd173fa2f5526b1ef8519610be8b76f870853568fd3418366f0314b168bda54c85fbd2dd89470cdbc155e57c59aa4f77d631c5db95bada661f803f7d2a5bb0c3d790f73ab11f8531172f29d4482d0", 0xa4}, {&(0x7f00000017c0)="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", 0xff}], 0x4, &(0x7f0000001900)=[{0xd8, 0x0, 0x1, "624dcf7deebde0c0ad22a150a62d6a279ec4c8bfa61d828ad40a2ec48031d9d48b7aee95f5a4e73294dac261a00bdd3ca446f67c14f281f4dac55635474384709ee44791a22a8c84c1533ff8fc408222ae9732a5eb794e57691621a5c208ef875660bfa770f3da520c69a9efb13ae16420b2899a15fd75b11c069385a7fefa38fe122f7aa7b9d76ef2fc853234e43bf44c2189e6fa35b924ea519c17a2258239b38f4188431282b5b6bfeae13c8b7398655501ebbaab47ff96acfa2900cc2a023bf4a0"}, {0x78, 0x130, 0x2, "b48eddeef6de5b4454df233b1ed2bb0cbfa83e92cc2c95e6eb26e9cad04099d4193af3e11707b74d33d87ebd081aa493e358e1a06322ed33ea5623d37e9122431413d39cbdb8457c662385ec7fb2f257911f8c1c45cc7ecb08de0bf2ae0094d8f5d3c65873b19849"}, {0xe8, 0x84, 0x7fff, "8bc655006ae3ebc4cbbd155f134dadc3e7c0057999167aa890d8555ebe48292db7b762c9c302cac11c0d64a591a4b1ce2d03ad5eb5580e469c33985aa794ff1761103915d1bfbd9b7723d6beba128d75b153728e0dc58b1721cd412dc22ebfaf5e37e5be3e3ea0560035e564a408e1656b7afc458152250a476318fd9b38f5cb2e7e307e3aba313504ab22a42ee4a1d7a94805a62e57f24d7bec0f11fa4a22120063d494e128e218a313bfdc4975af78454689381bcd3aac50139364409f50147a91eef2d8c9cf1e8cd5cd0817bdff700366"}, {0x10, 0x129, 0x55af6203}], 0x248}}, {{&(0x7f0000001b80)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x1}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c00)="8b6b380064f4db2e0f5eca4258bd982a1bad608d83c85b078b42ddb859f76ea94fa13f67f345bdab6aa8f355316d00c8900e5eb0dcdb429cd2ae1d5d6261e727fce42afeb30fcdf7d4020ac0b2b005657836574f67f0c79ee68e457ee5af933152414e0e93b91b47cf9aaece1c672280f97f1f9120e0f4c6677d42aeb562eb0d729e1e29611886139d952730145127069fd760ad12ed4895391663d5696cf49a59c97ec6", 0xa4}, {&(0x7f0000001cc0)="ebddacdf3a0688e6f350aa405f6aa01d3e7ccce292e65a0089977e3b84884eb468cf4a55800939de104be099e9f3244ec73a549a9602521c89e4", 0x3a}], 0x2}}, {{&(0x7f0000001d40)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x1}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001dc0)="77d363a1e61335daa4f2ccf3a5f68313f9f3bc5039c6cf7f4bd300b293738cc5edc8453c4b1d733e80199f0e2786564abcc34ba56e3e2797122e4bb86f44b38bb35b212d0441d8fa96f9af6709f2d3190149262ca53c5bf877ab77f68dfc4e9c203b5a41ddbad7f4a07895a77f01af514748a7cca196f7d3f3c062e7", 0x7c}, {&(0x7f0000001e40)="4f07dc630456195327b390384104007d4e016b50da0fe3315931b7d6cada852ca2ecbb2c73f548cc9a8f6dc14b80", 0x2e}, {&(0x7f0000001e80)="a276c06c297fbe6d87a8901cb4e7222d325f11cf490c4e45785536cf9c6efb079dc41c5eacab3cad1f265ff8fd6d7578ad7357b4cb1f5cdbe30c0624b19cce35c3791bf63048c04e63743634812a16966f93c708fd", 0x55}], 0x3, &(0x7f0000001f40)=[{0x70, 0x1bc, 0x7fffffff, "0502bb4599f536c81e22e5b5a4bde0c2da2a6bdceb7f6e347a39f39aee8de7a3deb88838d54a3da3afdc45ee46327d27b7e408304c268fcefb8ee926267bb8b73395a302d3f1cbb810755c5d6c87a506ecc690f4ded4855c8a1b"}], 0x70}}], 0x3, 0x4008004) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003100)={r13, &(0x7f0000002080)="7704038fd3d413b31edab1635378d6f40d2f0c4085cd9fdc8fec559cc091eb2ba01c017f355f310ec0753b510af1be6bcecc0140c4d8ec4f95f14a9a8192c9c92bdf665849fc3619b1a9bd00af29d14aca650f38ac72969295a58dff9b5d54a3800aedd0", &(0x7f0000002100)=""/4096}, 0x20) (async) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000003180), r10) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x30, r14, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8001) (async) socket(0x1a, 0xa, 0x4) 172.593643ms ago: executing program 4 (id=10206): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000340)=""/44, 0x2c}], 0x2}}], 0x1, 0x40010003, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000b80)=""/4096, &(0x7f0000001b80)=0x1000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000240)) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) accept4(r0, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000340)=""/44, 0x2c}], 0x2}}], 0x1, 0x40010003, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) (async) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000b80)=""/4096, &(0x7f0000001b80)=0x1000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000240)) (async) 81.067074ms ago: executing program 1 (id=10207): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x12000, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x400) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c) 4.083638ms ago: executing program 0 (id=10208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000aa7500000a4c0000000c0a010100000000000000000a0000c50900020073797a31000000000900010073797a3100000000200003801c0000800c000180060002"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f0000000380)={&(0x7f0000000040)=0xb, 0x2, &(0x7f0000000280)=[{}], &(0x7f0000000340)}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)='h?\x00W', 0x4}, {&(0x7f0000000240)="a492ce3ffd9311d70350", 0xa}], 0x3) 0s ago: executing program 3 (id=10209): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080013b6853e1d2be6f911a72dcae578030052377e6355dd13bd432b09f9cf036e9579ff19dda757474359b1c258d1105fe7bfe09a30a9e6f2acdbe276563330f3d3638427c4c79ab46db1839d06aea88f7f7b11c14adc6b5478f579a7cc065ca63bcf8f", @ANYRES32=r5, @ANYBLOB="0c0099000080000030000000140004006e69637666300000000000000000000008000500060000000c0017800400050004000600"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4) r6 = socket$pptp(0x18, 0x1, 0x2) write(r6, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000200000014000480050003000200000005000300070000000800020002000000"], 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) kernel console output (not intermixed with test programs): eth3): Releasing active interface [ 1184.220010][T13113] bond6 (unregistering): Released all slaves [ 1184.236032][T13113] bond7 (unregistering): Released all slaves [ 1184.258178][T13113] bond8 (unregistering): Released all slaves [ 1184.274342][T13113] bond9 (unregistering): Released all slaves [ 1184.296361][T13113] bond10 (unregistering): Released all slaves [ 1184.311868][T19717] tipc: Node number set to 2886997007 [ 1184.548474][ T8114] team0: Port device team_slave_0 added [ 1184.569942][ T8114] team0: Port device team_slave_1 added [ 1184.654247][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1184.685069][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1184.698356][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1184.738482][ T8252] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8882'. [ 1184.749191][T13113] 5n: left promiscuous mode [ 1184.799677][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8883'. [ 1184.919911][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8884'. [ 1184.934045][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.955802][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.000654][ T8114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1185.023598][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1185.058651][T13113] : left promiscuous mode [ 1185.176092][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1185.190469][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.270517][ T8114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.360646][ T8250] lo speed is unknown, defaulting to 1000 [ 1185.361572][T13113] tipc: Disabling bearer [ 1185.401581][T13113] tipc: Left network mode [ 1185.680545][ T5842] Bluetooth: hci3: command tx timeout [ 1185.720553][ T8114] hsr_slave_0: entered promiscuous mode [ 1185.735893][ T8114] hsr_slave_1: entered promiscuous mode [ 1185.769488][ T8114] debugfs: 'hsr0' already exists in 'hsr' [ 1185.779617][ T8114] Cannot create hsr debugfs directory [ 1186.068599][ T8284] Bluetooth: MGMT ver 1.23 [ 1186.435573][ T8292] lo speed is unknown, defaulting to 1000 [ 1186.793210][ T5505] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1186.824567][ T8383] lec:lec_start_xmit: lec0:No lecd attached [ 1187.032803][T13113] hsr_slave_0: left promiscuous mode [ 1187.055032][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8895'. [ 1187.064737][T13113] hsr_slave_1: left promiscuous mode [ 1187.756400][ T5842] Bluetooth: hci3: command tx timeout [ 1188.189919][ T8339] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.8899'. [ 1188.205725][ T8114] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.226727][ T8339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8899'. [ 1188.337657][T13113] IPVS: stop unused estimator thread 0... [ 1188.475074][ T8114] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.545994][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8901'. [ 1188.560677][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8901'. [ 1188.677323][ T8345] virt_wifi0: entered allmulticast mode [ 1188.697121][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8901'. [ 1188.714745][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8901'. [ 1188.755243][ T8114] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.924035][ T8114] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.849040][ T8366] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1189.856154][ T8372] netlink: 'syz.2.8909': attribute type 9 has an invalid length. [ 1189.856599][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8909'. [ 1189.876041][ T8372] gretap0: entered promiscuous mode [ 1189.885159][ T8372] macvlan2: entered promiscuous mode [ 1189.893185][ T8372] macvlan2: entered allmulticast mode [ 1189.899270][ T8372] gretap0: entered allmulticast mode [ 1190.115899][ T8390] : option downdelay: invalid value (18446744073709547007) [ 1190.124348][ T8390] : option downdelay: allowed values 0 - 2147483647 [ 1190.134013][ T8390] (unregistering): Released all slaves [ 1190.205602][ T8333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1190.217959][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8908'. [ 1190.229293][ T8114] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1190.268465][ T8114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1190.289684][ T8114] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1190.370250][ T8114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1190.411344][ T8114] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1190.440022][ T8114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1190.502456][ T8395] macsec1: entered promiscuous mode [ 1190.521551][ T8395] virt_wifi0: entered promiscuous mode [ 1190.536879][ T8114] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1190.549829][ T8114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1190.940844][ T8114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.037457][ T8114] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.095360][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.102699][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.148580][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.155864][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1191.294050][ T8445] FAULT_INJECTION: forcing a failure. [ 1191.294050][ T8445] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.343939][ T8445] CPU: 0 UID: 0 PID: 8445 Comm: syz.3.8923 Not tainted syzkaller #0 PREEMPT(full) [ 1191.343963][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1191.343974][ T8445] Call Trace: [ 1191.343980][ T8445] [ 1191.343987][ T8445] dump_stack_lvl+0xe8/0x150 [ 1191.344018][ T8445] should_fail_ex+0x412/0x560 [ 1191.344047][ T8445] should_failslab+0xa8/0x100 [ 1191.344071][ T8445] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1191.344091][ T8445] ? __alloc_skb+0x186/0x7d0 [ 1191.344106][ T8445] ? __alloc_skb+0x1d0/0x7d0 [ 1191.344118][ T8445] ? __local_bh_enable_ip+0xd0/0x130 [ 1191.344145][ T8445] __alloc_skb+0x1d0/0x7d0 [ 1191.344160][ T8445] ? netlink_ack_tlv_len+0x6c/0x210 [ 1191.344178][ T8445] netlink_ack+0x146/0xa50 [ 1191.344192][ T8445] ? kasan_quarantine_put+0xbb/0x1f0 [ 1191.344216][ T8445] ? lockdep_hardirqs_on+0x7a/0x110 [ 1191.344243][ T8445] ? nfnetlink_rcv+0x260f/0x27b0 [ 1191.344272][ T8445] nfnetlink_rcv+0x251a/0x27b0 [ 1191.344326][ T8445] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1191.344367][ T8445] ? ref_tracker_free+0x693/0x840 [ 1191.344434][ T8445] ? __netlink_deliver_tap+0x807/0x850 [ 1191.344468][ T8445] ? netlink_deliver_tap+0x2e/0x1b0 [ 1191.344495][ T8445] ? netlink_deliver_tap+0x2e/0x1b0 [ 1191.344525][ T8445] netlink_unicast+0x75c/0x8e0 [ 1191.344577][ T8445] netlink_sendmsg+0x813/0xb40 [ 1191.344603][ T8445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1191.344645][ T8445] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1191.344670][ T8445] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1191.344701][ T8445] ____sys_sendmsg+0x972/0x9f0 [ 1191.344727][ T8445] ? __might_fault+0xaf/0x130 [ 1191.344750][ T8445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1191.344774][ T8445] ? import_iovec+0x73/0xa0 [ 1191.344796][ T8445] ___sys_sendmsg+0x2a5/0x360 [ 1191.344812][ T8445] ? __lock_acquire+0x6b5/0x2cf0 [ 1191.344840][ T8445] ? __pfx____sys_sendmsg+0x10/0x10 [ 1191.344885][ T8445] ? __fget_files+0x2a/0x420 [ 1191.344901][ T8445] ? __fget_files+0x3a0/0x420 [ 1191.344925][ T8445] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1191.344945][ T8445] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1191.344972][ T8445] ? __pfx_ksys_write+0x10/0x10 [ 1191.345000][ T8445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.345017][ T8445] do_syscall_64+0x15f/0xf80 [ 1191.345039][ T8445] ? trace_irq_disable+0x3b/0x140 [ 1191.345060][ T8445] ? clear_bhb_loop+0x40/0x90 [ 1191.345079][ T8445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.345095][ T8445] RIP: 0033:0x7fa369b9cdd9 [ 1191.345110][ T8445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.345123][ T8445] RSP: 002b:00007fa36aae0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1191.345140][ T8445] RAX: ffffffffffffffda RBX: 00007fa369e15fa0 RCX: 00007fa369b9cdd9 [ 1191.345152][ T8445] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1191.345162][ T8445] RBP: 00007fa36aae0090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.345171][ T8445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1191.345181][ T8445] R13: 00007fa369e16038 R14: 00007fa369e15fa0 R15: 00007ffccefb4098 [ 1191.345211][ T8445] [ 1192.139298][ T8461] veth0: entered promiscuous mode [ 1192.156362][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5330 ms [ 1192.164485][ C1] lec:lec_tx_timeout: lec0 [ 1192.210806][ T8466] syzkaller1: entered promiscuous mode [ 1192.216996][ T8466] syzkaller1: entered allmulticast mode [ 1192.329449][ T8459] veth0: left promiscuous mode [ 1192.364382][ T8114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.517666][ T8477] netlink: 'syz.3.8931': attribute type 1 has an invalid length. [ 1192.603204][ T8480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8931'. [ 1192.655506][ T8481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8931'. [ 1192.821341][ T8480] bond10: (slave bridge11): making interface the new active one [ 1192.859336][ T8480] bond10: (slave bridge11): Enslaving as an active interface with an up link [ 1192.914775][ T8481] bond10: (slave bridge12): Enslaving as an active interface with a down link [ 1193.179089][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8935'. [ 1193.252292][ T8507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8936'. [ 1193.281410][ T8510] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8936'. [ 1193.448251][ T8114] veth0_vlan: entered promiscuous mode [ 1193.512503][ T8114] veth1_vlan: entered promiscuous mode [ 1193.627475][ T8516] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20002 [ 1193.672746][ T8114] veth0_macvtap: entered promiscuous mode [ 1193.844955][ T8516] syzkaller1: entered promiscuous mode [ 1193.888285][ T8516] syzkaller1: entered allmulticast mode [ 1193.914893][ T8114] veth1_macvtap: entered promiscuous mode [ 1194.155763][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.200864][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.244104][T11986] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.281218][T11986] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.328413][T11986] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.355574][T11986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.758835][ T8553] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1194.825769][ T8565] netlink: 'syz.0.8945': attribute type 11 has an invalid length. [ 1194.868945][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.877372][ T8565] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.8945'. [ 1194.963713][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.050481][ T4030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.069099][ T4030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.647803][ T8599] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8953'. [ 1195.862009][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1195.879964][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1195.891837][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1195.903910][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1195.925677][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1196.181177][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8958'. [ 1196.212179][ T8613] lo speed is unknown, defaulting to 1000 [ 1196.589764][ T8636] netlink: 'syz.2.8959': attribute type 1 has an invalid length. [ 1196.609811][ T8636] netlink: 1008 bytes leftover after parsing attributes in process `syz.2.8959'. [ 1197.206433][ T8613] chnl_net:caif_netlink_parms(): no params data found [ 1197.556464][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.582564][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.596883][ T8613] bridge_slave_0: entered allmulticast mode [ 1197.611309][ T8613] bridge_slave_0: entered promiscuous mode [ 1197.630136][ T8613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.647336][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.654777][ T8613] bridge_slave_1: entered allmulticast mode [ 1197.670782][ T8613] bridge_slave_1: entered promiscuous mode [ 1197.727386][ T8613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.740875][ T8613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.878966][ T8613] team0: Port device team_slave_0 added [ 1197.908219][ T8613] team0: Port device team_slave_1 added [ 1197.917030][ T8665] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1197.996830][ T5842] Bluetooth: hci1: command tx timeout [ 1198.023159][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1198.032204][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.059703][ T8613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1198.074151][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1198.083701][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.117595][ T8613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.251416][ T8613] hsr_slave_0: entered promiscuous mode [ 1198.267635][ T8613] hsr_slave_1: entered promiscuous mode [ 1198.288041][ T8613] debugfs: 'hsr0' already exists in 'hsr' [ 1198.293843][ T8613] Cannot create hsr debugfs directory [ 1198.513062][ T8685] syzkaller0: entered promiscuous mode [ 1198.519003][ T8685] syzkaller0: entered allmulticast mode [ 1198.532728][ T8685] netlink: 'syz.1.8968': attribute type 39 has an invalid length. [ 1198.725232][ T8665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1199.163070][ T8701] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8971'. [ 1199.277361][ T8703] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8971'. [ 1199.287725][ T8703] netlink: 196 bytes leftover after parsing attributes in process `syz.2.8971'. [ 1199.362905][ T8703] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8971'. [ 1200.076735][ T5842] Bluetooth: hci1: command tx timeout [ 1202.158735][ T5842] Bluetooth: hci1: command tx timeout [ 1203.281720][ T8691] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8969'. [ 1203.290815][ T8691] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8969'. [ 1203.381014][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8970'. [ 1203.412202][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8970'. [ 1203.454214][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8970'. [ 1203.480146][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8970'. [ 1203.502288][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8970'. [ 1203.528288][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8970'. [ 1203.551187][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8970'. [ 1203.585635][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8970'. [ 1203.625145][ T8693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1203.803710][ T8725] geneve2: entered allmulticast mode [ 1204.105748][ T5842] block nbd3: Receive control failed (result -1) [ 1204.237665][ T5842] Bluetooth: hci1: command tx timeout [ 1204.359669][ T8739] tipc: Enabled bearer , priority 0 [ 1204.369473][ T8748] syzkaller0: entered promiscuous mode [ 1204.379280][ T8748] syzkaller0: entered allmulticast mode [ 1204.680393][ T8751] syzkaller0: entered promiscuous mode [ 1204.686670][ T8751] syzkaller0: entered allmulticast mode [ 1204.727658][ T8738] tipc: Resetting bearer [ 1204.771756][ T8738] tipc: Disabling bearer [ 1209.202335][ T8613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1209.223195][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1209.269465][ T8613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1209.301230][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1209.314628][ T8613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1209.379136][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1209.397603][ T8793] __nla_validate_parse: 12 callbacks suppressed [ 1209.397624][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8993'. [ 1209.414470][ T8613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1209.440573][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1209.491844][ T8806] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8993'. [ 1209.523348][ T8808] syzkaller1: entered promiscuous mode [ 1209.530071][ T8801] netlink: 'syz.1.8995': attribute type 10 has an invalid length. [ 1209.536527][ T8808] syzkaller1: entered allmulticast mode [ 1209.542496][ T8801] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8995'. [ 1209.672908][ T8818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8999'. [ 1210.111553][ T8836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9002'. [ 1210.358793][ T8845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9002'. [ 1210.917047][ T8861] sctp: [Deprecated]: syz.4.9003 (pid 8861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1210.917047][ T8861] Use struct sctp_sack_info instead [ 1211.016866][ T8861] sctp: [Deprecated]: syz.4.9003 (pid 8861) Use of int in max_burst socket option. [ 1211.016866][ T8861] Use struct sctp_assoc_value instead [ 1211.249736][ T8613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.302069][ T8865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9004'. [ 1211.347620][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9008'. [ 1211.404019][ T8613] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.445955][T11988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.453229][T11988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1211.533714][T11988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.541004][T11988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.727542][ T8898] sock: sock_set_timeout: `syz.1.9012' (pid 8898) tries to set negative timeout [ 1211.862691][ T8893] lo speed is unknown, defaulting to 1000 [ 1212.191254][ T8912] tipc: Enabling of bearer rejected, media not registered [ 1212.227853][ T8913] tc_dump_action: action bad kind [ 1212.503966][ T8613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1212.683003][ T8938] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.9021'. [ 1212.772755][ T8613] veth0_vlan: entered promiscuous mode [ 1212.839118][ T8613] veth1_vlan: entered promiscuous mode [ 1212.963048][ T8952] netlink: 'syz.2.9024': attribute type 17 has an invalid length. [ 1213.082700][ T8952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1213.182955][ T8613] veth0_macvtap: entered promiscuous mode [ 1213.225687][ T8613] veth1_macvtap: entered promiscuous mode [ 1213.332682][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.354745][ T8970] netlink: 'syz.1.9029': attribute type 210 has an invalid length. [ 1213.414559][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1213.447991][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9029'. [ 1213.464965][ T4030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.480501][ T4030] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.514261][ T4030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.534079][ T4030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.902520][ T4030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.947152][ T4030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.142447][ T9006] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1214.175375][ T9013] FAULT_INJECTION: forcing a failure. [ 1214.175375][ T9013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1214.198364][ T9013] CPU: 1 UID: 0 PID: 9013 Comm: syz.1.9040 Not tainted syzkaller #0 PREEMPT(full) [ 1214.198391][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1214.198404][ T9013] Call Trace: [ 1214.198412][ T9013] [ 1214.198420][ T9013] dump_stack_lvl+0xe8/0x150 [ 1214.198456][ T9013] should_fail_ex+0x412/0x560 [ 1214.198490][ T9013] _copy_from_user+0x2d/0xb0 [ 1214.198512][ T9013] ___sys_sendmsg+0x1c6/0x360 [ 1214.198533][ T9013] ? __lock_acquire+0x6b5/0x2cf0 [ 1214.198564][ T9013] ? __pfx____sys_sendmsg+0x10/0x10 [ 1214.198616][ T9013] ? __fget_files+0x2a/0x420 [ 1214.198642][ T9013] ? __fget_files+0x3a0/0x420 [ 1214.198670][ T9013] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1214.198693][ T9013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1214.198721][ T9013] ? __pfx_ksys_write+0x10/0x10 [ 1214.198752][ T9013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.198772][ T9013] do_syscall_64+0x15f/0xf80 [ 1214.198797][ T9013] ? trace_irq_disable+0x3b/0x140 [ 1214.198821][ T9013] ? clear_bhb_loop+0x40/0x90 [ 1214.198843][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.198862][ T9013] RIP: 0033:0x7f6213d9cdd9 [ 1214.198879][ T9013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.198895][ T9013] RSP: 002b:00007f6214d22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1214.198915][ T9013] RAX: ffffffffffffffda RBX: 00007f6214015fa0 RCX: 00007f6213d9cdd9 [ 1214.198929][ T9013] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1214.198940][ T9013] RBP: 00007f6214d22090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.198952][ T9013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1214.198963][ T9013] R13: 00007f6214016038 R14: 00007f6214015fa0 R15: 00007ffcdcb74028 [ 1214.198991][ T9013] [ 1214.218553][ T9011] netlink: 'syz.4.9039': attribute type 1 has an invalid length. [ 1215.428389][ T9011] __nla_validate_parse: 2 callbacks suppressed [ 1215.428411][ T9011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9039'. [ 1215.479530][ T9011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9039'. [ 1215.520999][T11988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.532078][T11988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1215.822418][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8950'. [ 1215.840641][ T9042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8950'. [ 1216.092537][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9048'. [ 1216.129494][ T8604] IPVS: starting estimator thread 0... [ 1216.242519][ T9057] IPVS: using max 37 ests per chain, 88800 per kthread [ 1216.389362][ T9069] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9051'. [ 1216.434924][ T9069] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9051'. [ 1216.944944][ T9063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.095839][ T9080] lo speed is unknown, defaulting to 1000 [ 1217.253642][ T9063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.351935][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.581026][ T9063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.747221][ T9063] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.912491][T13113] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.053437][T13113] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.155286][ T4026] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.257607][T13113] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.271921][ T9131] netlink: 'syz.2.9065': attribute type 4 has an invalid length. [ 1218.381621][ T9140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9070'. [ 1218.532474][ T9153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9073'. [ 1218.556464][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1218.563396][ T9153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9073'. [ 1218.734479][ T9162] lo speed is unknown, defaulting to 1000 [ 1218.932956][ T9172] sctp: [Deprecated]: syz.4.9079 (pid 9172) Use of int in maxseg socket option. [ 1218.932956][ T9172] Use struct sctp_assoc_value instead [ 1219.144522][ T9175] x_tables: duplicate underflow at hook 3 [ 1219.308902][ T9183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1219.685823][ T9206] xt_TCPMSS: Only works on TCP SYN packets [ 1219.880266][ T9203] lo speed is unknown, defaulting to 1000 [ 1220.047757][ T9212] lo speed is unknown, defaulting to 1000 [ 1220.522264][ T9244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9099'. [ 1220.578165][ T9247] netlink: 'syz.1.9100': attribute type 11 has an invalid length. [ 1220.622341][ T9244] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.9099'. [ 1220.706081][ T9257] netlink: 'syz.1.9103': attribute type 1 has an invalid length. [ 1220.849616][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9105'. [ 1220.868829][ T9257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1220.872317][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9105'. [ 1220.895558][ T9266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9105'. [ 1220.993283][ T9261] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1221.258437][ T9267] syzkaller1: entered promiscuous mode [ 1221.274276][ T9267] syzkaller1: entered allmulticast mode [ 1221.321902][ T9285] 5: entered promiscuous mode [ 1221.658237][ T9307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9113'. [ 1221.736039][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9113'. [ 1221.752458][ T9298] lo speed is unknown, defaulting to 1000 [ 1222.214515][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9118'. [ 1222.224229][ T9321] openvswitch: netlink: Message has 2 unknown bytes. [ 1222.361470][ T9319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1222.407827][ T9321] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9118'. [ 1222.426971][ T9321] netlink: 212 bytes leftover after parsing attributes in process `syz.3.9118'. [ 1222.468063][ T9325] tipc: Enabled bearer , priority 0 [ 1222.492373][ T9326] : renamed from vlan0 [ 1222.543013][ T9325] syzkaller0: entered promiscuous mode [ 1222.556455][ T9325] syzkaller0: entered allmulticast mode [ 1223.158769][ T9346] tipc: Resetting bearer [ 1225.467098][ T9363] netlink: 'syz.0.9126': attribute type 1 has an invalid length. [ 1225.661817][ T9323] tipc: Resetting bearer [ 1225.695812][ T9323] tipc: Disabling bearer [ 1225.949387][ T9373] __nla_validate_parse: 1 callbacks suppressed [ 1225.949408][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9128'. [ 1225.981650][ T9371] bond1 (unregistering): Released all slaves [ 1226.033424][T11981] nci: nci_rsp_packet: unknown rsp opcode 0x606 [ 1226.184412][ T9392] netlink: 'syz.1.9130': attribute type 58 has an invalid length. [ 1226.223850][ T9388] bridge_slave_0: left allmulticast mode [ 1226.239956][ T9388] bridge_slave_0: left promiscuous mode [ 1226.257355][ T9388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.294696][ T9388] bridge_slave_1: left allmulticast mode [ 1226.310162][ T9388] bridge_slave_1: left promiscuous mode [ 1226.329678][ T9388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.345516][ T9388] bond0: (slave bond_slave_0): Releasing backup interface [ 1226.355868][ T9388] bond0: (slave bond_slave_1): Releasing backup interface [ 1226.384657][ T9388] team0: Port device team_slave_0 removed [ 1226.395439][ T9388] team0: Port device team_slave_1 removed [ 1226.402767][ T9388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.411926][ T9388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.421919][ T9388] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1226.746896][ T9377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1227.075531][ T9431] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9142'. [ 1227.100507][ T9435] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9141'. [ 1227.157199][ T9439] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9142'. [ 1227.399748][ T9449] netlink: 'syz.1.9145': attribute type 2 has an invalid length. [ 1227.421778][ T9449] netlink: 'syz.1.9145': attribute type 2 has an invalid length. [ 1228.210044][ T9490] netlink: 'syz.0.9158': attribute type 1 has an invalid length. [ 1228.279646][ T9490] bond1: entered promiscuous mode [ 1228.285384][ T9490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1228.455316][ T9504] pim6reg99999991: entered allmulticast mode [ 1228.690121][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9161'. [ 1229.292869][ T9529] lo speed is unknown, defaulting to 1000 [ 1229.621651][ T9543] netlink: zone id is out of range [ 1229.643745][ T9543] netlink: zone id is out of range [ 1229.687370][ T9549] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9171'. [ 1229.713046][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9171'. [ 1229.932435][ T9559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9172'. [ 1230.049098][ T9565] geneve2: entered allmulticast mode [ 1230.070200][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9173'. [ 1230.328378][ T9578] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1230.400007][ T9583] netlink: 'syz.3.9179': attribute type 1 has an invalid length. [ 1230.712309][ T9590] netlink: 'syz.3.9179': attribute type 1 has an invalid length. [ 1230.829292][ T9583] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1230.844186][ T9583] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 1230.964488][ T9604] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1231.029671][ T9604] bridge0: port 3(syz_tun) entered blocking state [ 1231.037315][ T9604] bridge0: port 3(syz_tun) entered disabled state [ 1231.047886][ T9604] syz_tun: entered allmulticast mode [ 1231.057396][ T9604] syz_tun: entered promiscuous mode [ 1231.063573][ T9604] bridge0: port 3(syz_tun) entered blocking state [ 1231.070254][ T9604] bridge0: port 3(syz_tun) entered forwarding state [ 1231.320357][ T9622] pimreg: entered allmulticast mode [ 1231.548956][ T9634] netlink: 'syz.3.9192': attribute type 21 has an invalid length. [ 1231.568193][ T9636] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1231.569899][ T9634] netlink: 'syz.3.9192': attribute type 22 has an invalid length. [ 1231.601379][ T9634] netlink: 'syz.3.9192': attribute type 23 has an invalid length. [ 1231.630687][ T9634] netlink: 'syz.3.9192': attribute type 25 has an invalid length. [ 1231.649458][ T9634] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9192'. [ 1231.659653][ T8592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.948449][ T8592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.118928][ T9662] sctp: [Deprecated]: syz.0.9201 (pid 9662) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1232.118928][ T9662] Use struct sctp_sack_info instead [ 1232.157482][ T9659] team0: No ports can be present during mode change [ 1232.185574][ T9666] openvswitch: netlink: IP tunnel dst address not specified [ 1232.334240][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9202'. [ 1232.399505][ T9669] macvtap1: entered promiscuous mode [ 1232.425902][ T9669] macvtap1: entered allmulticast mode [ 1232.450341][ T9669] veth1_vlan: entered allmulticast mode [ 1232.494126][ T9683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.515276][ T9683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.524864][ T9683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.871161][ T9687] lo speed is unknown, defaulting to 1000 [ 1233.164581][ T9697] syzkaller0: entered promiscuous mode [ 1233.177967][ T9697] syzkaller0: entered allmulticast mode [ 1233.790585][ T9737] nbd: must specify at least one socket [ 1237.799536][ T9733] vlan0: entered promiscuous mode [ 1237.804647][ T9733] ip6gretap0: entered promiscuous mode [ 1237.832204][ T9733] macvlan3: entered promiscuous mode [ 1237.840393][ T9733] vlan0: left promiscuous mode [ 1237.846633][ T9733] ip6gretap0: left promiscuous mode [ 1237.955660][ T9735] lo speed is unknown, defaulting to 1000 [ 1238.034635][ T9724] lo speed is unknown, defaulting to 1000 [ 1238.423411][ T9759] netlink: 'syz.2.9221': attribute type 1 has an invalid length. [ 1238.508426][ T9759] bond5: entered promiscuous mode [ 1238.514195][ T9759] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1238.584390][ T9759] IPv6: Can't replace route, no match found [ 1238.591171][ T9759] IPv6: Can't replace route, no match found [ 1239.043438][ T1313] net_ratelimit: 4 callbacks suppressed [ 1239.043460][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.060978][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 1239.070354][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.211441][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9228'. [ 1239.254084][ T9795] netlink: 'syz.1.9228': attribute type 13 has an invalid length. [ 1239.290524][ T9795] netlink: 'syz.1.9228': attribute type 17 has an invalid length. [ 1239.469581][ T9795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.479112][ T9795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.497956][ T9795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1239.582306][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9231'. [ 1239.611356][ T9812] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1239.798897][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9234'. [ 1239.846594][ T9826] veth0_vlan: left promiscuous mode [ 1239.861370][ T9826] veth0_vlan: entered promiscuous mode [ 1239.867294][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9234'. [ 1240.410445][ T9861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.421641][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.434915][ T9861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.447171][T13113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.466381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.479299][ T9859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9245'. [ 1240.526022][ T9864] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 1240.580364][ T9869] netlink: 'syz.0.9248': attribute type 29 has an invalid length. [ 1240.594442][ T9861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.607210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.641356][ T9864] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.873813][ T9881] syzkaller0: entered promiscuous mode [ 1240.889922][ T9881] syzkaller0: entered allmulticast mode [ 1240.926063][ T9864] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.112609][ T9864] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.239402][ T9864] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.326896][ T9903] SET target dimension over the limit! [ 1241.912692][ T9896] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1242.298283][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1242.316073][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1242.330687][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1242.339680][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1242.351335][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1244.157591][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 1244.165751][ C1] lec:lec_tx_timeout: lec0 [ 1244.567027][ T5842] Bluetooth: hci5: command tx timeout [ 1245.849959][ T5842] Bluetooth: hci1: link tx timeout [ 1245.858249][ T5842] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1246.299383][ T9909] lo speed is unknown, defaulting to 1000 [ 1246.431582][ T9924] lo speed is unknown, defaulting to 1000 [ 1246.494152][ T9930] bond6: Unable to set down delay as MII monitoring is disabled [ 1246.505445][ T9930] bond6 (unregistering): Released all slaves [ 1246.562534][T13113] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.637756][ T5842] Bluetooth: hci5: command tx timeout [ 1246.710672][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1246.724824][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1246.736698][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1246.810975][ T9939] netlink: 'syz.2.9266': attribute type 1 has an invalid length. [ 1246.824046][T13113] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.865951][ T9939] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1246.930354][ T9941] bond6: entered allmulticast mode [ 1246.949943][T25402] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.039058][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.070301][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1247.088815][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1247.188975][T25402] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.374869][ T9949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9268'. [ 1247.410426][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9268'. [ 1247.804527][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.828135][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1247.851900][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1247.869093][ T9949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9268'. [ 1247.903483][ T9924] chnl_net:caif_netlink_parms(): no params data found [ 1248.006950][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 1248.070145][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1248.082538][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1248.094407][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1248.145354][ T9957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1248.220933][ T9964] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1248.386630][ T9924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.398958][ T9924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.406917][ T9924] bridge_slave_0: entered allmulticast mode [ 1248.421948][ T9924] bridge_slave_0: entered promiscuous mode [ 1248.437830][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9275'. [ 1248.447595][ T9979] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1248.465993][ T9979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9275'. [ 1248.497711][ T9924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.515779][ T9924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.541643][ T9924] bridge_slave_1: entered allmulticast mode [ 1248.557432][ T9924] bridge_slave_1: entered promiscuous mode [ 1248.608517][ T9979] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1248.621032][ T9979] bond2 (unregistering): Released all slaves [ 1248.717501][T31994] Bluetooth: hci5: command tx timeout [ 1248.882873][ T4026] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.985915][ T9924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.034328][ T9924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.098448][ T4026] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.181119][ T9991] vxcan2: entered allmulticast mode [ 1249.216020][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.251079][ T9924] team0: Port device team_slave_0 added [ 1249.318203][ T9924] team0: Port device team_slave_1 added [ 1249.333476][T25402] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.447294][T10012] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1249.529733][T10015] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9284'. [ 1250.014668][ T36] bond2 (unregistering): (slave gre1): Releasing backup interface [ 1250.575079][ T36] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 1250.585804][ T36] bridge6 (unregistering): left promiscuous mode [ 1250.796672][T31994] Bluetooth: hci5: command tx timeout [ 1250.808009][ T36] bond10 (unregistering): (slave bridge11): Releasing active interface [ 1250.817110][ T36] bond10 (unregistering): (slave bridge11): the permanent HWaddr of slave - c2:c1:70:21:a0:c4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1250.852450][ T36] bond10 (unregistering): (slave bridge12): Releasing active interface [ 1250.914743][ T36] bond0 (unregistering): Released all slaves [ 1250.928425][ T36] bond1 (unregistering): Released all slaves [ 1250.945075][ T36] bond2 (unregistering): Released all slaves [ 1250.970645][ T36] bond3 (unregistering): (slave veth5): Releasing backup interface [ 1250.979465][ T36] veth5: left promiscuous mode [ 1250.987844][ T36] bond3 (unregistering): Released all slaves [ 1251.009072][ T36] bond4 (unregistering): Released all slaves [ 1251.030278][ T36] bond5 (unregistering): Released all slaves [ 1251.052394][ T36] bond6 (unregistering): Released all slaves [ 1251.076777][ T36] bond7 (unregistering): Released all slaves [ 1251.095130][ T36] bond8 (unregistering): (slave veth7): Releasing active interface [ 1251.105670][ T36] bond8 (unregistering): Released all slaves [ 1251.130640][ T36] bond9 (unregistering): Released all slaves [ 1251.146776][ T36] bond10 (unregistering): Released all slaves [ 1251.163161][ T36] bond11 (unregistering): Released all slaves [ 1251.189024][ T36] bond12 (unregistering): Released all slaves [ 1251.264040][ T5505] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1251.299886][ T8383] lec:lec_start_xmit: lec0:No lecd attached [ 1251.403251][T10045] netlink: 'syz.1.9291': attribute type 1 has an invalid length. [ 1251.528521][T10050] netlink: 'syz.0.9292': attribute type 10 has an invalid length. [ 1251.558647][ T9924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.570795][ T9924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.604770][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9293'. [ 1251.615957][T10053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9293'. [ 1251.631054][ T9924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.657634][ T36] tipc: Left network mode [ 1251.664041][T10045] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1251.693513][T10050] veth0_vlan: left promiscuous mode [ 1251.723532][T10050] veth0_vlan: entered promiscuous mode [ 1251.749248][T10050] team0: Device veth0_vlan failed to register rx_handler [ 1251.788080][T10052] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1251.789837][T10053] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1251.804451][ T9924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.849651][ T9924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.959322][ T9924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.970943][T10069] netlink: 'syz.4.9296': attribute type 39 has an invalid length. [ 1252.257033][T10075] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1252.307448][T10062] syzkaller0: entered promiscuous mode [ 1252.320422][T10062] syzkaller0: entered allmulticast mode [ 1252.731355][ T9924] hsr_slave_0: entered promiscuous mode [ 1252.745541][ T9924] hsr_slave_1: entered promiscuous mode [ 1252.778693][ T9924] debugfs: 'hsr0' already exists in 'hsr' [ 1252.794615][ T9924] Cannot create hsr debugfs directory [ 1252.804477][T10093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9297'. [ 1252.870156][T10082] openvswitch: netlink: Actions may not be safe on all matching packets [ 1253.148242][T10093] vlan2: entered promiscuous mode [ 1253.165381][T10093] bridge0: entered promiscuous mode [ 1253.208969][T10098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9300'. [ 1253.238457][T10098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9300'. [ 1253.555069][ T5505] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1253.593638][T10107] lo speed is unknown, defaulting to 1000 [ 1253.904166][T10135] netlink: 'syz.4.9308': attribute type 1 has an invalid length. [ 1253.920565][T10135] netlink: 'syz.4.9308': attribute type 2 has an invalid length. [ 1254.195356][ T9924] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.340100][T10157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9312'. [ 1254.355557][T10157] Bluetooth: MGMT ver 1.23 [ 1254.397663][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9312'. [ 1254.542526][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9313'. [ 1254.683733][ T9924] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.887342][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9315'. [ 1254.951145][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9315'. [ 1255.306135][ T9924] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.532925][ T9924] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.556503][T10187] nbd4: detected capacity change from 0 to 63 [ 1255.565581][T31994] block nbd4: Receive control failed (result -32) [ 1255.577608][ T9997] block nbd4: Dead connection, failed to find a fallback [ 1255.599080][ T9997] block nbd4: shutting down sockets [ 1255.614569][ T9997] blk_print_req_error: 24 callbacks suppressed [ 1255.614591][ T9997] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1255.632804][ T9997] buffer_io_error: 23 callbacks suppressed [ 1255.632827][ T9997] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1255.651213][ T9997] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1255.660423][ T9997] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1255.671615][ T9997] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1255.682612][ T9997] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1255.691276][ T9997] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1255.701004][ T9997] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1255.701287][T10192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9320'. [ 1255.721851][ T9997] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1255.732192][ T9997] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1255.777327][ T9997] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1255.787794][ T9997] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1255.795922][ T9997] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1255.822841][ T9997] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1255.831313][ T9997] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1255.842760][ T9997] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1255.851123][ T9997] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1255.861404][ T9997] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1255.872570][ T9997] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1255.918321][ T9997] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1255.940276][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9321'. [ 1255.964631][ T9997] ldm_validate_partition_table(): Disk read failed. [ 1256.000523][ T9997] Dev nbd4: unable to read RDB block 0 [ 1256.051057][ T9997] nbd4: unable to read partition table [ 1256.112942][ T9997] ldm_validate_partition_table(): Disk read failed. [ 1256.161167][ T9997] Dev nbd4: unable to read RDB block 0 [ 1256.186884][ T9997] nbd4: unable to read partition table [ 1256.192064][ T36] hsr_slave_0: left promiscuous mode [ 1256.229373][ T36] hsr_slave_1: left promiscuous mode [ 1256.306625][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1256.314736][ C1] lec:lec_tx_timeout: lec0 [ 1257.647891][T10245] FAULT_INJECTION: forcing a failure. [ 1257.647891][T10245] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.682975][T10245] CPU: 0 UID: 0 PID: 10245 Comm: syz.0.9335 Not tainted syzkaller #0 PREEMPT(full) [ 1257.683007][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1257.683022][T10245] Call Trace: [ 1257.683031][T10245] [ 1257.683041][T10245] dump_stack_lvl+0xe8/0x150 [ 1257.683082][T10245] should_fail_ex+0x412/0x560 [ 1257.683125][T10245] should_failslab+0xa8/0x100 [ 1257.683155][T10245] ? skb_clone+0x212/0x3a0 [ 1257.683181][T10245] kmem_cache_alloc_noprof+0x87/0x650 [ 1257.683218][T10245] skb_clone+0x212/0x3a0 [ 1257.683247][T10245] __netlink_deliver_tap+0x404/0x850 [ 1257.683285][T10245] ? netlink_deliver_tap+0x2e/0x1b0 [ 1257.683311][T10245] netlink_deliver_tap+0x19c/0x1b0 [ 1257.683336][T10245] netlink_sendskb+0x68/0x140 [ 1257.683369][T10245] nfnetlink_rcv+0x251a/0x27b0 [ 1257.683435][T10245] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1257.683485][T10245] ? ref_tracker_free+0x693/0x840 [ 1257.683542][T10245] ? __netlink_deliver_tap+0x807/0x850 [ 1257.683584][T10245] ? netlink_deliver_tap+0x2e/0x1b0 [ 1257.683606][T10245] ? netlink_deliver_tap+0x2e/0x1b0 [ 1257.683635][T10245] netlink_unicast+0x75c/0x8e0 [ 1257.683681][T10245] netlink_sendmsg+0x813/0xb40 [ 1257.683715][T10245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1257.683743][T10245] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1257.683768][T10245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1257.683802][T10245] ____sys_sendmsg+0x972/0x9f0 [ 1257.683827][T10245] ? __might_fault+0xaf/0x130 [ 1257.683859][T10245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1257.683892][T10245] ? import_iovec+0x73/0xa0 [ 1257.683916][T10245] ___sys_sendmsg+0x2a5/0x360 [ 1257.683939][T10245] ? __lock_acquire+0x6b5/0x2cf0 [ 1257.683979][T10245] ? __pfx____sys_sendmsg+0x10/0x10 [ 1257.684045][T10245] ? __fget_files+0x2a/0x420 [ 1257.684067][T10245] ? __fget_files+0x3a0/0x420 [ 1257.684102][T10245] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1257.684131][T10245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1257.684168][T10245] ? __pfx_ksys_write+0x10/0x10 [ 1257.684206][T10245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.684230][T10245] do_syscall_64+0x15f/0xf80 [ 1257.684258][T10245] ? trace_irq_disable+0x3b/0x140 [ 1257.684284][T10245] ? clear_bhb_loop+0x40/0x90 [ 1257.684308][T10245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.684328][T10245] RIP: 0033:0x7fa3ab99cdd9 [ 1257.684349][T10245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.684368][T10245] RSP: 002b:00007fa3ac858028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1257.684392][T10245] RAX: ffffffffffffffda RBX: 00007fa3abc15fa0 RCX: 00007fa3ab99cdd9 [ 1257.684409][T10245] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1257.684423][T10245] RBP: 00007fa3ac858090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.684436][T10245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1257.684450][T10245] R13: 00007fa3abc16038 R14: 00007fa3abc15fa0 R15: 00007ffd58475fb8 [ 1257.684488][T10245] [ 1257.999423][ T9924] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1258.080207][ T9924] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1258.143899][ T9924] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1258.162732][ T9924] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1258.171525][ T9924] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1258.201611][ T9924] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1258.210038][ T9924] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1258.230562][ T9924] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1258.409174][ T9924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.502532][ T9924] 8021q: adding VLAN 0 to HW filter on device team0 [ 1258.534362][T11981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.541784][T11981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1258.585920][T11981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.593287][T11981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1258.677513][T10265] __nla_validate_parse: 2 callbacks suppressed [ 1258.677534][T10265] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9339'. [ 1259.073656][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9343'. [ 1259.625482][ T9924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.687164][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9345'. [ 1259.703770][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9346'. [ 1259.760347][T10304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9346'. [ 1259.973501][ T9924] veth0_vlan: entered promiscuous mode [ 1260.017957][T10282] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1260.031575][ T9924] veth1_vlan: entered promiscuous mode [ 1260.107373][T10316] hm3): entered promiscuous mode [ 1260.251216][T10324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9349'. [ 1260.372697][T10327] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9349'. [ 1260.408114][ T9924] veth0_macvtap: entered promiscuous mode [ 1260.505232][ T9924] veth1_macvtap: entered promiscuous mode [ 1260.686474][ T9924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.738992][ T9924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1260.813235][T13113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.852897][T13113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.926072][T13113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.955263][T13113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.097407][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9353'. [ 1261.220318][ T36] IPVS: stop unused estimator thread 0... [ 1261.626709][ T4026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.653617][ T4026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.717703][T10360] syzkaller0: entered promiscuous mode [ 1261.730488][T10360] syzkaller0: entered allmulticast mode [ 1261.835998][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.851159][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.020913][T10369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9360'. [ 1262.044645][T10369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9360'. [ 1262.651518][T10385] lo speed is unknown, defaulting to 1000 [ 1262.923713][T10398] netlink: 'syz.3.9368': attribute type 6 has an invalid length. [ 1262.958018][T10400] netlink: 'syz.3.9368': attribute type 6 has an invalid length. [ 1263.128934][T10405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1263.173665][T10405] bond2: entered promiscuous mode [ 1263.179595][T10405] bond2: entered allmulticast mode [ 1263.186879][T10405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1263.202098][T10405] team0: Port device bond2 added [ 1263.210062][T10398] syzkaller1: entered promiscuous mode [ 1263.217249][T10398] syzkaller1: entered allmulticast mode [ 1263.228537][T10409] tipc: Enabled bearer , priority 0 [ 1264.030913][T10403] syzkaller0: entered promiscuous mode [ 1264.039104][T10403] syzkaller0: entered allmulticast mode [ 1264.145596][T10414] syzkaller0: mtu less than device minimum [ 1264.154263][T10401] tipc: Resetting bearer [ 1264.233593][T10401] tipc: Disabling bearer [ 1264.248438][T10425] __nla_validate_parse: 7 callbacks suppressed [ 1264.248499][T10425] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9374'. [ 1264.265295][T10425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9374'. [ 1264.340517][T10427] syzkaller0: entered promiscuous mode [ 1264.353862][T10427] syzkaller0: entered allmulticast mode [ 1264.922486][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9384'. [ 1265.202121][T10473] netlink: 228 bytes leftover after parsing attributes in process `syz.4.9390'. [ 1265.275429][T10477] lo speed is unknown, defaulting to 1000 [ 1265.290878][T10469] Cannot find add_set index 0 as target [ 1265.319800][T10469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9388'. [ 1265.470268][T10474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.543839][T10482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9393'. [ 1265.568477][T10482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9393'. [ 1266.052959][T10474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.151037][T10491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9396'. [ 1266.346946][T10474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.433202][T10514] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1266.577437][T10474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.608156][T10525] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9400'. [ 1266.630077][T10511] lo speed is unknown, defaulting to 1000 [ 1266.816032][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9405'. [ 1266.908117][T10535] netlink: 'syz.3.9406': attribute type 1 has an invalid length. [ 1267.090685][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.535812][T11988] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.595932][T10563] : entered promiscuous mode [ 1267.681817][T11988] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.822690][T25404] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.878020][T10577] netlink: 'syz.1.9412': attribute type 13 has an invalid length. [ 1267.907737][T10577] netlink: 'syz.1.9412': attribute type 17 has an invalid length. [ 1267.974968][T10577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1268.278987][T10590] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1269.076509][T10621] bridge0: port 3(syz_tun) entered disabled state [ 1269.094385][T10621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.102212][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.255225][T10621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.270671][T10621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.534252][T10639] tipc: Enabled bearer , priority 0 [ 1269.579792][T13113] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.606467][T13113] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.623525][T10640] syzkaller0: entered promiscuous mode [ 1269.631531][T10640] syzkaller0: entered allmulticast mode [ 1269.657959][T13113] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.680829][T13113] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.696661][T10656] __nla_validate_parse: 3 callbacks suppressed [ 1269.696681][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9428'. [ 1269.703401][T10638] tipc: Resetting bearer [ 1269.717387][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9428'. [ 1269.757685][T10630] tipc: Resetting bearer [ 1269.827429][T10630] tipc: Disabling bearer [ 1269.854729][T10636] lo speed is unknown, defaulting to 1000 [ 1269.950807][T10664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1270.057677][T10670] netlink: 'syz.4.9433': attribute type 1 has an invalid length. [ 1270.114682][T10672] IPv6: Can't replace route, no match found [ 1270.125169][T10672] IPv6: Can't replace route, no match found [ 1270.163173][T10670] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1270.229918][T10682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1270.391188][T10691] bond3: Removing last arp target with arp_interval on [ 1270.552983][T10688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1270.671151][ T30] audit: type=1804 audit(1777021988.429:25): pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9441" name="/newroot/141/cgroup.controllers" dev="tmpfs" ino=731 res=1 errno=0 [ 1270.696584][ T30] audit: type=1800 audit(1777021988.429:26): pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9441" name="cgroup.controllers" dev="tmpfs" ino=731 res=0 errno=0 [ 1271.101886][T10718] netlink: 'syz.2.9445': attribute type 1 has an invalid length. [ 1271.619091][T10732] geneve1: entered promiscuous mode [ 1271.713287][T10747] bridge1: entered promiscuous mode [ 1271.719098][T10747] bridge1: entered allmulticast mode [ 1271.730368][T13113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.771574][T10736] lo speed is unknown, defaulting to 1000 [ 1273.302137][T10799] netlink: 'syz.2.9463': attribute type 1 has an invalid length. [ 1273.417028][ T37] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.425994][ T37] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.435863][ T37] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.449275][ T37] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.536778][T10808] xt_bpf: check failed: parse error [ 1274.557068][T10741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1275.627102][T10874] syzkaller0: entered promiscuous mode [ 1275.632834][T10874] syzkaller0: entered allmulticast mode [ 1275.773235][T10837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1275.784897][T10855] netlink: 'syz.1.9482': attribute type 1 has an invalid length. [ 1275.804165][T10855] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9482'. [ 1276.097866][T10880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9486'. [ 1276.173264][T10884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9488'. [ 1276.184987][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9488'. [ 1277.396825][T10902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.404602][T10902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.952059][T10902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.017642][T10902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.561485][ T5505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.614969][T13113] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.670258][T13113] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.694552][T10938] xt_bpf: check failed: parse error [ 1278.711052][T10937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.713848][T13113] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.764436][T13113] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.988002][ T5505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.199095][T10968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9506'. [ 1279.231146][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9505'. [ 1279.236018][T10958] netlink: 'syz.1.9502': attribute type 13 has an invalid length. [ 1279.307420][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9504'. [ 1279.348178][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9504'. [ 1279.982914][T11005] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1280.021723][T11005] bond1 (unregistering): Released all slaves [ 1280.085119][T10998] syzkaller1: entered promiscuous mode [ 1280.101248][T10998] syzkaller1: entered allmulticast mode [ 1280.235242][T11008] lo speed is unknown, defaulting to 1000 [ 1280.247403][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9514'. [ 1280.269618][T11017] netlink: 312 bytes leftover after parsing attributes in process `syz.1.9514'. [ 1280.339335][T11018] syzkaller1: entered promiscuous mode [ 1280.351646][T11018] syzkaller1: entered allmulticast mode [ 1280.682613][T11038] netlink: 'syz.0.9519': attribute type 1 has an invalid length. [ 1280.741307][T11040] xt_hashlimit: size too large, truncated to 1048576 [ 1280.855190][T11038] __nla_validate_parse: 1 callbacks suppressed [ 1280.855215][T11038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9519'. [ 1280.904908][T11042] bond2: (slave geneve3): making interface the new active one [ 1280.918791][T11042] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1280.930088][T11045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9522'. [ 1280.954917][T11042] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1280.982580][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1281.010553][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1281.064168][T11038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1281.086136][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1281.129016][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1281.354781][T11051] syzkaller0: entered promiscuous mode [ 1281.382242][T11051] syzkaller0: entered allmulticast mode [ 1281.634820][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.739508][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1281.758817][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1281.775659][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1281.785602][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1281.794704][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1282.621541][T10937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.988480][ T5505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.630327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.665477][T11094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.848989][T31994] Bluetooth: hci4: command tx timeout [ 1285.238374][T11094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.920682][T31994] Bluetooth: hci4: command tx timeout [ 1286.628744][T11094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.762263][T11083] netlink: 280 bytes leftover after parsing attributes in process `syz.0.9527'. [ 1286.858160][T11088] netlink: 'syz.4.9529': attribute type 1 has an invalid length. [ 1286.885603][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9532'. [ 1286.908067][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9532'. [ 1286.988439][T11076] lo speed is unknown, defaulting to 1000 [ 1286.999813][ T5505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.067822][T11108] netlink: 'syz.0.9535': attribute type 1 has an invalid length. [ 1287.108711][T11108] bond3: entered promiscuous mode [ 1287.114398][T11108] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1287.185586][T11116] netlink: 'syz.1.9533': attribute type 10 has an invalid length. [ 1287.288070][T11108] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1287.305459][T11108] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1287.326791][T11108] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1287.355057][T11121] netlink: 'syz.3.9537': attribute type 1 has an invalid length. [ 1287.409172][T11116] team0: Cannot enslave team device to itself [ 1287.489142][T11121] bond1: entered promiscuous mode [ 1287.494798][T11121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1287.839226][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9540'. [ 1287.886937][T11139] netlink: 'syz.0.9540': attribute type 14 has an invalid length. [ 1287.903289][T11139] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9540'. [ 1287.903965][T11135] netlink: 'syz.1.9539': attribute type 15 has an invalid length. [ 1287.929648][T11135] netlink: 666 bytes leftover after parsing attributes in process `syz.1.9539'. [ 1287.933666][T11141] delete_channel: no stack [ 1287.996541][T31994] Bluetooth: hci4: command tx timeout [ 1288.059871][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9542'. [ 1288.111747][T11133] lo speed is unknown, defaulting to 1000 [ 1288.192440][T11145] bond2: option broadcast_neighbor: invalid value (30) [ 1288.205024][T11145] bond2 (unregistering): Released all slaves [ 1288.263290][T11151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9543'. [ 1288.274887][T11151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9543'. [ 1288.291050][T11151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9543'. [ 1288.359885][T11151] bridge0: port 3(syz_tun) entered blocking state [ 1288.366587][T11151] bridge0: port 3(syz_tun) entered forwarding state [ 1288.380518][T11151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1288.390929][T11151] 8021q: adding VLAN 0 to HW filter on device team0 [ 1288.411676][T11151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1288.525741][T11076] chnl_net:caif_netlink_parms(): no params data found [ 1288.716468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.083571][T11076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.092012][T11076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.101071][T11076] bridge_slave_0: entered allmulticast mode [ 1289.110649][T11076] bridge_slave_0: entered promiscuous mode [ 1289.137122][T11076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.144712][T11076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.154746][T11076] bridge_slave_1: entered allmulticast mode [ 1289.163822][T11076] bridge_slave_1: entered promiscuous mode [ 1289.369437][T11076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.395286][T11076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.541821][T11076] team0: Port device team_slave_0 added [ 1289.569637][T11076] team0: Port device team_slave_1 added [ 1289.606130][T11200] netlink: 'syz.1.9550': attribute type 21 has an invalid length. [ 1289.636992][T11200] netlink: 'syz.1.9550': attribute type 22 has an invalid length. [ 1289.648070][T11200] netlink: 'syz.1.9550': attribute type 23 has an invalid length. [ 1289.675446][T11200] netlink: 'syz.1.9550': attribute type 25 has an invalid length. [ 1289.692260][T11076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.700190][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.736129][T11076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.780765][T11207] lo: entered allmulticast mode [ 1289.804724][T11207] lo: left allmulticast mode [ 1289.817886][T11076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.833277][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.904065][T11076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.076438][T31994] Bluetooth: hci4: command tx timeout [ 1290.163558][T11076] hsr_slave_0: entered promiscuous mode [ 1290.194425][T11076] hsr_slave_1: entered promiscuous mode [ 1290.206088][T11076] debugfs: 'hsr0' already exists in 'hsr' [ 1290.213426][T11076] Cannot create hsr debugfs directory [ 1291.774900][T11267] __nla_validate_parse: 19 callbacks suppressed [ 1291.774920][T11267] netlink: 296 bytes leftover after parsing attributes in process `syz.0.9565'. [ 1292.116926][T11285] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 1292.239298][T11294] validate_nla: 1 callbacks suppressed [ 1292.239317][T11294] netlink: 'syz.4.9569': attribute type 3 has an invalid length. [ 1293.659267][T11342] tipc: Invalid UDP bearer configuration [ 1293.659326][T11342] tipc: Enabling of bearer rejected, failed to enable media [ 1293.757775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.803421][T11076] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1293.860212][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1293.939181][T11076] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1294.015884][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1294.048935][T11076] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1294.194411][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1294.220225][T11351] lo speed is unknown, defaulting to 1000 [ 1294.233765][T11076] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1294.402683][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1294.712310][T11390] lo speed is unknown, defaulting to 1000 [ 1294.969477][T11403] tipc: Enabling of bearer rejected, failed to enable media [ 1295.105910][T11076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.231096][T11076] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.305348][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.312624][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.365395][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.372655][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.558519][T11433] netlink: 828 bytes leftover after parsing attributes in process `syz.0.9590'. [ 1295.608602][T11433] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9590'. [ 1295.648223][T11426] bond2: invalid ARP target 0.0.0.0 specified for addition [ 1295.675268][T11426] bond2: option arp_ip_target: invalid value (0) [ 1295.704791][T11439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9593'. [ 1295.718765][T11426] bond2 (unregistering): Released all slaves [ 1295.775816][ T5505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.828729][T10937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.203528][T11455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9596'. [ 1296.298278][T11455] macvtap2: entered promiscuous mode [ 1296.304100][T11455] macvtap2: entered allmulticast mode [ 1296.313436][T11461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9597'. [ 1296.449118][T11076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.598359][T11471] netlink: 116 bytes leftover after parsing attributes in process `syz.3.9600'. [ 1296.664835][T11471] IPVS: Error connecting to the multicast addr [ 1296.713029][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9601'. [ 1296.758660][T11076] veth0_vlan: entered promiscuous mode [ 1296.768976][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9601'. [ 1296.798140][T11076] veth1_vlan: entered promiscuous mode [ 1296.816728][T11473] netlink: 'syz.0.9601': attribute type 11 has an invalid length. [ 1296.897655][T11076] veth0_macvtap: entered promiscuous mode [ 1296.925195][T11076] veth1_macvtap: entered promiscuous mode [ 1297.023785][T11076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.045960][T11076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.099624][T25404] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.177445][T25404] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.187374][T25404] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.221160][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9604'. [ 1297.235499][T25404] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.765987][T11513] veth0: Caught tx_queue_len zero misconfig [ 1297.880196][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9611'. [ 1298.824925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.487065][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.500162][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 1300.506773][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.515678][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.075940][T11517] netem: change failed [ 1302.092884][ T4030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.128307][ T4030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.242077][ T4030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.254322][ T4030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.383709][T11534] netlink: 'syz.4.9615': attribute type 6 has an invalid length. [ 1302.413717][T11534] netlink: 232 bytes leftover after parsing attributes in process `syz.4.9615'. [ 1302.455741][T11534] netlink: 5252 bytes leftover after parsing attributes in process `syz.4.9615'. [ 1302.522630][T11537] syzkaller0: entered promiscuous mode [ 1302.545747][T11537] syzkaller0: entered allmulticast mode [ 1302.675732][T11546] netlink: 'syz.2.9618': attribute type 3 has an invalid length. [ 1302.692718][T11546] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9618'. [ 1302.765837][T11549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9619'. [ 1302.793428][T11549] netlink: 5276 bytes leftover after parsing attributes in process `syz.4.9619'. [ 1302.957783][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9622'. [ 1303.061111][T11563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9621'. [ 1303.221203][T11578] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1303.547876][T11592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9629'. [ 1303.594211][T11592] x_tables: duplicate underflow at hook 3 [ 1303.836982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.999901][T11578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.007733][T11578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.540603][T11578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1304.593473][T11578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.185291][T11600] netlink: 'syz.2.9632': attribute type 6 has an invalid length. [ 1305.199559][T11602] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1305.211906][T25404] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.265552][T25404] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.289052][T25404] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.326662][T25404] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.462648][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9636'. [ 1305.784193][T11642] IPVS: length: 49 != 8 [ 1305.993467][T11648] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1306.023673][T11648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1306.156424][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 1306.164536][ C1] lec:lec_tx_timeout: lec0 [ 1306.187996][T11659] : renamed from bond_slave_0 [ 1306.501448][T11673] lo speed is unknown, defaulting to 1000 [ 1306.684675][T11681] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1306.691938][T11681] syzkaller1: linktype set to 270 [ 1307.224439][T11709] netlink: 'syz.2.9658': attribute type 4 has an invalid length. [ 1307.571771][T11722] tipc: Started in network mode [ 1307.587815][T11722] tipc: Node identity 4af96adc5728, cluster identity 4711 [ 1307.613872][T11722] tipc: Enabled bearer , priority 0 [ 1307.650525][T11721] tipc: Disabling bearer [ 1307.677686][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 1307.768374][T11739] __nla_validate_parse: 13 callbacks suppressed [ 1307.768398][T11739] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9669'. [ 1307.910416][T11732] lo speed is unknown, defaulting to 1000 [ 1308.092625][T11748] syzkaller0: entered promiscuous mode [ 1308.107653][T11748] syzkaller0: entered allmulticast mode [ 1308.155123][T11754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1308.573147][T11774] netlink: 'syz.4.9677': attribute type 1 has an invalid length. [ 1308.838245][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9678'. [ 1308.876390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.010260][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9679'. [ 1309.020864][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9681'. [ 1309.071432][T11799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9679'. [ 1309.268466][T11804] netlink: 'syz.3.9683': attribute type 10 has an invalid length. [ 1309.297531][T11804] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9683'. [ 1309.347818][T11804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1309.385948][T11804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1309.400854][T11804] hsr0: entered promiscuous mode [ 1309.407219][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9684'. [ 1309.420198][T11809] netlink: 'syz.0.9684': attribute type 1 has an invalid length. [ 1309.435605][T11804] bridge0: port 3(hsr0) entered blocking state [ 1309.456395][T11804] bridge0: port 3(hsr0) entered disabled state [ 1309.464470][T11804] hsr0: entered allmulticast mode [ 1309.472816][T11804] hsr_slave_0: entered allmulticast mode [ 1309.478619][T11804] hsr_slave_1: entered allmulticast mode [ 1309.488328][T11807] syzkaller0: entered promiscuous mode [ 1309.494251][T11807] syzkaller0: entered allmulticast mode [ 1309.621502][T11814] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1309.631729][T11814] bond4: (slave bond5): making interface the new active one [ 1309.640322][T11814] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1309.683915][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9686'. [ 1309.701395][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9686'. [ 1309.713427][T11823] netlink: 'syz.1.9685': attribute type 1 has an invalid length. [ 1309.748376][T11823] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9685'. [ 1310.350414][T11846] syzkaller0: entered promiscuous mode [ 1310.355953][T11846] syzkaller0: entered allmulticast mode [ 1310.574618][T11851] netlink: 'syz.4.9693': attribute type 1 has an invalid length. [ 1312.695544][T10937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.927381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.798369][ T8383] lec:lec_start_xmit: lec0:No lecd attached [ 1315.343310][T11886] openvswitch: netlink: IP tunnel TTL not specified. [ 1315.401605][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9702'. [ 1315.433218][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9700'. [ 1315.617882][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9701'. [ 1315.693318][T11901] netlink: 216 bytes leftover after parsing attributes in process `syz.3.9701'. [ 1315.712013][T11906] pim6reg1: entered promiscuous mode [ 1315.719245][T11906] pim6reg1: entered allmulticast mode [ 1315.735819][T11901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9701'. [ 1315.750110][T11901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9701'. [ 1315.964736][T11908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.982700][T11908] 8021q: adding VLAN 0 to HW filter on device team0 [ 1316.013485][T11908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1316.320012][T11911] lo speed is unknown, defaulting to 1000 [ 1316.363306][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9709'. [ 1316.387509][T11927] netlink: 'syz.0.9709': attribute type 1 has an invalid length. [ 1316.549654][T11930] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20000 [ 1316.851330][T11953] netlink: 'syz.2.9716': attribute type 1 has an invalid length. [ 1316.887672][T11950] macsec1: entered promiscuous mode [ 1316.931653][T11950] macsec1: entered allmulticast mode [ 1317.459564][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9722'. [ 1317.480763][T11970] netlink: 'syz.2.9722': attribute type 4 has an invalid length. [ 1317.502112][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9722'. [ 1317.527131][T11970] netlink: 'syz.2.9722': attribute type 3 has an invalid length. [ 1317.694359][T11982] lo speed is unknown, defaulting to 1000 [ 1317.771526][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9727'. [ 1317.919331][T11993] sctp: [Deprecated]: syz.2.9728 (pid 11993) Use of int in maxseg socket option. [ 1317.919331][T11993] Use struct sctp_assoc_value instead [ 1318.011188][T12001] netlink: 'syz.4.9729': attribute type 1 has an invalid length. [ 1318.780615][T12039] sctp: [Deprecated]: syz.2.9739 (pid 12039) Use of int in maxseg socket option. [ 1318.780615][T12039] Use struct sctp_assoc_value instead [ 1318.956336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.988541][T12048] netlink: 'syz.2.9743': attribute type 1 has an invalid length. [ 1319.392183][T12059] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.424849][T12059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1319.502951][T12068] netlink: 'syz.3.9748': attribute type 1 has an invalid length. [ 1320.089485][T12093] syzkaller1: entered allmulticast mode [ 1320.156951][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 1320.165037][ C1] lec:lec_tx_timeout: lec0 [ 1320.492639][T12102] netlink: 'syz.0.9756': attribute type 1 has an invalid length. [ 1320.757252][T12111] netlink: 'syz.2.9757': attribute type 4 has an invalid length. [ 1320.782304][T12109] lo speed is unknown, defaulting to 1000 [ 1320.915997][T12112] bond2: option all_slaves_active: invalid value (5) [ 1320.945557][T12112] bond2 (unregistering): Released all slaves [ 1321.138977][T12129] __nla_validate_parse: 20 callbacks suppressed [ 1321.139000][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9760'. [ 1321.295680][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9760'. [ 1321.324688][T12133] netlink: 'syz.3.9762': attribute type 29 has an invalid length. [ 1321.358483][T12133] netlink: 508 bytes leftover after parsing attributes in process `syz.3.9762'. [ 1321.400357][T12137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9763'. [ 1322.049465][T12148] team0 (unregistering): Port device team_slave_0 removed [ 1322.139574][T12148] team0 (unregistering): Port device team_slave_1 removed [ 1322.189973][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9768'. [ 1322.426086][T12164] validate_nla: 1 callbacks suppressed [ 1322.426111][T12164] netlink: 'syz.3.9769': attribute type 1 has an invalid length. [ 1322.614841][T12166] xt_hashlimit: size too large, truncated to 1048576 [ 1322.629770][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9770'. [ 1322.666651][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9773'. [ 1322.697972][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9770'. [ 1322.730648][T12170] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9772'. [ 1322.812538][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9772'. [ 1323.082770][T12188] lo speed is unknown, defaulting to 1000 [ 1323.996506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.333032][T12246] lo speed is unknown, defaulting to 1000 [ 1324.448692][T12256] xt_hl: Unknown TTL match mode: 237 [ 1325.175018][T12266] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1325.673705][T12286] lo speed is unknown, defaulting to 1000 [ 1325.828864][T12299] netem: incorrect ge model size [ 1325.864930][T12299] netem: change failed [ 1325.876024][T12300] netem: incorrect ge model size [ 1325.894137][T12300] netem: change failed [ 1326.076409][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1326.155959][T12312] lo speed is unknown, defaulting to 1000 [ 1326.274300][T12327] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1326.852091][T12349] lo speed is unknown, defaulting to 1000 [ 1326.879687][T12345] lo speed is unknown, defaulting to 1000 [ 1326.909871][T12358] __nla_validate_parse: 12 callbacks suppressed [ 1326.909892][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9824'. [ 1326.968833][T12361] xt_hashlimit: size too large, truncated to 1048576 [ 1327.032191][T12351] lo speed is unknown, defaulting to 1000 [ 1327.090570][T12363] : renamed from dummy0 (while UP) [ 1327.154568][T12366] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9826'. [ 1327.164771][T12366] bridge_slave_1: default FDB implementation only supports local addresses [ 1327.688381][T12378] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9827'. [ 1328.502905][T12390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9831'. [ 1329.036491][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.422435][T12438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9840'. [ 1329.778084][T12448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9844'. [ 1329.903905][T31994] block nbd6: Receive control failed (result -32) [ 1330.128150][T12461] netlink: 'syz.0.9848': attribute type 12 has an invalid length. [ 1330.554160][T12479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9852'. [ 1330.984343][T12492] syzkaller0: entered promiscuous mode [ 1330.992623][T12492] syzkaller0: entered allmulticast mode [ 1331.001080][T12494] tipc: Enabled bearer , priority 14 [ 1331.138514][T12509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9861'. [ 1334.081376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.634553][ T6058] tipc: Node number set to 500263644 [ 1336.037445][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9867'. [ 1336.097907][T12544] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9868'. [ 1336.137366][T12544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9868'. [ 1336.181053][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9868'. [ 1336.311902][T12549] tipc: Started in network mode [ 1336.332191][T12549] tipc: Node identity aadea0e005d4, cluster identity 4711 [ 1336.369282][T12549] tipc: Enabled bearer , priority 0 [ 1336.415127][T11986] hsr0: left allmulticast mode [ 1336.423739][T11986] hsr_slave_0: left allmulticast mode [ 1336.451176][T11986] bridge0: port 1(hsr0) entered disabled state [ 1336.585948][T11986] pimreg9: left allmulticast mode [ 1336.881677][T12587] netlink: 'syz.3.9876': attribute type 1 has an invalid length. [ 1336.907578][T12587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1337.379738][T11986] batman_adv: batadv0: Removing interface: vlan2 [ 1337.553613][T11986] bond8 (unregistering): (slave geneve3): Releasing active interface [ 1337.568017][T11986] geneve3 (unregistering): left allmulticast mode [ 1337.831789][T11986] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 1337.840384][T11986] bridge5 (unregistering): left promiscuous mode [ 1338.151783][T11986] bond0 (unregistering): Released all slaves [ 1338.164118][T11986] bond1 (unregistering): Released all slaves [ 1338.181483][T11986] bond2 (unregistering): Released all slaves [ 1338.201378][T11986] bond3 (unregistering): Released all slaves [ 1338.218760][T11986] bond4 (unregistering): (slave veth3): Releasing active interface [ 1338.229819][T11986] bond4 (unregistering): Released all slaves [ 1338.252843][T11986] bond5 (unregistering): Released all slaves [ 1338.270648][T11986] bond6 (unregistering): Released all slaves [ 1338.288348][T11986] bond7 (unregistering): Released all slaves [ 1338.309991][T11986] bond8 (unregistering): Released all slaves [ 1338.344850][T11986] bond9 (unregistering): Released all slaves [ 1338.362563][T11986] bond10 (unregistering): Released all slaves [ 1338.380274][T12559] syzkaller0: entered promiscuous mode [ 1338.385972][T12559] syzkaller0: entered allmulticast mode [ 1338.411956][T12566] tipc: Resetting bearer [ 1338.439019][T12548] tipc: Resetting bearer [ 1338.518562][T12548] tipc: Disabling bearer [ 1338.610687][T11604] tipc: Node number set to 2936709344 [ 1338.619921][T11986] : left promiscuous mode [ 1338.749874][T11986] : left promiscuous mode [ 1338.794164][T12606] syzkaller0: entered promiscuous mode [ 1338.800485][T12610] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 1338.814994][T12606] syzkaller0: entered allmulticast mode [ 1338.869232][T11986] tipc: Disabling bearer [ 1338.874829][T11986] tipc: Left network mode [ 1339.117520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.698361][T12639] syzkaller0: entered promiscuous mode [ 1339.755741][T12639] syzkaller0: entered allmulticast mode [ 1339.942224][T12636] lo speed is unknown, defaulting to 1000 [ 1340.412193][T11986] hsr_slave_0: left promiscuous mode [ 1340.482145][T12682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9890'. [ 1341.813166][T12695] lo speed is unknown, defaulting to 1000 [ 1342.211868][T11986] IPVS: stop unused estimator thread 0... [ 1342.224685][T12725] netlink: 'syz.0.9895': attribute type 13 has an invalid length. [ 1342.271999][T12725] netlink: 'syz.0.9895': attribute type 17 has an invalid length. [ 1342.428932][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9897'. [ 1342.527203][T12725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1342.765098][T12741] netlink: 'syz.0.9898': attribute type 1 has an invalid length. [ 1342.793881][T12743] netlink: 'syz.0.9898': attribute type 1 has an invalid length. [ 1342.958576][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9902'. [ 1342.995732][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9902'. [ 1343.155941][T12758] tipc: Resetting bearer [ 1343.501893][T12767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1343.573077][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9906'. [ 1344.075263][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9907'. [ 1344.156500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.189119][T12802] netlink: 236 bytes leftover after parsing attributes in process `syz.2.9907'. [ 1344.279322][T12802] netlink: 236 bytes leftover after parsing attributes in process `syz.2.9907'. [ 1344.448701][T12809] syzkaller0: entered promiscuous mode [ 1344.465346][T12809] syzkaller0: entered allmulticast mode [ 1344.510958][T12809] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1344.662304][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9912'. [ 1344.676038][T12821] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1344.872061][T12823] lo speed is unknown, defaulting to 1000 [ 1344.991803][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9915'. [ 1345.948684][T12885] x_tables: duplicate underflow at hook 1 [ 1345.993948][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9924'. [ 1347.051538][T31994] Bluetooth: hci1: link tx timeout [ 1347.060912][T31994] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1347.213411][T12927] lo speed is unknown, defaulting to 1000 [ 1347.235901][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.244944][T10937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.378026][T12938] nbd: must specify a size in bytes for the device [ 1347.529929][T12940] delete_channel: no stack [ 1347.672506][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9936'. [ 1347.688842][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9936'. [ 1347.705460][T12948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9936'. [ 1348.356486][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9942'. [ 1348.522463][T12985] netlink: 'syz.1.9944': attribute type 8 has an invalid length. [ 1348.555836][T12987] FAULT_INJECTION: forcing a failure. [ 1348.555836][T12987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1348.592890][T12987] CPU: 1 UID: 0 PID: 12987 Comm: syz.4.9943 Not tainted syzkaller #0 PREEMPT(full) [ 1348.592921][T12987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1348.592937][T12987] Call Trace: [ 1348.592946][T12987] [ 1348.592956][T12987] dump_stack_lvl+0xe8/0x150 [ 1348.592997][T12987] should_fail_ex+0x412/0x560 [ 1348.593040][T12987] _copy_from_user+0x2d/0xb0 [ 1348.593068][T12987] ___sys_sendmsg+0x1c6/0x360 [ 1348.593094][T12987] ? __lock_acquire+0x6b5/0x2cf0 [ 1348.593133][T12987] ? __pfx____sys_sendmsg+0x10/0x10 [ 1348.593196][T12987] ? __fget_files+0x2a/0x420 [ 1348.593218][T12987] ? __fget_files+0x3a0/0x420 [ 1348.593250][T12987] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1348.593276][T12987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1348.593309][T12987] ? __pfx_ksys_write+0x10/0x10 [ 1348.593343][T12987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.593365][T12987] do_syscall_64+0x15f/0xf80 [ 1348.593393][T12987] ? trace_irq_disable+0x3b/0x140 [ 1348.593421][T12987] ? clear_bhb_loop+0x40/0x90 [ 1348.593446][T12987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.593465][T12987] RIP: 0033:0x7fcf3af9cdd9 [ 1348.593486][T12987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.593504][T12987] RSP: 002b:00007fcf3bd94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1348.593534][T12987] RAX: ffffffffffffffda RBX: 00007fcf3b215fa0 RCX: 00007fcf3af9cdd9 [ 1348.593549][T12987] RDX: 0000000020008004 RSI: 00002000000017c0 RDI: 0000000000000003 [ 1348.593563][T12987] RBP: 00007fcf3bd94090 R08: 0000000000000000 R09: 0000000000000000 [ 1348.593575][T12987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1348.593588][T12987] R13: 00007fcf3b216038 R14: 00007fcf3b215fa0 R15: 00007ffc6f0ef678 [ 1348.593626][T12987] [ 1348.901667][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9947'. [ 1349.120736][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 1349.154489][T13013] netlink: 'syz.3.9949': attribute type 15 has an invalid length. [ 1349.196887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.233760][T13013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9949'. [ 1349.864362][T13048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9957'. [ 1349.954925][T13057] netlink: 'syz.4.9960': attribute type 1 has an invalid length. [ 1350.309215][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9964'. [ 1350.345593][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9964'. [ 1350.357640][T13075] netlink: 'syz.1.9964': attribute type 12 has an invalid length. [ 1350.365634][T13075] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9964'. [ 1350.377127][T13080] syzkaller1: tun_chr_ioctl cmd 35092 [ 1350.755338][T13096] FAULT_INJECTION: forcing a failure. [ 1350.755338][T13096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.799893][T13096] CPU: 1 UID: 0 PID: 13096 Comm: syz.0.9971 Not tainted syzkaller #0 PREEMPT(full) [ 1350.799925][T13096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1350.799939][T13096] Call Trace: [ 1350.799948][T13096] [ 1350.799959][T13096] dump_stack_lvl+0xe8/0x150 [ 1350.799999][T13096] should_fail_ex+0x412/0x560 [ 1350.800042][T13096] _copy_from_iter+0x1d3/0x1670 [ 1350.800069][T13096] ? rcu_is_watching+0x15/0xb0 [ 1350.800100][T13096] ? __pfx__copy_from_iter+0x10/0x10 [ 1350.800133][T13096] ? netlink_sendmsg+0x650/0xb40 [ 1350.800162][T13096] ? skb_put+0x11b/0x210 [ 1350.800189][T13096] netlink_sendmsg+0x6c0/0xb40 [ 1350.800228][T13096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1350.800256][T13096] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1350.800282][T13096] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1350.800313][T13096] ____sys_sendmsg+0x972/0x9f0 [ 1350.800338][T13096] ? __might_fault+0xaf/0x130 [ 1350.800370][T13096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1350.800410][T13096] ? import_iovec+0x73/0xa0 [ 1350.800438][T13096] ___sys_sendmsg+0x2a5/0x360 [ 1350.800460][T13096] ? __lock_acquire+0x6b5/0x2cf0 [ 1350.800497][T13096] ? __pfx____sys_sendmsg+0x10/0x10 [ 1350.800555][T13096] ? __fget_files+0x2a/0x420 [ 1350.800577][T13096] ? __fget_files+0x3a0/0x420 [ 1350.800609][T13096] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1350.800635][T13096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1350.800670][T13096] ? __pfx_ksys_write+0x10/0x10 [ 1350.800707][T13096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.800732][T13096] do_syscall_64+0x15f/0xf80 [ 1350.800762][T13096] ? trace_irq_disable+0x3b/0x140 [ 1350.800792][T13096] ? clear_bhb_loop+0x40/0x90 [ 1350.800819][T13096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.800841][T13096] RIP: 0033:0x7fa3ab99cdd9 [ 1350.800860][T13096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.800881][T13096] RSP: 002b:00007fa3ac858028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1350.800904][T13096] RAX: ffffffffffffffda RBX: 00007fa3abc15fa0 RCX: 00007fa3ab99cdd9 [ 1350.800920][T13096] RDX: 0000000020008004 RSI: 00002000000017c0 RDI: 0000000000000003 [ 1350.800935][T13096] RBP: 00007fa3ac858090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.800949][T13096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.800962][T13096] R13: 00007fa3abc16038 R14: 00007fa3abc15fa0 R15: 00007ffd58475fb8 [ 1350.800997][T13096] [ 1351.208683][T13109] netlink: 'syz.2.9973': attribute type 1 has an invalid length. [ 1353.471041][T13196] geneve1: entered promiscuous mode [ 1353.528677][T13196] netlink: 'syz.2.9986': attribute type 10 has an invalid length. [ 1353.553576][T13196] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1353.573752][T13196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1353.593446][T13196] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1354.167377][T13107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1354.236738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.510417][T13219] netlink: 'syz.2.9987': attribute type 1 has an invalid length. [ 1354.597285][T13219] __nla_validate_parse: 5 callbacks suppressed [ 1354.597306][T13219] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9987'. [ 1354.997055][T13245] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9994'. [ 1355.750402][T13276] netlink: 'syz.2.9999': attribute type 8 has an invalid length. [ 1355.770889][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9999'. [ 1356.202205][T13276] veth1_to_team: entered promiscuous mode [ 1356.220344][T13276] gretap0: entered promiscuous mode [ 1356.235605][T13276] veth1_to_team: left promiscuous mode [ 1356.252392][T13276] gretap0: left promiscuous mode [ 1356.468764][T13313] netlink: 'syz.2.10003': attribute type 1 has an invalid length. [ 1356.524545][T13313] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10003'. [ 1356.662640][T13319] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10005'. [ 1356.736946][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10006'. [ 1356.772196][T13322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10006'. [ 1356.807350][T13322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10006'. [ 1356.901653][T13328] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10008'. [ 1357.667384][T13357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10012'. [ 1358.111964][T13374] syzkaller0: entered promiscuous mode [ 1358.118457][T13374] syzkaller0: entered allmulticast mode [ 1358.721609][T13396] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20004 [ 1359.287691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.655982][T13409] __nla_validate_parse: 6 callbacks suppressed [ 1359.656001][T13409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10025'. [ 1359.965691][T13413] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1361.930576][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.959815][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 1361.985637][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.995153][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.163145][T13396] netlink: 7 bytes leftover after parsing attributes in process `syz.0.10020'. [ 1363.331083][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10028'. [ 1363.352301][T13426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10028'. [ 1363.512308][T13428] lo speed is unknown, defaulting to 1000 [ 1363.590718][T13422] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10027'. [ 1363.668360][T13443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10032'. [ 1363.709963][T13443] netlink: 'syz.1.10032': attribute type 7 has an invalid length. [ 1363.736061][ T6058] IPVS: starting estimator thread 0... [ 1363.740556][T13443] netlink: 'syz.1.10032': attribute type 8 has an invalid length. [ 1363.777345][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10032'. [ 1363.848909][T13449] IPVS: using max 24 ests per chain, 57600 per kthread [ 1363.910594][T13453] lo speed is unknown, defaulting to 1000 [ 1364.316380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.632645][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10040'. [ 1364.845236][T13482] syzkaller0: entered promiscuous mode [ 1364.869143][T13482] syzkaller0: entered allmulticast mode [ 1364.899119][T13479] tipc: Started in network mode [ 1364.926803][T13479] tipc: Node identity 8a008437c831, cluster identity 4711 [ 1364.934379][T13479] tipc: Enabled bearer , priority 0 [ 1364.971980][T13481] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1364.989024][T13481] bond1 (unregistering): Released all slaves [ 1365.057877][T13482] sctp: [Deprecated]: syz.4.10038 (pid 13482) Use of int in maxseg socket option. [ 1365.057877][T13482] Use struct sctp_assoc_value instead [ 1365.140837][T13478] tipc: Resetting bearer [ 1365.195480][T13479] tipc: Resetting bearer [ 1365.292552][T13479] tipc: Disabling bearer [ 1365.431250][T13510] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10044'. [ 1365.559780][T13513] netlink: 284 bytes leftover after parsing attributes in process `syz.0.10045'. [ 1365.944458][T13525] netlink: 'syz.0.10048': attribute type 1 has an invalid length. [ 1365.975752][T13525] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10048'. [ 1366.245550][T13537] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10052'. [ 1366.262493][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10050'. [ 1366.302423][T13536] syzkaller0: entered promiscuous mode [ 1366.319177][T13536] syzkaller0: entered allmulticast mode [ 1366.554447][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10050'. [ 1367.110968][T13566] netlink: 'syz.2.10057': attribute type 1 has an invalid length. [ 1367.119126][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5160 ms [ 1367.127242][ C1] lec:lec_tx_timeout: lec0 [ 1367.225819][T13566] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10057'. [ 1367.481140][T13577] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10058'. [ 1367.647339][T13582] gtp0: entered promiscuous mode [ 1367.668750][T13582] gtp0: entered allmulticast mode [ 1367.758388][T13582] block nbd3: NBD_DISCONNECT [ 1367.778671][T13582] block nbd3: Send disconnect failed -32 [ 1367.804356][T13582] block nbd3: shutting down sockets [ 1367.858488][T13596] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10062'. [ 1367.955689][T13587] syzkaller0: entered promiscuous mode [ 1369.366689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.500233][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10062'. [ 1372.514826][T13596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10062'. [ 1372.819731][T13614] netlink: 'syz.4.10066': attribute type 1 has an invalid length. [ 1372.895800][T13614] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1372.908254][T13614] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1372.925158][T13621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10068'. [ 1372.938482][T13626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10066'. [ 1372.975541][T13620] netlink: 'syz.2.10069': attribute type 1 has an invalid length. [ 1373.016022][T13631] macvlan2: entered promiscuous mode [ 1373.027405][T13631] macvlan2: entered allmulticast mode [ 1373.034022][T13631] bond1: entered promiscuous mode [ 1373.047600][T13631] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1373.071546][T13631] bond1: left promiscuous mode [ 1373.160397][T13626] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 1373.386910][T13654] netlink: 'syz.4.10077': attribute type 4 has an invalid length. [ 1373.452428][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10078'. [ 1373.527690][T13665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10079'. [ 1373.610848][T13669] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10079'. [ 1373.630823][T13669] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10079'. [ 1373.655423][T13669] netlink: 'syz.1.10079': attribute type 5 has an invalid length. [ 1373.669015][T13669] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10079'. [ 1373.690810][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10079'. [ 1373.735226][T13665] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1373.750156][T13665] bond7 (unregistering): Released all slaves [ 1373.783387][T13672] vlan3: entered allmulticast mode [ 1373.789722][T13672] macvtap0: entered allmulticast mode [ 1374.207300][T13689] syzkaller0: entered promiscuous mode [ 1374.240703][T13689] syzkaller0: entered allmulticast mode [ 1374.397350][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.067666][T13730] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1375.145743][T13735] tipc: Enabling of bearer rejected, already enabled [ 1376.180136][T13799] netlink: 'syz.4.10119': attribute type 7 has an invalid length. [ 1376.231576][T13800] netlink: 'syz.4.10119': attribute type 9 has an invalid length. [ 1376.236630][T13799] netlink: 'syz.4.10119': attribute type 8 has an invalid length. [ 1376.585219][T13819] netlink: 'syz.1.10123': attribute type 1 has an invalid length. [ 1376.752725][T13824] netlink: 'syz.4.10124': attribute type 1 has an invalid length. [ 1376.828403][T13821] syzkaller0: entered promiscuous mode [ 1376.845856][T13821] syzkaller0: entered allmulticast mode [ 1377.257591][T13841] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 1377.605843][T13855] netlink: 'syz.2.10131': attribute type 13 has an invalid length. [ 1377.628834][T13855] __nla_validate_parse: 13 callbacks suppressed [ 1377.628851][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10131'. [ 1377.738069][T13861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10131'. [ 1377.828309][T13862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10131'. [ 1378.076678][ T8383] lec:lec_start_xmit: lec0:No lecd attached [ 1379.453073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.205037][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10133'. [ 1382.261854][T13867] macvlan2: entered allmulticast mode [ 1382.276255][T13867] hsr0: entered allmulticast mode [ 1382.287173][T13867] hsr_slave_0: entered allmulticast mode [ 1382.300332][T13867] hsr_slave_1: entered allmulticast mode [ 1382.510779][T13890] syzkaller0: entered promiscuous mode [ 1382.531633][T13890] syzkaller0: entered allmulticast mode [ 1382.555476][T13889] tipc: Enabled bearer , priority 0 [ 1382.695861][T13902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10141'. [ 1382.711143][T13902] nbd: illegal input index -1113835520 [ 1382.720298][T13893] tipc: Resetting bearer [ 1382.771977][T13893] tipc: Disabling bearer [ 1382.951800][T13917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10144'. [ 1383.116236][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5050 ms [ 1383.124388][ C1] lec:lec_tx_timeout: lec0 [ 1383.174065][T13917] nbd: socks must be embedded in a SOCK_ITEM attr [ 1383.204089][T13926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10144'. [ 1383.224120][T13891] block nbd64: NBD_DISCONNECT [ 1383.230250][T13925] lo speed is unknown, defaulting to 1000 [ 1383.263576][T13926] nbd: socks must be embedded in a SOCK_ITEM attr [ 1383.308528][T13891] block nbd64: NBD_DISCONNECT [ 1383.472898][T13922] lo speed is unknown, defaulting to 1000 [ 1383.515200][T13942] bridge_slave_0: left allmulticast mode [ 1383.557801][T13942] bridge_slave_0: left promiscuous mode [ 1383.582307][T13945] netlink: 'syz.3.10150': attribute type 2 has an invalid length. [ 1383.621564][T13942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.670570][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10150'. [ 1383.688531][T13891] udevd[13891]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1383.733967][T13942] bridge_slave_1: left allmulticast mode [ 1383.759934][T13942] bridge_slave_1: left promiscuous mode [ 1383.773139][T13942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.825533][T13942] bond0: (slave bond_slave_0): Releasing backup interface [ 1383.865494][T13942] bond0: (slave bond_slave_1): Releasing backup interface [ 1383.900251][T13960] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1383.912223][T13942] team0: Port device team_slave_0 removed [ 1383.948450][T13942] team0: Port device team_slave_1 removed [ 1383.975479][T13942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1384.001759][T13942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.018590][T13942] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1384.064754][T13946] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1384.095178][T13946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.106209][T13946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.207797][T13945] bond3: option primary_reselect: invalid value (133) [ 1384.217726][T13970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10153'. [ 1384.230262][T13945] bond3 (unregistering): Released all slaves [ 1384.282430][T13949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10152'. [ 1384.296804][T13965] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10153'. [ 1384.341543][T13960] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10150'. [ 1384.512285][T13975] netlink: 'syz.3.10154': attribute type 1 has an invalid length. [ 1384.521830][T13975] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.10154'. [ 1385.477861][T14012] netlink: 'syz.0.10161': attribute type 1 has an invalid length. [ 1385.505515][T14012] netlink: 1008 bytes leftover after parsing attributes in process `syz.0.10161'. [ 1385.532541][T14012] netlink: 'syz.0.10161': attribute type 1 has an invalid length. [ 1385.548320][T14012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.571821][T14012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.903603][T14038] x_tables: duplicate underflow at hook 2 [ 1385.923514][T14037] x_tables: duplicate underflow at hook 2 [ 1386.644044][T14065] syzkaller0: entered promiscuous mode [ 1386.650924][T14065] syzkaller0: entered allmulticast mode [ 1386.904315][T14083] netlink: 'syz.1.10175': attribute type 39 has an invalid length. [ 1387.271157][T14095] tipc: Enabled bearer , priority 0 [ 1387.312780][T14085] tipc: Disabling bearer [ 1387.495714][T14102] bond7: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1387.509629][T14102] bond7 (unregistering): Released all slaves [ 1387.663419][T14115] ip6t_srh: unknown srh match flags 4000 [ 1387.740861][T14115] vlan2: entered promiscuous mode [ 1387.748156][T14115] bridge0: entered promiscuous mode [ 1387.792049][T14115] syzkaller1: entered promiscuous mode [ 1387.817483][T14115] syzkaller1: entered allmulticast mode [ 1387.841744][T14115] syzkaller1: left promiscuous mode [ 1387.868069][T14115] syzkaller1: left allmulticast mode [ 1389.438576][T24116] IPVS: starting estimator thread 0... [ 1389.459041][T14175] __nla_validate_parse: 1 callbacks suppressed [ 1389.459067][T14175] netlink: 100 bytes leftover after parsing attributes in process `syz.4.10201'. [ 1389.536959][T14177] IPVS: using max 28 ests per chain, 67200 per kthread [ 1389.593865][T14181] netlink: 'syz.4.10203': attribute type 3 has an invalid length. [ 1389.674384][T14191] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 1389.880592][T14208] [ 1389.883103][T14208] ====================================================== [ 1389.890170][T14208] WARNING: possible circular locking dependency detected [ 1389.897237][T14208] syzkaller #0 Not tainted [ 1389.901684][T14208] ------------------------------------------------------ [ 1389.908757][T14208] syz.3.10209/14208 is trying to acquire lock: [ 1389.914947][T14208] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 1389.924153][T14208] [ 1389.924153][T14208] but task is already holding lock: [ 1389.931574][T14208] ffff88802adcf970 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1389.940864][T14208] [ 1389.940864][T14208] which lock already depends on the new lock. [ 1389.940864][T14208] [ 1389.945309][T14205] netlink: 1315 bytes leftover after parsing attributes in process `syz.1.10207'. [ 1389.951302][T14208] [ 1389.951302][T14208] the existing dependency chain (in reverse order) is: [ 1389.951315][T14208] [ 1389.951315][T14208] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1389.951350][T14208] _raw_spin_lock_bh+0x36/0x50 [ 1389.951384][T14208] nr_rt_device_down+0x153/0x860 [ 1389.951405][T14208] nr_device_event+0x137/0x150 [ 1389.951437][T14208] notifier_call_chain+0x1ad/0x3d0 [ 1389.951461][T14208] __dev_notify_flags+0x16d/0x310 [ 1389.951482][T14208] netif_change_flags+0xe8/0x1a0 [ 1389.951503][T14208] dev_change_flags+0x130/0x270 [ 1389.951522][T14208] dev_ioctl+0x7b4/0x1150 [ 1389.951554][T14208] sock_do_ioctl+0x23e/0x320 [ 1389.951581][T14208] sock_ioctl+0x5c6/0x7f0 [ 1389.951606][T14208] __se_sys_ioctl+0xfc/0x170 [ 1389.951634][T14208] do_syscall_64+0x15f/0xf80 [ 1389.951663][T14208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.951685][T14208] [ 1389.951685][T14208] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1389.951718][T14208] _raw_spin_lock_bh+0x36/0x50 [ 1389.981220][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10208'. [ 1389.983303][T14208] nr_rt_device_down+0xbe/0x860 [ 1389.983334][T14208] nr_device_event+0x137/0x150 [ 1390.080498][T14208] notifier_call_chain+0x1ad/0x3d0 [ 1390.086180][T14208] __dev_notify_flags+0x16d/0x310 [ 1390.091765][T14208] netif_change_flags+0xe8/0x1a0 [ 1390.097345][T14208] dev_change_flags+0x130/0x270 [ 1390.102752][T14208] dev_ioctl+0x7b4/0x1150 [ 1390.107649][T14208] sock_do_ioctl+0x23e/0x320 [ 1390.112811][T14208] sock_ioctl+0x5c6/0x7f0 [ 1390.117690][T14208] __se_sys_ioctl+0xfc/0x170 [ 1390.122906][T14208] do_syscall_64+0x15f/0xf80 [ 1390.128046][T14208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.134491][T14208] [ 1390.134491][T14208] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1390.142468][T14208] __lock_acquire+0x15a5/0x2cf0 [ 1390.147926][T14208] lock_acquire+0x106/0x350 [ 1390.152983][T14208] _raw_spin_lock_bh+0x36/0x50 [ 1390.158297][T14208] nr_rt_ioctl+0x40c/0xf90 [ 1390.163269][T14208] sock_do_ioctl+0x101/0x320 [ 1390.168413][T14208] sock_ioctl+0x5c6/0x7f0 [ 1390.173294][T14208] __se_sys_ioctl+0xfc/0x170 [ 1390.178428][T14208] do_syscall_64+0x15f/0xf80 [ 1390.183574][T14208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.190018][T14208] [ 1390.190018][T14208] other info that might help us debug this: [ 1390.190018][T14208] [ 1390.200312][T14208] Chain exists of: [ 1390.200312][T14208] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1390.200312][T14208] [ 1390.214173][T14208] Possible unsafe locking scenario: [ 1390.214173][T14208] [ 1390.221646][T14208] CPU0 CPU1 [ 1390.227037][T14208] ---- ---- [ 1390.232420][T14208] lock(&nr_node->node_lock); [ 1390.237212][T14208] lock(nr_node_list_lock); [ 1390.244358][T14208] lock(&nr_node->node_lock); [ 1390.251673][T14208] lock(nr_neigh_list_lock); [ 1390.256391][T14208] [ 1390.256391][T14208] *** DEADLOCK *** [ 1390.256391][T14208] [ 1390.264562][T14208] 2 locks held by syz.3.10209/14208: [ 1390.269891][T14208] #0: ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 1390.279430][T14208] #1: ffff88802adcf970 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1390.289138][T14208] [ 1390.289138][T14208] stack backtrace: [ 1390.295064][T14208] CPU: 0 UID: 0 PID: 14208 Comm: syz.3.10209 Not tainted syzkaller #0 PREEMPT(full) [ 1390.295089][T14208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1390.295103][T14208] Call Trace: [ 1390.295110][T14208] [ 1390.295121][T14208] dump_stack_lvl+0xe8/0x150 [ 1390.295155][T14208] print_circular_bug+0x2e1/0x300 [ 1390.295179][T14208] check_noncircular+0x12e/0x150 [ 1390.295202][T14208] __lock_acquire+0x15a5/0x2cf0 [ 1390.295242][T14208] ? nr_rt_ioctl+0x40c/0xf90 [ 1390.295258][T14208] lock_acquire+0x106/0x350 [ 1390.295284][T14208] ? nr_rt_ioctl+0x40c/0xf90 [ 1390.295302][T14208] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1390.295327][T14208] ? nr_rt_ioctl+0x40c/0xf90 [ 1390.295343][T14208] _raw_spin_lock_bh+0x36/0x50 [ 1390.295365][T14208] ? nr_rt_ioctl+0x40c/0xf90 [ 1390.295380][T14208] nr_rt_ioctl+0x40c/0xf90 [ 1390.295402][T14208] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1390.295423][T14208] ? apparmor_capable+0x126/0x170 [ 1390.295451][T14208] ? capable+0x88/0xe0 [ 1390.295478][T14208] ? nr_ioctl+0x1b1/0x3b0 [ 1390.295504][T14208] sock_do_ioctl+0x101/0x320 [ 1390.295529][T14208] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1390.295551][T14208] ? do_futex+0x333/0x420 [ 1390.295576][T14208] sock_ioctl+0x5c6/0x7f0 [ 1390.295599][T14208] ? __pfx_sock_ioctl+0x10/0x10 [ 1390.295621][T14208] ? __fget_files+0x2a/0x420 [ 1390.295639][T14208] ? __fget_files+0x3a0/0x420 [ 1390.295656][T14208] ? __fget_files+0x2a/0x420 [ 1390.295674][T14208] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1390.295699][T14208] ? __pfx_sock_ioctl+0x10/0x10 [ 1390.295726][T14208] __se_sys_ioctl+0xfc/0x170 [ 1390.295750][T14208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.295769][T14208] do_syscall_64+0x15f/0xf80 [ 1390.295793][T14208] ? trace_irq_disable+0x3b/0x140 [ 1390.295818][T14208] ? clear_bhb_loop+0x40/0x90 [ 1390.295839][T14208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.295857][T14208] RIP: 0033:0x7f75c639cdd9 [ 1390.295875][T14208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.295891][T14208] RSP: 002b:00007f75c45f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1390.295912][T14208] RAX: ffffffffffffffda RBX: 00007f75c6615fa0 RCX: 00007f75c639cdd9 [ 1390.295926][T14208] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 1390.295938][T14208] RBP: 00007f75c6432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1390.295950][T14208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1390.295967][T14208] R13: 00007f75c6616038 R14: 00007f75c6615fa0 R15: 00007ffda809b898 [ 1390.295990][T14208] [ 1390.555687][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10208'. [ 1390.593653][T14212] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10209'. [ 1399.836433][ T5842] Bluetooth: hci5: command 0x0406 tx timeout