last executing test programs: 18.519804068s ago: executing program 0 (id=3261): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x37, 0x1, 0x7fffc, 0x4, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000080) 17.747822604s ago: executing program 0 (id=3266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x21, 0x121, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c045}, 0x80c4) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000140)=0x7fffffff) connect$x25(r2, &(0x7f0000000080), 0x12) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17.302602249s ago: executing program 0 (id=3269): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async, rerun: 64) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) sendmsg$rds(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000080)=""/33, 0x21}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/226, 0xe2}, {&(0x7f0000001680)=""/210, 0xd2}, {&(0x7f0000001780)=""/206, 0xce}, {&(0x7f0000001880)=""/216, 0xd8}], 0x6, 0x0, 0x0, 0x40811}, 0x44080) (async) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 64) socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (rerun: 64) r1 = socket$inet6(0xa, 0x800, 0x8000000003c) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=ANY=[@ANYBLOB="6c01000017000d092bbd700000000000ffffffff0000000000000000000000000000000000000000ac1414ff00000000000000000000000064010100000000000000000000000000ff02000000000000000000000000000100000000000000200000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000007a640000000000fe800000000000000000000000001000000000030a0000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000200000000000000044001000e0000002000000000000000000000000000000000000000000000000ac1e010100"/196], 0x16c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0xc6, 0x8601, 0x7f, 0x8, 0x8, 0x6, 0x100}, &(0x7f0000000100)=0x20) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 15.86169996s ago: executing program 0 (id=3279): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000200)=0xfffffffc, 0x4) sendmsg$inet(r1, &(0x7f00000024c0)={&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x24040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1f, 0x9, 0x7, 0x103, 0x6, 0x86, 0x4, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000200)=0xfffffffc, 0x4) (async) sendmsg$inet(r1, &(0x7f00000024c0)={&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x24040000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1f, 0x9, 0x7, 0x103, 0x6, 0x86, 0x4, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}}) (async) 14.970926505s ago: executing program 0 (id=3285): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f0000000040)=@tcp, 0x3}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x2880, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f000000000000000001"], 0xfdef) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 13.030456973s ago: executing program 0 (id=3291): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r2}, 0x38) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78000000130005000100000000000200079269cb", @ANYRES32=r4, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180080001000100000008000200", @ANYRES32, @ANYBLOB="02080003", @ANYRES32, @ANYBLOB="2c000680"], 0x78}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 10.291085269s ago: executing program 2 (id=3302): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f00000000c0)="aede3c277d6f452918f8b9bd0cf08f03e3ffd256e2515225a6b3d74d75a21ec6a5694e6cc12b3e2f7f28f383d69cbe45eee19f36077bdbef0a1e4e6b43694a4b5335dd954edb9d14442c038e3e4504a479ac3da2837e393e7e8c1dcf9bdfa53b583a68436fb6018cd596ead6b197c800ac6c9926a02a708790fa9d2a3586e09d9ac32e5d90a0da7890d35e1509f45ac6d983814cc35abc8c195e6fd379c617b232a49e182dbdac6ea9e6f18d1f2b135f6f07557ddd174b3d5a4a7628f3a2d83abb84572423bdc795c067e1036a0686acb6fa761c2c1a58583b00f7dc78ef9f38b891ea66a4b82aae3f14b7c7", &(0x7f00000001c0)=""/119}, 0x20) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000300)=r1}, 0x20) (async, rerun: 32) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f00000004c0)=0xe8) sendmsg$netlink(r3, &(0x7f0000002740)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4}, 0xc, &(0x7f0000002700)=[{&(0x7f0000000500)={0x11a4, 0x2a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@typed={0xc, 0x72, 0x0, 0x0, @u64=0x9}, @generic="b8510a306e21604331c44bca0fca2face658ee7359e54a45282a28020e16f3d4efaf34399c464dc21b9c6612929a19d762f8336204c393b3fff8baf6a1edaee1071acf66e4c8f4dbb7161ede90ce66", @nested={0x8d, 0xdb, 0x0, 0x1, [@generic="0db3686bd54b73c56aa5515e3c6015ac6063e7b6121b52a134e01f48865d9bbb70462e6518b66af9b455882d371bf47900cbe48222afbe2c72fbd2347919ba93b1662e7589f4632709ea6791f5729b779d426193ace4ba063214e0af300373d4f346f4d94ea8397a1bdfa925b1", @typed={0x8, 0x74, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xd8, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x103}, @nested={0x4, 0x34}, @nested={0x4, 0x21}]}, @nested={0xa3, 0x74, 0x0, 0x1, [@nested={0x4, 0xc5}, @generic="bc72e20b07097d05499a16f4c66c1782ce472cddff522d978cf0c94bf64c47d2f5230ef98030c3", @generic="4ca07a40e6a5927bd14cd7da7717b07d6a69f8", @generic="9c1b3c195ee8cdaed2008e573da215f0cb696600e62120ca1801e608dea889c90ebe4ae3f4109e75c5c325a00f3b0d2effecc1eae7abbd58abdf23dbe433da54b528167bf06479f0f57b59add1072e302f26b7b8e9ec88caf81703bc6e", @nested={0x4, 0x18}]}, @typed={0x1004, 0x15, 0x0, 0x0, @binary="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"}]}, 0x11a4}, {&(0x7f00000016c0)={0x1010, 0x9, 0x20, 0x70bd2c, 0x25dfdbff, "", [@generic="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"]}, 0x1010}], 0x2, 0x0, 0x0, 0x20000000}, 0x810) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x1a) (rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000027c0), r6) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002900)={&(0x7f0000002800)={0xd4, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x40}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0e0c4051819eb0d48f1f5063f9da9d633de5c35332d7fe7f"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f9628d5d2223437c736ceee4c47ba4cd3f826322a4f5dadd82651fa4f076dab1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="099ccc389034447af34b4dad43fe634451ad5b7cf8c33e1c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "22ce60974b59670c"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d4808fc16794b2f2552273a4476e067ff9311bd527d54fc8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6197e6200d7ae98aee96748259b5e762"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9a}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x4080) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000002a80)={r1, &(0x7f0000002980)='/*\x00', 0xfea15c17c3d2b474, &(0x7f00000029c0)={@align=0x9, {0x1, 0x6, 0xfffffff7, 0x4}}, 0x40, &(0x7f0000002a00)={@_ha_fsid}, &(0x7f0000002a40)}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000002b40)={'syztnl2\x00', &(0x7f0000002ac0)={'ip6tnl0\x00', r4, 0x4, 0x10, 0xc, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x7, 0x2, 0x7f}}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b80), r2) (async) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x18) ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000002bc0)={0x0, 0x1, 0x9}) (async) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000002c00)=0x3) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c80), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f0000002dc0)={&(0x7f0000002c40), 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)={0x60, r11, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7fff, 0x3c}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r8, &(0x7f0000002e00)="adbf64592bcde659f96427e0a5c61c89893d812f9fc7602f6511f7c78c97eb617815f5653018ac15c73d0d4da6fa1b1a54539e3ede7d98c74e", 0x39, 0x0, &(0x7f0000002e40)={0x2, 0x4e23, @loopback}, 0x10) r14 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r14, 0x0, 0x8, &(0x7f0000002e80)={0x0, @private, @loopback}, &(0x7f0000002ec0)=0xc) (async) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x5c, r10, 0x908, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xf}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0xf492, 0xffff, 0xfffc, 0x1, 0x8]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7c}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x63}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40891}, 0xc0c0) close(r1) (async) r15 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r15, &(0x7f0000003040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80800) write(r13, &(0x7f0000003080)="3035a7a4eeef59e0ae4ca0adedfee5ef600638082049e489860b9e77e525e17508bdd5daf9005c245c548ed15c971e9074e5b22739f293ff9191ef4a13237d0a78771bfc8e25eeff8d36598ca0d1cf9391611e0883a9053ef914eafe126f6f0f937359fd2d1d8e4ccc4ab0b1bb32219efe728518798b5815d8fc567c3f0a4972017debf3ce73f4d58fbbdec8fb95307c35f46c9ef5367be52cea8fc83a2e5f6d9e528a3784de2197f75de96550bb413723c44a7d4e70b45d2306242c6ffb15eb73a5b643d7202a7f11b7615cbb9148412deed8cc2da2d986d790cbc4f9c9848583353b2f3658ef8a0ab6c7fa7389bb78f7244beb3d7f", 0xf6) (async, rerun: 32) r16 = syz_genetlink_get_family_id$batadv(&(0x7f00000031c0), r13) (rerun: 32) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f00000032c0)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003280)={&(0x7f0000003200)={0x5c, r16, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) 9.781571623s ago: executing program 4 (id=3306): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{}]}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x14, 0x0, &(0x7f0000000100)) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pread64(r4, 0x0, 0x0, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0xd}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r7, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r9 = accept(r5, &(0x7f00000004c0)=@qipcrtr, &(0x7f0000000540)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r8, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', r8, 0x2f, 0xf, 0x8, 0xe, 0x1, @mcast1, @mcast2, 0x700, 0x20, 0x8, 0x8}}) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f00000001c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000300)="7c7ada2b1647b5619c091b12aced847bdfe3f5ed0fb5eca7622b38dd5ec02c752ee4ebe982fe68622c6333f2504de787a7a3492175c97fde3a76532f9b2d2364237d6336", 0x44}, {&(0x7f0000000380)="a6e0232449e386a8f424a7b64821c6b1e658894c93744263159634c5c59eb415a45b5e2b3a1cba6a7814b6bb0e0e16c0d9e1909ed5f12f18182e429c3979d652db4e5c24f09321c4cb9c9072d499bf7fdca9102dca693ad2b6c876e9e1d71cb222fae965891fcd5fbcbe7bfaa2e90156f200cc281c51e5e13e64de1f886ed718f7", 0x81}, {&(0x7f0000000440)="e27a747d18a2c03c86467d02de5620c0ba299187bdaff4d289c8a9aeb5a7ac974f04bc976c", 0x25}, {&(0x7f0000000480)="22205f97", 0x4}, {&(0x7f00000014c0)="d726478669ce1c6fdac4ba5df905e0678dded25ab3eeb10ebb6e4240a750c4d9d8712d5072b87eeeb27dd99bb785c2f8584b032adf4ab6fd4e626c28d4c32f6772aa454727992a5e426bca15e1887f8cfcdd34d3d69f1eeb77b9005f4607c28468b6b77864d8fb355c01144bd4fd3cd85761fbd872aaafcf32474ed125c3c36f46b94f687392933713c01c5d290a84d30c0dc4ae4851366f2b42229539bcf66bedb1386bdce6ab90b988006ce9dce6982ca7e766d3533595ceeb26a29267c981edb753f66a9e5bbf543cb4b0a2c13f9ca48afe2101072b7c041739fc6c99326d129c109d5c9648e9db9a499da8e8778c79c50a4a247a405bfb18d59bba3b8f340c83fe2b7dc84a0c33919394acac9f254372f8a8fc5a842e75ef9856747509fa1a5125eac48946f1aba3824807ca3a6d6c40a59d5fab227d4f8ead02d4d01e99c02e551730e26962981952286e5adf3f9aad106a0ae5273da579a190063891e25873abc5185319f8178d00b6c0e311dd9614a33cf344bbf0236cb701f2372874b5b522284ea08e9ab8b546b7345226f661960636f01b36dd59898a9b3b6380d803a73ae7126cce9aa5c867a33c19df1ab5d137e15f008d62d9da4eb1524165332ba0e94b7b6988fb5a6ca03b47eec6f4bb0971be6e7f5516ce6253748a8352dd7195ba17392f4ac7b57eed8bd7baf6575da6bdd469f827bbbe755ac97a52f8a457e3ffdd01edf02a3cd23487beb524f5bd2c515de83b4345af1c92ea87ad78c8419457d9e76139a3b6e4c6b04d7c292fdc94c5a303674a8278f22084265eeafa2895d22d5a0f9ff50618385bb77c7db5e9c5eaec84e2a36e84b878ea00f6edb665e1337938265402015fd69b95e79f1fc02bce5eb3c961d5675acea80784bce94fc46416f472326d6dfc086f87b52f81c0b8e00273049dddfd24dd1b7a63b998a1a7de2ecf1a797948239e6b24baf07db6377a108631574654a627aeabff9e48d16d499cb95a36ea64ee2622ae8e19bc9427795bf52a38bb43a93ec5ff0a5e0cae0a72e55101b769d7ebbf7c7e0e575eea35440368709e7509d7132648cd26e30896119abb1489e043bee143a561ea244c3e49d3313683bf166375c7ee873611ac1122bcfc44fb978263cd35abc6491c5340b558e112dd3ebbefe0334a80ea3ccbed32223a4c50251dc18fc96c9dea64c033e0f7a79b6a9b0ddbb4f29747b08a39e8f067b4ceefd6ff174d25969f1c30295e8a30d4bc55caf299b54b119ee1b970e61592e8f9bb0c78e9a2d57341f22829f461c4c217ef82fc1bfedd3fa54ff0af15d010e4dc6636f7504d4c7559a25346b211e913f7571ef2eab3a5a4b69c48f161fc9264a02a6ed4555ce791bddd345d75a93de1744b59571bef1959d703cf72b74fc7fb84c5f170896072172601bfa3b440620087de10f26186fadfffe75a05251c566f370b443d717b504028e8dbb44078719b497762bb916f34850b9416c53589c43dba32dd2cb69fbcb5b57cf21b1ecf903b515bcafad5d857b8fda4bbb10d57ef882bd993bca87bb8ee40d848e289c29b1a61070e9a778b0a1b65424147bf11e1e497c5a76d416372a7bb3d6eb68a45d9a3f8149ef39101d4d20f685ec4803872910e600bafb94a03c83acebe4e368a19f9327c33fe996ec8345e3b1bbefc21bcd3610cf69b3476b659bd5b38b59a0254f2874bebef6f3a4d4362100835792c491068fa597dc985488c44d65d74bfc0b05cc57591c8a2fd636c4da72cf8c28c9eb014e2b956608b77ce8959c38852b9c2cc9961c3164ea4dad5d0bfa26682e3107d7a00273391cdabb5d07c9d928036a388c77e5fea651f274fdf70ba49fedd31cbd133db50e1b41ec29fc8293d3e907fef757575876a7b9ec713c12bfc8d032092f2ba32b5ba515666105b8ef0f511c06026a0e36bcfcfc3861424e0def4237dafa4424acc7cbb306b058a8e80919342186756db0be30852fadecdea7fd846421d9f909602c0c6ad9b1c2bbb9e7ad919846f4c1cfb90ec9484b27799ac8058c4654a589af58e62db661ec2fc4f9ef3c8573efc19d24f260dfe09479421a602b723e25e4a033c95d1ed5f933967c0aa00066533ecf2331496e76efe47438952a9a917d1ee7b6b7871a45f75d1215a864eb5a096ded4553dca1d1d7a08d958639e9f33cf5813639b1a3478240554786bf607d499f312e736716251196eff8f139a44b23552b4464cb0e52c13ce2ff33cbea6172b8bf740fb0ef6c66e3ae08c068c03b567e6fee8dd93c5c8d364df3df003a87102ad943cb531554d6b60b40d4c80f86b6bde55e72010eb6ff0d9205665bec62707fddc3cb0413b001b4fc40a56d0fd4a458291aaa0be0777d0e9084f69829378698b6bda177faa3fd7ddc9f66a61445e0208c47648dad55cfa59236e1b73266c58f21180997d40a9600abc607fd7601de56a5b35c2cec93c78fe1f677fa5b0378051dc051167e055bd58b99f323c0e6771e2a63d37dcd1b62d4c7dcea34cdb264bd087e933accfe07a33cd421659afc29731124b0c978878562fa3dbac5625ea1ebec84db0de7d44815a7f81c17b5f022e17bc9830c3b538ae8d2dc03f6f5fba44fef4b2aab9fe8c590c90bb91edd289d082eb82b7ca984f8af68d9a4fd22564787d35a3c3b364846a3ae7c24e6d7ea998363f61e76a01d2ebfde1ebb1d54776cb5543750f6fef5c2939d7fe883190fa0257df915a73e00429588d5489454673c0cded0d4867d1c8a2cd770b70fb744eaa1e45bd307e8f06cec8d3dab7cb88e4426dd8943acfeff93dd94e47ebcb1768b7256fcdb10483ca38e19b4fa3973fb6f9f04d6487bdac9726f8d766a99c4540cd8211a3b2ac840c105cd293b8b6ac5a836c7293d2bc8f4850d9cdd692089633c0415feac49acb91dccad2c00b6d97acdc698139590aa0d00d77d6a593cf38843522fb5d1f9d3d107ee91a2981c8e092ef214ad12f1831b380f2178069e98731a8c0696d234e18745d7a66160a478d6967a4d7294dd4e81258634ff038ee05f5bd8be0d0bdf72c8889bfb252b95542179cab1e76d34abc1a40ea8df485f5877dc87f9b8f26f49c032a592c14bc2f48bc85fa98dba0503a4f3e0ae593e08cfbad59bfb5caa00e2fa42d820a670f196c77fc3e5afbee86cbfb6782d6205aaf36f3c29755f8a4263edfd35d30b405b2f21e6694611f0eed059f1afcebf11fa0e284398b9bee228f357d802f4740e83d14aecc395d29235dec5bead9523df5fd15ae6348e3ba6da7188aa27347e84ab975ef26d2c1f86705432b9b982a51976b8b7d16379f4408224619ce2cde554b4306b9d511270dc500f3fb6837884c66902f5174955e82ae00ce5e00fdc0bacc4510d30230aa9d19f22f93a72abd7d70b909249b7aefe3c0d54d3f42fb3ffb465ed924b485d991ae3a3cade3094073cd1858702e59434e3988836aa76eaacd63e5afcc7cbd3245492481f50fbb14be018fb8183e717c50a538a0c446cba4346606f1732a8f62787e04929ade144558d48dc205ae3ca04266ef59b6f8486e87f5a2250248050c646794826818ab5cb8e596acf5764626bc93eff12ef8a85175376513a2522698e456f357d84af73ab83c5d8cbfcd11f68da7b364ba24bdb409087de2571c3bdc1d8a5da15563f1ba33b461212d1495a073fdebd07b0d37e8cee9d722846e649b2701b5b96d11a59288f29083d43ce7b5daba490c04573bcb410312ebb3bee628303e3d491e38cdd453c36279d014611a6e37e4840c5d79eac8eb0765e68e1cb348ee61a55ab718a0d2cb7fe20e46afe3f92fec4bba96fd33c23caeaa4791792a72666b3c035dbeef13b7eb17588ce62a55946198de6f76d21e058ff91fbd169bc9258e4bf82895bcdd236cfcaeff0b5f2070aa8d1c5a9067ffae16a45fb0ccb2738d220a9aa1863cf37c7d20ee82e49532590497adc145bf19e82d5332ef0e22c60dcd3e3039dd3c310232136d6207f139f28598855a555f49d1a9d488fe280de41473aecb3dfade0fb93f71a4ee71338143c83c74b393a5c0e6a78088c276b5af60028aeb78f828076ecc5c5c0f0952beb636323a9c59e67bc5073f500d9910d838a6a5f7dda978c03e19c14efba1a196d857c7eb927fb61e0c39529fa2d65982747a1020a488cb823476857c1d2d60bc6b357b7387966dec16d238b7206ebca8f922e7b3f21f4a99536b001fdcf0fcd87335ca3d011e78bb58c7be198836834348c4f540092cf342d80fb4949aacfa5c9f72cd8df36891033bfc90b034d89c0e5bac5870259b0434170687d3b8f41becfc108db1094b53a0d92c499cabb42adf57daf9a668d603c1a8a04692a46b5fc7ffad9184fbde12a238f3a63efcc47f6f3d8420779aa0ae33d794ae83c59e6b73d46e2aa713ab82d3b2de41baaafbd69b16c631541f0f4c8a57939cf7cfe833489e52318293c96e5f6d826eae82a8eda9b10e0e7d31d71122d851c60c620427b78b9c60c9b492b3813e2070dd89d8bf2bf37aad2bdd4cb36b802e6667354249576d45f61d578c56b45956faf3e0b954627125a28c191a1e607d9aa6749ed54976f106263eeebd604eac3e1fbe0504203a16bc53020bd5713c1ed297d27aa3a5ba28ccd052baf4f5de4a3ef542b14ef5e8be44cd84a6943b5c821d0bd75f18d2ccfaa667ee6e585d40e3c24e184ce26681573814ea70f85f0a8bf084d683d50abf40efb9681c3bf50850a2c003a8403584564aa5b91ab8bb350e34a2a5495ce5ef1acba07b08019f5c4a7bf35f507711f895de08cb2d509ffe50d2cdc39f402d2f9fad73f299df2934b8aac58c06f1ae4115dc826a5fcffb709281f0d1b574e1df2e4a9369d29021e3cbaddac5356fe93b2a3a679dc493a16dc0b0c55f4fbd5a03f42fee60bf820c991201b628deeaf1a959f7306f167f94c580b5b20afc33770a99a45f3fe5ff95e367bceab40dafae811d96fd04e8677e9f676d8d1b60a69bf992dda8e582c1f37e7571713aa9d4251a3538ec75db85772954cfba1270120a611d39b8541a1480512ebbd52c461cc0cbeee159590eb8f2b0ace3e12a0848bbd9b721761508e9b4b8d24a090c0d06195283362fc395107dcd1705365ab0a39cd4f623d89921abbbf6329fe4d77ee66a409c723bc6160d36b663d14eab536b630d092390111781f0782b9a6f7878c91f84099954dcc99ca0d2d5fe3c6af865b9adefa6617e487271336338bfed9534e41f644fc12d0980c4f8777a309f63a0e2bda954e17b494666534b026a705a265970c925840e700c0c632caff88610113290fc8b79c33884df0247ef6335b2eadc2918a8219116f7226d352ec94cb93466391e7d60b2969ce9bcbfd74b17f31fd28e733f098532352c74acdcd8a67df22b925f2c554302313ad1804fc39bccc4747b86c0c5d26f3874feebd53074018f93b2d1152048176f079fefcba2e72f2983d1950a2481eb7a25d38a691d83afb2c1411e5489e9b78aeec80c0c47e7a8a58c5a19c3a77e2d5c073e143e7644ef50b265e60361a91f734d1979b1ea9b8ebaedbb461d0d010a768c7c68af70f24e82896074c2027117bea5f1749502e5ab2de90ff894607b3603a8806806dd09497a24feea05cac92ea8dd0f736ad980177598789cb2200fcbe845b72519c60ab08855f91e3d181eee9940c50ef23bfe77bf52476d7ef5d99234f4718338c019aa93c90b73ac11f32237daed1b10f3febba2709173861b24453709aa6c85369bd44e22c6be62a0c8073fcf3f756304b6916f9c848a909b6bc397", 0x1000}, {&(0x7f00000024c0)="3359bfcf44cf0d1fe6ffabd2041cdbbbd58a3d23af11b048cf1908b0950e6e0c7ce7028eca2215af3ef0a642dff89a44fca4c657d5cdf77a0bca646f2fb34398c71fb8f9b307aa93d118c192aeae366f621224fafd5bdcf3e34993a4ddbc3316eabe2f5ec672bb7df967d40d96a4859781958cbcf6aaf0b2884702e0", 0x7c}, {&(0x7f0000002580)="8227f2fadb1f4ddd5cefb4bbc17025cbe0d6645f41e0c2162dec7b82a29b2dc43790bc61705195913ed4d00d5e92", 0x2e}, {&(0x7f0000000640)="80b14835bc38ff14b0a9ba86454280a61cac9f3396b1145d6da8ac40c7fa9c29abf37c3826370d5baed56d0bab3a987073bebce23db4c983005ad8b449c61250f8b78c2e4f5b5c0ce2b1ae0e0f987cdb043bff38cfb4db6c9d5f52199b39e6aca8f78afec393ac1fb8ff76250a2900cdae13933eacbac34ce150b983ab1aefa2a451ce96895d4bb86bf018ab014d5edaef1992a0915b0d98561c04f96530501ba6687b599251af5ff06f0dbe44c50967da868c8689aa710a", 0xb8}, {&(0x7f0000000700)="38f42aa1fa2721f77fa3e235cd029069c453958e43ae6905d258da25ed3b8b9984bf984f8ce5acb685f486ecd9933ad7f1ff5c7d05b62c919d49a3696278f8ce541f7e52592e4d1e233350a0aa2726519fa1a126422807995c4290fc3a377f2de2f6f73d7866834e", 0x68}], 0x9, &(0x7f0000002640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0x9f, [@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp={0x44, 0x14, 0x6, 0x0, 0x8, [0x5, 0xf684, 0x6, 0x7f]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x10}}], 0xc0}, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x7, 0xfffffffb, 0x200, 0x10, 0x400}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)=0x0) r12 = syz_open_procfs$namespace(r11, &(0x7f0000000000)='ns/mnt\x00') ioctl$TUNSETFILTEREBPF(r12, 0x8008b705, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000b00)=ANY=[@ANYBLOB="640900000005010200000000000000000000000454020100010000000100000080400600a6000d0073797a300000000000000000000000000000000000000000000000000000000036d7abfae08e6f31741c10f91a7efc3e44b4f8bee5ae98f663a475076341d01878f13733b7bf91875c71848f388c43c6c24f2d61bea6bec1f4ff8011773c0b14f70e0c000000000002000000ac78ff7f0200000009000000e70001fe0200000000004002080000000200000000000000fdff800000000000070000000700070001000000ea0300000400010000000000ffffffff040012000000000005000000f9ff000001000000090000000c00ffff030000008a0000000800030003000000008000000600623602000000060000000100270401000000feffffff060002000200000002000000030060890200000006000000050004000000000006000000ff030100010000000200000001013d000100000001000000001009000300000003000000b369030001000000f1070000481a040002000000b100000003000aaa01000000f7ffffff0100ff07000000008100000007000900020000000600000004003d2700000000370d0000020007009c6d2f57710e0000ecf57b4c010000000b0000000400fbff01000000fc0f00000400010101000000800000009100e20202000000f7ffffffff005a8202000000500000000800001c03000000fffbffff0100050003000000080000000f00000203000000040000000d008c05010000000500000002000900030000000400000002000180030000000600000009000104b8878c492e2c000001000000020000000400000009000600030000000600000054020100010000000400000089030400b4001b0073797a30000000000000000000000000000000000000000000000000000000005d95a4f847fdc9bdab065443f32f3cc172fb0249561a8446fcf3cc6e39a8c541f7e024f67ab019cc915ea599a15684a951034063956c5f31a034a170de1d5f69fbff0500ec450d110002000001000100030000000000000004000500000000000300000000000700000000007100000027e57f0003000000080000009582070002000000030000000800030003000000030000000100010103000000ff07000033010c000100000008000000b400000002000000010100000200400002000000fcffffff0400cb0000000000050000004e28cc00000000000200000009007f00000000000900000006000400030000000d000000810007000300000007000000010483080100000004000000cc0362e5000000000000000001000600030000000b0000000100050000000000ff00000000080600c022d398080000000d00030002000000f8ffffff0500090003000000060000000100090003000000090000000100030001000000020000000700030001000000000001000600050001000000fcffffff0800020000000000060000000800030001000000ffffffffff0004000300000003000000ffff00000000000009000000a10a000000000000050000000900050000000000ff0f00000800010002000000080000000400070003000000060000000100040003000000000000000010070002000000800200004d00018002000000d5c500000b00020002000000ff0000000c00030000000000000000005402010003000000090000002b050200ffff1e0073797a3100000000000000000000000000000000000000000000da00000000000fbb2f21d1308aaf9d1d12bf5d14c36ae800e0f8b41d6367995d99fc0045064eaf92d68afa2726c8a77003a4efa958ff84fea4d51888373ac71c77946e9743040b00010003000000010000000800008001000000f400000006002325000000001b00000001000000010000000700000003000104030000000000010001000000010000000400000008002a00000000000600000000009c7800000000050000000500040006000000080000000800070002000000ffffffffffff0002030000000000000009000600030000007f0000000300040003000000030000009300630f0000000008000000c400030002000000e37f00000000080001000000020000000900000003000000010000000200080001000000010000000f0003000000000036ffffff070000040200000000040000e800f805000000000700000000000c00030000000002000000015a0003000000fdffffff070000000100000000000000010304000300000007000000080081ff010000000b0000001a0106000300000006000000070001000300000005000000040007000200000098e70000810002000000000079f600000010810000000000090000000600000401000000010000000c00350001000000040000000600810003000000ff0f00000100ff030300000002000000ff7f03000200000046ffffff57040300b3efdd0ff9ffffff0600060001000000000000000600ff0f01000000030000000104a28702000000040000005402010000000000ff0000000d02ff000800170073797a3100000000000000000000000000000000000000000000000000000000648cbf3467e2be2b98b55d617015bfdc445a2c166fa2d18abbe9110aa9aee4c151f9ccd1193f04a0f81c4e6626e69d07160c562f4d7e9512804ee73fd7e934d30600018000000000010000000400090003000000ff07000079d3070002000000030000000400020001000000040000003e000500020000000000000000000d0002000000060000000001070003000000000400000400040000000000090000000700080003000000020000004000060000000000010400000800ff0f00000000030000000200810002000000090000000800060000000000020000000100be04020000000900000008008100010000008d0a00000200f9ff03000000020000001c00030003000000570000006c0eff0f02000000000080b708250d00030000000d000000ff0f0400010000000800000003000d00020000000b000000ff3f00800300000001040000c202020003000000390200000500040002000000030000000500050002000000000000006273000001000000060000000400c80002000000ff0000000a00020002000000050b00000900080002000000010000000500090002000000600000000800000000000000020000000800000001000000090000000300090001000000ffffffff0300010100000000090000000d0006000100000000000000cb05090002000000020000000c00780202000000090000000200c50a010000000400000040a5000002000000060000000104000103000000040000009f01d84211c7a16a4d9bd762e2cf1c26ec1725f8b08e95813b655e762e22e71830461a5ec3572ae599365904502093f283ab07454bd2108dda8c5febae27c030de5b728c70744d14c79db09bd26176f1b6110614d49c"], 0x964}, 0x1, 0x0, 0x0, 0x8000}, 0x840) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000ac0)={0x3, 0x489, 0x0, 0x7, 0x3}) 9.110163702s ago: executing program 2 (id=3309): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r0, 0x0, 0xc, 0x0, &(0x7f0000000780)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000300)=0x90) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000380)=0x100, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb08004500001400000000ff010000010203040506070800000c00020006002000080000000c0003"], 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x1}]}}}]}, 0x44}}, 0x0) 8.477927679s ago: executing program 4 (id=3311): r0 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b0009", 0x29}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000000010100000500010008000000080004"], 0x2c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r2}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="c000", @ANYRES32=r4, @ANYBLOB="0000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000065f4442e6bcda361ffffffffffffffff000001000000000000000000000000000000000000000000000000000035a20100f8ffffb86b6e000001000000000000050021000000000087f96a6514ea46bb22d8ed7b22d85527769ad182e9a36698fd690a7204d8bcdf7aeff4e953d4a1a23c40a364"], 0xc0}, 0x1, 0x0, 0x0, 0x200040c8}, 0x4040000) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@migrate={0x0, 0x21, 0x100, 0x70bd2b, 0x25dfdbfb, {{@in=@private=0xa010101, @in=@empty, 0x4e22, 0x6, 0x4e24, 0x81, 0x2, 0x1a0, 0xa0, 0x32, 0x0, r4}, 0x6e6bb7}, [@lifetime_val={0x0, 0x9, {0xd7b, 0x800, 0x1, 0xfffffffffffffffd}}, @policy_type, @mark={0x0, 0x15, {0x350759, 0x101}}, @iptfs_dont_frag, @replay_val={0x0, 0xa, {0x70bd2c, 0x70bd2a, 0x3}}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f800001016000100000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ff"], 0xf8}}, 0x810) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000a80"], 0x1c}}, 0x0) unshare(0x22020400) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 7.859173944s ago: executing program 2 (id=3313): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x108, 0x0, 0x0, 0x0, 0xc}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb00040c"], 0x0) 7.576660917s ago: executing program 2 (id=3315): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) (async) write$tun(r2, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x11, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) (async) sendto$l2tp6(r1, &(0x7f0000000200)="c7279078e925cef3cb74d237d9b606f410d076a100f787d6110d973e6a4a61204f0c402f953be7c414ec03fb67b5ac9453635c19addd18b3585ef9ba6a6bc37c4cbfa526b2435abb88fed9055360e730241ffc09", 0x54, 0x4c080, &(0x7f0000000280)={0xa, 0x0, 0xffffffff, @mcast2, 0xa26, 0x4}, 0x20) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xa4, 0x4, 0xb, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x8000, 0xfffffffa, 0x3}}) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000000)=@framed={{}, [@map_val={0x18, 0x340e47394361591a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0x2, 0x41}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 7.486915023s ago: executing program 4 (id=3316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xe8}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xe8}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008010) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000400000008000700ac1414aa05000800e000000106000b00020000000800020005"], 0x34}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000400000008000700ac1414aa05000800e000000106000b00020000000800020005"], 0x34}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x10, 0x110, 0xe}], 0x20}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 7.265456953s ago: executing program 3 (id=3318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYRES8, @ANYRES16=r1, @ANYRES64=r1, @ANYRESDEC=r1], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x4}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x4}}) (async, rerun: 64) connect$pppl2tp(r2, 0x0, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000480)={r4, 0x1, 0x2}) 7.099608903s ago: executing program 4 (id=3319): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000100001402fa9febf670425bd7000f9db", @ANYRES32, @ANYBLOB="158804000302040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 5.362574764s ago: executing program 1 (id=3321): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xa010100}]}, 0x1c}}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0xfffd, 0x80ffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.139005646s ago: executing program 1 (id=3322): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYBLOB="15"], 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000080000008510000003000000180000000000000000000000fc0100f49400000000000000bf00ffff"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) 4.852045135s ago: executing program 4 (id=3323): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480"], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r2, 0x7800, 0x8, 0x2, 0x3, {{0x19, 0x4, 0x1, 0x3b, 0x64, 0x66, 0x0, 0x3, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x77, [@loopback, @broadcast, @private=0xa010102, @broadcast, @empty, @local, @rand_addr=0x64010102, @local, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0xce, 0x3, 0x4, [{@rand_addr=0x64010102}]}, @generic={0x7, 0x10, "74c9cc6681debdf7cedf0a54367a"}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r2, 0x7800, 0x8, 0x2, 0x3, {{0x19, 0x4, 0x1, 0x3b, 0x64, 0x66, 0x0, 0x3, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x77, [@loopback, @broadcast, @private=0xa010102, @broadcast, @empty, @local, @rand_addr=0x64010102, @local, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0xce, 0x3, 0x4, [{@rand_addr=0x64010102}]}, @generic={0x7, 0x10, "74c9cc6681debdf7cedf0a54367a"}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf4, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8855}, 0x20) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf4, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8855}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) 4.782466491s ago: executing program 3 (id=3324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) write$tun(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020000000000000000000000000094a972f944001c39d162096df30cff5344e89798bd24ba1c167834b56cea86bba2d924a2738d894d0dad94ba281bdba6457867e3de5b98ce80f1bcf22fe9b62eedef1ae0d46ac6498d1fae09c54f05ab282cdbf05afe8c02e3a2507dbcf17d2baf722b557cfb9f93ae5bd2ed1af4e131afc4b79bfdd3b973e77d5bd103d13d11a4bee53be40ee97a6fb77aaa92a4d3ed699abbb8f4683b9b4fbca96134b1839921c3d8dd17545f5b26ce4f3c68a6f8c181c9d997009b9f9e5a9cdaf52c5f0dae7e0bd3d3c495f8f2c26f92b8427e4b0f567aaa892e08bd"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f00000006c0)="281e8423dbfed5b854e61b105763432ee9d9f7b8ad49d5adf5275fe078c2b946de3b42adf4b5d1ecb634ebf3050091b5d13fceb9f9a932c8321561f4cb5ffc3303397f55869f0a805da86eb3749c7207345a810312f8d06ab89642d041046aba9c5662d6402653a6a636fc350d3bce5f7b32ae867d2906fc9ff8515721e4da3ca775b07f38e6", 0x86}, {&(0x7f0000000780)="81075e5f3aa77e42b3362e8b8d406b0ccea5ccde0e3dd238311d669ecb98cd112fcc7f4083ed4dda2439bed1785974f79e890925376a430171a3457137e3edb611ff0792c5adb39630faf13c3828652527ba1315670ce0380ee42d10d6e699e949eb8c692290978cf1a667", 0x6b}, {&(0x7f0000000800)="038ac20f05804d73614f0cac88e68680bf08299225998908c7b58b5a4e2980178cef05b052b729bf71", 0x29}, {&(0x7f0000000840)="5bbfc387d653b24adbd5e7b8c9bedf561b1aec13dc5d176c301f137131bf5464149c5130e13be70e55cf73154ec28f9e7bb4dd33148e4a0772af2ac9f88f70464ed00e67f05ee3d754e4b2e851de66eb0b48396bd5436d07186ede9ed8cd6f3eaddac2119d955c1d0c74375d0ef1135f363adbc00fe2df0e91ab6de73c396bce11d4d005a74eea2a3d9a5f00fac4681ad4948bbbb3ade69a92c8cda39b579f743f6af9a53465529d150c08dabac0be62207021a90e42330d9f9b402180a0b0", 0xbf}, {&(0x7f0000001500)="ecfce00022fa7486fce568b23cdf223eb495cbd4cd58d406d9da0a421e957a545b45e5bc7e2a4ba0cf0a1cc383bd2f210849589c1f7df280c05858041d32530fab4af024f0a050f112c69a674528cc093dcf5ba9184842cd97564b82005da12a7167be658c1f29ceb92467a1a64ae1b0c118039d8288a11e4af93d6c47b2797a899688fba95b5fd5f259b2d28729f497a6bb5c17bec450169ef9c78d2114dfc01a25210a2f610c19009470179b2837570c8b43b3f651e86c706b60487169e5d6455b1eb85192832d1e741b96ba6fe109a53bbe3d91ba6b4205199c51263f5bfbe83261eaaa1ba8ce972d1fce0526f16970f6442db6aabefae745812f703e9b075c60148f4a916dd942be6433d6dfaf69635709afa6efd983c3ce1e99cfa37dedd781a6fba14d9858f327b42f7cdd67f3aecf3d84458850820a130c8d67c92e6705f500699b270fb72e73ee88fe0e6e8c38106f18de03b5b7fdf3fea84b7238a3f0d7b9a594a4b2655e2fe23c29674e4d5474f2807491a077421b74744d2f30673080202d30a7212a2712aec8c795dcf99115858dacfc12889563727b91e2e8b81f7c0e0e61999937ce68b7a6e43c2eccd4f68338775f81208a3254c47cafc58887edc62bc24b205b81bf2df0e6ec1dc20a5aea68c0c342aef616048bdd083fef71959aa115e59f1e2b57f8033c32889466be76cff1c28a866c6ffa8e0cb300b37a0e8ba04bc31ef557f636948fa77876c86c43f39edb3ddac07ff8cf02e8b3806f0aa6f4d9e4893983be9386b4a43709a98a2f8c95341666fc8f7e54a3bc476098e3348f215a95595dc5d3cbf0873a4f10133833773bc250d9ae139facda315b88191192125389b19d66a53b886db1ed38bbab87fd69ab8b3f697201d1a3bcaa923a3071abbf3170825edff8317d5138b1881c3fab2228e1838016ccfa1ba48744823a762dfcee254e2fcbb7a35eec26887a262756a467318d19eab70485679f34925b0f57a12d3b45f2d3fa0f5d5f86a08b8b49b3636a6b55bf2c75a25f66a658925594c41f993407a8e98bb5d2a0e6aacdac586665fc3d17f2e419171cf2a2ba87c8a531fedb8a1bdd8796b7440a0c3ebec281f1342f8e61b83ea7fe747ebed2e724958622095b4fdc15b33fe3f259bb2d4837af45278f522010bac50fa0203b0b75daa83d02ad941b5d837a9425b856dc10eb3ae0557c9edef444098b8f96b025a383c5e414050f3de2ea7e5c4494b392c8b881ecd64d80bb0075de055b896fdeb64dd496c29fb2f498eede38976a79cfbe75f9fb423c838fec46c160e4562eb1f2b867bbda5654720815db69a7dd98b39a1879e3b4ec184dd8172adc01dcfd411fbbcb0809c5607056131f53d3bc142713cfa1f8187057ba66212a3fc58f07c1b9bcf1d58e927d0487f30a7f59f8bcde200191d7a72e987a237a6d9d8bbf62b9dc0ef2ff9dcaa5ce99c95646e9c6983ec04004b31e66bc6fa104457dcd91fa05ea84cd1290b04d8fa824941b378818bc50e458c8d0ff725368f3bc7ed263ef55cf5d1c4f6452e64b234dec4da406deb2da669c32c46f1d8faa6a367b47a0c7e27d5cae58d6ad72d47383ec82015803f419415f02bed584070de4d232dcb39f5987a29c0b255a0c1441b419160f05139e6b4c81eafdbe2f31493bab2699304dae5fe0d08f559f01575adccefbb0f56967e569f32a0bb4056712b5f00cc530f6aa46ad6c03955152be886085dcc93a98a9c81d247794492fd37127b7dbfd65f64498be8fd2689bce36b2989f7b787617240165de19b6111294d0820faf069d7af6554efd7ffcf65e6331c7d85ac3133a89e032b259312ae490869d4fbee61e59f34d18e132ee64598f6ab061a5046d1d864e9ee8387de57079044b83fac2901b6d511403f2fdd8a85bde1dc55c657d319cae35c3198c7b45cb653b6adeef5f8ea7570c6478bcdf4ca42561ae4088865e8a646e90dde63765b07c71f86a40d33f27899f64685d0db19abb4cc7c48c98e1e79036e7c39a787a1cce07c4b9364b108878138a849891d98db4c4d0d0def00d5e9999c0250bf37df69c63685e92611a0ceaaa4d082f1bf2e751901134a178c2be62c7994251160c52336766e06538184ff69db3e716473ec7c24f604e457735b5ba92bad20feb2abb7d74f884d1a72809dd6820b9700b841aa9abecb68d9f51150fce31b16b1543377a5ca3da37c1555a44ac3bbc1f919a3aa3a5f1227bfa466cc3ee10faa2451ebfb194f026340b2ed6423f7376cafae9f76d0ecaddf37e6e3b6fe2ebab219652cbd64bba501cc8360daaa03560e4324ade94bb8154a5889d4ee75bbf83df784feea86bde7bd2828b490e3180208e34c60ed4118c2ff358908f0ce2683467d060198d77cb9a287beeb045ad854b1681c49e69bb5568c015fdeaef15454ff3b52184f7eb3f1870a6d28aba48f297d27ec8f17a88e569b69555334e49ac0cddb422ffcb24c3ede740d24a60fed3bf9c5d2a4e064d7d75e679d7849c7887b0a5467887036d75f97e932595968a210f71104384984b6fa8793b0e0d73d1922c6e767396d099b8b1e7834997c27bd2c703bdd3cc9700386d14cf6b1e776924d0054e640c625a80ee88723fde2a53c17895717cd1575010699d4c2f2f3b21582988dc8fba7a7cbed17b6e75c3896c61e7a180fa8393afa67e64575116405dfa668bc8c2d07ce37a6772fe7beb66c98eade73808ba9f0a10e2e9f008d9e7f669fe05feaeca59580b4ebf0ec6e1a310d4650c0f2b3f3653d3301759189ce608c612c75b4d29d9d49a45c84fbc54f7548e022f405a46e5a62cc79ecf3036f84a26d9ce382f456272f2253df5bddfd3b2b10a1a8f4edd4c93e94f86c827628048c26e38177af955cb07b3c0f602509826fc20427fd32d4bd33d54e98bf1bf2f56b02d03ef07dfe700a9020a9448f8b8c1d9c247605dc427e1cd592aaa42ab5f5cbe23dd0f100734fee09da52d1e61bb2a503a184316265bc2a9c666bd27f970e525d164bf2df94550d4e110c5560d985cdac9340cf7386567334b71cc838592bb1eccfde5b775e03689dd3fb9b196c37c1919f8260366766d06f562b96b3fda77c331f306f8ba4f903145ed18c64b185a6d33f9eff61bd92436ffcd2e4935c38ebbf6fc5edb028bf1a3f0f84e66c23c1b69ab451239e2e55b283fcd669ea4b0b6d76e7b7e2f03b2c322fe4a29183f68796ab50d94460456efa2e67ecd84c9c23be719db7ba9dc54182e12cb74796d100694d8f0fcb5e3b4aa33c8c8bde1f165dd75efd56403cb188bebadfbbc16ab0821ed83accce18167cd6a5f975fc8964264cdb7766a6029e9eacfb59afcf4a3aa331c5b81085d1654b174c7167cb1bad943dbf68091cb1994d1bc28598b53bd8492f597e1a744c545b5f84e1c1ed2cade2a89483fa7a3c7d21e191aceba6446006582218ad0b24f7518a39eacaad72800e74c1f685d3266c0f75c8e67a19795929cef58a270d7500a5ff9ce911d48026c7184f51088a9719897f6b16d43f2d3a225755d76f6e26eb1317008474a65a6203782f57307e3b6c65fc29a3e4951056d3e64bfa68439ce0dc2a60cee5302ff36d17770b3bb5fa05d623e62f445af27da97a1f42807bae02f2849456be3115f76d7185c333d258fb74ef0fc178512d845f4e0a53030abe8724452897c2bf30ef62efabcbbdb1243f35af3a754553f9c49f46fe746c448acbdd23a557ec25f74eb6ca15472fb01b3e25c6434bd19cd4ae1d5631e7554be17ecd125a6b44b4b821434c0f887e8872cc5eeb703e264178a8bb7edd1a99d6ccaa9a07843c41166c4a2bf8960319ad8e64d56b649cccb0c9353512265637e848d286abdc24c8f9a087bb76d5418cf691ca0df400993e82ae05f473bb90208c10fd8cbe3677ef0c8858ec1f173422d6bc3a43b0eb0c1f8e028233a507b1b776e5923cc552553a9882c7c316f57c59f3e885f3e079425b59e1b5aa305705faad738c493610b913d7b73b5958d9d53030945d1d3194293d2a64e7bdf825d6e6c1f0beadf8ebd62b62ac28e1d625b245f335dac94439cb2956a5b8760e3085002df683296407175d91e01d8310d4b62f0a09dc5ebe405caf72f6f7a8044925027dfb55e16242df29e0a322857c53982791fd7a2d77f2062caf653a302b86cc5686aeff9304e4e62abfb59ef586f633b09c756b578561240b8b410f8be1a0a688fb12d97c11dcdc67e86e6d62f47a3f62e98185fe492174e9f4d1e9b704e4ffb5d95afd2992d5d2866b2090be8907b61a5cf932df2e6b222e337c9ea11e27c44f47de0db48d9bb5b9921e1106f59b9d94ddd2f51805abdc6eb3f1ac86c8912c79def49e7580d99b26db80a8ddf9816f8081c70d0bb45ce4e84101d982bf203933672ba7642db608cf879c685fdd4f6655223e66bad7acc07b4bb9801f3dc09e05d2e401f53a132efb595a12dffd197c3b0a23dcb70f935b72500f9987a2535521cd0d0c50e3150e8db56a54793dc77cf76b796044e123cb30577502708fcf6692d62911bf461fc4c55d8ec829dbe7347d7ab5e49ecd8a3a3a247454d5f3fb62883b58529efced4d59f2da07c9a138c0569429389fcf6dae693c867bc3a4dbdf7b44584ea858a46629a2161535b69d53783895a9d899c10c23ff13dc1f8b93919cd707934a635abc388a8d988737114161cdbca369191a586672c743232d5bc385edb06990e43a64c61f4bad235c0a2e231ba90282861a081dd4e1751c8989a1eb917f53bb322c4bf16099fde8a9e3531fff917f585f29c596d219c00d679f06ed4ac46b2c0d2ce768fe038c9714aa2a81ee58d7f27e7c6e88dd1ef44336f30429be866d02c7c8a723298b68e261778395b61a2a3df50c5228e29d285caf14be4ef81a176920c74f2ddc7056d896420569c8a0e265f911491b7b1604d66a50f75273fdef48a5e4d7cc2a420765baaa2a6c8207b710ef499cc040fa821c02c63b4e41fa0a9ad2ae979f0c6f0be8273d036178be75c69a6ed1059edc4640bc72e3ea172838becd8ffbbbe99e196305cf542e12425f18ab976647898a098a27ed9a3c749738c535f57230c4e03a379d5cbead0763beb2b2691469a808f2b2084bcff77e08c295586890734e65a00e144f940ee4d45e7226644a7f6dff4b0c106e22aaedfd45fcf404d367a4e310c598f523e4c03fdc70d7d98bab6aaa8a4538412409867cce68cc09934a0985ecedc4968385e0bb92116fbca0e835030e28129abaeab16d8e47e3fddbe9c55afcf5ac0579e07d5ec4ef15f1329ad76c9f94a93447d85ddaa61c79180ca2658de601efd69bf17650a4fedc015737dbb3c9a9c90fdbf7698e689a25edc7423aa573cfe38fbda6b7b24efbbe9deeef041edf8bb78ddfd98a8a7dbbd66f243e9467062227f0f05e9ffbc6f638f7ca10304e741d6e68478f8664d14c05f8e159119143aab2f8343e55bd26f832d45ebeb740a3ef137cd7f2f5461c07671892c67fcd3ea94f6bc3f89d27e15c66649c9f972a753b91b5dc7b06782eb1dcd2acd4fd0686821d51cff05791566f175c7b563ef8063e116c7b019529c0c0ab4cafaae717cde65f56644fa2990f5482d427682b8ea27677768225053476d44dabae118232eba81b75baba7c20c5dd61b994bdf385585494a2f2b4a4e88ad20c0d5a309e63f3b43ec3b6263125dd1498e790e9b169c12cf4f4005a87e3537cb7832480b334a63b214ca5921183cc6da67816b9ef530212d491deb5c0df2b6fb30dbbcb6f6ae775cdcce7988a7cf066dd2f7a9f4", 0x1000}, {&(0x7f0000002500)="0832f53744c8f446ceb10c3e46237b42ec788d4d9973d75b09592b93253a3ad5660fe367638604809a6ca636b1db338cb1c16de40b17b1ca666382e2192c60dfb2c2355eb10c5d6beec5210763da08d7afae5d3eebd5590ca49332a265f0680ae6fb79e448780669c54999d4036693fa39ac009727553ec8329cfa647a3e9c9d6221f5de258752e57bd235775dddb8cc6b60b85670953b6ad38982b1c10cd3f0c063e10a8a7c22dc9e235214991044af149c897b2e4715962bb97b8b4db18b92bf562cd4ca30f9e992e3c31aa6fae5795b38879e1061", 0xd6}, {&(0x7f0000002600)="9686b6983c15cc8c5ec3756ff9fcbb05b8251dc04dc58ae184e724c1485be4160f5a89327feff80aa05a535733099798ed9c", 0x32}], 0x7, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@delqdisc={0x108, 0x25, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x4}, {0xc, 0xd}, {0xe, 0x2}}, [@TCA_STAB={0xe4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xde, 0xf8c, 0x8, 0x2, 0xfff, 0x5, 0x9}}, {0x16, 0x2, [0x0, 0x3, 0x200, 0x2, 0xc6c, 0xf9, 0x2, 0x1, 0x0]}}, {{0x1c, 0x1, {0x7, 0xc, 0x7, 0x3, 0x0, 0x400, 0xe0cf, 0x5}}, {0xe, 0x2, [0x1, 0x7, 0x40, 0x80, 0x2]}}, {{0x1c, 0x1, {0x9, 0x6b, 0x0, 0xfffffff6, 0x0, 0x9, 0x489, 0x9}}, {0x16, 0x2, [0x9, 0x3, 0x3, 0x8, 0x2, 0x68a, 0x2, 0x1, 0x200]}}, {{0x1c, 0x1, {0x68, 0x7, 0x7, 0xffffff55, 0x2, 0x7, 0x0, 0x2}}, {0x8, 0x2, [0x8, 0x6]}}, {{0x1c, 0x1, {0x1, 0x1, 0x1, 0x80000000, 0x2, 0x2, 0x0, 0x3}}, {0xa, 0x2, [0x2, 0x8, 0x5]}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x2000401c}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c00dfe56306163d00a6bd237cf46ef51012000c000100626f6e64000000800c00020008000100", @ANYRES8=r0], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r8, @ANYBLOB="345bf00300000000000000ea3adc010015aed2c67374f80c9386bd455a2e28b39d169ac6679967f2127d04c0ae504020134c4bb7238b5d8dada919"], 0x3c}}, 0x8000) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a0000000000dee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) 4.454651542s ago: executing program 1 (id=3325): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 4.104281805s ago: executing program 1 (id=3326): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r5, @ANYRESDEC=r5, @ANYRESHEX=0x0], 0x40}}, 0x90) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x3c, r0, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x3c}}, 0x0) 3.98595995s ago: executing program 4 (id=3327): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000100001002d390d00fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8121000000000000140003006e657464657673696d30000000000000b0001680ac000180100006"], 0xec}}, 0x4000844) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) (async) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.929700833s ago: executing program 1 (id=3328): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r0, &(0x7f0000000500), 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000006800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0xfffff000}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000290000000400000000000000000000001800feffffff00002900807c040000000100000000000000"], 0x30}}], 0x1, 0x4044800) (async) sendmmsg$inet6(r2, &(0x7f0000006800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0xfffff000}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000290000000400000000000000000000001800feffffff00002900807c040000000100000000000000"], 0x30}}], 0x1, 0x4044800) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst]}, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst]}, 0x0}, 0x90) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000090a010400000000000000000a0000080900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc1c0011800b00010065787468647200000c0002800800064000000002140000001100010000000000000000000007000a"], 0x80}, 0x1, 0x0, 0x0, 0x2040000}, 0x40) accept(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000200)=0x80) (async) accept(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000200)=0x80) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f00000001c0)={r6, 0x40, 0x8}, 0x8) r7 = socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0x905, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0x905, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) getsockopt$bt_hci(r7, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000002c0)={0x9, 0x9, 0x3, 0x6, r6}, &(0x7f0000000300)=0x10) 1.667857691s ago: executing program 2 (id=3329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) listen(r1, 0x0) read(r1, &(0x7f00000000c0)=""/208, 0xd0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x3, 0x4e20, 0x4d, 0x0, @gue={{0x2, 0x0, 0x2, 0x5, 0x100}, "2e08eb1fc06af5caa7957de27180948df28595f17ffa95ae7a4da2822311f4bb37b9b5774aa6e5c2e6118307140ceac90b9763ea5b9b852738ceb0a34c"}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x28, r2, 0xdac7a804b810efff, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8d8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 1.570119524s ago: executing program 3 (id=3330): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvfrom$inet(r1, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000068000100030000000000008000000000000000000e0002"], 0x28}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000001000), r4) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18002000", @ANYRES16=r5, @ANYBLOB="679900000000000000000800000004000480"], 0x18}}, 0x0) 1.110296633s ago: executing program 2 (id=3331): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)=ANY=[@ANYBLOB="180000002f00099828bd70000000000004000000040012"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @alu={0x7, 0x1, 0x0, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async, rerun: 64) socket(0x2a, 0x3, 0x0) (rerun: 64) 1.032203089s ago: executing program 3 (id=3332): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) bind$tipc(r0, 0x0, 0x0) 734.05861ms ago: executing program 1 (id=3333): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) r4 = getuid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x46, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)=@updpolicy={0x250, 0x19, 0x100, 0x70bd2b, 0x25dfdbff, {{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4e20, 0x3, 0x4e21, 0x6, 0xa, 0x80, 0x180, 0x2, 0x0, r3}, {0x32d5, 0x9, 0x2, 0xfffffffffffffffc, 0x3, 0xa, 0x6a, 0x10}, {0x7, 0x5108, 0x7, 0xfffffffffffffff9}, 0x581, 0x0, 0x1, 0x0, 0x2}, [@sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x4e21, 0x7ff, 0x4e24, 0x0, 0xa, 0x80, 0x80, 0x32, 0x0, r4}, {@in=@local, 0x4d6, 0x3c}, @in=@empty, {0xd, 0x2b60, 0x2, 0x1, 0x0, 0x4, 0x8, 0xd43}, {0x1, 0x7fff, 0x4, 0x46696c81}, {0xc3f1, 0x8}, 0x70bd28, 0x3500, 0xa, 0x5, 0x8, 0x10}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @policy={0xac, 0x7, {{@in6=@private0, @in=@broadcast, 0x4e23, 0x2, 0x4e20, 0x9, 0xa, 0x0, 0xc0, 0x67, r5, 0xee00}, {0x400, 0x4, 0xfffffffffffffff8, 0x35, 0x2, 0x4, 0x2, 0xfb6}, {0xffffffffffffff01, 0x9, 0x100000001}, 0x8, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}}]}, 0x250}, 0x1, 0x0, 0x0, 0x20000000}, 0x10840) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="850000006c0000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r9) 474.108409ms ago: executing program 3 (id=3334): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=3335): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000000006000000970c000001000000", @ANYRES32, @ANYBLOB="050000000000000000000000000000000000e6ce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005000000000000000d00"/28], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000037000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500ffffff7f0000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x4) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x6, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000002080)="b138f6c5fe1d2e3161c2300654c1b4d2ce94b68fae4e9175ee6faaf9fafabe047a8330ef9d35fcf59722fb6398ce6a63db14f68aeb235b034275c33fd27c84b1eb7eaf00c165231b971fe363ebb4cb4ecaf6f2b225e86cbbe91d780d5379a89f170a628f00", 0x65}, {&(0x7f0000002100)="c631ea71a64df28ef41840798fb4d8e8482470b8296f52358db03f105bf6d94cccaa45b6c9a0ea56989de9f39fa4bf1210cc", 0x32}, {&(0x7f0000002140)="2d38479c373dd751a2a722fb1ac6ff4965cc170d2d3736187a75d48343be3556a71214c2d27c7fd8e1485d191f875731863791b4d5376245025c10f8ef45b12068efc4708576b8ef04ebc8", 0x4b}, {&(0x7f00000021c0)="760d2fc54895817911c2baa3049dd16e6c2d15db0a5fc28b7b48fe4748365a7d534c6ea6bffe6091593754c13d53ef3f4fa47b6ec727ce1b04f9b2ab72dedc7f6e75536176cd9a6dcaeea9f56adc40c8bed568e1ec4743dfbe2b8c1494c269c0d258b77790d20c800bc44355c6671c2a645f813d42b3e4f362131349b0137d8a63b3b65f2f5aeedcf192042352e1e781101e0bec49029d547841862554ebc0e462de8000ad70792805184e1ab07cdf5b34dc232efc6559630d2ecaa9ab3086eabba97caf9b90276d2c368885146968a17f914f276ce6211da1a1b2e44bb70dae486045772d2df8554a2b882dc79801f0bf8bac4b36ee3f3748a5599dabb3e693d8a8a6787253123b18669633dd5f5687d39d1a2abd889d79a2d688a562f3a5e0e0547132d2e45934af59578295979de3a4c278eeb5034b8d4834d882e79b67b038d5449e3f8f6f63bbc6d247091cd044cf42608f7f1aa04a6426c4b9cf0c05e95aa079a0a1e4c418230cb794b4b8db223c01341c28c9c9d27f29f274b78998227e2613530bd66a73a1b0a4893720be77845d71bbd9b38bdd79268efabb74dc4b19de886ec85ef9283f9c9d8967c9afffb7de6231eb2c2079e96a3b69b1d05f4247e9a871f8f3570b89f69b8592c9a8943e34521cc7a6f3b76ef972bb4c4653d947cc84de1c84279bad55799b2c7028c5d8b7b27a05de6c09b04105d5fa72ddb7ba5f7502e4d3d833d7ed656bad772468df05e1ee15aa91ea8dbb0eb92ef82656d1386a3238eabfd3921c4c5d28a5b1db36886786f5a560d80d91a1b49bb41ff4152afa0aa38a3baed24a90e97bd7e119d1a1c4080fc5052753bfb29a7069af4651fe08a9240194b20d1ecac957a17a7117707c84ff64703f612154ffcb0f362f6eaba7f31b885a2209d4eb30c8a6c8e7c6fa95da7bdaf16f6d535c1767139f2decd8bfe889742055cb231bf9d7fc3d9b2082c075b60b3eb753ccb0314bd18a82576e56f304f8ac2b3e2dc002d1cefac4a1c826ea25dde6ba1e9c3f4b9910530c47f5938177b582e54a731dc49c33c763f753b9cee1b9d8a0dc337bcd86ed558aa358b860eb7e067122ff5bb651d9ce1294dd8e72683d37e561a196119b3462df115bb47d7f3c18bd21154123229799a5e82160d61859086174440198143654fa3b7c0095b3edfaab0496be694c9da5de7fc27631f8e2c283532be83b9c616bb9c17719375c22001e8eeaf390fac7f082e46c29c631c17b368995c42dbcfc825bc688a34e6858991f99b8a3e99768f3daf2e7995df76716a256e256d3cb305701bc0b98d56aea3dad36409b663437576f704d683e0229bf847c90ddeb06dce5983c9a2262597a2461c40a6065ea27f3c6838c8b7fbccdca2b5530a2778b69f079ebb41c31c19051886ac325776c5887d86ab9b06d340293fc0bd96dd839797fe14280c2812ddae1183c7abce39736ec0c69068aa38c0bf8f0dc5e680d86b01c16fb3c4e8765bf49c0dcfc2729da44c8a11463787b2372f486b793d18d6a7571e1716c007c5b3ff4b5b7eedf2d093cfb2cb2eef7057320f7aaec096bb9dc2a555f3ef4c45a04d0159971b99795b3c0c94bbea3652fe1ed0c8dda9da32188201dc2bb4f9e61b0f1940d53d5f3edd26ed7b8e42e0f98f4c931a7b13a6d3f9eb65c0805ecf13ce73215e9ede7cbd1aaad4928a28114a79a7012906de9db0ccfe37ea96d79f68d4096dccca34759348d804efd09b81e22c7c9ba8583190a2c75205662722b7fa70716efd4ff40606a1d5451b773808f970bb3ffbedcc7db8d8a0b8673b029a139e255585f1f27d245d477149f6402f5788c6b9234e4edac08b421b9447bbff98e9c3837361d9c603adb8175bedf222674644c7a685d1c47c0392e501096a8e4ef31a6583ef9d5586dc132d969342a3be13534dfd0e832bc661a5ec79f846a4ee2837a9219a948bfbc93aa3dea3ccd672c983bb6763b07ca32ca15a0dba77321e46bf9ab2ea31bc0c6b822c506e41c26b6bab8530951546e082326681235e4c3c386ee74353d70a4b9dd4395dccb7c1de91faab56915d523683216660ba0bcb870ca9b8ea17b6079d5d3c0666315963f284fbbcd6562687416310fdc1486ac07877b60e9533d2703a19468fb49490b89760f1eb946b756132c9b75550ec20c55f982496035ff782e0fc4e27bf6c01967a363a1dad5f0fc13d821ba0f513987654ff3b0cd573f4553962fa8e83dd0073eb65b67648c66bf14eba3ccfb6072fb53e804b5d4e42b8393b418c106bac9461619f2c5a2631767ae92e740131be9f7ac68bb174c1c4ba516539c076b30a60e0edaed7b6b6e771255456db0c039268b54ccece1fc92726231a57793b6b43e1fef4457607f62c174a92b3b2a033772e49881f6ae6e0af7308277441f531b012ce937e37d99613fa82980e433a2d4d18fd622b934432723ac6bd628fc6125ae06eb995dd629693f1e8101f5f18322b2b4f8f01ae4c8213b5555468408c8c0439544fb50ad079a8eaa66a157f17100353a4871a92408a72d8327bed9e49df890d6b4f06995dacd1eda84fdf3438ce870b7a6a83a3f6e7e1d4a31a0596fb7180a58a92c19ae3550704971c8b6860a5a694fae46cd4b3b64cdc72a3240f5836fe102925f9b0374b0ac07101ec09e35b7e46a7ff86f4b24c18beaac8309fce0781edf7038d34e4c300af7adca75564be7f0a09daa1225b2880bd84c31c7e36e9f5b4dffb818664959afba226bd3c8a34c5d230e20eaaf9e79381ae26b5d15933862aec5ceb5d67f573db4969dd60cbed7854f0f6db1769743a9fe65bd2b221ddfa138bc6e5e6fab7f2eeddf36ecc9d70898cfeb57930904cc84ffe43a23bbf8673ed86bb2a96ded1a76a95d786dec1bfda50658cbeac5e3440a326444e5edcd3c7c5323671b5f8e1d7d50eb5ad440ef3eb448477e8bf836552e97b058be59a7a27fafe0f56307a4d0e6916062b036843ec511df258c0302737773ea0530b1cf5366f2c6be658691f3bae0f4c5a79603467b37fb15a9fc397328da17d5003b95f6d04b0ee29a492015be9fc3ce3e194d19ff832e63e9a0a58c755d8edd725e931bee2e56f81277b119481fc4f0fdc243e09baf35036ded4b75dc426f3b2cd9836c93733d00e68c13b6e1e6accaac70317c300e1681e602f3cbfc530733a4413c65e69429fde91ce50f55fe44d36dec5b436af505a9505a021de1609357c9a27e1628881442b7136cc6412e2a206427f36b4cd75a61611777e54af821a297c0081c2a8e3d3c49832622ed34b3497788c19fcc5376dd9b5f86b2cae927145736659d449fe2a555b4617573b099a64a427c5956779ffad92c29e0263bd8e46a79f7c7d30a0d30d2949e901dde1542f7a2b2058dae636fe26d2ebf76e29fceaa448e931d302764aa83ca584eadd80a188c2405ae76f4492208c73d5fef3f1d3ef6315772a9b048121ff115d5e72544647db8fc6b9d7523434edb7ee0735104e5813224e22e0fd007e19df87cec602fda629067d7136bac4b0b4e9fa18e69b6c68ce9505ca047e9cf3232fdc2aa1d7d89ef282c05833f3c229ba5f0e8a2300bb6db8bb7916aad1d1099b4b1d804cb661f6cefdb3936a9fef2568da4e1249a8736f760551912a61038e06eb599e196f7ae56988e6b39fcefb2e1c7cf2052f2de6b956762d788c2d54d46deb5a0aa1f13dd2e3ffe6d2ff676ae5a81e67558eabd6242a9ba32c12a4867c7469f8984b446d186779cce2cd5f8f5b6d9a9c38223fa2fc4de2f59b1167fcf718bab10613c740f998342dc64aeb25de1d8f8f0ff069763bf2fa3b58e6c5750c7d9aecfbf51f054c234f66951ce3c4b14926989c0ec56f633d01eee325bdaaad541965fd539f89ae8c8ad5bde43b8cd4155c6d393c1616a705860b3e6f606f56c200d3e645ca7cf13a6e8d48b04318a74bea85a508890db1d0b175b5b7b51b3d3b4ee10ac922dcef9bc2767c66e1b0a5c0f90f4473ff83fa3d9834e77378f8b050c6e8a8dee46f8677491642f948c122bab6b08a1153a38ebbb7e229536e50b97f01cce64255fcac7d9d258dc32132f5064bf153301e8b65b4467868172ae891a20c214a0794fe555aef6928d238b60dfad9197aa264c06d9a3a12b0b691e7c1bd8c6dd76cb9b82f163aa83cf8fb1de55235694377593aa7537c7e2bf090467be574ca889a550d9df19851b5488468479a7ffe9a8a4bc694b8a07007782a1d1e9a4b0479e03e3f8a8395ecd52a23e48d894b778ffa4e43d287ce5de8343ee3b9799a473ac9edaee8e7606d7a72f180fbdaa7ffd7e829a9d016b189184d316507b8a948f8095ec0d931977b4d17fbf9f8f52956262b077ae001e9f55769776fda8548c7d54771a5ad00bb096b923829adaa4aefcf444b4d3e2b8d031ac1964bf45286e16261e9f2a6118c10262d15880b188d9bffe70dc3b567f6a3c05fa42ade4013dc3e0992155a6367e9d2f80640416be02e6af28af4746abc709389d5b6cce9447722da1d5a29f670fdb28fa1bff43ebf919d0553730e9533b3345a4dcf8bc0ac301b44b53c2e973a5f7d835b85ee8a4cda593470793839a4c46459df00dca1930849eee7543e0e85834d66f7757aa9267336b9833a8d6d89210e3d171b0d484a519b573b37dc16b584a8c36a0cf148f8aa3794402991d322b9443ff80dfe86b793f4f6ed65dd1f8d56a60c11e2ae3e513557cd68c1fdeb208a910ab2994e125b26a9c5b4b6077ae7a7d982f64b7536e27203eb5e18bb231be968cc019efbae7e312599b14c87aca8c5c35dda4d87dee83bf9eb6fabc3678731d7eb3852c35a09985512b3ed5f77de631ab21059ebc74f68503d8d9c52e2984f5d5bf0c6a1185498fd4f52116bcd70ff69dc4af86183a9ce88868dac05e1d8aa4120d06b3f060b95d3f2f1ffe09bcac186558d42c5d7c1ff7039c01ae0750fa266986bed27fabb96e1ee22d5c417a2cd96ad0fdcfba5bb0dbaaeaf44ee68213649df4eb93307070deff061a240c815b629f95afc6d42a19dd8f491d28b5884d1854919d5f2761371448ca1de2b3a24d801d8983fa86e85521e30cd821e7d9f94ced019208ce942cb25860cf35593d7f5b4c4ef40229989db20e809974dd5c8dfdc0866afb51f7e2d4be19a37001b90866c6a5cfd6993ae46195f3381534935c102f4c2e2063127e03558ac48dd6ad2d449c3d53147fca02fb36c9da3ff496d35dc8211fadf248f14afc1e33a9d0debf3e195859e60fbf823dd489c903ce8d09bb100184f5af8650c30728933bd9201fec756b8eb73cc91fb7cd1b6a767e74f9b212a705b82e9b40009024f1a7e486ee2aa7ce8bd59181926897cd29730708836576c53ccc6401cede7d808d93b6f65d3c5eb9f42e7e298a40333637047847b5a1067b8e6cd1982bcd28e20b079c5a7f264d0cef8603f506ca5b505ea17c00e9921d0d974e13b76cf310594fb90a400dcfbb64593c9b36c7984a8b09a50deb4d632cbdffc887ceb25325c2fe5adf36a7193461567f8adb9a5c18c0b3c1a22c4e4c664684b842137a33d06b510a0d09febcd14e7611057767fadae1aaa340de573df0c6d2343a32359f56812a51ee6e146b8c2dd8721c1a693000dea9e5db8e754cfe324714cef2d2dbd9e85143ce5be93f99b4da01e33246ef7a01e4c9b44c3d9da0fb98c457d54e71e30cf062f464a5a4d31746c22d242044d96aea20d0697cc3e9b3389c5adb11665eb8e4e54b17ff202a264b540701ea57475741ecb1409a7049656de48e3887c970533540c0245f", 0x1000}, {&(0x7f00000031c0)="a8ebe9f18f2f6a299012579781e9ad0cdf6e31bd6324ad88ac9f1ba9d953621bdd52aac49317de04a8363b1ea4aac4a7f88aad0c15c69e65b01527694decf8dc84d3f3a0ac419c43eab4e22c4efbaad1c07ee0c2efe32636a36663efad6bd6e9400ba097355e3fa88d39e30755ebbe645745a63229bf5ba91604e0c039a38ce5c8fccdd8e4441feff507ae7b6cd5f2f7292a69ffef2749a44eaa9fe3f53bf1ce09e14fb35467cf12fd85d62a6b188bc7d43d1461369c7a3e8fbb76e191d9dbf410188e5ad1843bbe4ce5f9c7c26dc6f2c5390b1f6f1d620c14bafe", 0xdb}, {&(0x7f00000032c0)="1b439a475bdc19e5f028bcb37354d30f22ae1cfadb58c4f17fda931a0cd12d10dbd81da9aeaeef55e4dbc9b3c7bad672c20094d78729f120535cd0759945c128b738e171efc326faf2d7fcb4a89f0f50189ee8425479a310976c985e2c995a0364b8d576b3374c48fcd569285ddc0a54688649556b1f6ed424a74a870e62539b089a58c473e78d93465ed31b2e64e7cb796e3853c3", 0x95}], 0x7, &(0x7f0000003400)=ANY=[@ANYBLOB="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"/448], 0x1c0}}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000100005ff00000000000000000000004aaf8bf99df793a8ea4a83a0456edddb3ab0d6c99d519a34a795093fe11eada964387ae8b4222a6e748aa3897bb0948665da14abf592a80bc4b9c3b1f3ece6cbe0cd583055d6acd7485f77b2778de01e1e9cfcbe845db8609b60d9ece1473e091928563a6de2a70c6b9b69a2681eb92bcd361a0fa7", @ANYRES32=0x0, @ANYBLOB="000000000122040028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="deba0b1d0420000008002900bb310600"], 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) connect$llc(r8, &(0x7f0000000480)={0x1a, 0x206, 0x5, 0x88, 0xa1, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1d, 0x5, 0x470, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000340)={r10, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0x12, 0x0, 0x4}, 0x9c) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1c, 0xffff, 0x8, 0x7, 0x104, r0, 0x0, '\x00', r3, r4, 0x4, 0xfffffffd}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r11, &(0x7f0000000a40)="74e64bc8b785272b9bc1f7b6f3d4cd5f0bc390436450c69714e2898256070a29da93eec30918c7ce53732a9f8e8c604509205c510a9e1099f269863834888700b073d0b6f89f9572a62291b767f78c0a8345fbded2adb63b59d1dc0434f159f708b562dbe49267935de7c35b6c8bcefca48765d901f9b5560d67f2135e41acca5012b64d6de482860ac4248d13f987c61e08cb827c92c2243b86c58f81eb0dc5ddc358adc4193b046fd10caadcd09215879e5bcf146e245f4aa45c25416349151247c72f0243206848d90541c4911ce81393"}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000f80)={@in6={{0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "8aac4f23c59b321a1738763829f40de6514263b9b0b7023fb22bdc015174daab26ae82d6f820dd0320e82bc93d0f02bbce4b9f19d856884d638b771a2941e8ac694cb91fd1796fd3f40eb831690c6382"}, 0xd8) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002000000000001190319d1893eeb35a850100ef17c1000c907801000000"], 0x0) kernel console output (not intermixed with test programs): sing attributes in process `syz.0.1823'. [ 392.931107][T13211] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1823'. [ 392.975253][T13218] Bluetooth: hci0: unsupported parameter 5135 [ 392.975533][T13218] Bluetooth: hci0: unsupported parameter 8192 [ 392.975860][T13218] Bluetooth: hci0: unsupported parameter 5135 [ 392.976112][T13218] Bluetooth: hci0: unsupported parameter 8192 [ 393.249032][T13201] bond7: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 393.249088][T13201] bond7: entered allmulticast mode [ 393.417519][T13201] bond8: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 393.426905][T13201] bond8: entered allmulticast mode [ 393.656229][T13215] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 394.280516][ T7516] udevd[7516]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 394.607902][T13255] netlink: 'syz.1.1833': attribute type 8 has an invalid length. [ 395.412336][T13272] gtp1: entered promiscuous mode [ 395.412384][T13272] gtp1: entered allmulticast mode [ 395.574373][T13278] gretap2: entered promiscuous mode [ 395.623223][T13278] batman_adv: batadv0: Adding interface: gretap2 [ 395.630121][T13278] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.658431][T13278] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 396.289160][T13295] __nla_validate_parse: 5 callbacks suppressed [ 396.289890][T13295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1844'. [ 396.636209][T13310] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 396.640359][T13309] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1849'. [ 396.702741][T13310] xt_hashlimit: size too large, truncated to 1048576 [ 397.049968][T13315] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1851'. [ 397.051870][T13315] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1851'. [ 397.560280][T13326] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 397.593611][T13326] bond10 (unregistering): Released all slaves [ 397.885345][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1857'. [ 398.055274][T13337] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 398.401912][T13357] netlink: 'syz.4.1860': attribute type 10 has an invalid length. [ 398.404459][T13356] netlink: 'syz.4.1860': attribute type 10 has an invalid length. [ 398.575705][T13361] xt_check_table_hooks: 23 callbacks suppressed [ 398.586343][T13361] x_tables: duplicate underflow at hook 2 [ 398.973222][T13357] team0: Device veth0_macvtap failed to register rx_handler [ 399.093044][T13356] team0: Device veth0_macvtap failed to register rx_handler [ 399.482930][T13382] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 399.896222][T13395] pim6reg: entered allmulticast mode [ 400.360517][T13412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.637329][T13427] sctp: [Deprecated]: syz.2.1876 (pid 13427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.637329][T13427] Use struct sctp_sack_info instead [ 400.670644][T13427] sctp: [Deprecated]: syz.2.1876 (pid 13427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.670644][T13427] Use struct sctp_sack_info instead [ 400.673660][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1877'. [ 400.716600][T13427] sctp: [Deprecated]: syz.2.1876 (pid 13427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.716600][T13427] Use struct sctp_sack_info instead [ 400.734121][T13430] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 400.734172][T13430] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1878'. [ 400.935688][T13436] openvswitch: netlink: VLAN attribute unexpected. [ 401.185930][T13436] macvlan0: entered promiscuous mode [ 401.535238][T13430] syzkaller0: entered promiscuous mode [ 401.535750][T13430] syzkaller0: entered allmulticast mode [ 401.599018][T13456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1882'. [ 401.712356][T13451] netlink: 'syz.3.1881': attribute type 1 has an invalid length. [ 401.782792][T13463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1882'. [ 406.023966][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1888'. [ 406.033615][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1888'. [ 406.630689][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1894'. [ 406.852787][T13513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1897'. [ 406.872981][T13508] bridge1: entered promiscuous mode [ 406.873027][T13508] bridge1: entered allmulticast mode [ 406.903208][T13508] team0: Port device bridge1 added [ 406.944986][T13508] bridge0: port 3(team0) entered blocking state [ 406.946836][T13508] bridge0: port 3(team0) entered disabled state [ 406.948039][T13508] team0: entered allmulticast mode [ 406.948108][T13508] team_slave_0: entered allmulticast mode [ 406.962619][T13508] team_slave_1: entered allmulticast mode [ 407.150746][T13508] team0: entered promiscuous mode [ 407.157414][T13508] team_slave_0: entered promiscuous mode [ 407.160739][T13508] team_slave_1: entered promiscuous mode [ 407.579259][T13537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1904'. [ 408.364379][T13559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1911'. [ 408.406389][T13559] xt_policy: output policy not valid in PREROUTING and INPUT [ 408.463157][T13564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1912'. [ 408.473984][T13564] netlink: 'syz.4.1912': attribute type 8 has an invalid length. [ 408.474023][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'. [ 408.505751][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1910'. [ 409.029687][T13564] bridge0: port 1(veth0) entered disabled state [ 409.821225][T13581] openvswitch: netlink: Message has 4 unknown bytes. [ 411.538160][T13617] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1922'. [ 411.780288][T13600] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 411.780882][T13600] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 411.805073][T13626] netlink: 'syz.2.1925': attribute type 2 has an invalid length. [ 411.816587][T13626] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1925'. [ 411.882882][T13626] : entered promiscuous mode [ 411.938444][T13600] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 411.938492][T13600] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 411.960974][T13626] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1925'. [ 412.026770][T13600] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 412.026860][T13600] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 412.113875][T13600] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 412.113920][T13600] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 413.242947][T13660] xt_CT: No such helper "netbios-ns" [ 413.343249][T13665] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1933'. [ 413.358151][T13665] 0ªX¹¦Dö»: entered promiscuous mode [ 413.358201][T13665] 0ªX¹¦Dö»: left allmulticast mode [ 413.576973][T13674] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 413.850108][T13683] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1938'. [ 413.886853][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1937'. [ 413.994882][T13688] netlink: 'syz.1.1939': attribute type 1 has an invalid length. [ 413.994926][T13688] netlink: 'syz.1.1939': attribute type 2 has an invalid length. [ 413.994959][T13688] netlink: 'syz.1.1939': attribute type 3 has an invalid length. [ 413.994991][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 414.711730][T13706] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1943'. [ 417.897508][ T1694] block nbd1: Possible stuck request ffff888026e25080: control (read@0,1024B). Runtime 60 seconds [ 417.897816][ T1694] block nbd1: Possible stuck request ffff888026e25240: control (read@1024,3072B). Runtime 60 seconds [ 420.835848][ T4985] udevd[4985]: worker [8796] /devices/virtual/block/nbd1 is taking a long time [ 421.213574][T13719] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 421.501817][T13779] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1951'. [ 421.533814][T13781] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 422.164587][T13805] wg0 speed is unknown, defaulting to 1000 [ 422.164927][T13805] wg0 speed is unknown, defaulting to 1000 [ 422.166326][T13805] wg0 speed is unknown, defaulting to 1000 [ 422.191729][T13805] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 422.221832][T13805] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 422.242429][T13805] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 422.329214][T13805] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 422.641313][T13805] wg0 speed is unknown, defaulting to 1000 [ 422.792987][T13805] wg0 speed is unknown, defaulting to 1000 [ 422.969457][T13805] wg0 speed is unknown, defaulting to 1000 [ 422.996091][T13805] wg0 speed is unknown, defaulting to 1000 [ 423.045437][T13805] wg0 speed is unknown, defaulting to 1000 [ 423.230590][T13793] netlink: 'syz.0.1956': attribute type 4 has an invalid length. [ 423.469595][T13834] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1966'. [ 423.485602][T13834] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 423.638984][T13841] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1967'. [ 423.808745][T13844] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1967'. [ 425.116148][T13891] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 425.809738][T13918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1981'. [ 425.810205][T13933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1981'. [ 425.953263][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'. [ 426.033810][T13938] macsec2: entered allmulticast mode [ 427.506328][T13971] openvswitch: netlink: Duplicate or invalid key (type 0). [ 428.016672][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'. [ 428.162924][T13999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2002'. [ 428.162982][T13999] openvswitch: netlink: Flow key attr not present in new flow. [ 428.207927][T13995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2000'. [ 428.217120][T13995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2000'. [ 428.561501][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2003'. [ 429.043317][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 429.043377][T14009] netlink: 50 bytes leftover after parsing attributes in process `syz.4.2005'. [ 429.043398][T14009] netlink: 50 bytes leftover after parsing attributes in process `syz.4.2005'. [ 429.065374][T14021] netlink: 'syz.0.2006': attribute type 12 has an invalid length. [ 429.603718][T14041] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2011'. [ 429.603774][T14041] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2011'. [ 430.130077][T14056] netlink: 'syz.1.2016': attribute type 4 has an invalid length. [ 430.295826][T14056] netlink: 'syz.1.2016': attribute type 1 has an invalid length. [ 430.305697][T14045] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 431.905311][T14110] syz_tun: left allmulticast mode [ 431.906364][T14110] dvmrp8: left allmulticast mode [ 432.144773][T14112] veth1_macvtap: left promiscuous mode [ 432.237116][T14121] netlink: 'syz.3.2030': attribute type 1 has an invalid length. [ 432.237182][T14121] netlink: 'syz.3.2030': attribute type 1 has an invalid length. [ 432.560526][T14124] netlink: 'syz.2.2032': attribute type 1 has an invalid length. [ 432.615177][T14124] netlink: 'syz.2.2032': attribute type 4 has an invalid length. [ 433.326090][T14148] netlink: 'syz.0.2038': attribute type 16 has an invalid length. [ 433.335325][T14148] netlink: 'syz.0.2038': attribute type 17 has an invalid length. [ 433.464422][T14147] tipc: Resetting bearer [ 433.544099][T14147] tipc: Resetting bearer [ 433.651881][T14147] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.848354][T14158] __nla_validate_parse: 5 callbacks suppressed [ 433.855020][T14158] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2042'. [ 433.954108][T14148] tunl0: left promiscuous mode [ 433.959636][T14161] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2040'. [ 434.047114][T14148] tipc: Resetting bearer [ 434.070154][T14148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.202794][T14148] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.202958][T14148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.301621][T14148] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 434.766233][T14173] netlink: 'syz.1.2045': attribute type 1 has an invalid length. [ 434.815986][T14172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2045'. [ 434.978439][T14185] xt_hl: Unknown TTL match mode: 255 [ 435.010658][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2047'. [ 435.798989][T14206] openvswitch: netlink: VXLAN extension message has 5413 unknown bytes. [ 435.903541][T14186] tipc: Enabled bearer , priority 11 [ 436.018690][T14210] ieee802154 phy0 wpan0: encryption failed: -22 [ 436.512847][T14225] netlink: 'syz.3.2056': attribute type 10 has an invalid length. [ 436.551063][T14220] 8021q: adding VLAN 0 to HW filter on device bond10 [ 436.567089][T14202] wg0 speed is unknown, defaulting to 1000 [ 437.403278][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 437.593088][T14261] syzkaller0: entered allmulticast mode [ 437.611463][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2064'. [ 438.044351][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2067'. [ 438.220895][T14275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2069'. [ 438.249052][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2069'. [ 438.297954][T14275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2069'. [ 438.400977][T14279] veth0: entered promiscuous mode [ 438.409583][T14279] veth0: left promiscuous mode [ 438.715424][T14294] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 438.747196][T14256] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 438.764199][T14287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 439.261183][T14307] __nla_validate_parse: 5 callbacks suppressed [ 439.261296][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 439.262053][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 439.351483][T14307] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2081'. [ 439.536382][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2080'. [ 439.704331][T14322] netlink: 'syz.2.2083': attribute type 16 has an invalid length. [ 439.704376][T14322] netlink: 'syz.2.2083': attribute type 17 has an invalid length. [ 439.714360][T14306] bridge0: port 3(team0) entered disabled state [ 439.762556][T14326] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2084'. [ 439.909563][T14306] team0 (unregistering): left allmulticast mode [ 439.909613][T14306] team_slave_0: left allmulticast mode [ 439.909657][T14306] team_slave_1: left allmulticast mode [ 439.909703][T14306] team0 (unregistering): left promiscuous mode [ 439.909722][T14306] team_slave_0: left promiscuous mode [ 439.909964][T14306] team_slave_1: left promiscuous mode [ 439.910482][T14306] bridge0: port 3(team0) entered disabled state [ 439.989150][T14306] smc: removing net device team0 with user defined pnetid SYZ2 [ 440.009872][T14306] team0 (unregistering): Port device team_slave_0 removed [ 440.037769][T14306] team0 (unregistering): Port device team_slave_1 removed [ 440.053265][T14306] team0 (unregistering): Port device bridge1 removed [ 440.092380][T14306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.126919][T14318] tipc: Resetting bearer [ 440.133365][T14318] tipc: Resetting bearer [ 440.193551][T14319] tipc: Resetting bearer [ 440.246065][T14322] tunl0: left promiscuous mode [ 440.261281][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.309133][T14322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.321606][T14322] tipc: Resetting bearer [ 440.328662][T14322] tipc: Resetting bearer [ 440.335218][T14322] tipc: Resetting bearer [ 440.347594][T14322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.393016][T14322] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 440.429228][T14321] lo speed is unknown, defaulting to 1000 [ 440.711247][T14321] lo speed is unknown, defaulting to 1000 [ 440.723002][T14321] lo speed is unknown, defaulting to 1000 [ 440.914116][T14341] IPVS: set_ctl: invalid protocol: 94 172.20.20.51:19999 [ 441.088360][T14343] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2089'. [ 441.814981][T14358] openvswitch: netlink: Missing key (keys=40, expected=100) [ 441.839472][T14360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2094'. [ 441.848162][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2094'. [ 441.848246][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2094'. [ 441.868567][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2095'. [ 441.940310][T14358] netlink: Invalid conntrack timeout [ 441.940969][T14358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.080895][T11097] lo speed is unknown, defaulting to 1000 [ 442.091087][T14321] infiniband syz1: set active [ 442.091127][T14321] infiniband syz1: added lo [ 442.142105][T14321] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 442.154223][T14321] infiniband syz1: Couldn't open port 1 [ 442.163567][T14321] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 442.163616][T14321] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 442.163669][T14321] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 442.315537][T14371] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 442.438508][T14321] RDS/IB: syz1: added [ 442.439923][T14321] smc: adding ib device syz1 with port count 1 [ 442.440179][T14321] smc: ib device syz1 port 1 has no pnetid [ 442.542345][T11097] lo speed is unknown, defaulting to 1000 [ 442.626276][T14321] lo speed is unknown, defaulting to 1000 [ 443.012317][T14395] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 444.231606][T14321] lo speed is unknown, defaulting to 1000 [ 444.739229][T14420] syz.3.2110 (14420) used greatest stack depth: 16648 bytes left [ 445.183677][T14439] syzkaller0: entered promiscuous mode [ 445.194274][T14439] syzkaller0: entered allmulticast mode [ 445.333433][T14437] syzkaller0: entered promiscuous mode [ 445.333478][T14437] syzkaller0: entered allmulticast mode [ 445.596009][T14321] lo speed is unknown, defaulting to 1000 [ 445.689769][T14449] ipt_ah: unknown flags 40 [ 445.694644][T14454] ipt_ah: unknown flags 40 [ 446.254675][T14471] __nla_validate_parse: 2 callbacks suppressed [ 446.256949][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2119'. [ 446.281364][T14469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2119'. [ 446.411479][T14485] xt_bpf: check failed: parse error [ 446.459120][T14487] xt_bpf: check failed: parse error [ 446.872684][T14321] lo speed is unknown, defaulting to 1000 [ 446.906239][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2126'. [ 446.925950][T14499] macvlan0: left promiscuous mode [ 446.943275][T14499] netlink: 'syz.1.2126': attribute type 1 has an invalid length. [ 446.953172][T14499] netlink: 'syz.1.2126': attribute type 2 has an invalid length. [ 446.995305][T14499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2126'. [ 447.122262][T14510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2129'. [ 447.296698][T14514] Bluetooth: hci0: unsupported parameter 5134 [ 447.296739][T14514] Bluetooth: hci0: unsupported parameter 8192 [ 447.296772][T14514] Bluetooth: hci0: unsupported parameter 5134 [ 447.296791][T14514] Bluetooth: hci0: unsupported parameter 8192 [ 447.716184][T14524] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 447.778610][T14524] bond10 (unregistering): Released all slaves [ 447.926062][T14529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2132'. [ 447.940415][ T1694] block nbd1: Possible stuck request ffff888026e25080: control (read@0,1024B). Runtime 90 seconds [ 447.940944][ T1694] block nbd1: Possible stuck request ffff888026e25240: control (read@1024,3072B). Runtime 90 seconds [ 448.311181][T14321] lo speed is unknown, defaulting to 1000 [ 448.850095][T14545] netlink: 193 bytes leftover after parsing attributes in process `syz.2.2136'. [ 449.793893][T14570] netlink: 'syz.2.2141': attribute type 30 has an invalid length. [ 450.367092][T14561] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.388899][T14561] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.389064][T14561] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 450.530111][T14599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2146'. [ 450.540320][T14599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2146'. [ 450.599182][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 451.417097][T14561] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.429774][T14561] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.429846][T14561] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 451.938431][T14561] bond0: (slave netdevsim1): Releasing backup interface [ 452.064572][T14561] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.080634][T14561] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.092585][T14561] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 452.176281][T14622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2150'. [ 452.176333][T14622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2150'. [ 452.216056][T14624] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 452.619578][T14641] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 452.647504][T14641] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 452.746751][T14634] netlink: 'syz.3.2153': attribute type 29 has an invalid length. [ 452.747020][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2153'. [ 452.872228][T14634] netlink: 'syz.3.2153': attribute type 29 has an invalid length. [ 452.872833][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2153'. [ 453.539137][ T62] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.539422][ T62] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 453.539754][ T62] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 453.781593][ T1013] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.782003][ T1013] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 453.782089][ T1013] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 453.788765][ T208] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.788872][ T208] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 453.788949][ T208] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 453.789240][ T208] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.789314][ T208] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 453.789380][ T208] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 453.886133][T14676] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2163'. [ 453.929869][ T62] tipc: Subscription rejected, illegal request [ 454.055709][T14683] netlink: 'syz.1.2165': attribute type 21 has an invalid length. [ 454.065499][T14683] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2165'. [ 454.107515][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'. [ 454.293619][T14681] bond9: entered promiscuous mode [ 454.293680][T14681] bond9: entered allmulticast mode [ 454.634359][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2172'. [ 455.044611][T14714] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2175'. [ 455.044666][T14714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2175'. [ 455.089736][ T31] audit: type=1107 audit(1788848612.271:5): pid=14713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='£^äÑ„dg|{怋‹J™I$aݤŒ‘Oò0i[Û“¢H‘BÂ7Áƒ@‰t8„FXmÅ–³¤K†~¢Ô½lÂ]ÿŠ*H«äxþ¥ÝA¦Ø{#ÚC©vP [ 455.089736][ T31] O´+7ûÊ10Ð9S)KÎѺ#' [ 455.271202][T14722] netlink: 'syz.4.2179': attribute type 33 has an invalid length. [ 455.418999][T14722] bond11: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 455.523092][T14722] bond11 (unregistering): Released all slaves [ 455.923785][T14744] tipc: Enabling of bearer rejected, already enabled [ 455.950029][T14726] syzkaller0: MTU too low for tipc bearer [ 455.958264][T14726] tipc: Disabling bearer [ 456.122065][T14749] netlink: 'syz.2.2183': attribute type 39 has an invalid length. [ 456.755388][T14758] sctp: [Deprecated]: syz.4.2185 (pid 14758) Use of int in max_burst socket option. [ 456.755388][T14758] Use struct sctp_assoc_value instead [ 457.375989][T14787] __nla_validate_parse: 7 callbacks suppressed [ 457.376067][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2191'. [ 457.466739][T14787] bond0 (unregistering): Released all slaves [ 457.570049][T14793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.968618][T14802] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2195'. [ 458.005897][T14798] Cannot find del_set index 32 as target [ 458.260320][T14815] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2200'. [ 458.373531][T14820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2202'. [ 458.464497][T14830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2202'. [ 458.783746][T14838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2203'. [ 458.848853][T14842] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2204'. [ 459.691673][T14855] ovs-system: entered promiscuous mode [ 460.417054][T14897] macvlan0: entered promiscuous mode [ 460.715501][T14910] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 461.627697][T14942] netlink: 'syz.0.2224': attribute type 11 has an invalid length. [ 462.130300][T14963] Bluetooth: hci0: unsupported parameter 5135 [ 462.130868][T14963] Bluetooth: hci0: unsupported parameter 8192 [ 462.130920][T14963] Bluetooth: hci0: unsupported parameter 5135 [ 462.130953][T14963] Bluetooth: hci0: unsupported parameter 8192 [ 462.490883][T14971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2230'. [ 462.746518][T14977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2232'. [ 462.746571][T14977] openvswitch: netlink: Flow key attr not present in new flow. [ 462.857429][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2233'. [ 462.857473][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2233'. [ 463.409266][T15004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2236'. [ 464.001237][T15020] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 464.001285][T15020] IPv6: NLM_F_CREATE should be set when creating new route [ 464.179394][T15021] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2241'. [ 464.424446][T15032] netlink: 'syz.3.2244': attribute type 23 has an invalid length. [ 465.350488][T15058] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 465.560902][T15071] netlink: 'syz.2.2257': attribute type 11 has an invalid length. [ 465.666799][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'. [ 465.763220][T15074] team0: Port device xfrm0 removed [ 466.091491][T12626] tipc: Resetting bearer [ 466.250446][T15087] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2262'. [ 466.250735][T15087] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2262'. [ 466.336408][T15089] netlink: 'syz.4.2263': attribute type 6 has an invalid length. [ 466.356397][T15089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 466.602665][T15095] netlink: 'syz.2.2266': attribute type 1 has an invalid length. [ 466.714682][T15099] netlink: 'syz.1.2268': attribute type 1 has an invalid length. [ 466.715248][T15099] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2268'. [ 466.738168][T15099] netlink: 'syz.1.2268': attribute type 1 has an invalid length. [ 466.741779][T15099] netlink: 'syz.1.2268': attribute type 3 has an invalid length. [ 466.741881][T15099] NCSI netlink: No device for ifindex 813332851 [ 467.273190][T15117] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 467.704094][T15132] __nla_validate_parse: 3 callbacks suppressed [ 467.704151][T15132] netlink: 340 bytes leftover after parsing attributes in process `syz.0.2278'. [ 468.334528][T15147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2283'. [ 468.341188][T15149] tc_dump_action: action bad kind [ 468.464659][T15154] netlink: 'syz.3.2284': attribute type 30 has an invalid length. [ 468.465256][T15154] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2284'. [ 468.832375][T15156] netlink: 'syz.4.2286': attribute type 1 has an invalid length. [ 468.832653][T15156] netlink: 'syz.4.2286': attribute type 268 has an invalid length. [ 468.832914][T15156] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2286'. [ 468.839762][T15166] netlink: 'syz.4.2286': attribute type 1 has an invalid length. [ 468.839846][T15166] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2286'. [ 468.922568][T15173] veth1_macvtap: left promiscuous mode [ 468.946813][T15173] team0: Device veth1_macvtap failed to register rx_handler [ 469.111549][T15167] bond5: entered promiscuous mode [ 469.119252][T15167] bond5: entered allmulticast mode [ 469.126403][T15167] 8021q: adding VLAN 0 to HW filter on device bond5 [ 469.220738][T15174] wg0 speed is unknown, defaulting to 1000 [ 469.241320][T15174] lo speed is unknown, defaulting to 1000 [ 469.595889][T15191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2294'. [ 470.315332][T15211] xt_l2tp: missing protocol rule (udp|l2tpip) [ 470.719619][T15214] validate_nla: 1 callbacks suppressed [ 470.719687][T15214] netlink: 'syz.2.2300': attribute type 1 has an invalid length. [ 471.557139][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'. [ 472.375323][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'. [ 472.459178][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'. [ 472.535560][T15264] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2316'. [ 472.996124][T15280] bond10: (slave vlan1): Device is not bonding slave [ 472.996595][T15280] bond10: option active_slave: invalid value (vlan1) [ 473.091108][T15280] bond10 (unregistering): Released all slaves [ 473.341962][T15294] __nla_validate_parse: 2 callbacks suppressed [ 473.342238][T15294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2322'. [ 474.363818][T15329] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 475.099492][T15354] tipc: Enabled bearer , priority 10 [ 475.321449][T15362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2340'. [ 475.654113][T15382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2347'. [ 475.654399][T15383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2347'. [ 475.655119][T15383] openvswitch: netlink: Message has 4 unknown bytes. [ 475.656319][T15382] openvswitch: netlink: Message has 4 unknown bytes. [ 475.818254][T12623] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.823100][T12626] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.823238][T12626] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.823324][T12626] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.961822][T15388] Bluetooth: hci0: unsupported parameter 5161 [ 475.961890][T15388] Bluetooth: hci0: unsupported parameter 8192 [ 475.961924][T15388] Bluetooth: hci0: unsupported parameter 5161 [ 475.961938][T15388] Bluetooth: hci0: unsupported parameter 8192 [ 476.109471][T15387] xt_TPROXY: Can be used only with -p tcp or -p udp [ 476.305416][T15400] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2352'. [ 476.305473][T15400] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2352'. [ 476.332517][T15399] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2350'. [ 476.392670][T15403] xt_hashlimit: size too large, truncated to 1048576 [ 477.105106][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2354'. [ 477.166529][T15430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2356'. [ 478.018126][ T1694] block nbd1: Possible stuck request ffff888026e25080: control (read@0,1024B). Runtime 120 seconds [ 478.018400][ T1694] block nbd1: Possible stuck request ffff888026e25240: control (read@1024,3072B). Runtime 120 seconds [ 478.248595][T15461] pim6reg: entered allmulticast mode [ 478.904889][T15493] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 479.539371][T15514] v: renamed from veth0_vlan (while UP) [ 479.606093][T15515] gtp3: entered promiscuous mode [ 479.606144][T15515] gtp3: entered allmulticast mode [ 479.686453][T15516] gre1: entered promiscuous mode [ 479.686517][T15516] gre1: entered allmulticast mode [ 480.438640][T15543] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2389'. [ 480.488899][T15544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2390'. [ 480.524220][T15546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2391'. [ 480.633345][T12625] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 480.643131][T12625] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 480.659114][T11082] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 480.781835][T15555] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 480.805987][T15555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2394'. [ 480.891001][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2393'. [ 480.949916][T15558] netlink: 'syz.1.2393': attribute type 24 has an invalid length. [ 480.976140][T11079] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 481.457718][T11082] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 481.731627][T15587] ip_tables: iptables: counters copy to user failed while replacing table [ 482.552368][T15622] syzkaller0: entered promiscuous mode [ 482.561183][T15622] syzkaller0: entered allmulticast mode [ 483.704340][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'. [ 483.716908][T15639] netlink: Conntrack attr has 8 unknown bytes [ 483.717190][T15639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.719310][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2416'. [ 484.024556][T15650] netlink: 'syz.0.2418': attribute type 1 has an invalid length. [ 484.465374][T15650] 8021q: adding VLAN 0 to HW filter on device bond6 [ 484.497998][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 484.701204][T15657] bond6: (slave geneve3): making interface the new active one [ 484.743049][T15669] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2423'. [ 484.771348][T15657] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 485.313233][T15678] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 485.405117][T15681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2427'. [ 485.441282][T15683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2428'. [ 486.151913][T15698] Bluetooth: hci0: unsupported parameter 5135 [ 486.151965][T15698] Bluetooth: hci0: unsupported parameter 8192 [ 486.151998][T15698] Bluetooth: hci0: unsupported parameter 5135 [ 486.152059][T15698] Bluetooth: hci0: unsupported parameter 8192 [ 486.284351][T15698] syzkaller0: entered promiscuous mode [ 486.284438][T15698] syzkaller0: entered allmulticast mode [ 486.612117][T15710] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.654811][T15710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2437'. [ 486.675170][T15710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2437'. [ 486.755581][T15716] netlink: 'syz.3.2438': attribute type 11 has an invalid length. [ 487.425979][T15737] netlink: 'syz.1.2446': attribute type 9 has an invalid length. [ 487.643918][T15750] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2449'. [ 487.733220][T15728] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 487.815563][T15728] bond0 (unregistering): Released all slaves [ 487.823888][T15753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.101902][T15752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2449'. [ 488.229476][T15755] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2450'. [ 488.352883][T15739] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.352960][T15739] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 488.352991][T15739] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 488.519942][T15757] netlink: 'syz.1.2451': attribute type 23 has an invalid length. [ 488.695897][T15739] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.695964][T15739] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 488.697225][T15739] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 488.894228][T15739] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.894298][T15739] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 488.894330][T15739] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 489.134998][T15739] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.135062][T15739] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 489.135117][T15739] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 489.360829][T15777] netlink: 'syz.1.2455': attribute type 11 has an invalid length. [ 489.778923][T12625] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.779207][T12625] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 489.779253][T12625] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 489.947662][ T37] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.947748][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 489.947796][ T37] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 490.082850][ T37] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.082924][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 490.082953][ T37] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 490.219530][ T37] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.219609][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 490.219638][ T37] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 490.399971][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2460'. [ 490.802833][T15807] netlink: 'syz.4.2463': attribute type 3 has an invalid length. [ 491.046381][T15813] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 491.569015][T15830] can: request_module (can-proto-3) failed. [ 491.621112][T15837] syzkaller1: entered promiscuous mode [ 491.621160][T15837] syzkaller1: entered allmulticast mode [ 491.766272][T15839] netlink: 'syz.1.2470': attribute type 1 has an invalid length. [ 491.973312][T15839] bond10: entered promiscuous mode [ 491.990923][T15839] 8021q: adding VLAN 0 to HW filter on device bond10 [ 492.097594][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 492.163328][T15845] 8021q: adding VLAN 0 to HW filter on device bond10 [ 492.174016][T15845] bond10: (slave xfrm2): The slave device specified does not support setting the MAC address [ 492.188574][T15845] bond10: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 492.217924][T15845] bond10: (slave xfrm2): making interface the new active one [ 492.217976][T15845] xfrm2: entered promiscuous mode [ 492.251148][T15845] xfrm2: left promiscuous mode [ 492.758111][T15863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2474'. [ 492.922258][T15868] FAULT_INJECTION: forcing a failure. [ 492.922258][T15868] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 492.922332][T15868] CPU: 1 UID: 0 PID: 15868 Comm: syz.4.2478 Not tainted syzkaller #0 PREEMPT(full) [ 492.922357][T15868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.922398][T15868] Call Trace: [ 492.922428][T15868] [ 492.922461][T15868] dump_stack_lvl+0xe8/0x150 [ 492.922541][T15868] should_fail_ex+0x410/0x560 [ 492.922744][T15868] _copy_from_iter+0x1d3/0x1660 [ 492.922835][T15868] ? __alloc_skb+0x27a/0x7a0 [ 492.922925][T15868] ? __alloc_skb+0x27a/0x7a0 [ 492.923018][T15868] ? __alloc_skb+0x27a/0x7a0 [ 492.923106][T15868] ? __pfx__copy_from_iter+0x10/0x10 [ 492.923177][T15868] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 492.923256][T15868] ? __alloc_skb+0x27a/0x7a0 [ 492.923344][T15868] ? __alloc_skb+0x27a/0x7a0 [ 492.923440][T15868] ? netlink_sendmsg+0x650/0xb40 [ 492.923511][T15868] ? skb_put+0x112/0x210 [ 492.923574][T15868] netlink_sendmsg+0x6c0/0xb40 [ 492.923686][T15868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.923773][T15868] ? apparmor_socket_sendmsg+0x98/0x360 [ 492.923871][T15868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.923952][T15868] sock_sendmsg_nosec+0x13a/0x180 [ 492.924045][T15868] ____sys_sendmsg+0x54e/0x850 [ 492.924122][T15868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.924220][T15868] ? import_iovec+0x73/0xa0 [ 492.924295][T15868] ___sys_sendmsg+0x2a5/0x360 [ 492.924348][T15868] ? __lock_acquire+0x6df/0x2e50 [ 492.924422][T15868] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.924574][T15868] ? __fget_files+0x2a/0x420 [ 492.924662][T15868] ? __fget_files+0x3a2/0x420 [ 492.924758][T15868] __x64_sys_sendmsg+0x1b1/0x290 [ 492.924827][T15868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.924947][T15868] do_syscall_64+0x166/0x520 [ 492.925032][T15868] ? trace_irq_disable+0x3b/0x140 [ 492.925085][T15868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.925133][T15868] ? clear_bhb_loop+0x70/0xc0 [ 492.925206][T15868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.925269][T15868] RIP: 0033:0x7f6bf0b9e159 [ 492.925338][T15868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.925399][T15868] RSP: 002b:00007f6bf1a5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.925463][T15868] RAX: ffffffffffffffda RBX: 00007f6bf0e25fa0 RCX: 00007f6bf0b9e159 [ 492.925509][T15868] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 492.925543][T15868] RBP: 00007f6bf1a5a090 R08: 0000000000000000 R09: 0000000000000000 [ 492.925584][T15868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.925618][T15868] R13: 00007f6bf0e26038 R14: 00007f6bf0e25fa0 R15: 00007ffe08cb74c8 [ 492.925725][T15868] [ 493.091682][T15870] netlink: 576 bytes leftover after parsing attributes in process `syz.2.2476'. [ 493.670976][T15886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2481'. [ 493.713482][T15891] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2484'. [ 493.737771][T15886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2481'. [ 493.772712][T15891] ip6gre1: entered promiscuous mode [ 493.772765][T15891] ip6gre1: entered allmulticast mode [ 494.061084][T15886] team0 (unregistering): Port device team_slave_0 removed [ 494.160393][T15886] team0 (unregistering): Port device team_slave_1 removed [ 494.199750][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2486'. [ 494.260176][T15885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.532277][T15905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2488'. [ 494.532334][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2488'. [ 494.532974][T15905] netlink: 'syz.0.2488': attribute type 14 has an invalid length. [ 494.533009][T15905] netlink: 'syz.0.2488': attribute type 13 has an invalid length. [ 494.587889][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2488'. [ 494.587939][T15909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2488'. [ 494.587967][T15909] netlink: 'syz.0.2488': attribute type 14 has an invalid length. [ 494.588019][T15909] netlink: 'syz.0.2488': attribute type 13 has an invalid length. [ 494.914957][T15919] netlink: 'syz.0.2493': attribute type 1 has an invalid length. [ 495.126052][T15919] 8021q: adding VLAN 0 to HW filter on device bond7 [ 495.406553][T15940] netlink: 'syz.0.2498': attribute type 21 has an invalid length. [ 495.932338][T15953] openvswitch: netlink: Invalid VLAN frame [ 496.032990][T15950] tipc: Resetting bearer [ 496.106988][T15950] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 496.200465][T15952] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 496.454144][T15960] team0: Device gtp2 is up. Set it down before adding it as a team port [ 496.882173][T15980] netlink: 'syz.4.2508': attribute type 1 has an invalid length. [ 497.041890][T15980] 8021q: adding VLAN 0 to HW filter on device bond11 [ 497.122498][T15987] netlink: 'syz.2.2509': attribute type 4 has an invalid length. [ 497.266841][T15995] bond11: (slave geneve4): making interface the new active one [ 497.326315][T15995] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 497.374111][T16001] ip_tables: iptables: counters copy to user failed while replacing table [ 497.449700][T16004] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20003 [ 497.599013][T16004] pim6reg1: entered promiscuous mode [ 497.604905][T16004] pim6reg1: entered allmulticast mode [ 497.840743][T16019] __nla_validate_parse: 5 callbacks suppressed [ 497.841014][T16019] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2519'. [ 497.844220][T16019] unsupported nlmsg_type 40 [ 498.353929][T16029] netlink: 516 bytes leftover after parsing attributes in process `syz.1.2521'. [ 498.363938][T16029] netlink: 'syz.1.2521': attribute type 21 has an invalid length. [ 498.363984][T16029] IPv6: NLM_F_CREATE should be specified when creating new route [ 498.484067][T16033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.880396][T16045] netlink: 'syz.1.2527': attribute type 1 has an invalid length. [ 499.078271][T16049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2528'. [ 499.110026][T16045] 8021q: adding VLAN 0 to HW filter on device bond11 [ 499.160193][T16050] bond11: (slave geneve4): making interface the new active one [ 499.174082][T16050] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 499.269366][T12625] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.269686][T12625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.269802][T12625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.283066][T12625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.333662][T16049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2528'. [ 499.339011][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2530'. [ 499.425775][T16054] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 499.440933][T16055] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 500.364095][T16094] netlink: 'syz.2.2542': attribute type 1 has an invalid length. [ 500.547155][T16094] 8021q: adding VLAN 0 to HW filter on device bond10 [ 500.565394][T16102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2543'. [ 500.761852][T16103] bond10: (slave geneve3): making interface the new active one [ 500.773768][T16103] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 501.320710][T16115] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2545'. [ 501.320758][T16115] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2545'. [ 501.515440][T16115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2545'. [ 501.529720][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'. [ 501.709315][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.792332][T16118] bond12: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 501.839055][T16118] bond12 (unregistering): Released all slaves [ 501.978751][T16142] netlink: 'syz.3.2551': attribute type 2 has an invalid length. [ 503.207497][T16168] netlink: 'syz.0.2554': attribute type 1 has an invalid length. [ 503.216888][T16168] __nla_validate_parse: 2 callbacks suppressed [ 503.216962][T16168] netlink: 756 bytes leftover after parsing attributes in process `syz.0.2554'. [ 503.640468][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2554'. [ 503.750831][T16178] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2558'. [ 503.980869][T16158] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 503.999799][T16158] netlink: 'syz.4.2553': attribute type 4 has an invalid length. [ 504.108626][T16158] netlink: 'syz.4.2553': attribute type 4 has an invalid length. [ 504.502912][T16197] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 505.134691][T16223] netlink: 'syz.4.2571': attribute type 32 has an invalid length. [ 505.706604][T16234] syzkaller0: entered promiscuous mode [ 505.706656][T16234] syzkaller0: entered allmulticast mode [ 505.933973][T16239] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 506.367135][T16261] netlink: 'syz.4.2581': attribute type 2 has an invalid length. [ 506.481655][T16252] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 506.642350][T16275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2583'. [ 506.818180][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 507.004023][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2586'. [ 507.813115][T16315] netlink: 'syz.4.2592': attribute type 1 has an invalid length. [ 507.821393][T16315] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.2592'. [ 508.120980][ T1694] block nbd1: Possible stuck request ffff888026e25080: control (read@0,1024B). Runtime 150 seconds [ 508.121588][ T1694] block nbd1: Possible stuck request ffff888026e25240: control (read@1024,3072B). Runtime 150 seconds [ 508.343125][T16328] trusted_key: syz.2.2597 sent an empty control message without MSG_MORE. [ 510.744233][T16336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2600'. [ 511.125255][T16356] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.2605'. [ 511.169929][T16356] netlink: 'syz.0.2605': attribute type 1 has an invalid length. [ 511.402806][T16367] netlink: 'syz.0.2605': attribute type 1 has an invalid length. [ 511.571084][T16375] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2610'. [ 511.771914][T16390] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2612'. [ 511.821214][T16394] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2612'. [ 511.892847][T16387] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2610'. [ 512.238595][T16406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2615'. [ 512.896996][T16434] SET target dimension over the limit! [ 512.951952][T16436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2622'. [ 512.963604][T16436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2622'. [ 512.982655][T16436] netlink: 'syz.4.2622': attribute type 1 has an invalid length. [ 513.556796][T16459] sctp: [Deprecated]: syz.0.2627 (pid 16459) Use of int in max_burst socket option. [ 513.556796][T16459] Use struct sctp_assoc_value instead [ 513.557964][T16444] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2624'. [ 514.497184][T16480] netlink: 'syz.1.2633': attribute type 3 has an invalid length. [ 515.134495][T16503] sctp: [Deprecated]: syz.0.2637 (pid 16503) Use of int in max_burst socket option deprecated. [ 515.134495][T16503] Use struct sctp_assoc_value instead [ 515.564536][T16514] erspan0: entered promiscuous mode [ 515.835870][T16526] __nla_validate_parse: 3 callbacks suppressed [ 515.835926][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2644'. [ 516.375943][T16533] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.376019][T16533] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.952470][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2652'. [ 516.992511][T16557] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 517.370959][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2654'. [ 517.429445][T16572] netlink: 'syz.3.2654': attribute type 16 has an invalid length. [ 518.111497][T16589] netlink: 'syz.2.2658': attribute type 1 has an invalid length. [ 518.155297][T16585] netlink: 'syz.1.2656': attribute type 64 has an invalid length. [ 518.259841][T16599] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2659'. [ 518.283631][T16599] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2659'. [ 518.322093][T16547] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.322384][T16547] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.778141][T16547] bond0: (slave netdevsim1): Releasing backup interface [ 518.856445][T16547] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 518.992202][T16612] netlink: 'syz.2.2660': attribute type 3 has an invalid length. [ 518.997058][T16547] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.997175][T16547] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.147992][T16617] 8021q: VLANs not supported on ip6tnl0 [ 519.166958][T16617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2663'. [ 519.565265][T16630] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2665'. [ 519.585825][T16630] openvswitch: netlink: Flow key attr not present in new flow. [ 519.723830][T16629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2666'. [ 519.831261][T16547] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.847929][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2666'. [ 519.860584][T16547] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.670491][T16666] netlink: 'syz.4.2670': attribute type 1 has an invalid length. [ 520.744092][ T1465] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.744163][ T1465] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.138022][ T1013] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.138079][ T1013] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.148668][ T1465] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.148830][ T1465] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.337441][ T1013] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.337734][ T1013] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.528257][T16678] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 522.412975][T16709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2682'. [ 522.631011][T16713] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 523.102150][T16729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2687'. [ 523.424191][T16745] netlink: 'syz.4.2690': attribute type 4 has an invalid length. [ 523.836528][T16750] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2691'. [ 524.453350][T16760] netlink: 'syz.1.2693': attribute type 1 has an invalid length. [ 524.575307][T16760] 8021q: adding VLAN 0 to HW filter on device bond12 [ 524.923535][T16783] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2699'. [ 525.575142][T16803] netlink: 'syz.0.2706': attribute type 10 has an invalid length. [ 525.658235][T16803] veth0_to_bond: entered promiscuous mode [ 525.665244][T16803] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 525.692230][T16802] sctp: [Deprecated]: syz.2.2707 (pid 16802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 525.692230][T16802] Use struct sctp_sack_info instead [ 525.817068][T16805] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2708'. [ 526.285699][T16824] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2714'. [ 526.285980][T16824] netlink: 'syz.4.2714': attribute type 9 has an invalid length. [ 526.445744][T16831] vlan0: entered promiscuous mode [ 526.451398][T16831] geneve1: entered promiscuous mode [ 526.463335][T16831] vlan0: entered allmulticast mode [ 526.463605][T16831] geneve1: entered allmulticast mode [ 526.635821][T16831] netlink: 'syz.1.2716': attribute type 39 has an invalid length. [ 526.739700][T16837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2718'. [ 526.846203][T16835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2717'. [ 527.442584][T16862] netlink: 'syz.0.2723': attribute type 1 has an invalid length. [ 527.442646][T16862] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2723'. [ 527.443533][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2723'. [ 527.583830][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'. [ 527.679481][T16869] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 528.236013][T16882] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 528.267619][T16882] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2728'. [ 528.418215][T16886] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2731'. [ 528.418267][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2731'. [ 528.670494][T16893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2733'. [ 528.708645][T16898] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2735'. [ 528.825403][T16896] netlink: 'syz.2.2733': attribute type 2 has an invalid length. [ 528.841524][T16898] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2735'. [ 529.155841][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2737'. [ 529.629742][T16922] IPv6: NLM_F_CREATE should be specified when creating new route [ 529.748728][T16924] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 529.748914][T16924] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 529.805919][T16928] nbd: must specify a size in bytes for the device [ 530.396245][T16946] netlink: 'syz.2.2747': attribute type 29 has an invalid length. [ 530.836502][T16960] vlan4: entered promiscuous mode [ 530.836567][T16960] bridge0: entered promiscuous mode [ 531.118296][T16970] netlink: 'syz.3.2755': attribute type 97 has an invalid length. [ 531.118355][T16970] netlink: 'syz.3.2755': attribute type 97 has an invalid length. [ 531.325328][T16970] netlink: 'syz.3.2755': attribute type 1 has an invalid length. [ 531.591405][T16982] netlink: 'syz.1.2758': attribute type 1 has an invalid length. [ 532.570257][T17017] __nla_validate_parse: 9 callbacks suppressed [ 532.573318][T17017] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2768'. [ 532.736236][T17013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2767'. [ 532.737041][T17011] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 533.169667][T17033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2771'. [ 533.183994][T17033] hsr_slave_0: left promiscuous mode [ 533.231522][T17033] hsr_slave_1: left promiscuous mode [ 533.238599][T17035] netlink: 'syz.0.2772': attribute type 39 has an invalid length. [ 533.379106][T17039] netlink: 'syz.3.2773': attribute type 2 has an invalid length. [ 533.734788][T17045] netlink: 'syz.1.2774': attribute type 1 has an invalid length. [ 533.763150][T17043] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.763217][T17043] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.910936][T17045] 8021q: adding VLAN 0 to HW filter on device bond13 [ 534.042402][T17043] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.044568][T17043] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.190341][T17056] netlink: 'syz.2.2778': attribute type 6 has an invalid length. [ 534.331287][T17043] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.331361][T17043] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.715117][T17043] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.715781][T17043] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.984643][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 535.075909][T17076] tipc: Failed to remove unknown binding: 66,0,0/43690:3821403181/3821403183 [ 535.076513][T17076] tipc: Failed to remove unknown binding: 66,0,0/43690:3821403181/3821403182 [ 535.119967][ T60] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.120592][ T60] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.126040][T17076] tipc: Failed to remove unknown binding: 66,0,0/43690:3821403181/3821403183 [ 535.126639][T17076] tipc: Failed to remove unknown binding: 66,0,0/43690:3821403181/3821403182 [ 535.212936][T12623] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.213600][T12623] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.223050][ T60] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.223085][ T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.236968][T17083] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2786'. [ 535.273597][ T60] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.274193][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.458508][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2786'. [ 535.525627][T17086] sctp: [Deprecated]: syz.4.2786 (pid 17086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 535.525627][T17086] Use struct sctp_sack_info instead [ 535.607082][T17093] netlink: 'syz.2.2787': attribute type 21 has an invalid length. [ 535.938099][T17106] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2789'. [ 536.164207][T17110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2792'. [ 536.494487][T17116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2793'. [ 536.677137][T17116] syzkaller0: entered promiscuous mode [ 536.677186][T17116] syzkaller0: entered allmulticast mode [ 536.749903][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2795'. [ 536.760302][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2797'. [ 537.215425][T17125] bond8: option xmit_hash_policy: invalid value (64) [ 537.276652][T17150] Bluetooth: ISO socket layer initialized [ 537.310333][T17125] bond8 (unregistering): Released all slaves [ 537.414398][T17136] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 537.423606][T17140] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 538.179560][ T1694] block nbd1: Possible stuck request ffff888026e25080: control (read@0,1024B). Runtime 180 seconds [ 538.179869][ T1694] block nbd1: Possible stuck request ffff888026e25240: control (read@1024,3072B). Runtime 180 seconds [ 538.641663][T17174] __nla_validate_parse: 1 callbacks suppressed [ 538.641740][T17174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2807'. [ 538.813117][T17187] netlink: 'syz.0.2810': attribute type 1 has an invalid length. [ 538.879290][T17184] bond12: entered promiscuous mode [ 538.881751][T17184] bond12: entered allmulticast mode [ 538.937505][T17192] nbd: must specify an index to disconnect [ 539.911171][T17218] IPv6: NLM_F_CREATE should be specified when creating new route [ 539.911311][T17218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2822'. [ 539.961564][T17218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2822'. [ 540.137943][T17230] tipc: New replicast peer: 255.255.255.255 [ 540.163074][T17230] tipc: Enabled bearer , priority 10 [ 540.329933][T17236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2826'. [ 540.479568][T17236] pim6reg: left allmulticast mode [ 541.169862][T17270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.597297][T17282] netlink: 'syz.0.2839': attribute type 21 has an invalid length. [ 541.597861][T17282] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2839'. [ 541.598128][T17282] netlink: 'syz.0.2839': attribute type 5 has an invalid length. [ 541.598170][T17282] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2839'. [ 541.749559][T17282] netlink: 'syz.0.2839': attribute type 2 has an invalid length. [ 542.006080][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2842'. [ 542.300459][T17302] tipc: New replicast peer: 172.20.20.187 [ 542.300758][T17302] tipc: Enabled bearer , priority 10 [ 542.354253][T17304] netlink: 'syz.0.2845': attribute type 2 has an invalid length. [ 542.364562][T17304] netlink: 'syz.0.2845': attribute type 2 has an invalid length. [ 542.568449][T17307] netlink: 'syz.4.2847': attribute type 9 has an invalid length. [ 542.716422][T17314] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 543.141738][T17327] tipc: Enabling of bearer rejected, failed to enable media [ 543.841149][T17339] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2858'. [ 544.022400][T17348] 8021q: VLANs not supported on ip6tnl0 [ 544.488924][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2861'. [ 544.503507][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2861'. [ 544.869030][T17377] ¾x9ÿ€: renamed from bridge_slave_0 (while UP) [ 544.969960][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2868'. [ 544.979473][T17389] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2868'. [ 545.092278][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2867'. [ 545.711841][T17405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2873'. [ 545.896872][T17405] 8021q: adding VLAN 0 to HW filter on device bond13 [ 546.039536][T17412] vlan3: entered promiscuous mode [ 546.042216][T17412] bond13: entered promiscuous mode [ 546.045993][T17412] vlan3: entered allmulticast mode [ 546.046059][T17412] bond13: entered allmulticast mode [ 546.082156][T17414] bond13: (slave gtp3): refused to change device type [ 546.382159][T17426] syz_tun: entered allmulticast mode [ 546.572966][T17440] netlink: 'syz.3.2882': attribute type 30 has an invalid length. [ 546.808714][T17450] netlink: 'syz.2.2885': attribute type 1 has an invalid length. [ 546.947524][T17459] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2888'. [ 547.106271][T17466] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2891'. [ 547.119964][T17459] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2888'. [ 547.146107][T17450] 8021q: adding VLAN 0 to HW filter on device bond11 [ 548.272324][T17491] siw: device registration error -23 [ 548.583917][T17504] netlink: 'syz.3.2902': attribute type 1 has an invalid length. [ 548.726882][T17504] 8021q: adding VLAN 0 to HW filter on device bond5 [ 549.228429][T17525] __nla_validate_parse: 5 callbacks suppressed [ 549.228707][T17525] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2906'. [ 549.228963][T17525] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2906'. [ 549.229220][T17525] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2906'. [ 549.545918][T17525] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 549.769757][T17531] veth1_to_bond: entered allmulticast mode [ 549.860315][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2908'. [ 550.045694][T17530] veth1_to_bond: left allmulticast mode [ 550.237939][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 550.250030][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 550.261618][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 550.304173][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 550.317789][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 550.445199][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 550.456060][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 550.466955][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 550.481326][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 550.507783][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 550.750497][T17556] set match dimension is over the limit! [ 550.899289][T17561] netlink: 'syz.1.2912': attribute type 4 has an invalid length. [ 551.339029][T17574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2916'. [ 551.555967][T17579] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 551.677293][T17584] netlink: 'syz.0.2918': attribute type 1 has an invalid length. [ 551.771519][T17586] netlink: 'syz.0.2918': attribute type 11 has an invalid length. [ 551.887113][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2918'. [ 551.997545][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 551.998608][T17598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2920'. [ 552.102028][T17579] syzkaller0: entered promiscuous mode [ 552.102651][T17579] syzkaller0: entered allmulticast mode [ 552.345865][T17584] bond8: entered promiscuous mode [ 552.354770][T17584] bond8: entered allmulticast mode [ 552.365101][T17584] 8021q: adding VLAN 0 to HW filter on device bond8 [ 552.578496][ T53] Bluetooth: hci5: command tx timeout [ 554.660243][ T53] Bluetooth: hci5: command tx timeout [ 556.023507][ T4985] udevd[4985]: worker [8796] /devices/virtual/block/nbd1 timeout; kill it [ 556.023626][ T4985] udevd[4985]: seq 16354 '/devices/virtual/block/nbd1' killed [ 556.756031][ T53] Bluetooth: hci5: command tx timeout [ 557.491805][T17610] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2922'. [ 557.492439][T17610] veth0_to_bond: default FDB implementation only supports local addresses [ 557.516056][T17621] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 557.584495][T17541] wg0 speed is unknown, defaulting to 1000 [ 557.624796][T17541] lo speed is unknown, defaulting to 1000 [ 557.731910][T17628] netlink: 'syz.0.2925': attribute type 1 has an invalid length. [ 558.129346][T17651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2928'. [ 558.141222][T17651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2928'. [ 558.817929][ T53] Bluetooth: hci5: command tx timeout [ 559.147639][T17670] netlink: 'syz.0.2931': attribute type 178 has an invalid length. [ 559.238580][T17675] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 559.342113][T17680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2934'. [ 559.544558][T17686] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2934'. [ 560.000307][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059506800: rx timeout, send abort [ 560.076647][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2936'. [ 560.413610][T17703] x_tables: duplicate underflow at hook 1 [ 560.950754][T17717] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 561.014322][T17718] bond12 (unregistering): Released all slaves [ 561.106493][T17541] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.134314][T17541] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.142803][T17541] bridge_slave_0: entered allmulticast mode [ 561.151656][T17541] bridge_slave_0: entered promiscuous mode [ 561.161877][T17541] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.169621][T17541] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.177441][T17541] bridge_slave_1: entered allmulticast mode [ 561.185802][T17541] bridge_slave_1: entered promiscuous mode [ 561.546933][T17541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.583898][T17541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.875711][T17541] team0: Port device team_slave_0 added [ 561.906281][T17541] team0: Port device team_slave_1 added [ 561.909994][T17745] netlink: 'syz.2.2948': attribute type 1 has an invalid length. [ 561.956854][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2948'. [ 562.059124][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2949'. [ 562.082524][T17745] bond12: entered promiscuous mode [ 562.090005][T17745] 8021q: adding VLAN 0 to HW filter on device bond12 [ 562.242340][T17541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.251951][T17541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.252018][T17541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.299597][T17541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.311241][T17541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.311923][T17541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.495770][T17541] hsr_slave_0: entered promiscuous mode [ 562.510847][T17541] hsr_slave_1: entered promiscuous mode [ 562.595902][T17764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2951'. [ 562.615008][T17764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2951'. [ 562.733828][T17774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 562.795281][T17769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2953'. [ 562.832958][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 562.873449][T17769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2953'. [ 563.016983][T17775] ipvlan2: entered allmulticast mode [ 563.023131][T17775] virt_wifi0: entered allmulticast mode [ 563.031143][T17775] batman_adv: batadv0: Adding interface: ipvlan2 [ 563.038519][T17775] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.038567][T17775] batman_adv: batadv0: Interface activated: ipvlan2 [ 563.084814][T17781] ipvlan3: entered allmulticast mode [ 563.096095][T17781] batman_adv: batadv0: Adding interface: ipvlan3 [ 563.104642][T17781] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.104827][T17781] batman_adv: The newly added mac address (32:e7:cd:e6:13:86) already exists on: ipvlan2 [ 563.104851][T17781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.104870][T17781] batman_adv: batadv0: Interface activated: ipvlan3 [ 563.501055][T17789] IPv6: NLM_F_CREATE should be specified when creating new route [ 563.923907][T17804] netlink: 'syz.2.2959': attribute type 83 has an invalid length. [ 564.348991][T17541] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.349052][T17541] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 564.386585][T17541] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.553594][T17815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.996972][T17826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2965'. [ 565.144161][T17832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2965'. [ 565.285768][T17541] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.312924][T17541] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 565.329567][T17541] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.454176][T17842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2969'. [ 565.763608][T17846] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2970'. [ 565.851398][T17541] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.851462][T17541] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 565.851514][T17541] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.920810][T17846] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 566.165530][T17541] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.178271][T17541] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 566.178351][T17541] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.299992][T17541] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 567.340368][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.350183][T17541] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 567.373180][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 567.383431][T17541] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 567.403971][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 567.424978][T17541] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 567.441205][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 568.021048][T17541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.036124][T17916] netlink: 'syz.1.2986': attribute type 4 has an invalid length. [ 568.036745][T17916] netlink: 'syz.1.2986': attribute type 7 has an invalid length. [ 568.112549][T17541] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.247355][T12623] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.247481][T12623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.309861][ T1694] block nbd1: Possible stuck request ffff888026e25080: control (read@0,1024B). Runtime 210 seconds [ 568.310490][ T1694] block nbd1: Possible stuck request ffff888026e25240: control (read@1024,3072B). Runtime 210 seconds [ 568.371825][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.371971][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.379049][T12624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.379112][T12624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.646877][T17921] __nla_validate_parse: 62 callbacks suppressed [ 568.646949][T17921] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2987'. [ 568.805580][T17935] netlink: 'syz.1.2990': attribute type 1 has an invalid length. [ 569.149985][T17938] bond13: entered promiscuous mode [ 569.207054][T17942] macvlan3: entered promiscuous mode [ 569.212981][T17942] macvlan3: entered allmulticast mode [ 569.222288][T17942] bond13: (slave macvlan3): Opening slave failed [ 569.393082][T17950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.651175][T17957] x_tables: duplicate underflow at hook 4 [ 569.710043][T17957] ip_tables: iptables: counters copy to user failed while replacing table [ 569.981152][T17971] tipc: Enabled bearer , priority 0 [ 569.995891][T17971] syzkaller0: entered promiscuous mode [ 570.005423][T17971] syzkaller0: entered allmulticast mode [ 570.190604][T17971] tipc: Resetting bearer [ 570.390333][T17970] tipc: Resetting bearer [ 570.441319][T17970] tipc: Disabling bearer [ 570.503720][T17978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.531797][T11079] lo speed is unknown, defaulting to 1000 [ 571.858882][T17541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.963820][T18015] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3008'. [ 571.998738][T18005] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3005'. [ 572.131788][T17541] veth0_vlan: entered promiscuous mode [ 572.281472][T17541] veth1_vlan: entered promiscuous mode [ 572.374345][T17541] veth0_macvtap: entered promiscuous mode [ 572.389489][T17541] veth1_macvtap: entered promiscuous mode [ 572.665331][T17541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.708183][T17541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.726364][T18031] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3012'. [ 572.726414][T18031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3012'. [ 572.726453][T18031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3012'. [ 572.726477][T18031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3012'. [ 572.932413][T12623] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.932493][T12623] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.932556][T12623] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.958359][ T208] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.198425][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3016'. [ 573.418333][T18046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'. [ 573.455236][T18045] team0: Cannot enslave team device to itself [ 573.458876][T18044] team0: Cannot enslave team device to itself [ 573.656069][T18057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3018'. [ 573.656143][T18057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3018'. [ 573.752931][T18046] macvtap1: entered promiscuous mode [ 573.758792][T18046] vlan0: entered promiscuous mode [ 573.764571][T18046] macvtap1: entered allmulticast mode [ 573.770875][T18046] vlan0: entered allmulticast mode [ 573.776433][T18046] veth0_vlan: entered allmulticast mode [ 573.899915][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.899985][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.230063][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3021'. [ 574.286511][T18067] bridge_slave_1: left allmulticast mode [ 574.294642][T18067] bridge_slave_1: left promiscuous mode [ 574.294945][T18067] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.362604][T18080] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3023'. [ 574.892767][T12624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.893054][T12624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.067183][T18082] syzkaller1: entered promiscuous mode [ 575.068005][T18082] syzkaller1: entered allmulticast mode [ 575.203798][T18095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3025'. [ 577.211984][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 577.229205][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 577.248714][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 577.260476][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 577.272742][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 578.245630][T18156] netlink: 'syz.0.3036': attribute type 3 has an invalid length. [ 578.912838][T18171] veth0_to_bond: entered promiscuous mode [ 578.919980][T18171] veth0_to_bond: entered allmulticast mode [ 579.271198][T18127] wg0 speed is unknown, defaulting to 1000 [ 579.286151][T18127] lo speed is unknown, defaulting to 1000 [ 579.379019][ T53] Bluetooth: hci4: command tx timeout [ 580.516018][T18205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3047'. [ 580.533367][T18205] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 580.696161][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3047'. [ 580.965441][T18205] bond14 (unregistering): Released all slaves [ 581.459229][ T53] Bluetooth: hci4: command tx timeout [ 581.724692][T18244] syzkaller0: entered promiscuous mode [ 581.724741][T18244] syzkaller0: entered allmulticast mode [ 582.002299][T18252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3055'. [ 582.002357][T18252] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3055'. [ 582.195220][T18255] netlink: get zone limit has 8 unknown bytes [ 582.207683][T18258] netlink: 'syz.3.3057': attribute type 30 has an invalid length. [ 582.260743][T18252] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3055'. [ 582.297893][ T7516] block nbd64: NBD_DISCONNECT [ 582.913613][T18272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3061'. [ 582.913906][T18272] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3061'. [ 582.983402][T13248] udevd[13248]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 583.024266][T18269] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 583.059296][T18272] gretap1: entered promiscuous mode [ 583.059343][T18272] gretap1: entered allmulticast mode [ 583.537498][ T53] Bluetooth: hci4: command tx timeout [ 583.744385][T18127] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.744998][T18127] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.759382][T18127] bridge_slave_0: entered allmulticast mode [ 583.786567][T18127] bridge_slave_0: entered promiscuous mode [ 583.816602][T18127] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.826111][T18127] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.826636][T18127] bridge_slave_1: entered allmulticast mode [ 583.863636][T18127] bridge_slave_1: entered promiscuous mode [ 584.141109][T18127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.164951][T18127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.230077][T18307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 584.282141][T18306] netlink: 'syz.4.3068': attribute type 1 has an invalid length. [ 584.308933][T18310] openvswitch: netlink: IP tunnel dst address not specified [ 584.374455][T18310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3069'. [ 584.415921][T18306] bond14: entered promiscuous mode [ 584.426897][T18306] 8021q: adding VLAN 0 to HW filter on device bond14 [ 584.552095][T18308] 8021q: adding VLAN 0 to HW filter on device bond14 [ 584.556053][T18308] bond14: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 584.556128][T18308] bond14: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 584.601096][T18308] bond14: (slave ip6gre2): making interface the new active one [ 584.611336][T18308] ip6gre2: entered promiscuous mode [ 584.647272][T18308] bond14: (slave ip6gre2): Enslaving as an active interface with an up link [ 584.654209][T18302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3067'. [ 584.654274][T18302] tipc: Invalid UDP bearer configuration [ 584.654393][T18302] tipc: Enabling of bearer rejected, failed to enable media [ 584.737357][T18127] team0: Port device team_slave_0 added [ 584.868461][T18127] team0: Port device team_slave_1 added [ 585.106949][T18127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.115956][T18127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.116027][T18127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.160105][T18127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.168287][T18127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.195130][T18127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.441395][T18346] netlink: 'syz.3.3074': attribute type 3 has an invalid length. [ 585.495758][T18127] hsr_slave_0: entered promiscuous mode [ 585.503062][T18127] hsr_slave_1: entered promiscuous mode [ 585.509903][T18127] debugfs: 'hsr0' already exists in 'hsr' [ 585.509928][T18127] Cannot create hsr debugfs directory [ 585.620102][ T53] Bluetooth: hci4: command tx timeout [ 585.640289][ T53] Bluetooth: unknown link type 231 [ 585.640368][ T53] Bluetooth: hci5: connection err: -111 [ 585.700373][T18352] netlink: 'syz.0.3076': attribute type 10 has an invalid length. [ 587.313896][T18127] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.321523][T18127] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 587.321629][T18127] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 587.501643][T18400] netlink: 'syz.0.3083': attribute type 9 has an invalid length. [ 587.549981][T18127] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.550627][T18127] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 587.550718][T18127] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 587.885591][T18127] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.885683][T18127] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 587.885743][T18127] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 588.071951][T18421] netlink: 'syz.0.3089': attribute type 4 has an invalid length. [ 588.081991][T18421] netlink: 'syz.0.3089': attribute type 4 has an invalid length. [ 588.094854][T18421] netlink: 'syz.0.3089': attribute type 4 has an invalid length. [ 588.106892][T18421] netlink: 'syz.0.3089': attribute type 4 has an invalid length. [ 588.117823][T18421] netlink: 'syz.0.3089': attribute type 4 has an invalid length. [ 588.120025][T18421] netlink: 'syz.0.3089': attribute type 4 has an invalid length. [ 588.407187][T18426] __nla_validate_parse: 1 callbacks suppressed [ 588.407762][T18426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3090'. [ 588.528849][T18428] tipc: Enabling of bearer rejected, failed to enable media [ 588.599329][T18127] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.608291][T18127] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 588.608352][T18127] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 589.109353][T18437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.508193][T18439] netlink: 'syz.1.3094': attribute type 11 has an invalid length. [ 589.508241][T18439] netlink: 'syz.1.3094': attribute type 11 has an invalid length. [ 589.508286][T18439] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3094'. [ 589.610440][T18127] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 589.640788][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 589.650738][T18127] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 589.714181][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 589.723888][T18127] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 589.749081][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 589.759287][T18127] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 589.779445][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 590.207820][T18464] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 590.363988][T18471] validate_nla: 12 callbacks suppressed [ 590.364056][T18471] netlink: 'syz.0.3100': attribute type 10 has an invalid length. [ 590.494216][T18476] netlink: 'syz.4.3101': attribute type 1 has an invalid length. [ 590.494502][T18476] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3101'. [ 590.494782][T18476] netlink: 'syz.4.3101': attribute type 1 has an invalid length. [ 590.724432][T18483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3103'. [ 590.738880][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3103'. [ 590.894552][T18483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3103'. [ 590.894597][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3103'. [ 591.450669][T18496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3107'. [ 591.536198][T18127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.769914][T18127] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.838829][ T1465] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.838959][ T1465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.952463][ T208] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.952597][ T208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.066995][T18508] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.067360][T18508] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 592.663037][T18523] siw: device registration error -23 [ 592.682781][T18525] xt_HMARK: spi-set and port-set can't be combined [ 593.126708][T18539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3120'. [ 593.126764][T18539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3120'. [ 593.773025][T18563] netlink: 'syz.1.3124': attribute type 1 has an invalid length. [ 593.821950][T18563] bond16: entered promiscuous mode [ 593.829261][T18563] 8021q: adding VLAN 0 to HW filter on device bond16 [ 593.857516][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 593.933385][T18565] bond16: (slave bridge15): making interface the new active one [ 593.946050][T18565] bridge15: entered promiscuous mode [ 593.963368][T18565] bond16: (slave bridge15): Enslaving as an active interface with an up link [ 594.466237][T18582] __nla_validate_parse: 3 callbacks suppressed [ 594.466295][T18582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3128'. [ 594.695780][T18127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.005319][T18595] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3131'. [ 595.088759][T18595] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3131'. [ 595.249708][T18127] veth0_vlan: entered promiscuous mode [ 595.292678][T18127] veth1_vlan: entered promiscuous mode [ 595.305066][T18595] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3131'. [ 595.472187][T18127] veth0_macvtap: entered promiscuous mode [ 595.500218][T18127] veth1_macvtap: entered promiscuous mode [ 595.541454][T18127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.665206][T18127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.849884][T18605] netlink: 'syz.4.3134': attribute type 3 has an invalid length. [ 595.860792][ T6737] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.863920][ T6737] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.866628][ T6737] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.887463][ T6737] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.083011][T18599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.458019][ T6737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.458572][ T6737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.497901][T18615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3137'. [ 596.571252][T18617] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3138'. [ 596.856449][T12626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.856499][T12626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.727820][T18646] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3141'. [ 598.080654][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3143'. [ 598.231636][T18661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3144'. [ 598.347081][ T1694] block nbd1: Possible stuck request ffff888026e25080: control (read@0,1024B). Runtime 240 seconds [ 598.347458][ T1694] block nbd1: Possible stuck request ffff888026e25240: control (read@1024,3072B). Runtime 240 seconds [ 598.752783][T18669] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3148'. [ 599.315223][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 599.335153][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 599.348036][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 599.368525][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 599.389136][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 599.713073][T18679] veth9: entered allmulticast mode [ 599.782594][T18686] veth11: entered allmulticast mode [ 600.713223][T12625] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.244030][T18735] tipc: Resetting bearer [ 601.618307][ T5628] Bluetooth: hci2: command tx timeout [ 601.704124][T12625] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.404769][T12625] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.706067][T12625] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.808127][T18752] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.3159'. [ 602.822030][T18775] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.3159'. [ 602.822186][T18775] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 602.984191][T18775] 0ªX¹¦Dö»: entered allmulticast mode [ 603.000249][T18750] wg0 speed is unknown, defaulting to 1000 [ 603.090124][T18680] wg0 speed is unknown, defaulting to 1000 [ 603.130247][T18752] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 603.211441][T18750] lo speed is unknown, defaulting to 1000 [ 603.499478][T18777] bond3: invalid ARP target 0.0.0.0 specified for addition [ 603.508501][T18783] xt_IDLETIMER: label is empty or not nul-terminated [ 603.528742][T18777] bond3: option arp_ip_target: invalid value (0) [ 603.551946][T18777] bond3 (unregistering): Released all slaves [ 603.708543][ T5628] Bluetooth: hci2: command tx timeout [ 603.794948][T12624] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 603.806451][T12624] bond0: (slave veth0_to_bond): link status definitely down, disabling slave [ 603.879094][T18778] bridge1: entered promiscuous mode [ 603.884621][T18778] bridge1: entered allmulticast mode [ 604.373705][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3168'. [ 604.849186][T12625] veth0: left allmulticast mode [ 604.850347][T12625] veth0: left promiscuous mode [ 604.887076][T12625] bridge0: port 1(veth0) entered disabled state [ 605.590103][T18833] netlink: 'syz.1.3177': attribute type 1 has an invalid length. [ 605.778301][ T5628] Bluetooth: hci2: command tx timeout [ 606.388725][T12625] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 606.402326][T12625] ip6gre1 (unregistering): left promiscuous mode [ 606.444415][T12625] bond9 (unregistering): (slave ip6gretap1): Releasing active interface [ 606.464129][T12625] bond14 (unregistering): (slave ip6gre2): Releasing backup interface [ 606.473915][T12625] ip6gre2 (unregistering): left promiscuous mode [ 606.662580][T12625] bond7 (unregistering): (slave ipip1): Releasing backup interface [ 606.673283][T12625] ipip1 (unregistering): left promiscuous mode [ 606.735906][T12625] bond11 (unregistering): (slave geneve4): Releasing active interface [ 606.762207][T12625] bond8 (unregistering): (slave geneve2): Releasing active interface [ 606.903373][T12625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.922531][T12625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.934423][T12625] bond0 (unregistering): Released all slaves [ 606.949272][T12625] bond1 (unregistering): Released all slaves [ 606.971382][T12625] bond2 (unregistering): Released all slaves [ 607.003459][T12625] bond3 (unregistering): Released all slaves [ 607.026479][T12625] bond4 (unregistering): Released all slaves [ 607.054419][T12625] bond5 (unregistering): Released all slaves [ 607.078317][T12625] bond6 (unregistering): Released all slaves [ 607.101679][T12625] bond7 (unregistering): Released all slaves [ 607.152665][T12625] bond8 (unregistering): Released all slaves [ 607.176110][T12625] bond9 (unregistering): Released all slaves [ 607.212249][T12625] bond10 (unregistering): Released all slaves [ 607.243245][T12625] bond11 (unregistering): Released all slaves [ 607.270497][T12625] bond12 (unregistering): Released all slaves [ 607.329228][T12625] bond13 (unregistering): Released all slaves [ 607.353885][T12625] bond14 (unregistering): Released all slaves [ 607.434818][T18846] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 607.456376][T18680] lo speed is unknown, defaulting to 1000 [ 607.464757][T18833] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 607.652403][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 607.693301][T11086] wg0 speed is unknown, defaulting to 1000 [ 607.721418][T11086] syz0: Port: 1 Link DOWN [ 607.858776][ T5628] Bluetooth: hci2: command tx timeout [ 607.952339][T12625] : left promiscuous mode [ 608.385364][T18869] netlink: 'syz.1.3182': attribute type 1 has an invalid length. [ 608.385407][T18869] netlink: 'syz.1.3182': attribute type 4 has an invalid length. [ 608.385440][T18869] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3182'. [ 608.607046][T12625] tipc: Disabling bearer [ 608.608384][T12625] tipc: Disabling bearer [ 608.653376][T12625] tipc: Left network mode [ 608.875730][T18885] ip_tables: iptables: counters copy to user failed while replacing table [ 609.211555][T18897] syzkaller1: entered promiscuous mode [ 609.211603][T18897] syzkaller1: entered allmulticast mode [ 610.362589][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 610.859248][T18918] bond1 (unregistering): Released all slaves [ 611.156594][T18680] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.156755][T18680] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.156977][T18680] bridge_slave_0: entered allmulticast mode [ 611.183610][T18680] bridge_slave_0: entered promiscuous mode [ 611.195483][T18680] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.203216][T18680] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.211366][T18680] bridge_slave_1: entered allmulticast mode [ 611.222534][T18680] bridge_slave_1: entered promiscuous mode [ 611.343676][T18680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.377107][T18680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.513248][T18877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.587451][T18893] netlink: 'syz.3.3185': attribute type 23 has an invalid length. [ 611.638862][T18885] netlink: 'syz.1.3184': attribute type 3 has an invalid length. [ 611.639151][T18885] netlink: 'syz.1.3184': attribute type 1 has an invalid length. [ 611.639413][T18885] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3184'. [ 611.820846][T18680] team0: Port device team_slave_0 added [ 611.876061][T18680] team0: Port device team_slave_1 added [ 612.071143][T18937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3190'. [ 612.226639][T18937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3190'. [ 612.233335][T18680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.233397][T18680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.233473][T18680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.442722][T18940] ip_tables: iptables: counters copy to user failed while replacing table [ 612.697136][T18680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.697247][T18680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.702549][T18680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.713465][T18928] tun0: tun_chr_ioctl cmd 1074025675 [ 612.713540][T18928] tun0: persist enabled [ 612.863269][T18956] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3193'. [ 614.113549][T18680] hsr_slave_0: entered promiscuous mode [ 614.136107][T18680] hsr_slave_1: entered promiscuous mode [ 614.176967][T18680] debugfs: 'hsr0' already exists in 'hsr' [ 614.177419][T18680] Cannot create hsr debugfs directory [ 616.294873][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 616.409431][T19029] netlink: 'syz.2.3205': attribute type 4 has an invalid length. [ 616.450272][T12625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.468804][T12625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.477138][T19034] netlink: 'syz.2.3205': attribute type 4 has an invalid length. [ 616.491436][T12625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.501693][T12625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.533111][T12625] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 616.540528][T12625] batman_adv: batadv0: Removing interface: ipvlan2 [ 616.559368][T12625] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 616.568505][T12625] batman_adv: batadv0: Removing interface: ipvlan3 [ 616.619118][T12625] veth1_macvtap: left promiscuous mode [ 616.619275][T12625] veth1_vlan: left promiscuous mode [ 616.631499][T12625] veth0_vlan: left promiscuous mode [ 616.645668][T19037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3207'. [ 617.577298][ T37] smbdirect: ib_dev[syz0] removed [ 617.875856][T19046] xt_recent: Unsupported userspace flags (000000b1) [ 618.018567][T19049] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3211'. [ 619.134433][T19083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 619.230755][T19085] netlink: 'syz.1.3217': attribute type 1 has an invalid length. [ 619.350471][T12625] IPVS: stop unused estimator thread 0... [ 619.782900][T19099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3219'. [ 620.629091][T19121] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.3226'. [ 621.153678][T19137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3232'. [ 621.171569][T19136] sock: sock_set_timeout: `syz.0.3231' (pid 19136) tries to set negative timeout [ 621.743736][T18680] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 621.772460][T18680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 621.776776][T18680] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 621.815887][T18680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 621.866521][T18680] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 621.907068][T18680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 621.921055][T18680] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 622.007978][T18680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 623.085877][T19194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3241'. [ 623.121089][T18680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.279978][T18680] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.355416][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.355560][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.470971][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.471115][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.533857][T19207] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3245'. [ 624.334670][T19226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3247'. [ 624.526355][T19241] raw_sendmsg: syz.0.3248 forgot to set AF_INET. Fix it! [ 625.498364][T19260] bridge_slave_0: left allmulticast mode [ 625.498413][T19260] bridge_slave_0: left promiscuous mode [ 625.498737][T19260] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.590334][T19260] bridge_slave_1: left allmulticast mode [ 625.604348][T19260] bridge_slave_1: left promiscuous mode [ 625.604687][T19260] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.737543][T19260] bond0: (slave bond_slave_0): Releasing backup interface [ 625.879275][T19260] bond0: (slave bond_slave_1): Releasing backup interface [ 625.916677][T19260] team0: Port device team_slave_0 removed [ 625.962247][T19260] team0: Port device team_slave_1 removed [ 625.987469][T19260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.988899][T19260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.026714][T19260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.035685][T19260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.072470][T19260] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 626.151365][T19263] team0: Port device xfrm0 added [ 626.160082][T19266] tipc: Started in network mode [ 626.160114][T19266] tipc: Node identity 867ee8aa5cd4, cluster identity 4711 [ 626.160400][T19266] tipc: Enabled bearer , priority 0 [ 626.220453][T19290] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3257'. [ 627.168322][T11086] tipc: Node number set to 3668633770 [ 627.570021][T18680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.025160][T19340] ip_tables: iptables: counters copy to user failed while replacing table [ 628.421534][ T1694] block nbd1: Possible stuck request ffff888026e25080: control (read@0,1024B). Runtime 270 seconds [ 628.421838][ T1694] block nbd1: Possible stuck request ffff888026e25240: control (read@1024,3072B). Runtime 270 seconds [ 629.389218][T18680] veth0_vlan: entered promiscuous mode [ 629.446156][T18680] veth1_vlan: entered promiscuous mode [ 629.578250][T18680] veth0_macvtap: entered promiscuous mode [ 629.586656][T19383] netlink: Invalid conntrack timeout [ 629.594374][T19383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.670726][T19395] netlink: Invalid conntrack timeout [ 629.674937][T18680] veth1_macvtap: entered promiscuous mode [ 629.683825][T19395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.745793][T19389] €Â: renamed from bridge_slave_0 (while UP) [ 629.943870][T18680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.985570][T18680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.096102][T19402] netlink: 'syz.3.3283': attribute type 5 has an invalid length. [ 630.116997][T19405] netlink: 'syz.1.3282': attribute type 1 has an invalid length. [ 630.214332][T19413] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 630.324251][T19410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3282'. [ 631.000415][T12621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.000709][T12621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.000786][T12621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.000832][T12621] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.028879][T19452] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 632.388717][T19454] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 632.426993][T19454] bond3: (slave lo): Enslaving as an active interface with an up link [ 632.441002][T19454] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 632.466602][ T1465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.467320][ T1465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.626284][T19469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.896737][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.898545][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.712949][T19501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3299'. [ 633.727401][T19499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3298'. [ 633.727662][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3298'. [ 633.793495][T19507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3299'. [ 634.207684][T19501] macvtap1: entered promiscuous mode [ 634.207729][T19501] vlan0: entered promiscuous mode [ 634.208195][T19501] macvtap1: entered allmulticast mode [ 634.208217][T19501] vlan0: entered allmulticast mode [ 634.208235][T19501] veth0_vlan: entered allmulticast mode [ 634.317487][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 634.334734][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 634.360048][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 634.372328][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 634.382598][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 634.744044][T19507] macvtap2: entered promiscuous mode [ 634.755278][T19507] macvtap2: entered allmulticast mode [ 634.980886][ T5615] tipc: Resetting bearer [ 635.241894][ T5615] tipc: Disabling bearer [ 635.314225][T19535] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3303'. [ 635.654280][ T208] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.659545][ T208] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.280693][ T208] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.329662][ T208] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.417397][ T5628] Bluetooth: hci3: command tx timeout [ 636.913086][T19568] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 637.054259][T19568] bond1 (unregistering): Released all slaves [ 637.175040][ T208] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.185550][ T208] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.619662][T19594] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3314'. [ 637.740441][ T208] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.752614][ T208] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.837800][T19513] lo speed is unknown, defaulting to 1000 [ 638.497423][ T5628] Bluetooth: hci3: command tx timeout [ 640.248993][ T5280] veth0_vlan: left promiscuous mode [ 640.528378][T11086] veth0_vlan: entered promiscuous mode [ 640.578393][ T5628] Bluetooth: hci3: command tx timeout [ 640.632554][T19662] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3324'. [ 640.721938][T19664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3324'. [ 640.879863][T19659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3323'. [ 640.892755][T19667] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3325'. [ 640.893405][T19667] netlink: 'syz.1.3325': attribute type 9 has an invalid length. [ 641.000329][T19670] netlink: 'syz.3.3324': attribute type 10 has an invalid length. [ 641.000376][T19670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3324'. [ 641.144931][T19675] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3326'. [ 641.233156][T19670] dummy0: entered promiscuous mode [ 641.260986][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3327'. [ 641.348982][ T208] pimreg: left allmulticast mode [ 642.346891][ T208] batman_adv: batadv0: Removing interface: gretap2 [ 642.465784][ T208] bond6 (unregistering): (slave geneve3): Releasing active interface [ 642.657320][ T5628] Bluetooth: hci3: command tx timeout [ 642.822723][ T208] bond1 (unregistering): (slave vlan2): Releasing active interface [ 642.842099][ T208] bond0 (unregistering): left promiscuous mode [ 642.849139][ T208] bond_slave_0: left promiscuous mode [ 642.849427][ T208] bond_slave_1: left promiscuous mode [ 642.849651][ T208] veth0_to_bond: left promiscuous mode [ 642.871032][ T208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.884926][ T208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.900830][ T208] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 642.915552][ T208] bond0 (unregistering): Released all slaves [ 642.931240][ T208] bond1 (unregistering): Released all slaves [ 642.953381][ T208] bond2 (unregistering): Released all slaves [ 642.984775][ T208] bond3 (unregistering): Released all slaves [ 643.006755][ T208] bond4 (unregistering): Released all slaves [ 643.041447][ T208] bond5 (unregistering): Released all slaves [ 643.084110][ T208] bond6 (unregistering): Released all slaves [ 643.106933][ T208] bond7 (unregistering): Released all slaves [ 643.136667][ T208] bond8 (unregistering): Released all slaves [ 643.258778][T19678] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 643.302197][T19678] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3327'. [ 643.312985][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 643.549853][ T208] tipc: Disabling bearer [ 643.550007][ T208] tipc: Disabling bearer [ 643.550149][ T208] tipc: Left network mode [ 643.941518][ T208] IPVS: stopping master sync thread 18846 ... [ 644.225331][T19682] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 644.225384][T19682] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 644.786546][T19682] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 644.866226][T19682] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 645.259048][T19682] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 645.265221][T19682] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 645.400801][T19731] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 645.416997][T19731] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3335'. [ 645.455249][T19682] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 645.459128][T19682] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 645.485133][T19733] ip_tables: iptables: counters copy to user failed while replacing table [ 645.551569][T19682] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 645.563566][T19682] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 645.572055][T19682] CPU: 0 UID: 0 PID: 19682 Comm: syz.4.3327 Not tainted syzkaller #0 PREEMPT(full) [ 645.581480][T19682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 645.591756][T19682] RIP: 0010:klist_remove+0x156/0x340 [ 645.597351][T19682] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd db 5c f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be db 5c f6 49 8b 44 24 58 48 89 44 24 08 [ 645.616989][T19682] RSP: 0018:ffffc90005aff820 EFLAGS: 00010202 [ 645.623182][T19682] RAX: 000000000000000b RBX: ffff888026df1f40 RCX: ffffffff9a9db501 [ 645.631189][T19682] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 645.639456][T19682] RBP: ffffc90005aff920 R08: ffffffff905f94a3 R09: 1ffffffff20bf294 [ 645.647457][T19682] R10: dffffc0000000000 R11: fffffbfff20bf295 R12: 0000000000000000 [ 645.655598][T19682] R13: 1ffff1100b2a5c0c R14: ffff88805952e060 R15: dffffc0000000000 [ 645.663598][T19682] FS: 00007f8621c566c0(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 645.672555][T19682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 645.679155][T19682] CR2: 00007f9f60443a10 CR3: 0000000079872000 CR4: 00000000003526f0 [ 645.687245][T19682] Call Trace: [ 645.690555][T19682] [ 645.693504][T19682] ? __pfx_klist_remove+0x10/0x10 [ 645.698580][T19682] ? kobject_move+0x5e2/0x720 [ 645.703295][T19682] ? __pfx_kobject_move+0x10/0x10 [ 645.708378][T19682] ? do_raw_spin_unlock+0xf5/0x200 [ 645.713533][T19682] ? get_device_parent+0x366/0x3a0 [ 645.718692][T19682] device_move+0x18e/0x720 [ 645.723140][T19682] hci_conn_del_sysfs+0xb8/0x1a0 [ 645.728117][T19682] hci_conn_del+0xc3d/0x1200 [ 645.732734][T19682] ? __pfx_iso_disconn_cfm+0x10/0x10 [ 645.738163][T19682] hci_conn_hash_flush+0x189/0x260 [ 645.743399][T19682] hci_dev_close_sync+0x7fc/0x10c0 [ 645.748535][T19682] ? __pfx___mutex_lock+0x10/0x10 [ 645.753593][T19682] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 645.759163][T19682] ? do_raw_spin_lock+0x12b/0x2f0 [ 645.764225][T19682] hci_dev_do_close+0x30/0xc0 [ 645.768942][T19682] hci_rfkill_set_block+0x1f4/0x290 [ 645.774278][T19682] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 645.780204][T19682] rfkill_set_block+0x19f/0x4d0 [ 645.785115][T19682] rfkill_fop_write+0x43b/0x560 [ 645.790003][T19682] ? common_file_perm+0x20e/0x2b0 [ 645.795055][T19682] ? __pfx_rfkill_fop_write+0x10/0x10 [ 645.800456][T19682] ? security_file_permission+0x60/0x260 [ 645.806119][T19682] ? rw_verify_area+0x203/0x4c0 [ 645.811025][T19682] ? __pfx_rfkill_fop_write+0x10/0x10 [ 645.816467][T19682] vfs_write+0x296/0xba0 [ 645.820769][T19682] ? __pfx_vfs_write+0x10/0x10 [ 645.825579][T19682] ? __fget_files+0x2a/0x420 [ 645.830226][T19682] ? __fget_files+0x2a/0x420 [ 645.835284][T19682] ? __fget_files+0x3a2/0x420 [ 645.839999][T19682] ? __fget_files+0x2a/0x420 [ 645.844636][T19682] ksys_write+0x150/0x270 [ 645.849005][T19682] ? __pfx_ksys_write+0x10/0x10 [ 645.853910][T19682] do_syscall_64+0x166/0x520 [ 645.858551][T19682] ? trace_irq_disable+0x3b/0x140 [ 645.863629][T19682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.869744][T19682] ? clear_bhb_loop+0x70/0xc0 [ 645.874464][T19682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.880496][T19682] RIP: 0033:0x7f8620d9e159 [ 645.885043][T19682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.904786][T19682] RSP: 002b:00007f8621c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 645.913250][T19682] RAX: ffffffffffffffda RBX: 00007f8621026270 RCX: 00007f8620d9e159 [ 645.921440][T19682] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000008 [ 645.929447][T19682] RBP: 00007f8620e35024 R08: 0000000000000000 R09: 0000000000000000 [ 645.937507][T19682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 645.945510][T19682] R13: 00007f8621026308 R14: 00007f8621026270 R15: 00007ffe79502828 [ 645.953867][T19682] [ 645.957003][T19682] Modules linked in: [ 645.961101][T19682] ---[ end trace 0000000000000000 ]--- [ 645.977332][T19682] RIP: 0010:klist_remove+0x156/0x340 [ 645.982806][T19682] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd db 5c f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be db 5c f6 49 8b 44 24 58 48 89 44 24 08 [ 646.004194][T19682] RSP: 0018:ffffc90005aff820 EFLAGS: 00010202 [ 646.010658][T19682] RAX: 000000000000000b RBX: ffff888026df1f40 RCX: ffffffff9a9db501 [ 646.019184][T19682] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 646.132639][T ** replaying previous printk message ** [ 646.132639][T19682] RBP: ffffc90005aff920 R08: ffffffff905f94a3 R09: 1ffffffff20bf294 [ 646.133065][T19682] R10: dffffc0000000000 R11: fffffbfff20bf295 R12: 0000000000000000 [ 646.133117][T19682] R13: 1ffff1100b2a5c0c R14: ffff88805952e060 R15: dffffc0000000000 [ 646.133196][T19682] FS: 00007f8621c566c0(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 646.133290][T19682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 646.133326][T19682] CR2: 00007f9f60443a10 CR3: 0000000079872000 CR4: 00000000003526f0 [ 646.133402][T19682] Kernel panic - not syncing: Fatal exception [ 646.192623][T19682] Kernel Offset: disabled [ 646.197040][T19682] Rebooting in 86400 seconds..