last executing test programs: 3.436974357s ago: executing program 1 (id=3422): getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)={0x6, [0x3ff, 0xffff, 0xf0, 0x40, 0xb, 0x1]}, &(0x7f00000001c0)=0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x340a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}]}, 0x58}}, 0x0) readv(r1, &(0x7f0000000840)=[{&(0x7f0000000140)=""/32, 0x20}], 0x1) 3.433481123s ago: executing program 3 (id=3425): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x49}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000006c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYBLOB="f4cd1b396f0329dc"], 0x20006) r1 = socket(0x40000000015, 0x5, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x30}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000004c0)={r4, 0xf}, &(0x7f0000000500)=0x8) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000580)={&(0x7f0000000540)=""/37, 0x0, 0x1000, 0x8, 0x2}, 0x20) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c00048018000180080001006c6f67000c00028008000640000000210900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x20000080) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000100003fffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200308c00001c0012800b0001006d616373656300000c00028008000500feffff7f08000500", @ANYRES32=r11, @ANYBLOB], 0x44}}, 0x0) 2.599508158s ago: executing program 1 (id=3434): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x7d4165c9) listen(r5, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r9 = socket$netlink(0x10, 0x3, 0x8000000004) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) writev(r9, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088a84803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r11, @ANYRES32=r11, @ANYBLOB='/\x00'], 0x20) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r14, 0x89e1, &(0x7f0000000080)={r13}) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 2.482852623s ago: executing program 3 (id=3435): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) 2.312965619s ago: executing program 1 (id=3437): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (rerun: 64) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) (async) sendmmsg(r3, &(0x7f0000000180), 0x393, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 2.309098622s ago: executing program 3 (id=3439): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x7, 0x101, 0x7fff, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x800) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb72b4000000590806000108000604"], 0x0) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.159911173s ago: executing program 0 (id=3440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0) 2.113222937s ago: executing program 3 (id=3441): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000ffb2ba1630db0311c1934ef132152acde543f66c011fc534d8a2a1138d04cdbb84fbf9eec3e02afe8e8256a96f8a22dcd727f4aa58577c20d8c6e3da00"/80, @ANYRES32=r4, @ANYRES64=r2], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt(r0, 0x7, 0x32d, &(0x7f0000000240)="2fb515e6bcb4eb02ed5b9dd444aef78421cb1eb2b2f428a039166b3375561cd1918b53a0e75099c9695c3efbe30306c7312a6b75ceb8728bf775d68b1d8eeec7969d0453029d7b27eb724a006805feb9391b519cc96584f326b653d41910b6b70fdec4c9012004c651b083416a9f6df1dc62d3f30eb871e192dec16389ec529dbfd1b402fc11e2214c363a9b762a51a4f1d7c0c06059119c2a40b5fbdd5e380a4901ca24afaa975caf6d9411", 0xac) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="8402020100"], 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 2.092682802s ago: executing program 2 (id=3443): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000003c0)={r0, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x20000, &(0x7f0000000240)={@_ha_fsid={[0x3, 0x4]}, {0x7f, 0xfd2a, 0xfffffff8}}, 0x7, &(0x7f00000002c0), &(0x7f0000000300)}) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, r8, 0x401, 0x70bd2b, 0x40024, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x7, 0x3, "7d5bee"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44040800}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r6, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000001000000420000004000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000022d7be9ca777c6c933e365019287b378ff4668bc9f69f54d054f55"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r11}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r11, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r13, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r12], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b00010072656a656374000014000200080001400000009205000200000000000900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) 2.000611127s ago: executing program 0 (id=3444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r1, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x958}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24008004) syz_emit_ethernet(0xca, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private=0x4000, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001200)={'gretap0\x00', &(0x7f0000001180)={'gretap0\x00', 0x0, 0x8000, 0x20, 0xa69b, 0x10000, {{0x9, 0x4, 0x1, 0x2d, 0x24, 0x66, 0x0, 0x10, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@generic={0x7, 0x6, "5d295fde"}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001740)={'wg0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001800)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)=@bridge_dellink={0x28, 0x11, 0x882, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x10080, 0xc134}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) recvfrom$inet6(r3, 0x0, 0x0, 0x4100, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000a40)={0x3, {{0x2, 0x0, @multicast1}}, 0x1}, 0x90) recvmmsg(r7, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e, 0xe88}, 0x8}], 0x32, 0x10122, 0x0) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) 1.896188825s ago: executing program 2 (id=3445): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000480001002dbd7000fbdbdf250a000100", @ANYRES32=0x0, @ANYBLOB="00000000080002000c000000140001"], 0x40}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}}], {0x14, 0x10}}, 0x50}, 0x1, 0x0, 0x0, 0x44001}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}}], {0x14, 0x10}}, 0x50}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x26, 0x20000000000001, 0x9, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0)=0x43bd, 0x4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0)=0x43bd, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x800, &(0x7f0000000280)={0xa, 0x0, 0x400, @mcast2, 0x9}, 0x1c) recvmmsg(r3, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10102, 0x0) (async) recvmmsg(r3, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10102, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x80000000, 0x2, 0x2, 0x3}, 0x1, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004034}, 0x1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000029000000370000001600000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bbcb9237a58b435a0b000000000000000327b1db61d675784ce5c26332a0a806b3178aa37f0b5eb948df917e3e59a6f6ce4d779ad9209941fdd56f13b57920cbc162f3c3bf36be4fb23d930aaa6022381b0e69b6a7f42f5ee05fb8e19a8a02c46036315d9f5782504e8c9bc58bc2e6eb25738e7f"], 0x40}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x50}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x50}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x402) (async) listen(r6, 0x402) r8 = socket$alg(0x26, 0x5, 0x0) recvmmsg(r8, &(0x7f0000000a40)=[{{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000840)=""/199, 0xc7}, {&(0x7f00000009c0)=""/64, 0x40}], 0x3}, 0xda}], 0x1, 0x40000000, &(0x7f0000000a80)) bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 1.895362027s ago: executing program 3 (id=3446): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x1409, 0x100, 0x70bd2a, 0x25dfdbff}, 0x10}}, 0x20004012) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0x4}, {}, {0x10, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41091}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0x4}, {}, {0x10, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41091}, 0x0) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25057c0000080001"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) (async) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25057c0000080001"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004500070125bd700000000000057c00007255f6fb06eb53516292436ef79d9a6c35926cd251e0b796fb3e5a6527357d89c9d92a9c87b1b759f1bff12500215e7034e5ccf7cc060aa008a7a8bb787d13924570d784f7ebabecf5c701b3b617be668340088824d11e05cb47d2599da635324a6a20"], 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 1.821551841s ago: executing program 0 (id=3447): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x4e21, 0x7, @mcast2}}, {{0xa, 0x4e20, 0x2, @empty}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) (async) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40002042, 0x0, 0x0) 1.819209393s ago: executing program 4 (id=3448): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x5f, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000200)="1a00000002000000", 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000002c0)={@empty, 0x46, r3}) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x20061, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x48000) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x8001, 0x0, 0x6, 0x6, 0xa}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000006, 0x40010, r4, 0xdea4000) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000340)={r5, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000300)=0x1, 0x4) sendto$packet(r0, &(0x7f0000000240)="44c394f305916c4516999da2080095a11ada0a96a7113c0ca50c0be5993e477c43fd", 0x22, 0x0, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 1.7456636s ago: executing program 2 (id=3449): r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) 1.64392058s ago: executing program 0 (id=3450): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x4000}, {0x2, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x803}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) 1.555880844s ago: executing program 4 (id=3451): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5610067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1.483689447s ago: executing program 2 (id=3452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r0, 0x5, 0x0, @val=@tcx}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="030000000400000005"], 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.372158462s ago: executing program 4 (id=3453): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x7, 0xc5}, 0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f00000004c0)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="fa2efc5dc31fcc2c10d9001f729cc3ea98e2793be6dca3509ec39317af7832776e076b119d501b1798395485910f9f833963efaf1adf36f1576d1973bc6a142892723c751359376c03009222eff20d2941ec151ca9367453a6765e250e3a550b4c8da374926ab568c73665c0e218d4360ef1d5cacef5f2b9cd9927db74c47063692631daf4778a1e027757f0b10765f05c7c61c67e94cf", 0x97}, {&(0x7f00000001c0)="d169d286d4a902becaa3bacf6d51b2b08449a85a7aed156aef18e71184dd4c1176647592adcc5cfc6372fe5b9ed2451798ab1908e0a4fa1524e021969d02c8d12846080008c676604602bff7373e590051522b737a577bc2878850a43fbb395f5bde0bba8fb251e833509c9c3291ab569ef1eaa3d02b", 0x76}, {&(0x7f0000000240)="aec2db3834c7d0e2bebb9563dd17d46d5bb4849e59753a5aa0167319a329ec88888b89dfb701b55378f1c4bbd054cbb75e30724933498bee02e7c079ddb79f63cc531c08045a0f64d29ebc7322bdb5c68616c887444b3bbf4baa4458df9303978e31a993aec1550dea6fc9f2964fa44f973ed0e2d99bdcffc6bc6a68e912759453002a6f67856ec18d6604152930", 0x8e}, {&(0x7f0000000300)="bf1d7db42e6360a260b758153ca425c9428837e1f159dff08d8ea5701ef51c7175126f8e2aa7842034cabcab8ff20890b17535eacfba7b174774fdb2c0a4c26a5e1a5fdd0162a3858952b5b04fe717e2f13cd50eaeda5dcbb2274c268a172c614850c665cb9d783c5d4e5260ca9679af65550f8c57e615a3d21b9f48b520e0b4df7afcc51639809fb69db7d260cae649e6976d97ccb8f87cdfd7844d0e0f52aeeebb1cd8542b9e15fde11d4dd36f200c29b6777d49a0f1b9121858740cb4fd26ec204818", 0xc4}], 0x4, &(0x7f0000000440)=[@sndrcv={0x30, 0x84, 0x1, {0x9, 0x3ff, 0x8001, 0x3, 0x8, 0x10, 0x4bf44385, 0xc, r1}}, @authinfo={0x18, 0x84, 0x6, {0xc3}}, @init={0x18, 0x84, 0x0, {0x942, 0x8, 0x9, 0xfff}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x1}}], 0x78, 0x800}, 0x841) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'macvtap0\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000540)=0xa2, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000000580)={r0, 0x0, 0x2, 0xb8, 0x7, 0xf, [0x3e, 0xe, 0x9, 0x5, 0xc, 0x6]}) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000600)=0x7f3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000800)={&(0x7f0000000640), 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf8, r5, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x20}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x118}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x365}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14fc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000840)={r1, @in={{0x2, 0x4e24, @remote}}}, 0x84) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r6, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r7, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x400c095) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000c00)={r4, &(0x7f0000000b00)='wpan3\x00', 0x208000, &(0x7f0000000b40)={@align=0x2, {0x1, 0x800, 0x3, 0x4}}, 0x9, &(0x7f0000000b80), &(0x7f0000000bc0)=0x6}) r12 = accept4$x25(r11, 0x0, &(0x7f0000000c40), 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c80)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000d00)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000d40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x401808}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x6c, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) write(r12, &(0x7f0000000e80)="e15bcc9f6e61c2775ba1a4214ab60851ba08a6f6d45119e2a8a9f12a893763b76c4b010e36fea99df3361276417d8d", 0x2f) bind$llc(r11, &(0x7f0000000ec0)={0x1a, 0x219, 0x2, 0x5, 0x88, 0x80, @broadcast}, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000f00), r6) 1.191349847s ago: executing program 1 (id=3454): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000000)={0x5, 0x10}) socket$kcm(0x29, 0x7, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r3, &(0x7f0000001100)="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"/1453, 0x5ad, 0x10000800, &(0x7f0000000080)={0xa, 0x5e1f, 0x3, @mcast2}, 0x1c) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) vmsplice(r1, &(0x7f0000000c00)=[{&(0x7f0000000400)="b4fbaa137a8eb69b43f2f9ec5420b1825237194c39c65c74eed52469f64dc13d9791b9c36b815c30765cb0e4522c61b5021d325e83e780a0d3541c49920870c9014e77f8de333f464c1942ed46f2472c11a8fc49f43a65d1423ff68a3257507bc644aa6577b33649fa384fbab6bc5d5ea590bd737d9ca37c16a85dd6c21dda0a0f8b68a14fdc1a6a2dc9309514d324e50b1dac583d89f1d8503860048e061b8e6ac456f27283c7ddd44727028507ff9703eb67e1f67282556b789a1fb107c753fac4a462407d669f8800155d15e3b1f0ea1b008cc66b2b532206fcfd4706fb4714d605f27497c7e130d22987ea4c1e4e4c5b5391e1", 0xffffffffffffff8c}, {&(0x7f0000000500)="a31d5e4586bebfdf9c952bd8f1751cfef486b030d456263c61901c3e6aa55ecfb93311343b51505c91c42a6dfda62235fdffeb38536ed2871ee072ed11cea5b832ec4f9bc4705007c7483ef5730427117458ac522df4462c5acae16016bd09a75b8064b85601e7ea62d5a256f445ca9e17c25ca42a34b7d5c97c381cae37a3d272c675548e6893366d48e4601874a082b52412479660973ab0613b77d36380e7e2efd4351524738de07924046912992e3180eb4ebdbcc060ec657afec46581741fa83a9ff0e03082b6e66264d1ebb0af99268fe69ca848c96e3d", 0xda}, {&(0x7f0000000600)="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", 0xfc}, {&(0x7f0000000700)="017568c658f7fc510477b25755d6de9b3017f9b4cc5f95b00d674b8ff2ecf866f51de4d67dc501ad9d504e5ef9c052fd1d48e54137fa118da3fa1f1d1509ff781e650d3d56e59dc5fdeaea11647edeb47a54c9c514783027334ba88077ca415e12f3bcf3d84562e4c7c753e44d89b9da2fa6b004675c5dc677292dba42b143d899fbe9d73b7c05300f28ee1c66dec37016870b7bcbd26396c5b50a4b8b444348014d9c1280ab88a70b296415fd4ce81e824086b7b85f737fc1c473902fd970517243c39a067ebe6f38d1f7e5dd92961b6c6eaa8acd83239b99963384636b88", 0xdf}, {&(0x7f0000000800)="ba044d65de321c0f47b45ad734b65e096dfc9fcacc35525de40004dcb2792955cd214222c3f259ef84ac1ff8d47354a1f71eea6a3e92b29bb263b8914eb1feb1fedca3a194abd580f42b0816f061798e4b15576813bf695db03ac373bf17629ebd05ea729a026ed47cd604786ed164ce15a663e6cb3a6e45b3584eb0d2db420157f8c5b0b2738db620e720a1366d6b973721f1f8db97a3bafcbd45d8233ae29b9683136ff9584e9153cfd9c45d26906ad835554f", 0xfffffffffffffec7}, {&(0x7f00000008c0)="27c8c799dadab29a539a6d4ddd22fd4e5a12d5ff24ea0bb1d320e5771c6c54b3dba0e7dc64e3c7ed56d4b98d948a7e5e30abd14226654b61a661e05aafcf277eb8a1aad15b330027f3b3ccbc8ff2b36a83915b8941c7773e30015459ba1eb73aa048692f7bb4510818c3e037cb1dbd21c4ac4b8344805084916ffc44ecea44e27684d84cc6601c0c6915ceef58108e99dc343b8c12abf9c4a87efe0180bcbd0826052908cb2f30305e6bb93d6285b9cda1e555d18e657013121a6a744d62f650adaa904b5e576f", 0xc7}, {&(0x7f0000000a80)="6d9e5f38d0b1219d092f2d4c02f33cb524575a60bfdad84512d318072b8a4f6db4e6f3a578e7f218f67e98d54083c8ddce7d25fd9d526daf69d9d93d7b8c9da82e1bf3157012b2382c46788e54066318aee67e055549f6da899f4183fdff6ec6f92ada00331c06c0ee71953e136d9e5a3c16eb5b01a88beaee8285fefe464a7d9d5c60dfdf4f6dd5078894cc4987326e7f9e1f26", 0x94}, {&(0x7f0000000b40)="ce1d9fcc8ac8c5da438200e26129e19eb546b5189a37918ed07c40ab4ade829554db25f396f393472b757b025c2215da5c626ae2e1cc8ab6f3e25113f4aa24cc6097a6148383ad7fadcb63e0b3d9cc50db60013c818d3a9e5a0a840a98d817b1a1e93184088ec5e1335c8c383fbbe5d55ac98820d1", 0x75}, {&(0x7f0000000bc0)="ea7fd7dcf2ea6b6385559a7ddf4bb3f21859c5ec063540ce044e28c47a81bad564c51dfab20fd6972ddc693eb038df40cdc74017276c71cf44b3e148aaa1", 0x3e}], 0x9, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e000100fdffffff000000000200000001000007000000000800070002000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x42816}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r8, r7, 0x25, 0x0, @val=@netkit={@void, @value=r8}}, 0x1c) syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000240)="94", 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xb, &(0x7f0000000240)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94) 1.0396599s ago: executing program 4 (id=3455): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0xf, 0x1, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_USERDATA={0x39, 0xd, 0x1, 0x0, "563afd4bb54ed253af98f0deeb49678618cf1349e97c37f02c6de5b8c0ad617a21a44e8002a8c45b6931629a19809ec972338651e3"}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd8}, 0x1, 0x0, 0x0, 0x20000800}, 0x20014) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 985.182051ms ago: executing program 2 (id=3456): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x84000000, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfe, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000240)={@mcast2, 0x6e, r4}) 860.221681ms ago: executing program 0 (id=3457): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) close(r2) 221.937084ms ago: executing program 4 (id=3458): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xc}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="7084c3d1b35891ae8b1ccb110ec1", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x1010, r3, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) 173.023907ms ago: executing program 1 (id=3459): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x2b0, 0x150, 0x150, 0x8, 0xf8010000, 0x380, 0x238, 0x238, 0x2b0, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2, 0x6, 0xfffffffd, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x7ff, 0xfffb, 0x8, 0x5, 0x3, [0xe, 0x2]}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f0000002a00)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000f80)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f83c597a12ba4be2bb9439d7a518eac95b7b8776383bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c22929662532126387ee04f16807e453b2f00806a935e6ffa988d859a1ec87e621e51e12aac1a4fab0f7c2044f81fbd5e40f87f5518e707217f0e74b0c2378f385be89cb50a9b153b13ef46da14a89ba5de849aa0f55cf97a8202d9be92ea302fbebfbdf9fa1ae3c40a4229801264b7799ef332e2a0eaf7dc88797dfd6c", 0x15b}, {&(0x7f0000000180)="6242870f0e6b4396205a2c501f10b0601e64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c9", 0x66}, {&(0x7f0000000580)="7d1455a2eefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b0658fe289beff381c455f37c2b1c71e0e98f34a344141f9996f71a6c32cd9e930f86b9aa8d31e566b300"/146, 0x92}, {&(0x7f0000000c80)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc570d15691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0801af924a0df53cd52aaf4eca9516d8c5cccf8a4b62b04a539314e33cc2b14107eaaa7460a6c35395f2a6253b517b685f448709ea52c3fe7c64200417272b56fe5307c4b1f0fedde01c106750b5c9c3b917ffa26b537bc6c42c9", 0xc3}], 0x4}}], 0x2, 0x2000c044) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) recvmmsg(r3, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}, 0x4}, {{&(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000640)=""/210, 0xd2}], 0x2, &(0x7f0000000ac0)=""/240, 0xf0}, 0x800}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000016c0)=""/173, 0xad}, {&(0x7f0000000d80)=""/166, 0xa6}, {&(0x7f0000000e40)=""/16, 0x10}, {&(0x7f0000001780)=""/204, 0xcc}, {&(0x7f0000001300)=""/157, 0x9d}, {&(0x7f00000013c0)=""/143, 0x8f}, {&(0x7f0000001480)=""/5, 0x5}], 0x7}, 0x5f8}], 0x3, 0x10042, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000003c0)="3c55bdbe09ef4cc8feed4cee04e4427a3cc07b85bbde763a3fc4c507d5a5bbdaae79b87071c5284ab18d9de2f460edaa54e285e2d3d928d4f2e0d968b215b7ca023ef7b9bec9f21f43284ec2cd10f86da7efb9cae07bd9e7ce73e205ba787ca8399310a37792c37e81b2d28ce4c6e731e4ea63c2b8b56808b382732b08aad0b7a849a40163e464003276b6b7ad79373161d2160a7f43b10ba268cba048f0effcf0a540a40c30354d5fad88276d3de36266fcda755e419f0243d792a6d575a3373993a540fc0669ec8e0ff50985d551f0917fa48b91c522a64de9440fe00171861596d8718400"/239, 0xef}, {&(0x7f0000000880)="28a270979ee81eec231609fc7f7e5711d528742cc4b4cac8e82c6ea9bf3ba682e5216a75f139844435f1de9894afaa6fff52a9f411d145c67c7ddd85cfc8f3e1443ba4bcec229ad587d2a6c3b18db8ddde4f65a9d21651aa68b6dcd5a59ed55d3f559c2a0e1b4e5867037e431bd219f083d315363b17558cfccbae322e4185111f5c0dfd2203af0c5f46132cd81041cee09f8d1f39166821fd08a68fccab9d0dfcbcdd83d05b6e7f417700ffc1d0c78ca94f19114206799084de7bfe9b94183829", 0xc1}, {&(0x7f0000000980)="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", 0x137}, {&(0x7f00000007c0)="22c1cf6cc393ee0de46a4ba7dfdc7fb8a19e7de7646ff33a9b5eac77fa36c9f1e114f0da6b1c2a09b0ad694a4fbef7d782638b1a2e2cd453a7f7113403ca8e186b0c5d896445b73ebe39a91c22d1786263a43220d6", 0x55}], 0x4) 119.787257ms ago: executing program 0 (id=3460): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000100)='espintcp\x00', 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfff], [0x0, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffff, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x89f8c55f46292553}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xfeee, 0x3, 0x7}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x804) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) sendmsg$inet(r1, &(0x7f0000000c40)={&(0x7f00000001c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000340)="3dfca3c6baa5ad47b1202d623b78be17bb88b9f21f00334bcc5f63a5e79c2ad29bddc6af15fb82a6b0ce5be74f6ce8018f200b45980595813eeddf450b96643bb529ede092117dcc0c75", 0x4a}, {&(0x7f0000000640)="9d6a788f4b21afaa20a32e1bf278948280c6286d42690adb2d9dedd64136b9737f5aed81b62c89a90f133a0b8f8085f655eeb3d3f560983f0d456df90ba361bc175150ec9aa1982e74f7890655b4270c9d7f678ec4f8ac5944dec15696d10da35251ddebcc3729d6747134f2a419c2d3593eac50363769911a14ef897b4eac53639f8bcd02b7f9ae34f1", 0x8a}, {&(0x7f0000000940)="e4728f6be4eb8299903f5a2c86db76028ac8f2db4b2f4e6cf66f91dfa686058bfc3a2f7af4e4a51368", 0x29}, {&(0x7f0000000980)="937c29c0bf3d30534b", 0x9}], 0x4, &(0x7f0000000a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @local}}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x6f, 0x0, 0x0, [0x4, 0x40, 0x1, 0x9]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0xa, "a2f35fc90a7ccc7a"}, @timestamp_prespec={0x44, 0xc, 0xce, 0x3, 0x7, [{@multicast2, 0x400}]}, @lsrr={0x83, 0xb, 0xbe, [@remote, @loopback]}, @cipso={0x86, 0x43, 0xffffffffffffffff, [{0x6, 0xb, "8497f8d00716d9ae1e"}, {0x0, 0xe, "ae5730b723ce1598abae74af"}, {0x6, 0x9, "b9f90e740cc036"}, {0x1, 0xe, "f8771850e6c194e63e7c6aa7"}, {0x5, 0xd, "2134c8583fd1c57dc0e7e5"}]}, @timestamp_addr={0x44, 0x34, 0xf6, 0x1, 0x0, [{@multicast2, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x3}, {@private=0xa010101, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@remote, 0x6}]}, @ssrr={0x89, 0xb, 0x81, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @broadcast, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x190}, 0x800) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r11 = socket$kcm(0x29, 0x2, 0x0) r12 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r12, &(0x7f0000000200)={0xa, 0x4e2b, 0x400006, @loopback, 0x77f}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000400)={r12}) ioctl$sock_kcm_SIOCKCMATTACH(r13, 0x89e0, &(0x7f0000000280)={r12, r10}) write(r12, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=@newpolicy={0xfc, 0x13, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x14, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback}]}]}, 0xfc}}, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r14, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) accept(r0, 0x0, 0x0) sendto(r14, &(0x7f0000000840)="746573747061790104010a0000c25b6320881941caa7c745b5b5e6ee98014d9f9b6c12a22f33dda90e447ead00d0f52e1c9a6606ec3c82edacb50d433fdd7a247399dc63810100944bf3e6749b9182c824c97b6ae465bfb5c3742af01311e61e781528debaced12413fb0b382b77b1b84c941ca4c5ba04ce2a431cab0f69ba5e7bbf0d2f4936b29016e7cd68b338d5b208722d58af86d76f53508e5e7267b16e1f3454cc1d793abcdfa917c100e87092ec0afc7554d163d49752d88cfd16eba299c4a00273c20d89ae45fd767cc14b1a269e04ab0365ea2ab432bb6a193b7f000000000000000000", 0xe8, 0x4040810, 0x0, 0x0) 119.038255ms ago: executing program 3 (id=3461): socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x2, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff003d3a00fc010000000000000000000000000001ff020000000000000000000000000001020190780000000060000000000011010000000000000000000000000000000100000000000000000000ffffe0000001330006d16600000017"], 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000040)=0xf, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x41, 0x1, 0x70bd26, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0x8}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r2}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec97000198"], 0xfdef) 110.888975ms ago: executing program 2 (id=3462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x8c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfffb}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffe8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) 87.932402ms ago: executing program 4 (id=3463): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000f6d3d3dd30eb90340000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040)="f0", &(0x7f0000000080)=""/13}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f00000000c0)="6ce17f800df5abccd672255b57d2f7968403b8b01ce51165996f0c580ed9f3b150d1915f4ab2017202dfb8bdb586524514c391f568f4f550239f2f5d1feff3758873993ede0bba96f4ec45ed31fd0dca3516daeea14a1a1edfdd3756f13c2fe6ecc11f955a965f9e883852ea2df1903c6a415dd48bb8c3e4e16e56c4075e43") 0s ago: executing program 1 (id=3464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x5, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8801}, 0x404c004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000001c0)={0xa}, 0x1) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000800}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x8, 0x9, 0x32, @dev={0xfe, 0x80, '\x00', 0x40}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x80, 0x7ff, 0x401}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000480)={0x0, @dev, @dev}, &(0x7f00000004c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x7800, 0x700, 0x9, 0xec89, {{0xd, 0x4, 0x1, 0x3a, 0x34, 0x65, 0x0, 0x5, 0x4, 0x0, @broadcast, @private=0xa010102, {[@cipso={0x86, 0xb, 0x0, [{0x2, 0x5, "922392"}]}, @lsrr={0x83, 0x13, 0x2d, [@local, @multicast2, @rand_addr=0x64010100, @remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x3f, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x1, 0x5, 0x50, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0x6, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b40)={'syztnl1\x00', 0x0, 0x29, 0xc, 0xde, 0x7, 0x41, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x20, 0x80, 0x7, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c00)={'gre0\x00', 0x0, 0x8000, 0x40, 0xb309, 0xfffffffd, {{0x2b, 0x4, 0x3, 0x18, 0xac, 0x65, 0x0, 0xf, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, {[@noop, @timestamp_prespec={0x44, 0x24, 0xab, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@multicast1, 0x10000}, {@broadcast, 0x9}, {@multicast2, 0x7ff}]}, @ssrr={0x89, 0x1b, 0x4f, [@local, @multicast2, @remote, @multicast1, @broadcast, @local]}, @timestamp_prespec={0x44, 0x14, 0xfc, 0x3, 0x0, [{@remote, 0x3}, {@multicast2, 0x1}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0xc4, [@remote, @broadcast, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @cipso={0x86, 0x22, 0x0, [{0x0, 0x12, "d6b60d0d41b9bb1399beb51e24fd38b1"}, {0x6, 0xa, "c124946bda1bf914"}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000d80)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000dc0)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x4, 0x8, 0x8, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x20, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f00)={'syztnl0\x00', &(0x7f0000000e80)={'syztnl2\x00', 0x0, 0x29, 0x10, 0x3, 0xfffffffc, 0x43, @dev={0xfe, 0x80, '\x00', 0xb}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x1, 0x93b7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f40)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x56, 0xa0000000, 0x40, @mcast1, @empty, 0x1, 0x7, 0x7, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000001f40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001340)={0xba8, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xbf32}}}]}}, {{0x8, 0x1, r5}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0xd4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x801}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x168, 0xe, 0x3, 0x2}, {0xa, 0xc8, 0x3, 0xc6}, {0x3, 0xe, 0x4, 0x5}, {0x6, 0x6, 0x4, 0x7ff}, {0x4, 0xb, 0x7, 0x2f}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r15}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4e3}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x3, 0x3, 0xc}, {0x2d, 0x6, 0x8, 0x2}, {0x9, 0x5, 0x5, 0x1}, {0x1000, 0x80, 0x2b}, {0x0, 0x2, 0x8, 0xffffffc0}, {0x58ee, 0x3, 0x9, 0x5}, {0x200, 0x82, 0xc0, 0xd}, {0x4, 0xfb, 0x2, 0x9}, {0x1ff, 0x7, 0x0, 0x6}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r19}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r23}, {0x138, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3102}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9a}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9a09}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfffb, 0x80, 0x8, 0xe635}, {0x8, 0x0, 0xd9, 0xc120}, {0x23, 0xfc, 0xb, 0x8001}]}}}]}}]}, 0xba8}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004000) kernel console output (not intermixed with test programs): nk: IP tunnel dst address not specified [ 240.360063][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'. [ 240.380647][T12026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.457454][T12037] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 240.484351][T12034] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 240.540844][T12033] ip6erspan0: entered allmulticast mode [ 240.587188][T12033] bridge6: port 1(erspan0) entered blocking state [ 240.619230][T12033] bridge6: port 1(erspan0) entered disabled state [ 240.642340][T12033] erspan0: entered allmulticast mode [ 240.666477][T12033] erspan0: entered promiscuous mode [ 240.696013][T12033] bridge6: port 1(erspan0) entered blocking state [ 240.702677][T12033] bridge6: port 1(erspan0) entered forwarding state [ 240.849425][T12034] bond8 (unregistering): Released all slaves [ 240.929241][T12039] netlink: 'syz.4.1789': attribute type 3 has an invalid length. [ 241.099064][T12069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1797'. [ 241.158897][T12074] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1799'. [ 241.198479][T12075] netlink: 'syz.3.1798': attribute type 32 has an invalid length. [ 241.305446][T12082] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 241.359440][T12084] gre0: entered promiscuous mode [ 241.364537][T12084] gre0: entered allmulticast mode [ 241.679851][T12052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.694507][T12079] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1802'. [ 241.895301][T12100] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1808'. [ 241.932701][T12094] bond5: entered promiscuous mode [ 241.990258][T12101] macvlan3: entered promiscuous mode [ 242.029946][T12101] macvlan3: entered allmulticast mode [ 242.046341][T12112] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1806'. [ 242.070853][T12101] bond5: (slave macvlan3): Opening slave failed [ 242.187695][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 242.232837][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 242.390294][T12131] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 243.201833][T12169] netlink: 'syz.0.1825': attribute type 1 has an invalid length. [ 243.222533][T12169] netlink: 'syz.0.1825': attribute type 2 has an invalid length. [ 243.530839][T12188] netlink: 'syz.0.1827': attribute type 21 has an invalid length. [ 243.674891][T12198] xt_hashlimit: size too large, truncated to 1048576 [ 243.720602][T12206] 0ªX¹¦Dö»: renamed from gretap0 [ 243.734928][T12206] 0ªX¹¦Dö»: entered allmulticast mode [ 246.316689][T12175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.557872][T12221] __nla_validate_parse: 7 callbacks suppressed [ 246.557891][T12221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1834'. [ 246.606003][T12218] bond0: (slave team0): Releasing backup interface [ 246.671778][T12218] bond0: (slave bond_slave_0): Releasing backup interface [ 246.697126][T12236] netlink: 'syz.1.1833': attribute type 1 has an invalid length. [ 246.731724][T12218] bond0: (slave bond_slave_1): Releasing backup interface [ 246.800991][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1834'. [ 246.808962][T12218] team0: Port device team_slave_0 removed [ 246.835684][T12218] team0: Port device team_slave_1 removed [ 246.842438][T12218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.854232][T12218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.863912][T12218] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 246.969388][T12254] netlink: 'syz.2.1840': attribute type 4 has an invalid length. [ 247.022412][T12247] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1838'. [ 247.074073][T12256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1841'. [ 247.085913][T12256] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 247.430018][T12282] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1849'. [ 247.480867][T12281] netlink: 'syz.3.1849': attribute type 2 has an invalid length. [ 247.508810][T12281] netlink: 'syz.3.1849': attribute type 8 has an invalid length. [ 247.518290][T12281] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1849'. [ 247.608818][T12290] netlink: 'syz.1.1851': attribute type 1 has an invalid length. [ 247.643091][T12290] bond1: (slave veth0_to_bond): Releasing backup interface [ 247.749969][T12297] netlink: 'syz.0.1853': attribute type 1 has an invalid length. [ 247.769580][T12297] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1853'. [ 248.001678][T12310] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1855'. [ 248.021053][T12309] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1859'. [ 248.031713][T12310] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1855'. [ 248.184693][T12316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.191997][T12316] IPv6: NLM_F_CREATE should be set when creating new route [ 248.199296][T12316] IPv6: NLM_F_CREATE should be set when creating new route [ 248.495067][T12333] bridge_slave_0 (unregistering): left allmulticast mode [ 248.504418][T12333] bridge_slave_0 (unregistering): left promiscuous mode [ 248.522878][T12333] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.540875][T12344] openvswitch: netlink: Flow actions attr not present in new flow. [ 248.607882][T12341] IPVS: Unknown mcast interface: bond_slave_1 [ 248.834726][T12359] 0ªî{X¹¦: renamed from 00ªX¹¦Dö» (while UP) [ 248.992408][T12359] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 249.693625][T12407] netlink: 'syz.0.1885': attribute type 1 has an invalid length. [ 249.784270][T12415] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20001 [ 249.833682][T12407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.912551][T12431] netlink: 'syz.2.1891': attribute type 25 has an invalid length. [ 249.929556][T12408] bond4: (slave veth3): Enslaving as an active interface with a down link [ 250.535565][T12467] netlink: 'syz.3.1903': attribute type 21 has an invalid length. [ 250.564406][T12467] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.593186][T12467] netlink: 'syz.3.1903': attribute type 1 has an invalid length. [ 250.597767][T12471] sctp: [Deprecated]: syz.4.1904 (pid 12471) Use of int in maxseg socket option. [ 250.597767][T12471] Use struct sctp_assoc_value instead [ 250.701569][T12473] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 250.909371][T12479] netlink: 'syz.2.1908': attribute type 1 has an invalid length. [ 250.947642][T12502] syz.4.1914: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 250.968410][T12502] CPU: 0 UID: 0 PID: 12502 Comm: syz.4.1914 Not tainted syzkaller #0 PREEMPT(full) [ 250.968435][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.968452][T12502] Call Trace: [ 250.968460][T12502] [ 250.968467][T12502] dump_stack_lvl+0xe8/0x150 [ 250.968500][T12502] warn_alloc+0x24c/0x270 [ 250.968527][T12502] ? stack_depot_save_flags+0x33/0x800 [ 250.968552][T12502] ? __pfx_warn_alloc+0x10/0x10 [ 250.968577][T12502] ? kasan_save_track+0x3e/0x80 [ 250.968600][T12502] ? __kasan_kmalloc+0x93/0xb0 [ 250.968623][T12502] ? xsk_setsockopt+0x52a/0x960 [ 250.968640][T12502] ? do_sock_setsockopt+0x17c/0x1b0 [ 250.968669][T12502] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 250.968696][T12502] ? do_syscall_64+0x174/0x580 [ 250.968718][T12502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.968747][T12502] __vmalloc_node_range_noprof+0x12c/0x1730 [ 250.968799][T12502] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 250.968825][T12502] ? __kasan_kmalloc+0x93/0xb0 [ 250.968859][T12502] ? __kmalloc_cache_noprof+0x32d/0x660 [ 250.968884][T12502] ? __kmalloc_cache_noprof+0x150/0x660 [ 250.968911][T12502] vmalloc_user_noprof+0xad/0xe0 [ 250.968935][T12502] ? xskq_create+0xbf/0x170 [ 250.968957][T12502] xskq_create+0xbf/0x170 [ 250.968982][T12502] xsk_init_queue+0x8a/0xe0 [ 250.969005][T12502] xsk_setsockopt+0x52a/0x960 [ 250.969023][T12502] ? __fget_files+0x2a/0x420 [ 250.969048][T12502] ? __pfx_xsk_setsockopt+0x10/0x10 [ 250.969065][T12502] ? __pfx_aa_sk_perm+0x10/0x10 [ 250.969093][T12502] ? aa_sock_opt_perm+0xff/0x1a0 [ 250.969122][T12502] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 250.969137][T12502] ? __pfx_xsk_setsockopt+0x10/0x10 [ 250.969155][T12502] do_sock_setsockopt+0x17c/0x1b0 [ 250.969189][T12502] __x64_sys_setsockopt+0x13d/0x1b0 [ 250.969217][T12502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.969234][T12502] do_syscall_64+0x174/0x580 [ 250.969258][T12502] ? clear_bhb_loop+0x70/0xc0 [ 250.969282][T12502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.969305][T12502] RIP: 0033:0x7fa41219e0d9 [ 250.969322][T12502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.969338][T12502] RSP: 002b:00007fa41309f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 250.969358][T12502] RAX: ffffffffffffffda RBX: 00007fa412425fa0 RCX: 00007fa41219e0d9 [ 250.969371][T12502] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 250.969383][T12502] RBP: 00007fa412235024 R08: 0000000000000004 R09: 0000000000000000 [ 250.969394][T12502] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.969405][T12502] R13: 00007fa412426038 R14: 00007fa412425fa0 R15: 00007ffc903c8c08 [ 250.969436][T12502] [ 250.969448][T12502] Mem-Info: [ 251.081581][T12508] nbd: illegal input index 65508 [ 251.104642][T12502] active_anon:6071 inactive_anon:0 isolated_anon:0 [ 251.104642][T12502] active_file:256 inactive_file:42777 isolated_file:0 [ 251.104642][T12502] unevictable:0 dirty:85 writeback:0 [ 251.104642][T12502] slab_reclaimable:10902 slab_unreclaimable:104743 [ 251.104642][T12502] mapped:29317 shmem:526 pagetables:1384 [ 251.104642][T12502] sec_pagetables:0 bounce:0 [ 251.104642][T12502] kernel_misc_reclaimable:0 [ 251.104642][T12502] free:1321759 free_pcp:10057 free_cma:0 [ 251.274979][T12514] ip6gre2: entered promiscuous mode [ 251.305411][T12502] Node 0 active_anon:24584kB inactive_anon:0kB active_file:1024kB inactive_file:170920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117268kB dirty:340kB writeback:0kB shmem:2104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14136kB pagetables:5608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 251.323283][T12509] netlink: 'syz.3.1915': attribute type 2 has an invalid length. [ 251.362617][T12502] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 251.366753][T12509] netlink: 'syz.3.1915': attribute type 1 has an invalid length. [ 251.428508][T12502] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 251.465892][T12502] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 251.476883][T12502] Node 0 DMA32 free:1329088kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24684kB inactive_anon:0kB active_file:1024kB inactive_file:170920kB unevictable:0kB writepending:340kB zspages:0kB present:3129332kB managed:2548696kB mlocked:0kB bounce:0kB free_pcp:39872kB local_pcp:20580kB free_cma:0kB [ 251.545997][T12502] lowmem_reserve[]: 0 0 0 0 0 [ 251.555403][T12502] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 251.623543][T12502] lowmem_reserve[]: 0 0 0 0 0 [ 251.639259][T12502] Node 1 Normal free:3942388kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 251.709565][T12502] lowmem_reserve[]: 0 0 0 0 0 [ 251.731014][T12502] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 251.752541][T12502] Node 0 DMA32: 775*4kB (UME) 850*8kB (UME) 339*16kB (UME) 179*32kB (UME) 31*64kB (UME) 25*128kB (UM) 33*256kB (UE) 14*512kB (UME) 19*1024kB (UME) 19*2048kB (UME) 300*4096kB (UM) = 1329020kB [ 251.869559][T12502] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 251.967634][T12502] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 6*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942388kB [ 252.058499][T12502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.089141][T12502] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.102039][T12553] netlink: 'syz.2.1925': attribute type 1 has an invalid length. [ 252.149539][T12502] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.164933][T12557] sctp: [Deprecated]: syz.1.1928 (pid 12557) Use of int in maxseg socket option. [ 252.164933][T12557] Use struct sctp_assoc_value instead [ 252.177008][T12553] netlink: 'syz.2.1925': attribute type 2 has an invalid length. [ 252.197666][T12502] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.210301][T12502] 43555 total pagecache pages [ 252.215358][T12502] 0 pages in swap cache [ 252.219591][T12502] Free swap = 124996kB [ 252.225589][T12502] Total swap = 124996kB [ 252.230144][T12502] 2097051 pages RAM [ 252.246768][T12502] 0 pages HighMem/MovableOnly [ 252.264435][T12565] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 0, id = 0 [ 252.276421][T12502] 428196 pages reserved [ 252.287446][T12502] 0 pages cma reserved [ 252.314300][T12561] 8021q: VLANs not supported on lo [ 252.479991][T12569] netlink: 'syz.3.1929': attribute type 1 has an invalid length. [ 252.502933][T12569] __nla_validate_parse: 17 callbacks suppressed [ 252.502950][T12569] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1929'. [ 252.531946][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1932'. [ 252.561588][T12582] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 252.588697][T12576] bridge_slave_0: default FDB implementation only supports local addresses [ 252.598261][T12582] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 252.786102][T12593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1934'. [ 252.829254][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1934'. [ 252.916709][T12595] netlink: 83 bytes leftover after parsing attributes in process `syz.4.1935'. [ 253.223206][T12621] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1940'. [ 253.265663][T12625] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1941'. [ 253.443123][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1943'. [ 253.783718][T12648] syzkaller0: entered promiscuous mode [ 253.811630][T12648] syzkaller0: entered allmulticast mode [ 254.148361][T12664] bridge6: entered promiscuous mode [ 254.161153][T12664] bridge6: entered allmulticast mode [ 254.238441][T12673] netlink: 420 bytes leftover after parsing attributes in process `syz.4.1953'. [ 254.575339][T12653] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 254.597327][T12653] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 254.669644][T12653] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.692607][T12653] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 254.788979][T12653] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 254.812324][T12653] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 254.849359][T12653] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 254.859238][T12653] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 255.213059][T12668] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 255.477968][T12739] validate_nla: 4 callbacks suppressed [ 255.477988][T12739] netlink: 'syz.1.1966': attribute type 4 has an invalid length. [ 255.563920][T12739] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1966'. [ 255.636849][T12750] xt_socket: unknown flags 0x8 [ 255.646016][T12753] xt_hashlimit: size too large, truncated to 1048576 [ 255.695123][T12753] xt_hashlimit: max too large, truncated to 1048576 [ 255.765247][T12753] xt_hashlimit: overflow, rate too high: 0 [ 256.345268][T12794] Bluetooth: MGMT ver 1.23 [ 257.060035][T12843] netlink: 'syz.4.1992': attribute type 21 has an invalid length. [ 257.168605][T12843] netlink: 'syz.4.1992': attribute type 21 has an invalid length. [ 257.253134][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.284850][ T9060] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.314681][ T9060] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.352342][ T9060] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.664481][T12877] macvlan0: entered promiscuous mode [ 257.744634][T12880] xt_hashlimit: size too large, truncated to 1048576 [ 258.417966][T12923] __nla_validate_parse: 10 callbacks suppressed [ 258.417985][T12923] netlink: 9324 bytes leftover after parsing attributes in process `syz.1.2009'. [ 258.463279][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'. [ 258.546030][T12926] tun0: tun_chr_ioctl cmd 1074025675 [ 258.580749][T12926] tun0: persist enabled [ 258.897009][T12945] veth0_to_bridge: entered promiscuous mode [ 258.945443][T12945] macvtap1: entered promiscuous mode [ 258.962207][T12945] macvtap1: entered allmulticast mode [ 258.981408][T12945] veth1_to_bridge: entered promiscuous mode [ 259.000737][T12945] team0: Device macvtap1 failed to register rx_handler [ 259.027510][T12945] veth1_to_bridge: left promiscuous mode [ 259.081014][T12960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2018'. [ 259.124123][T12960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2018'. [ 259.180231][T12950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.230551][T12954] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2018'. [ 259.263261][T12954] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2018'. [ 259.338826][T12942] veth0_to_bridge: left promiscuous mode [ 259.357042][T12973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2020'. [ 259.527529][T12979] ip6t_REJECT: ECHOREPLY is not supported [ 259.585117][T12986] gre1: entered promiscuous mode [ 259.711692][T12985] bond8 (unregistering): Released all slaves [ 259.982966][T13008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2029'. [ 260.044817][T13008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2029'. [ 260.053196][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2030'. [ 260.089060][T13008] netlink: 'syz.2.2029': attribute type 4 has an invalid length. [ 260.169871][T13009] v: renamed from veth0_vlan (while UP) [ 260.265414][T13017] kthread_run failed with err -4 [ 260.358937][T13016] ¾x9ÿ (unregistering): left allmulticast mode [ 260.407128][T13016] ¾x9ÿ (unregistering): left promiscuous mode [ 260.439403][T13016] bridge0: port 1(1¾x9ÿ) entered disabled state [ 260.636143][T13055] nftables ruleset with unbound chain [ 261.239198][T13086] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 262.126339][T13152] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 262.350819][T13164] syzkaller0: entered promiscuous mode [ 262.396646][T13164] syzkaller0: entered allmulticast mode [ 262.427502][T13164] tipc: Started in network mode [ 262.438571][T13175] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 262.445843][T13164] tipc: Node identity 92821b67c0fa, cluster identity 4711 [ 262.492995][T13164] tipc: Enabled bearer , priority 0 [ 262.560354][T13181] netlink: 'syz.3.2064': attribute type 3 has an invalid length. [ 263.048122][T13158] tipc: Resetting bearer [ 263.148714][T13158] tipc: Disabling bearer [ 263.478499][T13253] __nla_validate_parse: 13 callbacks suppressed [ 263.478519][T13253] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2081'. [ 263.958269][T13268] netlink: zone id is out of range [ 263.976786][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2087'. [ 263.979392][T13268] netlink: zone id is out of range [ 264.017057][T13268] netlink: zone id is out of range [ 264.039125][T13268] netlink: set zone limit has 4 unknown bytes [ 264.064226][T13276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2087'. [ 264.093011][T13277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2087'. [ 264.102319][T13287] ¾x9ÿ: renamed from bridge_slave_0 [ 264.339201][T13306] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2093'. [ 264.537120][T13311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2094'. [ 264.642995][T13321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2098'. [ 264.668069][T13323] netlink: 'syz.3.2097': attribute type 1 has an invalid length. [ 264.794217][T13330] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2100'. [ 264.910125][T13332] netlink: 'syz.4.2101': attribute type 1 has an invalid length. [ 264.924129][T13332] nbd: error processing sock list [ 264.963389][T13330] 8021q: adding VLAN 0 to HW filter on device bond11 [ 265.107755][T13347] xt_l2tp: v2 doesn't support IP mode [ 265.459781][T13370] gre0: entered promiscuous mode [ 265.622806][T13374] dvmrp8: entered allmulticast mode [ 265.628343][T13376] vlan0: left allmulticast mode [ 265.725624][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2115'. [ 265.767080][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2117'. [ 265.992322][T13396] netlink: 'syz.0.2121': attribute type 1 has an invalid length. [ 266.173997][T13396] bond7: entered promiscuous mode [ 266.190610][T13396] 8021q: adding VLAN 0 to HW filter on device bond7 [ 266.618324][T13433] veth6: entered allmulticast mode [ 266.655486][T13433] veth7: entered allmulticast mode [ 266.662406][T13438] Cannot find add_set index 65532 as target [ 266.762949][T13445] netlink: 'syz.1.2132': attribute type 1 has an invalid length. [ 266.861626][T13445] 8021q: adding VLAN 0 to HW filter on device bond12 [ 266.911892][T13450] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 266.959699][T13457] SET target dimension over the limit! [ 266.972074][T13457] bridge0: port 1(dummy0) entered blocking state [ 266.990427][T13457] bridge0: port 1(dummy0) entered disabled state [ 267.032191][T13457] dummy0: entered allmulticast mode [ 267.084384][T13463] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 267.088101][T13457] dummy0: entered promiscuous mode [ 267.119104][T13462] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 298.365968][T13473] netlink: 'syz.1.2140': attribute type 1 has an invalid length. [ 298.476835][T13473] __nla_validate_parse: 2 callbacks suppressed [ 298.476854][T13473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2140'. [ 298.497446][T13485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2140'. [ 298.507895][T13473] 8021q: adding VLAN 0 to HW filter on device bond13 [ 298.632245][T13473] bridge7: entered promiscuous mode [ 298.682198][T13473] bond13: (slave bridge7): making interface the new active one [ 298.706202][T13473] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 298.758477][T13501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2146'. [ 298.996244][T13514] tap0: tun_chr_ioctl cmd 1074025672 [ 299.029787][T13514] tap0: ignored: set checksum disabled [ 299.105459][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 299.110079][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2154'. [ 299.124336][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2152'. [ 299.157101][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2152'. [ 299.196565][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2155'. [ 299.207310][T13530] bond14: entered promiscuous mode [ 299.213604][T13530] 8021q: adding VLAN 0 to HW filter on device bond14 [ 299.277331][T13536] ip_tables: iptables: counters copy to user failed while replacing table [ 299.287519][T13536] ip_tables: iptables: counters copy to user failed while replacing table [ 299.297207][T13536] ip_tables: iptables: counters copy to user failed while replacing table [ 299.306512][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 299.307021][T13536] ip_tables: iptables: counters copy to user failed while replacing table [ 299.324831][T13536] ip_tables: iptables: counters copy to user failed while replacing table [ 299.333928][T13536] ip_tables: iptables: counters copy to user failed while replacing table [ 299.343196][T13536] ip_tables: iptables: counters copy to user failed while replacing table [ 299.348934][T13540] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 299.354322][T13536] ip_tables: iptables: counters copy to user failed while replacing table [ 299.370636][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2152'. [ 299.382229][T13536] ip_tables: iptables: counters copy to user failed while replacing table [ 299.392012][T13536] ip_tables: iptables: counters copy to user failed while replacing table [ 299.579448][ T10] IPVS: starting estimator thread 0... [ 299.673622][T13560] IPVS: using max 32 ests per chain, 76800 per kthread [ 299.726368][T13568] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.733639][T13568] bridge0: port 2(bridge_slave_1) entered listening state [ 299.856773][T13579] team0: No ports can be present during mode change [ 299.953971][T13581] syzkaller0: entered promiscuous mode [ 299.965522][T13581] syzkaller0: entered allmulticast mode [ 300.007262][T13583] netlink: 'syz.3.2170': attribute type 39 has an invalid length. [ 302.431203][T13608] bridge36: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 302.585916][T13619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.593221][T13619] IPv6: NLM_F_CREATE should be set when creating new route [ 302.848158][T13632] macvtap0: entered allmulticast mode [ 302.861990][T13632] veth0_macvtap: entered allmulticast mode [ 302.974134][T13634] netlink: 'syz.0.2177': attribute type 2 has an invalid length. [ 303.173355][T13647] IPv6: NLM_F_CREATE should be specified when creating new route [ 303.307555][T13626] vxcan0: tx drop: invalid da for name 0x0000000000000014 [ 303.583774][T13661] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.638150][T13661] bridge_slave_1 (unregistering): left allmulticast mode [ 303.646218][T13661] bridge_slave_1 (unregistering): left promiscuous mode [ 303.654238][T13661] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.881985][T13683] __nla_validate_parse: 8 callbacks suppressed [ 303.882002][T13683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2201'. [ 303.907388][T13683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2201'. [ 303.928671][T13683] netlink: 'syz.1.2201': attribute type 1 has an invalid length. [ 304.209765][T13697] netlink: 'syz.0.2203': attribute type 1 has an invalid length. [ 304.225029][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2207'. [ 304.254285][T13703] xt_TCPMSS: Only works on TCP SYN packets [ 304.269326][T13704] netlink: 'syz.3.2209': attribute type 21 has an invalid length. [ 304.310616][T13704] netlink: 'syz.3.2209': attribute type 22 has an invalid length. [ 304.324414][T13704] netlink: 'syz.3.2209': attribute type 23 has an invalid length. [ 304.351317][T13704] netlink: 'syz.3.2209': attribute type 25 has an invalid length. [ 304.373613][T13704] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2209'. [ 304.517999][T13713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2211'. [ 304.566170][T13713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2211'. [ 304.569180][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2212'. [ 304.606744][T13713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2211'. [ 304.638681][T13720] No such timeout policy "s" [ 304.651089][T13720] net_ratelimit: 59 callbacks suppressed [ 304.651107][T13720] netlink: Failed to associated timeout policy 's' [ 304.864025][T13733] netlink: 'syz.0.2217': attribute type 3 has an invalid length. [ 304.899370][T13733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2217'. [ 304.927005][T13733] netlink: 'syz.0.2217': attribute type 3 has an invalid length. [ 304.955396][T13733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2217'. [ 305.043145][T13749] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 305.043145][T13749] Please contact the netfilter-devel mailing list or update your nftables rules. [ 305.348970][T13767] netlink: 'syz.3.2228': attribute type 1 has an invalid length. [ 305.375418][T13774] xt_addrtype: ipv6 does not support BROADCAST matching [ 305.608173][T13789] netlink: 'syz.0.2234': attribute type 1 has an invalid length. [ 305.657911][T13796] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 305.960098][T13813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.992296][T13812] macvlan3: entered promiscuous mode [ 306.016107][T13812] erspan1: entered promiscuous mode [ 306.032259][T13812] debugfs: 'hsr1' already exists in 'hsr' [ 306.048566][T13812] Cannot create hsr debugfs directory [ 306.056930][T13826] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 306.066561][T13812] hsr1: Slave A (macvlan3) is not up; please bring it up to get a fully working HSR network [ 306.080338][T13812] hsr1: Slave B (erspan1) is not up; please bring it up to get a fully working HSR network [ 306.417921][T13826] bond15: option lp_interval: invalid value (0) [ 306.435066][T13826] bond15: option lp_interval: allowed values 1 - 2147483647 [ 306.458315][T13826] bond15 (unregistering): Released all slaves [ 306.878959][T13836] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 306.900024][T13836] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 307.195269][T13881] bond15 (unregistering): Released all slaves [ 307.978643][T13915] bridge_slave_1 (unregistering): left allmulticast mode [ 308.046097][T13915] bridge_slave_1 (unregistering): left promiscuous mode [ 308.083257][T13915] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.547968][T13956] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 308.630126][T13962] syzkaller0: create flow: hash 4170742029 index 2 [ 308.692107][ T9057] syzkaller0: tun_net_xmit 76 [ 308.706641][ T9057] syzkaller0: tun_net_xmit 48 [ 308.716999][ T188] syzkaller0: tun_net_xmit 76 [ 308.733529][T13963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.794674][ T188] syzkaller0: tun_net_xmit 76 [ 308.929726][T13956] syzkaller0: delete flow: hash 4170742029 index 2 [ 308.972974][T10088] syzkaller0: tun_net_xmit 76 [ 311.392249][T13996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.417274][T13998] __nla_validate_parse: 12 callbacks suppressed [ 311.417295][T13998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2292'. [ 311.438959][T13999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2292'. [ 311.673920][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2296'. [ 311.732526][T14018] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2297'. [ 311.974312][T14035] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 312.035994][T14044] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2304'. [ 312.275025][T14061] openvswitch: netlink: Key type 48 is out of range max 32 [ 312.347773][T14065] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2311'. [ 312.503585][T14077] team0: Device ipvlan0 failed to register rx_handler [ 312.534399][T14078] validate_nla: 3 callbacks suppressed [ 312.534427][T14078] netlink: 'syz.1.2316': attribute type 1 has an invalid length. [ 312.584691][T14078] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2316'. [ 312.771848][T14096] netlink: 'syz.3.2321': attribute type 11 has an invalid length. [ 313.048312][T14119] netlink: 'syz.0.2328': attribute type 1 has an invalid length. [ 313.198878][T14125] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2330'. [ 313.236805][T14119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2328'. [ 313.471632][T14130] bond10 (unregistering): Released all slaves [ 313.758207][T14148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2337'. [ 313.800175][T14148] netlink: 'syz.0.2337': attribute type 7 has an invalid length. [ 313.816602][T14157] x_tables: duplicate entry at hook 2 [ 313.830107][T14159] x_tables: duplicate entry at hook 2 [ 313.868847][T14163] tipc: Started in network mode [ 313.889718][T14163] tipc: Node identity ac14140f, cluster identity 4711 [ 313.921078][T14163] tipc: New replicast peer: 255.255.255.255 [ 313.948916][T14163] tipc: Enabled bearer , priority 10 [ 313.970541][T14167] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 313.973198][T14172] ipt_ECN: cannot use operation on non-tcp rule [ 314.022245][T14167] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 314.192336][T14181] netlink: 'syz.3.2348': attribute type 5 has an invalid length. [ 314.208469][T14181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.215827][T14181] IPv6: NLM_F_CREATE should be set when creating new route [ 314.252111][T14187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.347117][T14194] tipc: Enabling of bearer rejected, failed to enable media [ 314.540673][T14204] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 314.583653][T14204] xt_hashlimit: size too large, truncated to 1048576 [ 315.064795][ T5716] tipc: Node number set to 2886997007 [ 315.111442][T14235] netlink: 'syz.4.2363': attribute type 1 has an invalid length. [ 315.128379][T14240] netlink: 'syz.2.2362': attribute type 8 has an invalid length. [ 315.428602][T14257] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 315.898014][T14288] x_tables: duplicate underflow at hook 2 [ 315.919584][T14290] x_tables: duplicate underflow at hook 1 [ 315.927661][T14293] netlink: 'syz.3.2383': attribute type 1 has an invalid length. [ 315.936328][T14288] x_tables: duplicate underflow at hook 1 [ 316.436487][T14324] netlink: Failed to add helper -22 [ 316.442063][T14324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.515597][T14330] __nla_validate_parse: 19 callbacks suppressed [ 316.515615][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2388'. [ 316.552356][T14330] Unknown options in mask 4 [ 316.598646][T14302] netlink: 'syz.0.2382': attribute type 4 has an invalid length. [ 316.751447][T14340] netlink: 'syz.4.2391': attribute type 13 has an invalid length. [ 317.057545][T14348] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 317.075936][T14348] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 317.366594][T14367] sctp: [Deprecated]: syz.4.2398 (pid 14367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.366594][T14367] Use struct sctp_sack_info instead [ 317.446563][T14372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2401'. [ 317.484434][T14372] bond10: entered promiscuous mode [ 317.490252][T14372] 8021q: adding VLAN 0 to HW filter on device bond10 [ 317.523159][T14372] 8021q: adding VLAN 0 to HW filter on device bond10 [ 317.530575][T14372] bond10: (slave sit3): The slave device specified does not support setting the MAC address [ 317.542383][T14372] bond10: (slave sit3): Error -95 calling set_mac_address [ 317.787333][T14396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2407'. [ 317.871184][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2409'. [ 317.881439][T14402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.890015][T14402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.903874][T14402] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 317.912505][T14402] batman_adv: batadv0: Removing interface: ipvlan2 [ 317.925439][T14402] batman_adv: batadv0: Removing interface: gretap1 [ 317.975494][T14406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.134712][T14418] netlink: 'syz.3.2413': attribute type 39 has an invalid length. [ 318.295252][T14427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2416'. [ 318.470153][T14442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.628815][T14445] bridge4: entered promiscuous mode [ 318.638221][T14445] bridge4: entered allmulticast mode [ 318.754653][T14439] 8021q: adding VLAN 0 to HW filter on device bond11 [ 318.890659][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2427'. [ 319.125179][T14479] GUP no longer grows the stack in syz.2.2435 (14479): 200000003000-20000000a000 (200000001000) [ 319.149020][T14479] CPU: 0 UID: 0 PID: 14479 Comm: syz.2.2435 Not tainted syzkaller #0 PREEMPT(full) [ 319.149069][T14479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.149100][T14479] Call Trace: [ 319.149108][T14479] [ 319.149116][T14479] dump_stack_lvl+0xe8/0x150 [ 319.149147][T14479] __get_user_pages+0x238c/0x2720 [ 319.149176][T14479] ? __gup_longterm_locked+0xc3b/0x15c0 [ 319.149221][T14479] __gup_longterm_locked+0xd52/0x15c0 [ 319.149243][T14479] ? lock_acquire+0x106/0x350 [ 319.149285][T14479] gup_fast_fallback+0x1d8c/0x20e0 [ 319.149303][T14479] ? lockdep_hardirqs_on+0x7a/0x110 [ 319.149355][T14479] ? __pfx_gup_fast_fallback+0x10/0x10 [ 319.149375][T14479] ? is_valid_gup_args+0x11f/0x200 [ 319.149404][T14479] ? get_user_pages_fast+0x4d/0xb0 [ 319.149425][T14479] __iov_iter_get_pages_alloc+0x378/0xa40 [ 319.149456][T14479] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 319.149487][T14479] iov_iter_get_pages2+0x5e/0xa0 [ 319.149513][T14479] __se_sys_vmsplice+0x7b5/0x1660 [ 319.149559][T14479] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 319.149588][T14479] ? __pfx_futex_wake+0x10/0x10 [ 319.149663][T14479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.149682][T14479] do_syscall_64+0x174/0x580 [ 319.149705][T14479] ? clear_bhb_loop+0x70/0xc0 [ 319.149727][T14479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.149744][T14479] RIP: 0033:0x7fb988b9e0d9 [ 319.149763][T14479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.149776][T14479] RSP: 002b:00007fb989a32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 319.149796][T14479] RAX: ffffffffffffffda RBX: 00007fb988e25fa0 RCX: 00007fb988b9e0d9 [ 319.149809][T14479] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 319.149822][T14479] RBP: 00007fb988c35024 R08: 0000000000000000 R09: 0000000000000000 [ 319.149834][T14479] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 319.149846][T14479] R13: 00007fb988e26038 R14: 00007fb988e25fa0 R15: 00007ffe8cb5f818 [ 319.149877][T14479] [ 319.381325][T14496] netlink: 'syz.4.2438': attribute type 1 has an invalid length. [ 319.530257][T14496] bond10: entered promiscuous mode [ 319.536277][T14496] 8021q: adding VLAN 0 to HW filter on device bond10 [ 319.541583][T14508] netlink: 'syz.1.2443': attribute type 1 has an invalid length. [ 319.561804][T14508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.573851][T14508] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 320.129159][T14527] syzkaller0: entered promiscuous mode [ 320.144665][T14527] syzkaller0: entered allmulticast mode [ 320.406211][T14552] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2452'. [ 321.807825][T14560] xt_cgroup: path and classid specified [ 322.704514][T14542] vlan5: entered promiscuous mode [ 322.709624][T14542] geneve1: entered promiscuous mode [ 322.716464][T14542] vlan5: entered allmulticast mode [ 322.721630][T14542] geneve1: entered allmulticast mode [ 322.850936][T14565] netlink: 'syz.4.2456': attribute type 8 has an invalid length. [ 322.900418][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2456'. [ 323.038792][T14575] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2458'. [ 323.199072][T14587] netlink: 'syz.2.2463': attribute type 1 has an invalid length. [ 323.204565][T14589] netlink: 'syz.4.2461': attribute type 1 has an invalid length. [ 323.210923][T14588] bridge0: port 2(wlan0) entered blocking state [ 323.240944][T14588] bridge0: port 2(wlan0) entered disabled state [ 323.253579][T14588] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 323.256752][T14591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2461'. [ 323.302531][T14587] netlink: 'syz.2.2463': attribute type 1 has an invalid length. [ 323.332107][T14589] 8021q: adding VLAN 0 to HW filter on device bond11 [ 323.339851][T14594] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2462'. [ 323.494791][T14608] netlink: ct family unspecified [ 324.330373][T14587] veth1: entered allmulticast mode [ 324.345812][T14587] bond6: (slave veth1): Enslaving as an active interface with a down link [ 324.371600][T14606] bond0: (slave veth0_to_bond): Releasing backup interface [ 324.381573][T14606] veth0_to_bond: left promiscuous mode [ 324.389069][T14606] veth0_to_bond: left allmulticast mode [ 324.406179][T14606] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 324.438655][T14597] macvlan4: entered promiscuous mode [ 324.445932][T14597] macvlan4: entered allmulticast mode [ 324.461199][T14597] bond6: entered promiscuous mode [ 324.475061][T14597] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 324.485007][T14597] bond6: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 324.504656][T14597] bond6: left promiscuous mode [ 324.601899][T14626] netlink: 'syz.2.2474': attribute type 2 has an invalid length. [ 324.624903][T14626] netlink: 'syz.2.2474': attribute type 2 has an invalid length. [ 324.825487][T14645] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2478'. [ 324.912165][T14634] ip6tnl0: Caught tx_queue_len zero misconfig [ 325.025439][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2482'. [ 325.170174][T14667] netlink: 'syz.0.2483': attribute type 1 has an invalid length. [ 325.717049][T14700] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 325.929712][T14709] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2490'. [ 326.283162][T14740] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 326.431191][ T29] audit: type=1804 audit(1786129324.867:8): pid=14742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2500" name="/newroot/482/cgroup.controllers" dev="tmpfs" ino=2481 res=1 errno=0 [ 326.497593][ T29] audit: type=1800 audit(1786129324.867:9): pid=14742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2500" name="cgroup.controllers" dev="tmpfs" ino=2481 res=0 errno=0 [ 326.575274][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2504'. [ 326.726396][T14758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2505'. [ 327.510434][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2520'. [ 327.527805][T14804] vcan0: entered promiscuous mode [ 327.533785][T14804] vcan0: entered allmulticast mode [ 328.200458][T14829] __nla_validate_parse: 2 callbacks suppressed [ 328.200479][T14829] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2525'. [ 328.336643][T14831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.370208][T14831] netlink: 'syz.2.2527': attribute type 10 has an invalid length. [ 328.410269][T14831] bond6: (slave veth0_to_bond): Releasing active interface [ 328.439049][T14831] veth0_to_bond: entered promiscuous mode [ 328.445664][T14831] veth0_to_bond: entered allmulticast mode [ 328.455244][T14837] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2529'. [ 328.465326][T14837] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2529'. [ 328.475393][T14837] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2529'. [ 328.705881][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'. [ 328.890101][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2538'. [ 329.091037][T14887] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2542'. [ 329.105243][T14887] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2542'. [ 329.346178][T14898] openvswitch: netlink: Duplicate or invalid key (type 0). [ 329.366466][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075b48c00: rx timeout, send abort [ 329.372821][T14908] nft_compat: unsupported protocol 0 [ 329.382607][T14908] sctp: [Deprecated]: syz.2.2548 (pid 14908) Use of int in max_burst socket option deprecated. [ 329.382607][T14908] Use struct sctp_assoc_value instead [ 329.497441][T14915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2551'. [ 329.789918][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2555'. [ 329.809129][T14929] x_tables: duplicate underflow at hook 1 [ 329.826080][T14929] x_tables: duplicate underflow at hook 1 [ 329.866645][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e74000: rx timeout, send abort [ 329.875033][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075b48c00: abort rx timeout. Force session deactivation [ 329.981612][T14934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.006491][T14934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.023678][T14934] bond0 (unregistering): Released all slaves [ 330.316165][T14959] netlink: 'syz.1.2562': attribute type 21 has an invalid length. [ 330.374949][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e74000: abort rx timeout. Force session deactivation [ 330.820386][T14985] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 330.997548][T15009] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 331.161329][T15024] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.208154][T15022] syzkaller1: entered promiscuous mode [ 331.234625][T15022] syzkaller1: entered allmulticast mode [ 332.085717][T15083] netlink: 'syz.3.2599': attribute type 1 has an invalid length. [ 332.124680][T15086] netlink: 'syz.4.2596': attribute type 2 has an invalid length. [ 332.204330][T15096] netlink: 'syz.3.2599': attribute type 10 has an invalid length. [ 332.244977][T15083] bond12: option mode: invalid value (10) [ 332.259877][T15083] bond12 (unregistering): Released all slaves [ 332.587607][T15126] netlink: 'syz.2.2609': attribute type 10 has an invalid length. [ 332.629445][T15126] ªªªªª»: left allmulticast mode [ 332.664989][T15126] ªªªªª»: left promiscuous mode [ 332.711890][T15126] bridge0: port 3(ªªªªª») entered disabled state [ 332.830415][T15126] ªªªªª»: entered allmulticast mode [ 332.866664][T15126] team0: Port device ªªªªª» added [ 333.006646][T15142] IPVS: stopping master sync thread 14740 ... [ 333.029392][T15138] netlink: 'syz.3.2614': attribute type 1 has an invalid length. [ 333.176236][T15138] 8021q: adding VLAN 0 to HW filter on device bond12 [ 333.189595][T15145] team0: Port device syz_tun added [ 333.298300][T15148] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 333.567437][T15174] netlink: 'syz.3.2624': attribute type 17 has an invalid length. [ 333.589860][T15174] __nla_validate_parse: 21 callbacks suppressed [ 333.589880][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2624'. [ 333.626823][T15174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2624'. [ 333.711886][T15181] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2627'. [ 333.953342][T15196] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2630'. [ 334.145026][T15201] netlink: 'syz.1.2631': attribute type 39 has an invalid length. [ 334.269167][T15204] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 334.458358][T15214] netlink: 'syz.2.2636': attribute type 2 has an invalid length. [ 334.630008][T15225] netlink: 'syz.1.2641': attribute type 29 has an invalid length. [ 334.657104][T15225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 334.904777][T15253] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2646'. [ 334.933811][T15252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2649'. [ 334.943748][T15253] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 334.964985][T15253] 0ªî{X¹¦: entered allmulticast mode [ 334.980404][T15253] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 335.112576][T15266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2650'. [ 335.195610][T15270] SET target dimension over the limit! [ 335.400574][T15278] can: request_module (can-proto-0) failed. [ 335.557048][T15295] bridge_slave_1: left promiscuous mode [ 335.566693][T15295] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.580145][T15295] ¾x9ÿ: left promiscuous mode [ 335.585702][T15295] bridge0: port 1(1¾x9ÿ) entered disabled state [ 335.618345][T15302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2661'. [ 335.669917][T15305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2661'. [ 335.953454][T15321] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 336.471124][T15357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.894056][T15382] netlink: 'syz.1.2686': attribute type 6 has an invalid length. [ 336.925481][T15382] netlink: 'syz.1.2686': attribute type 5 has an invalid length. [ 337.064250][T15394] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 338.173507][T15461] openvswitch: netlink: IP tunnel TTL not specified. [ 338.675119][T15493] __nla_validate_parse: 9 callbacks suppressed [ 338.675138][T15493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2717'. [ 338.711705][T15493] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2717'. [ 338.845228][T15508] vlan4: entered promiscuous mode [ 339.190097][T15537] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 339.274337][T15540] syzkaller1: entered promiscuous mode [ 339.286546][T15540] syzkaller1: entered allmulticast mode [ 339.301483][T15541] xt_CT: No such helper "snmp_trap" [ 339.596997][T15553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2736'. [ 339.819878][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2741'. [ 339.970325][T15569] can: request_module (can-proto-0) failed. [ 340.095842][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2748'. [ 340.135700][T15585] syzkaller0: entered promiscuous mode [ 340.143278][T15585] syzkaller0: entered allmulticast mode [ 340.251021][T15596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2750'. [ 340.594984][T15616] gre0: left promiscuous mode [ 340.690129][T15616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.696434][T15629] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2759'. [ 340.706290][T15616] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.729049][T15616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.806902][T15616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.815825][T15616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.832399][T15616] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 340.855369][T15628] veth0_to_bond: entered allmulticast mode [ 340.864588][T15633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.947122][T15635] vlan0: entered promiscuous mode [ 340.995333][T15641] netlink: 'syz.4.2761': attribute type 4 has an invalid length. [ 341.014425][T15641] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2761'. [ 341.026257][T15641] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 341.167630][ T29] audit: type=1804 audit(1786129339.607:10): pid=15650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2764" name="/newroot/557/cgroup.controllers" dev="tmpfs" ino=2843 res=1 errno=0 [ 341.215489][ T29] audit: type=1800 audit(1786129339.607:11): pid=15650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2764" name="cgroup.controllers" dev="tmpfs" ino=2843 res=0 errno=0 [ 341.221209][T15657] netlink: 'syz.4.2766': attribute type 1 has an invalid length. [ 341.337598][T15667] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2769'. [ 341.362271][T15669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2768'. [ 341.365682][T15657] 8021q: adding VLAN 0 to HW filter on device bond12 [ 341.750641][T15687] netlink: 'syz.1.2774': attribute type 1 has an invalid length. [ 341.795789][T15687] netlink: 'syz.1.2774': attribute type 3 has an invalid length. [ 341.806065][T15687] netlink: 'syz.1.2774': attribute type 7 has an invalid length. [ 341.822626][T15687] netlink: 'syz.1.2774': attribute type 8 has an invalid length. [ 341.832183][T15687] NCSI netlink: No device for ifindex 131092 [ 341.845440][T15695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.852748][T15695] IPv6: NLM_F_CREATE should be set when creating new route [ 341.877089][T15699] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 342.079746][T15711] nbd: socks must be embedded in a SOCK_ITEM attr [ 342.156373][T15716] netlink: 'syz.2.2783': attribute type 3 has an invalid length. [ 342.312273][T15725] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 342.337800][T15725] netlink: 'syz.0.2786': attribute type 1 has an invalid length. [ 342.468731][T15725] 8021q: adding VLAN 0 to HW filter on device bond11 [ 342.581732][T15733] bond11: (slave gretap0): making interface the new active one [ 342.639237][T15733] bond11: (slave gretap0): Enslaving as an active interface with an up link [ 342.685676][T15754] netlink: 'syz.2.2794': attribute type 4 has an invalid length. [ 342.761907][T15744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.770991][T15741] team0: entered promiscuous mode [ 342.783113][T15741] team0: entered allmulticast mode [ 343.011801][T15769] bond0: option xmit_hash_policy: invalid value (64) [ 343.078649][T15769] bond0 (unregistering): Released all slaves [ 343.404068][T15792] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 343.414678][T15792] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 343.422500][T15792] gretap0: entered promiscuous mode [ 343.429366][T15792] gretap0: entered allmulticast mode [ 343.457000][T15797] syzkaller1: entered promiscuous mode [ 343.463200][T15787] netlink: 'syz.2.2803': attribute type 1 has an invalid length. [ 343.472944][T15797] syzkaller1: entered allmulticast mode [ 343.701410][T15813] bridge_slave_0: default FDB implementation only supports local addresses [ 343.870129][T15828] 8021q: adding VLAN 0 to HW filter on device bond13 [ 343.938684][T15828] bond13: (slave geneve4): making interface the new active one [ 343.954124][T15836] __nla_validate_parse: 13 callbacks suppressed [ 343.954144][T15836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2816'. [ 343.969835][T15839] netlink: 576 bytes leftover after parsing attributes in process `syz.3.2817'. [ 343.984754][T15828] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 343.986705][T15840] netlink: 576 bytes leftover after parsing attributes in process `syz.3.2817'. [ 344.043733][ T9057] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.055578][ T9057] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.080389][ T9057] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.118239][ T9057] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.177496][T15853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2820'. [ 344.251158][T15856] : entered promiscuous mode [ 344.310767][T15858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2822'. [ 344.423377][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2825'. [ 344.438597][T15860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.438804][T15864] netdevsim netdevsim3: Direct firmware load for ÿ failed with error -2 [ 344.460407][T15864] netdevsim netdevsim3: Falling back to sysfs fallback for: ÿ [ 344.524578][T15867] syzkaller0: entered promiscuous mode [ 344.532273][T15867] syzkaller0: entered allmulticast mode [ 344.731581][T15877] bridge0: port 1(dummy0) entered blocking state [ 344.754306][T15877] bridge0: port 1(dummy0) entered disabled state [ 344.774028][T15877] dummy0: entered allmulticast mode [ 344.800835][T15877] dummy0: entered promiscuous mode [ 345.134189][T15901] syzkaller1: entered promiscuous mode [ 345.150003][T15908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.164060][T15901] syzkaller1: entered allmulticast mode [ 345.498259][T15935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2845'. [ 345.651092][T15943] netlink: 614 bytes leftover after parsing attributes in process `syz.1.2848'. [ 345.674761][T15949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2849'. [ 345.796451][T15958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2853'. [ 345.849494][T15961] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 345.859659][T15965] sctp: [Deprecated]: syz.1.2855 (pid 15965) Use of int in max_burst socket option deprecated. [ 345.859659][T15965] Use struct sctp_assoc_value instead [ 346.092110][T15974] bond0: entered promiscuous mode [ 346.099506][T15974] bond_slave_0: entered promiscuous mode [ 346.240034][T15986] team0: Port device syz_tun removed [ 346.254766][T15986] dummy0: left allmulticast mode [ 346.267938][T15986] dummy0: left promiscuous mode [ 346.290092][T15986] bridge0: port 1(dummy0) entered disabled state [ 346.366905][T15986] bond0: (slave bond_slave_0): Releasing backup interface [ 346.409894][T15986] bond0: (slave bond_slave_1): Releasing backup interface [ 346.471087][T15986] team0: Port device team_slave_0 removed [ 346.501062][T15986] team0: Port device team_slave_1 removed [ 346.519264][T15986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.527321][T15986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.536998][T15986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.544978][T15986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.557338][T15986] bond13: (slave geneve4): Releasing active interface [ 346.583825][T15995] team0: Mode changed to "loadbalance" [ 346.622752][ T9057] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.665305][ T9057] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.697923][ T9057] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.736130][ T9057] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.777084][T16015] validate_nla: 3 callbacks suppressed [ 346.777103][T16015] netlink: 'syz.1.2869': attribute type 1 has an invalid length. [ 346.791962][T16015] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 346.865307][T16018] team0: Device gtp1 is up. Set it down before adding it as a team port [ 347.238434][T16039] netlink: 'syz.1.2877': attribute type 4 has an invalid length. [ 347.398318][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.412089][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.421056][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.434715][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.447752][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.472105][T16048] vlan0: Caught tx_queue_len zero misconfig [ 347.535948][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.548084][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.560659][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.605106][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.627689][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.829557][T16055] team0: entered promiscuous mode [ 347.860332][T16055] team_slave_1: entered promiscuous mode [ 347.871571][T16055] ªªªªª»: entered promiscuous mode [ 347.899549][T16061] bond0: (slave bond_slave_1): Device is not bonding slave [ 347.907027][T16061] bond0: option active_slave: invalid value (bond_slave_1) [ 347.919254][T16061] bond0 (unregistering): Released all slaves [ 347.982240][T16062] batadv_slave_1: entered promiscuous mode [ 348.547942][T16105] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 348.604174][T16055] batadv_slave_1: left promiscuous mode [ 348.611666][T16055] team0: left promiscuous mode [ 348.621566][T16055] team_slave_1: left promiscuous mode [ 348.643560][T16055] ªªªªª»: left promiscuous mode [ 348.730864][T16116] tipc: Started in network mode [ 348.742851][T16116] tipc: Node identity 080211000001, cluster identity 4711 [ 348.761700][T16116] tipc: Enabled bearer , priority 0 [ 348.799933][T16119] syzkaller1: entered promiscuous mode [ 348.812880][T16119] syzkaller1: entered allmulticast mode [ 349.108115][T16156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.171611][T16161] __nla_validate_parse: 14 callbacks suppressed [ 349.171626][T16161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2904'. [ 349.278364][T16044] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.292824][T16044] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.300464][T16044] bridge_slave_0: entered allmulticast mode [ 349.309685][T16044] bridge_slave_0: entered promiscuous mode [ 349.318902][T16044] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.327086][T16044] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.335249][T16044] bridge_slave_1: entered allmulticast mode [ 349.343277][T16044] bridge_slave_1: entered promiscuous mode [ 349.387267][T16044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.399811][T16044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.443894][T16044] team0: Port device team_slave_0 added [ 349.455102][T16044] team0: Port device team_slave_1 added [ 349.497584][T16044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.504785][T16044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.534588][T16044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.548143][T16044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.556567][T16044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.583823][T16044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.682843][ T5629] Bluetooth: hci5: command tx timeout [ 349.704424][T16181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2910'. [ 349.724852][T16181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2910'. [ 349.788549][T16044] hsr_slave_0: entered promiscuous mode [ 349.801423][T16044] hsr_slave_1: entered promiscuous mode [ 349.897620][T16185] xt_CT: No such helper "netbios-ns" [ 349.904258][ T10] tipc: Node number set to 134418688 [ 350.369918][T16219] netlink: 'syz.1.2920': attribute type 1 has an invalid length. [ 350.479135][T16219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.499525][T16231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2922'. [ 350.624934][T16231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2922'. [ 350.947454][T16044] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 350.964050][T16044] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 350.992337][T16044] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.015142][T16044] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 351.056456][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2926'. [ 351.081439][T16254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2926'. [ 351.228963][T16259] ip_tables: iptables: counters copy to user failed while replacing table [ 351.242596][T16044] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 351.260371][T16044] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 351.281995][T16044] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.307229][T16044] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 351.493864][T16044] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 351.534881][T16044] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 351.547743][T16044] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.561267][T16044] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 351.682238][T16282] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2931'. [ 351.733391][T16282] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2931'. [ 351.753182][ T5613] Bluetooth: hci5: command tx timeout [ 351.760004][T16282] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 351.838124][T16282] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 352.074136][T16044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 352.118842][T16044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.129880][T16044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 352.169323][T16044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.184553][T16044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 352.210247][T16044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.229498][T16044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 352.289836][T16044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.491541][T16311] tc action pedit offset must be on 32 bit boundaries [ 352.517356][T16044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.555500][T16311] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 352.765202][T16335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2944'. [ 352.778912][T16044] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.793590][T16328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.798202][ T9061] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.809633][ T9061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.835209][T16331] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 352.846255][T16331] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 352.855860][T16331] tipc: Resetting bearer [ 352.886678][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.893885][ T9055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.406786][ T9062] tipc: Resetting bearer [ 353.415194][T16373] IPVS: ip_vs_edit_dest(): server weight less than zero [ 353.489170][T16376] sock: sock_timestamping_bind_phc: sock not bind to device [ 353.517851][T16376] netlink: 'syz.1.2953': attribute type 1 has an invalid length. [ 353.629061][T16382] syzkaller1: entered promiscuous mode [ 353.651305][T16382] syzkaller1: entered allmulticast mode [ 353.885179][T16404] veth0_to_team: Caught tx_queue_len zero misconfig [ 354.141810][T16044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.299336][T16044] veth0_vlan: entered promiscuous mode [ 354.357132][T16044] veth1_vlan: entered promiscuous mode [ 354.471061][T16044] veth0_macvtap: entered promiscuous mode [ 354.516898][T16044] veth1_macvtap: entered promiscuous mode [ 354.566781][T16044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.579610][T16436] netlink: 'syz.0.2967': attribute type 1 has an invalid length. [ 354.592867][T16044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.635658][T16145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.652589][T16145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.714915][T16146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.746339][T16146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.802456][T16418] __nla_validate_parse: 8 callbacks suppressed [ 354.802474][T16418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2964'. [ 354.937177][ T9055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.961829][ T9055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.006927][T16446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2970'. [ 355.040259][T16144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.057844][T16144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.278582][T16465] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2973'. [ 355.307206][T16465] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2973'. [ 355.310000][T16464] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2976'. [ 355.342073][T16465] netlink: 'syz.1.2973': attribute type 9 has an invalid length. [ 355.368085][T16464] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2976'. [ 355.390900][T16470] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2977'. [ 355.398058][T16464] netlink: 'syz.4.2976': attribute type 6 has an invalid length. [ 355.435202][T16474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.440419][T16464] netlink: 'syz.4.2976': attribute type 5 has an invalid length. [ 355.457368][T16464] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2976'. [ 355.870276][T16503] netlink: 'syz.4.2985': attribute type 4 has an invalid length. [ 355.900950][T16503] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2985'. [ 355.924916][T16498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.942121][T16504] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2985'. [ 356.045043][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.070327][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.082494][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.095715][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.108542][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.270279][T16519] netlink: 'syz.4.2989': attribute type 30 has an invalid length. [ 356.407864][T16526] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 356.418092][T16522] syzkaller0: entered allmulticast mode [ 356.449360][T16522] tipc: Started in network mode [ 356.460578][T16522] tipc: Node identity baa2bdfac77c, cluster identity 4711 [ 356.468363][T16522] tipc: Enabled bearer , priority 0 [ 356.479705][T16522] tipc: Resetting bearer [ 356.494378][T16522] x_tables: duplicate underflow at hook 1 [ 356.498746][T16532] xt_l2tp: v2 doesn't support IP mode [ 356.518135][T16521] tipc: Disabling bearer [ 356.697561][T16542] bridge0: port 3(vlan2) entered blocking state [ 356.719689][T16542] bridge0: port 3(vlan2) entered disabled state [ 356.732450][T16542] vlan2: entered allmulticast mode [ 356.739438][T16542] geneve0: entered allmulticast mode [ 356.750929][T16542] vlan2: entered promiscuous mode [ 356.756826][T16542] geneve0: entered promiscuous mode [ 357.018202][T16564] netlink: 'syz.1.2997': attribute type 1 has an invalid length. [ 357.322030][T16572] netlink: 'syz.4.3002': attribute type 5 has an invalid length. [ 357.825094][T16506] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.832512][T16506] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.841499][T16506] bridge_slave_0: entered allmulticast mode [ 357.850018][T16506] bridge_slave_0: entered promiscuous mode [ 357.868982][T16506] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.881677][T16506] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.890116][T16506] bridge_slave_1: entered allmulticast mode [ 357.898550][T16506] bridge_slave_1: entered promiscuous mode [ 357.945295][T16506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.969925][T16598] netlink: 'syz.0.3007': attribute type 1 has an invalid length. [ 357.977899][T16506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.064383][T16596] veth7: entered allmulticast mode [ 358.085004][T16506] team0: Port device team_slave_0 added [ 358.098199][T16598] veth0_to_bond: left allmulticast mode [ 358.141089][T16506] team0: Port device team_slave_1 added [ 358.155388][ T5613] Bluetooth: hci3: command tx timeout [ 358.237217][T16506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.258390][T16506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.325991][T16506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.380019][T16506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.396802][T16506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.425737][T16506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.591146][T16506] hsr_slave_0: entered promiscuous mode [ 358.598257][T16506] hsr_slave_1: entered promiscuous mode [ 358.608996][T16506] debugfs: 'hsr0' already exists in 'hsr' [ 358.615295][T16506] Cannot create hsr debugfs directory [ 358.980186][T16651] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 359.097725][T16657] syzkaller0: entered promiscuous mode [ 359.103523][T16657] syzkaller0: entered allmulticast mode [ 359.117507][T16657] netlink: 'syz.3.3026': attribute type 10 has an invalid length. [ 359.136664][T16657] geneve2: entered promiscuous mode [ 359.142140][T16657] geneve2: entered allmulticast mode [ 359.466579][T16665] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 359.502064][T16665] veth1_vlan: left promiscuous mode [ 359.533546][T16665] veth1_vlan: entered promiscuous mode [ 359.558374][T16665] veth1_macvtap: left promiscuous mode [ 359.566839][T16665] veth0_macvtap: left promiscuous mode [ 359.574565][T16665] veth0_macvtap: entered promiscuous mode [ 359.581824][T16665] veth1_macvtap: entered promiscuous mode [ 359.595175][T16665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.604139][T16665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.612558][T16665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.621171][T16665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.646572][T16665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.654785][T16665] 8021q: adding VLAN 0 to HW filter on device bond2 [ 359.667009][T16665] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.676805][T16665] 8021q: adding VLAN 0 to HW filter on device bond4 [ 359.686073][T16665] 8021q: adding VLAN 0 to HW filter on device bond5 [ 359.694166][T16665] 8021q: adding VLAN 0 to HW filter on device bond6 [ 359.759900][T16665] 8021q: adding VLAN 0 to HW filter on device bond8 [ 359.772092][T16665] 8021q: adding VLAN 0 to HW filter on device bond9 [ 359.797702][T16665] 8021q: adding VLAN 0 to HW filter on device bond14 [ 359.805773][T16665] 8021q: adding VLAN 0 to HW filter on device bond15 [ 359.845417][T16665] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 360.251848][ T5613] Bluetooth: hci3: command tx timeout [ 361.925591][T16150] wlan1: Trigger new scan to find an IBSS to join [ 362.313152][ T5613] Bluetooth: hci3: command tx timeout [ 362.433449][T16150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.501725][T16694] netlink: 'syz.1.3035': attribute type 3 has an invalid length. [ 362.575779][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.626494][T16146] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 362.734896][ T9055] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.773684][T16506] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.829138][T16506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.852369][T16506] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.885017][T16506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.910169][T16506] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.944615][T16506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.959153][T16506] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 362.974326][T16506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.085196][T16146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.327877][T16506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.376576][T16506] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.406812][T16150] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.414058][T16150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.490401][T16150] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.497674][T16150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.704140][T16756] __nla_validate_parse: 14 callbacks suppressed [ 363.704160][T16756] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3054'. [ 363.711996][T16761] Unsupported ieee802154 address type: 0 [ 363.807546][T16758] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 364.052293][T16778] netlink: 5152 bytes leftover after parsing attributes in process `syz.1.3060'. [ 364.205752][T16788] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 364.249089][T16788] nbd: must specify a size in bytes for the device [ 364.277106][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3063'. [ 364.393264][ T5629] Bluetooth: hci3: command tx timeout [ 364.732521][T16821] netlink: 'syz.1.3068': attribute type 16 has an invalid length. [ 364.768607][T16506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.775651][T16821] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3068'. [ 364.918194][T16826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3071'. [ 364.932528][T16826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3071'. [ 364.954171][ T9055] wlan1: Trigger new scan to find an IBSS to join [ 365.030106][T16506] veth0_vlan: entered promiscuous mode [ 365.110931][T16506] veth1_vlan: entered promiscuous mode [ 365.216890][T16506] veth0_macvtap: entered promiscuous mode [ 365.242401][T16838] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3075'. [ 365.258743][T16838] openvswitch: netlink: Message has 512 unknown bytes. [ 365.349773][T16839] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.375846][T16845] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3078'. [ 365.390386][T16506] veth1_macvtap: entered promiscuous mode [ 365.427792][T16506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.461545][T16506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.565115][T16839] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.622940][T16145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.637983][T16145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.662884][T16150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.678375][T16858] tipc: Enabling of bearer rejected, media not registered [ 365.731777][T16839] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.763299][T16145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.929080][T16839] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.016516][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.035075][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.090183][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.117620][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.433230][T16146] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.475207][ T5629] Bluetooth: hci3: command 0x0405 tx timeout [ 366.491782][T16146] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.630434][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.648757][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.659634][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.675177][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.686369][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 366.739224][T16898] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3092'. [ 366.754422][T16150] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.793058][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 366.839292][T16839] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.962464][T16839] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.001455][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3094'. [ 367.016943][T16910] bond0: Caught tx_queue_len zero misconfig [ 367.029088][T16839] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.380346][T16939] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 367.791864][T16896] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.800060][T16896] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.808153][T16896] bridge_slave_0: entered allmulticast mode [ 367.823464][T16896] bridge_slave_0: entered promiscuous mode [ 367.843851][T16896] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.860195][T16896] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.875779][T16896] bridge_slave_1: entered allmulticast mode [ 367.890100][T16896] bridge_slave_1: entered promiscuous mode [ 367.914177][T16150] wlan1: Trigger new scan to find an IBSS to join [ 367.939541][T16896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.952504][T16896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.972570][T16964] netlink: 'syz.2.3105': attribute type 15 has an invalid length. [ 367.990941][T16964] netlink: 'syz.2.3105': attribute type 15 has an invalid length. [ 367.995251][T16896] team0: Port device team_slave_0 added [ 368.014527][T16896] team0: Port device team_slave_1 added [ 368.065643][T16896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.073210][T16896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.100968][T16896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.113136][ T9055] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 368.129773][ T9055] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 368.134300][T16970] vxcan0: tx address claim with dlc 0 [ 368.145624][T16896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.156008][T16896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.183092][T16896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.194425][T16970] netlink: 'syz.2.3107': attribute type 5 has an invalid length. [ 368.248070][T16896] hsr_slave_0: entered promiscuous mode [ 368.256066][T16896] hsr_slave_1: entered promiscuous mode [ 368.262330][T16896] debugfs: 'hsr0' already exists in 'hsr' [ 368.268992][T16896] Cannot create hsr debugfs directory [ 368.318890][T16150] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 368.338455][T16150] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 368.362196][T16972] netlink: 'syz.2.3108': attribute type 1 has an invalid length. [ 368.424348][T16973] netlink: 'syz.2.3108': attribute type 4 has an invalid length. [ 368.492217][T16973] batman_adv: batadv0: Adding interface: geneve2 [ 368.499436][T16973] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 368.794357][ T5629] Bluetooth: hci4: command tx timeout [ 368.859808][ T9055] wlan1: Creating new IBSS network, BSSID 2e:e1:0d:df:e9:b7 [ 368.927117][T16986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.939025][T16986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 368.950073][T16986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 368.962590][T16986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.182508][T16986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.200158][T16986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 369.211732][T16986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 369.222361][T16986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.341992][T17009] __nla_validate_parse: 2 callbacks suppressed [ 369.342011][T17009] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3120'. [ 369.412534][T16986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.423732][T16986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 369.440222][T16986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 369.451251][T16986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.547071][T16986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.561362][T16986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 369.581561][T16986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 369.595841][T16986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.623233][T17018] syz_tun: entered allmulticast mode [ 369.645779][T16896] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 369.659512][T16896] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.672014][T16896] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 369.711603][T16896] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.719706][T16896] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 369.738253][T16896] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.751566][T16896] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 369.785147][T16896] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.932840][T16144] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.949368][T16144] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 369.967816][T16144] netdevsim netdevsim0 eth0: set [0, 2] type 1 family 0 port 256 - 0 [ 369.978004][T16144] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.074192][T16150] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.092192][T16150] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 370.101434][T16150] netdevsim netdevsim0 eth1: set [0, 2] type 1 family 0 port 256 - 0 [ 370.114915][T16150] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.141856][T16150] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.157556][T16150] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 370.166041][T16150] netdevsim netdevsim0 eth3: set [0, 2] type 1 family 0 port 256 - 0 [ 370.176416][T16150] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.253456][T16150] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.278132][T16150] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 370.292367][T16150] netdevsim netdevsim0 eth2: set [0, 2] type 1 family 0 port 256 - 0 [ 370.300896][T16150] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.380915][T17059] openvswitch: netlink: Flow key attr not present in new flow. [ 370.388771][T16896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.399888][T17059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3133'. [ 370.429755][T17061] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 370.449200][T16896] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.468628][T16144] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.475860][T16144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.517066][T16144] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.524337][T16144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.874396][ T5629] Bluetooth: hci4: command tx timeout [ 370.880392][T17087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3140'. [ 370.975682][T17096] netlink: 'syz.4.3142': attribute type 23 has an invalid length. [ 371.058782][T17100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3143'. [ 371.369795][T16896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.420228][T16896] veth0_vlan: entered promiscuous mode [ 371.436389][T16896] veth1_vlan: entered promiscuous mode [ 371.466549][T16896] veth0_macvtap: entered promiscuous mode [ 371.477035][T16896] veth1_macvtap: entered promiscuous mode [ 371.500473][T16896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.515547][T16896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.599114][T16150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.616945][T16150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.643313][T16150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.653204][T16150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.952994][ T5629] Bluetooth: hci4: command tx timeout [ 373.801984][T17083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.973528][T16145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.014353][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3150'. [ 374.019346][T16145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.158544][ T9055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.185058][ T9055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.397441][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3155'. [ 374.433514][T17149] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 374.709975][T17163] netlink: 'syz.1.3159': attribute type 1 has an invalid length. [ 374.735956][T17162] netlink: 'syz.1.3159': attribute type 1 has an invalid length. [ 374.803506][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.818736][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.828538][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.842062][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.855534][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.033812][ T5629] Bluetooth: hci4: command tx timeout [ 375.188777][ T9055] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.221527][ T9055] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.404897][T17190] bond1 (unregistering): Released all slaves [ 375.441090][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 375.779592][T17204] vlan3: entered promiscuous mode [ 375.789777][T17204] bridge0: entered promiscuous mode [ 375.849156][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3169'. [ 375.860960][ T9055] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.871688][ T9055] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.986469][T17221] Bluetooth: MGMT ver 1.23 [ 376.023290][T17226] netlink: 'syz.1.3171': attribute type 1 has an invalid length. [ 376.110915][ T9055] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.136894][ T9055] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.205348][T17228] team0: Device ip6gre1 is of different type [ 376.267596][ T9055] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.309040][ T9055] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.421502][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3175'. [ 376.465699][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3175'. [ 376.771374][T17259] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 376.953444][ T5629] Bluetooth: hci0: command tx timeout [ 377.128708][ T9055] dvmrp0: left allmulticast mode [ 377.854670][ T9055] bond0 (unregistering): Released all slaves [ 377.870321][ T9055] bond1 (unregistering): Released all slaves [ 377.898065][ T9055] bond2 (unregistering): Released all slaves [ 377.915429][ T9055] bond3 (unregistering): Released all slaves [ 377.934731][ T9055] bond4 (unregistering): Released all slaves [ 377.948442][ T9055] bond5 (unregistering): Released all slaves [ 377.970868][ T9055] bond6 (unregistering): Released all slaves [ 378.009333][ T9055] bond7 (unregistering): Released all slaves [ 378.030078][ T9055] bond8 (unregistering): Released all slaves [ 378.044057][ T9055] bond9 (unregistering): Released all slaves [ 378.059752][ T9055] bond10 (unregistering): Released all slaves [ 378.079275][ T9055] bond11 (unregistering): Released all slaves [ 378.099978][ T9055] bond12 (unregistering): Released all slaves [ 378.128083][ T9055] bond13 (unregistering): Released all slaves [ 378.146920][ T9055] bond14 (unregistering): Released all slaves [ 378.160851][ T9055] bond15 (unregistering): Released all slaves [ 378.348556][ T9055] : left promiscuous mode [ 378.396377][T17280] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 378.457592][T17280] netlink: 'syz.0.3181': attribute type 11 has an invalid length. [ 378.675555][T17294] SET target dimension over the limit! [ 378.706711][T17290] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3183'. [ 378.717914][T17290] veth0_to_bond: default FDB implementation only supports local addresses [ 378.755626][T17291] bond0: entered promiscuous mode [ 378.760790][T17291] bond_slave_0: entered promiscuous mode [ 378.789112][T17291] bond_slave_1: entered promiscuous mode [ 378.847052][ T9055] tipc: Left network mode [ 379.034716][ T5629] Bluetooth: hci0: command tx timeout [ 379.094826][T17171] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.113919][T17171] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.124998][T17171] bridge_slave_0: entered allmulticast mode [ 379.145405][T17314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3189'. [ 379.158425][T17171] bridge_slave_0: entered promiscuous mode [ 379.174999][T17171] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.183544][T17171] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.190966][T17171] bridge_slave_1: entered allmulticast mode [ 379.199218][T17171] bridge_slave_1: entered promiscuous mode [ 379.205281][T17314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3189'. [ 379.450332][T17328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3193'. [ 379.464376][T17171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.481913][T17171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.725780][T17171] team0: Port device team_slave_0 added [ 379.790612][T17171] team0: Port device team_slave_1 added [ 379.891660][T17351] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 379.979990][T17171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.006732][T17171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.050156][T17171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.085436][T17361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3203'. [ 380.122306][T17361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3203'. [ 380.180146][T17366] bond1: Removing last ns target with arp_interval on [ 380.188278][T17171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.196956][T17171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.238215][T17171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.557431][T17378] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3208'. [ 380.563992][T17171] hsr_slave_0: entered promiscuous mode [ 380.586916][T17171] hsr_slave_1: entered promiscuous mode [ 380.594197][T17171] debugfs: 'hsr0' already exists in 'hsr' [ 380.599994][T17171] Cannot create hsr debugfs directory [ 380.641591][T17397] netlink: 'syz.2.3211': attribute type 3 has an invalid length. [ 380.667202][T17396] veth0: entered promiscuous mode [ 380.678967][T17390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'. [ 380.755267][T17390] vxcan2: entered allmulticast mode [ 381.112828][ T5629] Bluetooth: hci0: command tx timeout [ 383.192947][ T5629] Bluetooth: hci0: command tx timeout [ 384.038241][T17413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3215'. [ 384.085567][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 384.124187][T17395] veth0: left promiscuous mode [ 384.521722][T17456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3222'. [ 384.554494][T17468] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3224'. [ 384.598123][T17470] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3222'. [ 384.632539][T17466] tipc: Enabled bearer , priority 10 [ 384.665370][T17477] netlink: 'syz.0.3227': attribute type 16 has an invalid length. [ 384.700311][T17477] netlink: 'syz.0.3227': attribute type 2 has an invalid length. [ 384.714452][T17477] netlink: 64110 bytes leftover after parsing attributes in process `syz.0.3227'. [ 384.811275][T17483] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3229'. [ 384.876683][T17487] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3229'. [ 384.921705][T17483] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.929153][T17483] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.989525][T17487] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.996810][T17487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.004397][T17487] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.011616][T17487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.035497][T17487] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3229'. [ 385.356926][T17487] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.364269][T17487] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.576944][ T9055] veth1_macvtap: left promiscuous mode [ 385.600016][ T9055] veth0_macvtap: left promiscuous mode [ 385.611296][ T9055] veth1_vlan: left promiscuous mode [ 385.662294][T17520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3233'. [ 385.805245][T17525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3233'. [ 385.851496][T17524] sctp: [Deprecated]: syz.1.3234 (pid 17524) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.851496][T17524] Use struct sctp_sack_info instead [ 385.949959][T17531] netlink: 'syz.1.3235': attribute type 2 has an invalid length. [ 386.097762][T17536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3237'. [ 386.301919][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 386.318166][T10101] tipc: Node number set to 2111749626 [ 386.906056][T17554] gretap0: entered promiscuous mode [ 386.979283][T17561] hsr_slave_1 (unregistering): left promiscuous mode [ 387.171890][ T9055] IPVS: stop unused estimator thread 0... [ 387.319317][T17588] netlink: 'syz.0.3252': attribute type 64 has an invalid length. [ 387.373031][T17593] netlink: 'syz.0.3252': attribute type 64 has an invalid length. [ 387.733414][T17614] netlink: 'syz.3.3254': attribute type 1 has an invalid length. [ 387.809009][T17171] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 387.825566][T17171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.847059][T17171] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 387.860183][T17171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.873306][T17171] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 387.897213][T17171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 387.905980][T17171] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 387.923525][T17171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.158164][T17641] vlan1: entered allmulticast mode [ 388.188437][T17641] veth0_vlan: entered allmulticast mode [ 388.218151][T17638] syzkaller0: entered promiscuous mode [ 388.237602][T17638] syzkaller0: entered allmulticast mode [ 388.282196][T17640] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 388.294204][T17640] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 388.311834][T17645] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 388.347102][T17640] tipc: Resetting bearer [ 388.379432][T17171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.466246][T17651] lo: entered promiscuous mode [ 388.481417][T17651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.591538][T17658] netlink: 'syz.2.3262': attribute type 1 has an invalid length. [ 388.608872][T17171] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.650051][ T9062] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.657296][ T9062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.719514][T16145] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.726795][T16145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.933426][T17670] xt_ecn: cannot match TCP bits for non-tcp packets [ 389.121108][T17691] sctp: [Deprecated]: syz.0.3271 (pid 17691) Use of int in maxseg socket option. [ 389.121108][T17691] Use struct sctp_assoc_value instead [ 389.205177][T17691] openvswitch: netlink: Duplicate or invalid key (type 0). [ 389.305763][T17705] C: renamed from lo (while UP) [ 389.344552][T17705] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 389.398658][T17703] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 390.000431][T17171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.261052][T17755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.691082][T17782] __nla_validate_parse: 9 callbacks suppressed [ 390.691102][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3285'. [ 390.943782][T17171] veth0_vlan: entered promiscuous mode [ 390.985290][T17171] veth1_vlan: entered promiscuous mode [ 391.081019][T17796] netlink: 'syz.0.3289': attribute type 29 has an invalid length. [ 391.101128][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3289'. [ 391.133132][T17171] veth0_macvtap: entered promiscuous mode [ 391.150700][T17171] veth1_macvtap: entered promiscuous mode [ 391.211118][T17171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.228047][T17800] netlink: 'syz.0.3291': attribute type 5 has an invalid length. [ 391.231427][T17171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.289860][T17802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3291'. [ 391.357453][T17804] bond2: entered allmulticast mode [ 391.378893][T17804] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.415039][T17810] netlink: 'syz.0.3294': attribute type 1 has an invalid length. [ 391.473860][ T9061] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.544034][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.586421][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.631776][T17810] bridge8: entered promiscuous mode [ 391.723953][T17818] bridge8: entered promiscuous mode [ 391.785617][ T9055] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.795119][T16150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.829390][T16150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.915576][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.941536][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.956950][T17836] bridge0: port 3(batadv1) entered blocking state [ 391.965190][T17836] bridge0: port 3(batadv1) entered disabled state [ 391.972000][T17836] batadv1: entered allmulticast mode [ 391.979688][T17836] batadv1: entered promiscuous mode [ 392.061003][T17842] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 392.433404][T16144] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 392.442758][T16144] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 392.460515][T17861] netlink: 'syz.3.3309': attribute type 64 has an invalid length. [ 392.720353][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 392.735600][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 392.748215][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 392.765254][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 392.774494][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.361534][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3321'. [ 393.382623][ T9055] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.398394][T17913] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3321'. [ 393.416714][ T9055] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.458628][ T9055] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.504544][ T9055] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.543628][T17920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3323'. [ 393.567386][T17920] openvswitch: netlink: Flow actions attr not present in new flow. [ 393.589312][T17920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3323'. [ 393.639697][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3323'. [ 393.656057][T17924] openvswitch: netlink: Flow actions attr not present in new flow. [ 394.245462][T17954] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3329'. [ 394.287150][T17954] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3329'. [ 394.346196][T17870] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.372815][T17870] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.413069][T17870] bridge_slave_0: entered allmulticast mode [ 394.445690][T17870] bridge_slave_0: entered promiscuous mode [ 394.496323][T17870] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.516762][T17870] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.539568][T17965] sctp: [Deprecated]: syz.4.3332 (pid 17965) Use of int in max_burst socket option. [ 394.539568][T17965] Use struct sctp_assoc_value instead [ 394.543325][T17870] bridge_slave_1: entered allmulticast mode [ 394.595242][T17870] bridge_slave_1: entered promiscuous mode [ 394.760504][T17870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.825616][T17870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.872913][ T5613] Bluetooth: hci1: command tx timeout [ 394.937923][T17870] team0: Port device team_slave_0 added [ 394.975837][T17870] team0: Port device team_slave_1 added [ 395.237782][T17870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.255274][T17870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.304657][T17870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.318117][T17870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.326885][T17870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.356504][T17870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.374733][T17994] bridge_slave_1: left allmulticast mode [ 395.380507][T17994] bridge_slave_1: left promiscuous mode [ 395.387335][T17994] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.398706][T17994] bridge_slave_0: left allmulticast mode [ 395.405430][T17994] bridge_slave_0: left promiscuous mode [ 395.411247][T17994] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.424362][T17991] netlink: 'syz.4.3342': attribute type 1 has an invalid length. [ 395.482343][T17870] hsr_slave_0: entered promiscuous mode [ 395.489976][T17870] hsr_slave_1: entered promiscuous mode [ 395.497209][T17870] debugfs: 'hsr0' already exists in 'hsr' [ 395.503839][T17870] Cannot create hsr debugfs directory [ 395.585155][T17991] openvswitch: netlink: IP tunnel dst address not specified [ 395.758395][T17870] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.770532][T17870] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 395.781126][T17870] netdevsim netdevsim0 eth3 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 395.800210][T17870] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.890463][T17870] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.906303][T17870] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 395.920734][T17870] netdevsim netdevsim0 eth2 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 395.931464][T17870] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.997410][T17870] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.007505][T17870] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 396.018560][T17870] netdevsim netdevsim0 eth1 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 396.031100][T17870] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.059371][T18011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3349'. [ 396.068967][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3349'. [ 396.128968][T17870] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.150738][T17870] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 396.171045][T17870] netdevsim netdevsim0 eth0 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 396.196083][T17870] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.658914][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3358'. [ 396.674683][T17870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 396.693204][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3358'. [ 396.702440][T17870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.717435][T17870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 396.721388][T18067] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3358'. [ 396.741816][T17870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.751745][T17870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 396.767680][T17870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.792534][T18067] geneve3: entered promiscuous mode [ 396.812254][T18067] geneve3: entered allmulticast mode [ 396.838078][T17870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 396.867898][T17870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 396.953252][ T5613] Bluetooth: hci1: command tx timeout [ 397.129285][T17870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.216368][T17870] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.261586][ T9058] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.268766][ T9058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.304432][T16144] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.311648][T16144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.689406][T18110] "syz.2.3370" (18110) uses obsolete ecb(arc4) skcipher [ 397.859985][T18117] syzkaller0: entered promiscuous mode [ 397.872334][T18117] syzkaller0: entered allmulticast mode [ 398.509977][T17870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.781026][T17870] veth0_vlan: entered promiscuous mode [ 398.805721][T17870] veth1_vlan: entered promiscuous mode [ 398.898814][T17870] veth0_macvtap: entered promiscuous mode [ 398.999564][T17870] veth1_macvtap: entered promiscuous mode [ 399.021564][T18175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3382'. [ 399.033091][ T5613] Bluetooth: hci1: command tx timeout [ 399.068446][T17870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.104436][T17870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.243681][T16140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.277087][T16140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.394119][T18046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.421286][T18046] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.481959][T16139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.512300][T16139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.610045][T16142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.640768][T16142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.943552][T18215] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3389'. [ 399.980256][T18214] team0: Device gtp0 is of different type [ 400.018064][T18218] ipvlan2: entered promiscuous mode [ 400.070070][T18221] x_tables: duplicate underflow at hook 1 [ 401.113048][ T5613] Bluetooth: hci1: command tx timeout [ 402.531757][T18188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.809235][T18255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3399'. [ 402.991220][T18265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3401'. [ 403.002054][T18259] IPVS: Scheduler module ip_vs_sip not found [ 403.032360][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3401'. [ 403.237476][T18279] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 403.246537][T18283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3404'. [ 403.526241][T18300] sctp: [Deprecated]: syz.2.3411 (pid 18300) Use of int in maxseg socket option. [ 403.526241][T18300] Use struct sctp_assoc_value instead [ 403.528412][T18298] netlink: 'syz.1.3408': attribute type 1 has an invalid length. [ 403.545455][T18302] sctp: [Deprecated]: syz.2.3411 (pid 18302) Use of int in maxseg socket option. [ 403.545455][T18302] Use struct sctp_assoc_value instead [ 403.645806][T18297] netlink: 'syz.0.3410': attribute type 3 has an invalid length. [ 403.654387][T18305] netlink: 'syz.4.3413': attribute type 4 has an invalid length. [ 404.076719][T18335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.226543][T18339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3426'. [ 404.310475][T18342] lo speed is unknown, defaulting to 1000 [ 404.326527][T18342] lo speed is unknown, defaulting to 1000 [ 404.345304][T18344] bridge1: entered allmulticast mode [ 404.356889][T18342] lo speed is unknown, defaulting to 1000 [ 404.368733][T18342] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 404.385442][T18342] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 404.422290][T18342] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 404.517925][T18342] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 404.630901][T18342] lo speed is unknown, defaulting to 1000 [ 404.651832][T18342] lo speed is unknown, defaulting to 1000 [ 404.675347][T18342] lo speed is unknown, defaulting to 1000 [ 404.699761][T18342] lo speed is unknown, defaulting to 1000 [ 404.726139][T18342] lo speed is unknown, defaulting to 1000 [ 404.782074][T18356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3428'. [ 404.903237][T18342] lo speed is unknown, defaulting to 1000 [ 404.995761][T18342] lo speed is unknown, defaulting to 1000 [ 405.014751][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3432'. [ 405.037525][T18342] lo speed is unknown, defaulting to 1000 [ 405.053572][T18363] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3432'. [ 405.072523][T18342] lo speed is unknown, defaulting to 1000 [ 405.442310][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'. [ 405.611295][T18396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3441'. [ 405.995980][T18429] bridge0: port 4(veth1_to_bridge) entered blocking state [ 406.012529][T18429] bridge0: port 4(veth1_to_bridge) entered disabled state [ 406.020521][T18429] veth1_to_bridge: entered allmulticast mode [ 406.030064][T18429] veth1_to_bridge: entered promiscuous mode [ 406.036624][T18429] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 406.053124][T18429] bridge0: port 4(veth1_to_bridge) entered blocking state [ 406.060396][T18429] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 406.631505][T18453] Bluetooth: MGMT ver 1.23 [ 407.718780][T18483] openvswitch: netlink: Multiple metadata blocks provided [ 407.911440][T18482] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 407.917653][T18482] CPU: 0 UID: 0 PID: 18482 Comm: syz.4.3463 Not tainted syzkaller #0 PREEMPT(full) [ 407.927032][T18482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.937112][T18482] RIP: 0010:kernfs_rename_ns+0x3a/0x800 [ 407.942731][T18482] Code: ec 38 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 51 c6 51 ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 66 5f bf ff 49 83 3f 00 0f 84 [ 407.962329][T18482] RSP: 0018:ffffc900038ff930 EFLAGS: 00010206 [ 407.968403][T18482] RAX: ffffffff82753c3f RBX: 0000000000000000 RCX: 0000000000080000 [ 407.976373][T18482] RDX: ffffc90003dc1000 RSI: 00000000000012b4 RDI: 00000000000012b5 [ 407.984334][T18482] RBP: 0000000000000006 R08: ffff8880261ebe00 R09: 0000000000000008 [ 407.992295][T18482] R10: 0000000000000007 R11: 0000000000000002 R12: dffffc0000000000 [ 408.000254][T18482] R13: ffff8880232a3870 R14: 0000000000000000 R15: 0000000000000030 [ 408.008216][T18482] FS: 00007facb7ebe6c0(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000 [ 408.017138][T18482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.023711][T18482] CR2: 00007f12dd14a8f0 CR3: 00000000547f4000 CR4: 00000000003526f0 [ 408.031670][T18482] Call Trace: [ 408.034936][T18482] [ 408.037853][T18482] ? kobject_move+0x321/0x720 [ 408.042684][T18482] ? kobject_move+0x321/0x720 [ 408.047356][T18482] kobject_move+0x560/0x720 [ 408.051851][T18482] ? __pfx_kobject_move+0x10/0x10 [ 408.056864][T18482] ? do_raw_spin_unlock+0xf5/0x210 [ 408.061999][T18482] ? get_device_parent+0x366/0x3a0 [ 408.067203][T18482] device_move+0xe0/0x720 [ 408.071583][T18482] hci_conn_del_sysfs+0xb8/0x1a0 [ 408.076581][T18482] hci_conn_del+0xc3d/0x1200 [ 408.081223][T18482] ? __pfx_iso_disconn_cfm+0x10/0x10 [ 408.086543][T18482] hci_conn_hash_flush+0x189/0x260 [ 408.091646][T18482] hci_dev_close_sync+0x7fc/0x10a0 [ 408.096834][T18482] ? __pfx___mutex_lock+0x10/0x10 [ 408.101960][T18482] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 408.107515][T18482] ? lockdep_hardirqs_on+0x7a/0x110 [ 408.112775][T18482] ? enable_work+0x1fd/0x230 [ 408.117398][T18482] hci_dev_close+0x108/0x260 [ 408.122064][T18482] sock_do_ioctl+0x101/0x320 [ 408.126711][T18482] ? __pfx_sock_do_ioctl+0x10/0x10 [ 408.131818][T18482] ? hook_file_ioctl+0x1f0/0x5f0 [ 408.136839][T18482] sock_ioctl+0x57a/0x7e0 [ 408.141162][T18482] ? __pfx_sock_ioctl+0x10/0x10 [ 408.146004][T18482] ? __fget_files+0x2a/0x420 [ 408.150610][T18482] ? __fget_files+0x3a2/0x420 [ 408.155281][T18482] ? __fget_files+0x2a/0x420 [ 408.159896][T18482] ? bpf_lsm_file_ioctl+0x9/0x20 [ 408.164852][T18482] ? __pfx_sock_ioctl+0x10/0x10 [ 408.169787][T18482] __se_sys_ioctl+0xfc/0x170 [ 408.174368][T18482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.180460][T18482] do_syscall_64+0x174/0x580 [ 408.185121][T18482] ? trace_irq_disable+0x3b/0x140 [ 408.190158][T18482] ? clear_bhb_loop+0x70/0xc0 [ 408.194829][T18482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.200711][T18482] RIP: 0033:0x7facb6f9e0d9 [ 408.205121][T18482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.224722][T18482] RSP: 002b:00007facb7ebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.233135][T18482] RAX: ffffffffffffffda RBX: 00007facb7225fa0 RCX: 00007facb6f9e0d9 [ 408.241098][T18482] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000004 [ 408.249055][T18482] RBP: 00007facb7035024 R08: 0000000000000000 R09: 0000000000000000 [ 408.257014][T18482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.264980][T18482] R13: 00007facb7226038 R14: 00007facb7225fa0 R15: 00007ffed9e90828 [ 408.272951][T18482] [ 408.275970][T18482] Modules linked in: [ 408.281806][T18482] ---[ end trace 0000000000000000 ]--- [ 408.323626][T18482] RIP: 0010:kernfs_rename_ns+0x3a/0x800 [ 408.329575][T18482] Code: ec 38 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 51 c6 51 ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 66 5f bf ff 49 83 3f 00 0f 84 [ 408.377561][T18482] RSP: 0018:ffffc900038ff930 EFLAGS: 00010206 [ 408.385543][T18482] RAX: ffffffff82753c3f RBX: 0000000000000000 RCX: 0000000000080000 [ 408.406049][T18482] RDX: ffffc90003dc1000 RSI: 00000000000012b4 RDI: 00000000000012b5 [ 408.415156][T18482] RBP: 0000000000000006 R08: ffff8880261ebe00 R09: 0000000000000008 [ 408.424148][T18482] R10: 0000000000000007 R11: 0000000000000002 R12: dffffc0000000000 [ 408.438255][T18482] R13: ffff8880232a3870 R14: 0000000000000000 R15: 0000000000000030 [ 408.447326][T18482] FS: 00007facb7ebe6c0(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 408.457139][T18482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.464023][T18482] CR2: 00007ffc1ac18158 CR3: 00000000547f4000 CR4: 00000000003526f0 [ 408.472174][T18482] Kernel panic - not syncing: Fatal exception [ 408.478589][T18482] Kernel Offset: disabled [ 408.482900][T18482] Rebooting in 86400 seconds..