last executing test programs: 6.385042408s ago: executing program 2 (id=9349): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffec2, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c020000", @ANYRESHEX=r1, @ANYRESDEC=r1], 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000100)=ANY=[@ANYBLOB="4907aaaaaaaaaaaaaaaa2430907460aaaa00431011aaab63f876a76c0cae145e4c"], 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x10, @private1, 0x8}, 0x1c) close(0x4) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x2000073}, 0x2c) unshare(0x2010900) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) 3.941408132s ago: executing program 2 (id=9362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000540)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000006c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}], 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x200feff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.643886378s ago: executing program 2 (id=9363): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000000)=0xab7, 0x4) close(0x4) sendmmsg$sock(r2, &(0x7f0000003e80)=[{{&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000240)="30b664a4c7f837bec7bf257a5cebf37bab75e30327937077a5d75cb8e885715e01dab4130b30188b201b2c280bb8a6e1498a473b3d0a22ad4bbb3820c2ab7f25169a8632d1080e2703f5f37ba27bfaf5a1e0e561a664694adb7f9d963fea9e1e25ff04aadcda38c011395e9eec4a0e58915387df973b112a8219127d7a85e314dbb807693042fa692175734cbf02f141857db96ba75cb2e297806d79e17e640e90ae5b96a27f2055966a92393f18c33dca866b1b0350c26cc39754b694388cf95da9d8de3b2e05af77442b4ba69708d12d4b433d68f2cc2b5f4af5b2830a4fc4c7ceb274b3af143d6a", 0xe9}, {&(0x7f0000000340)="bdb1497cc95cc8b69fb365d17ac012d623084abe0c392ddb1486", 0x1a}, {&(0x7f0000000380)="69fdbb26b6661d92de796c6715b0dce47a7075af0a21751e86fea26fe7f950038d606094bf366d7bd206439c7ab7378c25bfd91341bcfdd1d32dda75780755fe9229fbbee6c755666687665ea6bdc0301e23de9ed3b8934a3eb797cc48feba44cf37cb2063de9311ca025fcf7cbcb1b853bf548bc92f5b373fa4095dabc483da1037615128a246c2d720ccf0cd5920c53c79f464a61dab625409a4f76d8e497861f47e6d1792472339a749f26d940ccddfed8f97344ab4bc6be3d1342fe7de8e4008e8a39203ae", 0xc7}, {&(0x7f0000000480)="e84fa360dc356ba8b64b4d14a7b0d7440510113cc84069bc236ee4ad9d6b8b7f0dc93fe65b788ed3fcf540d95d2f5709ddcb9c7f6e9f449bc7ec270edc4809f900588ba7113ac7c626a8c584acc308c1a21933999c289d", 0x57}, {&(0x7f0000000500)="48e97369fdff11eb312e669379fd6dae628ce69b60cf877f4e0dd793eca8b1c2fbf1b237f3a0f8", 0x27}, {&(0x7f0000000540)="9278071ebaaba9d0f80ccb0a4e5f9564857f56997fc9924f63082d41de2b3cc0a391a1881f5091c2df6ec6dd0d8fe708dccce57bcb", 0x35}, {&(0x7f0000000580)="78e67e7be2138059103e1330fa0dd14eb9e14909f1d5fff45d16b9b71c705f9cbf8b47b6af0860b869c915f734680c35b84728e384242a2da5462c7ed9daa68cdc07444a7b0c455a69f8a0bd836d87a6de6671ca872a4a0d8251a9b868b83c8e99256942ec62c3f3d449aee39da2d2f33e4cc722218cea947dc60bc71214b97da3e49a730d2e8e084305f3fb300079206c8621e8352e5e3b1f5565136dbeb197b1f807462994e55ff8e6", 0xaa}, {&(0x7f0000000640)="56770db1411b71b2c0006e99b9a094bb1ef8df554364176f", 0x18}, {&(0x7f0000000680)="8897a5c2ccba0dbafdeb65cfb57fbba8fcfb75c3457112c763d6863772641072", 0x20}, {&(0x7f00000006c0)="cb488aeb076eea07d0b1c5258dc331f2021cde87ff3eb174097a88471f95028cbf8e0cc9307c4c1459f15b1ad657a2680eefe0d426b51f68b0689892bf257b399856f028f3e6fd42df82f7071bfc3800e11898469f47824a87b201e0dbe6f905800aa20a02c41bac4da727d1c9347a30020fab10ce69b6863eba55836ad3becb9e1d0ed6e8f1ee2e0e3959f00c6c363d2c51b4341a1677f410148f21f6625cb39b5f475f6d3a0ec76ba73d156d97840edc9ec203278acdde0938d88f3b708afd1b5ebad25848893d0c573ad1aea062a341befc0315783dc1293bf1a75ce7278d9c8afbf7560ead4c42e30bbb52bfcc32", 0xf0}], 0xa, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @mark={{0x14, 0x1, 0x24, 0x81}}], 0x48}}, {{0xfffffffffffffffc, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000900)="e5943cf391735f706be919bce2f48c203d2f60b17f6a6e9a9f81fc88c8961eb281aa3e818afe7b686fec0c704190ad4e5fc122ba98b0cc33802ab710fefc183f7c14b862e83f8cfc143e210bbeb7abad9ec01f32aa5b250e0d5f58179a0abda8cb74d18d3d4d83e843978e602880e20747ab2a0fe1facaafb3c07813b94ae1808d76e80e7daa957339a4dd179a1259d5812e72945deaed613f5a", 0x9a}, {&(0x7f00000009c0)="bcc73c8fdb8c7505d43b757e594378ed977f653742914a2669e18efc97663382e6118d1a4366d49b486c7eb2cb296e1a2ea6f74e4640e391ef4161405fe2b6", 0x3f}, {&(0x7f0000000a00)="22f3efa0b043799b3aa9205a707114fe58b3c7626d2813357124f01a93877c462248d72f", 0x24}, {&(0x7f0000000a40)="a7b691b2c1bd3705f793b835ac926a9e25a08cdc9bd9bc518d45c0d2ea7fa95ec0b1ffb6f1376de81eb5584376f88e44fb67cd3fa18b2cea8da9c4220794cd6013a3b9b89d1b2070441730475d424defad7604e5efe6304b7add9fa0ddfeb9a999d78316d9e15eb99fbf348a03dd576ec9cffc9c88ea7bfed88470569a0ae408afea18632810a679705db925ccd836719192b61826d41eb50e92d563460adafd316f", 0xa2}], 0x4, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0xf5}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xa05d}}, @timestamping={{0x14, 0x1, 0x25, 0x38b}}, @txtime={{0x18, 0x1, 0x3d, 0xcbbd}}, @mark={{0x14, 0x1, 0x24, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0xf0}}, {{&(0x7f0000000cc0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d40)="9e024f2d28f223c2edd1206436ea2d76ea30f39e09fc8fe5a65936f9f4a99680176261b5188d811938b5d25c5ce677ff6d6efe4199fdf3c0a8ebe8c6f369c17947034c3368e2b2f9cc516c618e12898b", 0x50}, {&(0x7f0000000dc0)="e20a431acc0a2aab6c3aefb6ad60185f1da1d2dbbc6cb80c00515c69274438587f9fa2777c6c2069730b8edbd3d639bb090dca7a294d3746921133", 0x3b}, {&(0x7f0000000e00)="3014cf73260dbfb8ec727288b517c36da5d0d723e58cca62ad52f595f065000b3ecf04dea883d2c36e35139d237c02f0dbeeb12c29eb2cbe12a5c0", 0x3b}, {&(0x7f0000000e40)="25a486588e4e0a06996e464541c7de1f3ff772ff8ad79f95b9fc1c0aa70ff4e0050c4614ce85b32e9f58785d620355bb4b263203458eb6", 0x37}, {&(0x7f0000000e80)="e3c4f8da8d8f52df9a99b560abd9344f07158638d2339af49cfc1d0d242a35dcf49f77dc8599d7e157c1446c3d13a53b2ba4720da0601239178f58b10b11f1185bb34b33", 0x44}], 0x5, &(0x7f0000000f80)=[@txtime={{0x18, 0x1, 0x3d, 0xbc94}}, @mark={{0x14, 0x1, 0x24, 0x10}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}], 0x78}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001000)="f77ffbbb29d943ee49b70d8b9531c564e06b9ad3d73aa4785d9539b408d3115a4d26de93ce54f4e8b1eb939751d6e933d0b5d6a4c539718bc0be543107a7024d30f34f9afed78e55a9e53c622291f8f839f1f59245d2ed78769ba827c3b12e683fca2d3ae60fbcea819ef58476f6286c1219fe4fb0d2ae8b255ef655a44bd17f51b1eaf11174b80d2147", 0x8a}], 0x1, &(0x7f0000001100)=[@mark={{0x14, 0x1, 0x24, 0xc7}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x883}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0xc0}}, {{&(0x7f00000011c0)=@can={0x1d, r1}, 0x80, &(0x7f0000002680)=[{&(0x7f0000001240)="b64359fc2611baf45a1d5214bc3b2c57ef37eabd747feb1970a36c1bf93a991c59eab24bca3b785f86ea219e62361b3bf92f26ef6b", 0x35}, {&(0x7f0000001280)="019425a63dafa30d8978775c1ed488e7def6fa2998d8848846aacd3380198b57492d141bdb87d7e03f4732805a3f72e85fb0697e4d8fd7f2f50560a27c82556ebf6b8305de998f2c9299109dbfb4029f8d5c76de", 0x54}, {&(0x7f0000001300)="f54b5cb8cf43fb6b04c8cdc8687e", 0xe}, {&(0x7f0000001340)="4116d275fbf7c1797385de7616248c5ea8abb43c63689af4c731c1bd56a386af0bebc0b8519ec6144216eafd5043bdebcacb6c913f96ae26670e864d3091f92b2e9b042b0ca59a67486c5b25ea428223f677b107d94aea88551a234ddff32a34a1362547e01db97e2b4dfa3de6a5052de8e4e3b2758474be4915687846c081bb0e1e3d2fa1", 0x85}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="a9c4e9e2b0d844ce412a62a73e8dff8cef6a05a85a42c786a0c5e4b90d77d4de2d482e0f9571a5e66d8d86601c965433f7e8049a32ac51c585ef1bcf0fdb822b5300e2ecde2dbdfee45118bf7dee7e673220a9a8", 0x54}, {&(0x7f0000002480)="914ba6fffb08ada7d1b7ba221886476fea3792d4fc7af9b7a1bc47137b1a35eb3a20f69a76b353fdecf7369e1b403345234fef5acdc359dfba779fcedbbbcb4b4883ec468f6b4998aeb654cc2a4b0c04d3b74d1f9e864d3ec97d2308f0ccfba3de760877e1e2cc44d07e2c0d9a08f71d0aca40d416c5cdddc6b1bf89ed38713088bad20eeb68f66b6324224660f3874070d495b2ffefc71f18a9ae7874defad800cfb7b25eba0db60dabbc089e906311d5f4ae2372f78c8bf491e80f3bb87551baaccfc3362e5044333c797a7e426d", 0xcf}, {&(0x7f0000002580)="e8db68332870b11069e5f03f9029f2b93ed6f3ca14617794d29100ba8cdb7715ebe87d96ecbef01d5cc6d386cea00776eb49769f5fb7a37884ac428a", 0x3c}, {&(0x7f00000025c0)="9d6a7234778a2cd05be38fcba9c1b38636", 0x11}, {&(0x7f0000002600)="f27765997204820a37a024aad51e3235323e9efeb42d65a100d2663327231ae433716d7d2ab8ce7e0ec531a09b6f4deb07eccd090d2e79cac0cd54b9745788f2c2345709e167", 0x46}], 0xa, &(0x7f0000002740)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x90}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002800)="d82ef77162c47627fecdcd3bed953b28edd17939230b5e7e0a1d3bf9ff8324e7a0e93c38f0934533ac99001b959320b7aabc113fda75f686074b8dc979c21b026b18a91f3c2cc6c324a76c47fd2d4de74134b55adf91c57bfdecb4c013617f2d8a55620d855d6b290ecbc727e715010951840d724168b5073f76acca9de232d89288049eeba70e7d2c0684514d28d681247fab4c695a19", 0x97}], 0x1, &(0x7f0000002900)=[@mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}], 0x78}}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000002980)="3fe397d2b1d9a09ed3616181de577d479a6b5699afbe84c43046ff112fb88b4b495402eb7ad51350f4e3d93007b55e187ef22cb8ccddd596cece5056ec247ea306b911ece3b7d9b3de345ca27fd316f10e2644788f20191842514adad10fa4e35ac6731eb803a12f676fd719dfd8768c9bc983b581096ebf53ceb5901d2660d4f4cd7089ef", 0x85}, {&(0x7f0000002a40)="807340bdbd52339529edd40e1483604f0d24172facb8d1c300e731fbd57389403eefdbe78dc0e219318b4563181a311974c79f2ed8", 0x35}, {&(0x7f0000002a80)="257b49119866d351c442f7ebfd854ab2f50fc0d849d1282188fc6e7458a08910b2ea57a81cfd7ac3ff7a32b66641615febb08b543fbe3f2f1378594092017c96836f832ed0a6884fc66ba0136fc44736cfb682f68a5551244a16eb2808eff4e7bacee2e1c67f196853fbf0c0c5b6eeeb6f8f467a51134818d2ff1b7a55b28b7c4bb3256b57cb9203fc6fce22bc1f4ba2beebec835961e192825c4322d4206e853efa2e3145992e47910d11182f8b84fb6b4d89a876c2e409ed628a525701bcf1050099", 0xc3}, {&(0x7f0000002b80)="3921cf7774b5c0d2d24c2287d26ceb0415e5d657a7ca50c219ca6d58e44671d8f9874edbf1531c41f3f9b0d1616b1fe0d2084a5c2bd5e611e4cab91bc87e53ab6064c60dc8bac46c1d936ee18d89eb0e5d595810d0c165c0a04c1d0db8e0157598eb453068b67185ee7152e6a0b288adc3f5c0eb2ef2c9c8c18eea411298d99d2a693ede3f8027a70285e7087cf56f385b8f8e3c186bb051f620c957bb21e23163cf51519b3c7630c6760c397a2e4a2099a35b79393f68e7cbababae6c8d25ae95c0b787b6a4e1ff4c7c6a8cc4dad649cb2a1d413d8cf407a58b8556bd9d5cfaff", 0xe1}, {&(0x7f0000002c80)="dd217a516708f09494ddefca5d5e8e911f41d1bbd6cd4f6e38037e8a13d9edc6939107b51a3be432b86552697707ef1fcd60d93f76d9053473b623c5b8f41933fa279e66b328f1b2d073678af13cd998b5c363c1254ec024f0196ec10f397722750bae5d9d80933cd14987c16bb4327b9ee6e024411160de6b7d8f7743ddcd99ce8d139855c939f21ccd6475c5a60f5d5f156e4349ee5984e2752512ed01e59cd2bbb3abe1f31a30a42bb20bb79e30dd0d187d036b27013119155c428a20d2852815f1fb03eb2f8a3004f30a52eccbbfc5f3dd0041786163e2962cc4e4981e8d2f9f81", 0xe3}, {&(0x7f0000002d80)="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", 0x1000}, {&(0x7f0000003d80)="671693307542cb42765cbb192d06454899e15c99c8b0e8431b877ffed17be8538c4bc33fcb58aeeb920bf91b2f", 0x2d}], 0x7, &(0x7f0000003e40)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}}], 0x7, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket(0x2, 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x16, 0x1, 0x0, 0x1, [@generic="88046fa3301e12b1dbed7c66a9a96b690465"]}]}, 0x3c}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf7f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0b1547ed385cbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) close(r6) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004040)=ANY=[@ANYBLOB="480000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="582a0500231a0500200012800e00010069703665727370616e0000000c000280060003003000000008000a00", @ANYRES32=r1, @ANYBLOB="8db54644533b9d58b278fc178d5da0de863bbadba6605bae"], 0x48}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9890) 2.987042638s ago: executing program 4 (id=9367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}}, 0x40) 2.796659377s ago: executing program 1 (id=9368): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa, 0x4e21, 0x80000, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1200000000000000290000003b"], 0x28}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x3, 0x87) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731319806f13"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000540)={0x2d8, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3df}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x53}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_LINK={0x13c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdebd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff53}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x900000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x709f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x201}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x937}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000000}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x8090}, 0x2000001d) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r4], 0xfdef) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x2c, 0x26, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xc}, {0xfff2, 0xc}, {0xd, 0xa}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200088c1}, 0x80) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x2c, 0x26, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xc}, {0xfff2, 0xc}, {0xd, 0xa}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200088c1}, 0x80) 2.793283855s ago: executing program 4 (id=9369): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x810, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000300)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x40800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x92, &(0x7f00000015c0)=""/146}, 0x94) 2.686978825s ago: executing program 2 (id=9372): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x25, 0x301, 0x70bd28, 0x25dfdbfb, {0x15}, [@typed={0x5, 0x14e, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24008002) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, &(0x7f0000000300)) (async, rerun: 32) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x809}, 0x20) (async) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) (rerun: 64) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x1a, 0x3, 0x4) (async, rerun: 64) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f00000000c0), 0x4) (rerun: 64) 2.463554515s ago: executing program 2 (id=9373): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47ed2345653602648dcaaf6c26c291214549f100000000000000ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a009b00000000000000000000080000000eceb6b342a570f4f2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000440)={r1, r1, 0x7, 0x78, &(0x7f00000003c0)="cbfe542994a3cc8f3f26fea7926a7caa108c2bee4249cbd8780741193ad5434ecee7e44ef5d6a568b014fdc8382fe0e01ff6b0a9730ad81c9a58bdd3e02e2b6c0d80b1e04beb91cb71d59053984b1549f624c7b6c309b9f95e235a6b81a649d284cff3d9cc7fa68b16e041d855b7a47ff68f7a67cc30cac2", 0x6, 0xf7, 0xfffb, 0xf, 0x7, 0x0, 0xfa14, 'syz0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0xff}, 0x3}, [@migrate={0x50, 0x11, [{@in=@local, @in=@local, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0xff}, 0x0, 0x0, 0x0, 0x3000000, 0x11, 0xa}]}]}, 0xa0}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xfffffff7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x4040800) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) gettid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x9, 0x2}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e20}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20001080}, 0x45010) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) r8 = socket$igmp6(0xa, 0x3, 0x2) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000580), r0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r9, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xe080) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x758, 0x190, 0x190, 0x270, 0x360, 0x360, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x32, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 0x2022, 0x50}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x8000007f], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [], 'dummy0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x48000000}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@loopback, 0x5, 0xc}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x1, 0x9, 0x3}}, @common=@rt={{0x138}, {0x0, [0x0, 0xc], 0x0, 0x0, 0x1, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @empty, @remote, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8) r10 = accept4$inet6(r8, &(0x7f0000000680)={0xa, 0x0, 0x0, @private2}, &(0x7f00000006c0)=0x1c, 0x40000) connect(r10, &(0x7f0000000700)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x80) 2.404880387s ago: executing program 1 (id=9375): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x5, 0x18, 0x0, 0x0, @binary="01"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a00010029bd7000000000000220"], 0x2c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0xffffffff}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x68}}, 0x0) 2.217245928s ago: executing program 1 (id=9378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x10003}, 0x50) (async) r1 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) (async, rerun: 32) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) (async) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}}, 0x2400e0d5) (async) syz_init_net_socket$x25(0x9, 0x5, 0x18) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x538}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_ethernet(0x52, &(0x7f0000000180)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x3, 0x1, 0x3}}, {@generic={0xe90b, "28bffae8c460d277c1a8bae19d03499a6c8b292b52d1572a5fa6dd70689661a1dfd4321fcfcfda101abc0f66e9b86c1c3aa105134fad0e3c1026d294"}}}, &(0x7f0000000280)={0x1, 0x2, [0xaac, 0xe8e, 0x2d9, 0x847]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9, r8}, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r10, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x44, 0x2, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x24000010) 2.104159642s ago: executing program 2 (id=9379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0xd, &(0x7f0000000180)=0x1f, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @mcast2, 0xe7a}, 0x1c) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r12, 0x1, 0x3e, &(0x7f0000000000)=0x1, 0x4) write(r6, &(0x7f00000004c0)="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", 0xfc) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a30000000003800040014000100"], 0x60}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 2.030383491s ago: executing program 1 (id=9382): socket(0x1d, 0x80802, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000000)=0x9, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 1.860645822s ago: executing program 1 (id=9383): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0xfffffffffffffffd) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000003b00)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@mcast2, 0x0, 0x5, 0x0, 0x3, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa04, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x0, 0x3, 0x8, 0x49}]}]}, 0xfc}}, 0x0) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x31863}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x190, r6, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3b66d863}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa00000000000}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x366}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd11a}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x404}, 0x880) close(r4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000002c0)={0xa002a014}) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x6, @local, 0x7}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x240280d1) 1.847868086s ago: executing program 0 (id=9384): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x1411, 0x701, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}}, 0x84) 1.824828192s ago: executing program 3 (id=9385): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0xee37, @empty, 0xab2}, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1, {[0x9, 0x3, 0x400000, 0x1, 0x6, 0xb56, 0x401]}}, 0x5c) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x48) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000980)=@ethtool_coalesce={0xe, 0x2, 0x5a6, 0x400, 0x5, 0x10001, 0x2, 0x0, 0x8, 0x38, 0x1ff, 0x5, 0xfffffffd, 0x8, 0x2, 0xb, 0x81, 0x4, 0xfffff20f, 0x1, 0x3, 0x73, 0x9}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_audit(0x10, 0x3, 0x9) write$cgroup_type(r1, &(0x7f0000000280), 0x9) sendmsg$AUDIT_GET(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3e8, 0x2, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000400}, 0x800) splice(r4, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r5, 0x0, 0x80000025a5, 0x0) close(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close(0x4) 1.732089232s ago: executing program 4 (id=9386): r0 = socket(0xa, 0x3, 0xff) unshare(0x6a040000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0xf9, 0x1, 0x50, @local, @loopback={0x0, 0xffff888101827518}, 0x80f, 0x20, 0x1, 0xfffffff8}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000800}, 0x4000042) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01062abd7000ffdbdf250600000006000b000a"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r3, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x352e0b40d005de65}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'ip6_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000005}, 0x4045) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @mss={0x2, 0xfffffff7}, @timestamp, @sack_perm, @window={0x3, 0x2, 0x5}, @window={0x3, 0x2, 0x2}], 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x60, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x4, 0x4, @loopback}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x200400c4}, 0x44014) r7 = socket$kcm(0x2b, 0x1, 0x0) close(r7) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) close(r7) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1.680792326s ago: executing program 0 (id=9387): r0 = socket(0x1, 0x8, 0x2e) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x26, 0x80000, 0x4f) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r4, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8}]}, 0x40}}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0x22}]}, 0x1c}}, 0x8010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x40000000}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000801}, 0xc085) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xcbb5) syz_open_procfs$namespace(0x0, 0x0) 1.570762925s ago: executing program 0 (id=9388): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111c9000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044) 1.440577756s ago: executing program 3 (id=9389): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f00000019c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x171, 0x171, 0xc, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x44, 0x0, 0x8f, 0x5}, @datasec={0x2, 0xa, 0x0, 0xf, 0x1, [{0x1, 0x81, 0x5b}, {0x3, 0x0, 0x80}, {0x4, 0xffff96e7, 0x5}, {0x2, 0x5, 0xad}, {0x5, 0x200, 0x3}, {0x4, 0x82c8, 0x800}, {0x4, 0x8, 0x1ff}, {0x4, 0x1, 0xfffffff8}, {0x1, 0x101, 0x3}, {0x2, 0x10000, 0x2}], "8a"}, @var={0x10, 0x0, 0x0, 0xe, 0x5}, @struct={0x3, 0x9, 0x0, 0x4, 0x0, 0x7, [{0xd, 0x4, 0x3d}, {0xb, 0x3, 0x7d}, {0x1, 0x3, 0xe}, {0x1, 0x4, 0x7}, {0x3, 0x2, 0x1}, {0x6}, {0xd, 0x5, 0x40}, {0xb, 0x1, 0x4}, {0x8, 0x3, 0x400}]}, @union={0xc, 0x5, 0x0, 0x5, 0x0, 0x3, [{0xb, 0x0, 0x8}, {0x4, 0x5, 0xe7}, {0xb, 0x4, 0xd79b}, {0xf, 0x2, 0x80000001}, {0xa, 0x5}]}, @float={0x8, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x0, 0x2e, 0x5f, 0x61, 0x0, 0x2e, 0x30, 0x30, 0x61, 0x5f]}}, &(0x7f0000001880)=""/215, 0x198, 0xd7, 0x0, 0x5, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0xffffffc0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$kcm(0x29, 0xf, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="a2c781b1bb1b84f0cc0ecbfefc24d238bdef509fb466612ad3b3f211f758093c6942deae03f03ceac0ccea9dfafb95995c1b9460e45c8348f005a4799d307a1f1320dcb1914c8d8364fc1c572008610cccec6385d95ef9", 0x57}, {&(0x7f00000001c0)="fb36", 0x2}, {&(0x7f0000000200)="2337e13db425ca6022961c040dc6576b90426ca40a8e38fd5301f408ea073e14fc4e409149c25d306768c30c1651fd1e2768de8f54458a2f1118af607c05d989306657ead6d0e05390d6f0b6e40129d97fdf46b4a71bc332e2b786fa462ff7f09ebb5ad05e393785d4d839047f9c97f063cc66b376cd8841da1808edbd7c5b07c13abfc0f901df7ecd7ae409", 0x8c}], 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1238}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000040)=@raw=[@ldst={0x3, 0x2, 0x3, 0xa, 0x1, 0xfffffffffffffff2}, @exit], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000000400"/17, @ANYRES32=r10, @ANYBLOB="8106010000000200140012800b000100627269646765000004000280"], 0x34}}, 0x20044002) r11 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfe, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x2c}}, 0x0) r12 = socket(0x10, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0xfffffffffffffcfc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r13, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212838d05d337"], 0x33fe0}}, 0x40880) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) r14 = accept4$tipc(0xffffffffffffffff, &(0x7f0000001580)=@id, &(0x7f00000015c0)=0x10, 0x40800) ioctl$NILFS_IOCTL_GET_VINFO(r14, 0xc0186e86, &(0x7f0000001680)={&(0x7f0000001600)=[{0x6, 0x1, 0x2, 0x9}, {0x0, 0x3, 0x6, 0xf}, {0x400, 0x1, 0x6, 0x7ff}, {0x80000000, 0xfffffffffffffff9, 0xfff, 0xe1}], 0x4, 0x20, 0x9, 0x2}) 1.377821855s ago: executing program 0 (id=9390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0d00000009000000040000000100000000000000", @ANYRES32=r1], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x4, r2, 0x0, 0xffffffff00000000}, 0x38) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x9, 0x9, 0x8, 0x2, 0x0, 0x70bd29, 0x25dfdbfb}, 0x10}}, 0x4008000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800) bind$unix(r4, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r2, 0x1d, 0x0, 0x1, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0]}, 0x40) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000170a01020000000000000000020000020900013ca2c94b3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) 1.287621179s ago: executing program 3 (id=9391): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async, rerun: 32) close(r1) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r5, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x118, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xd4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0xfffffffffffffdeb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x140}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) 1.17273166s ago: executing program 0 (id=9392): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) socketpair(0x18, 0x6, 0x8, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000009, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) socket(0x11, 0x2, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000181100000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f00000003c0), &(0x7f0000000440)=0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000001900)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100008407000000010000000100000007000000005f2e5fb030005f5f"], 0x0, 0x3a, 0x0, 0x1, 0x8}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(r8, &(0x7f0000002080)={0x0, 0xffffffffffffff29, &(0x7f0000000180)=[{&(0x7f00000000c0)="91", 0x1}], 0xf, 0x0, 0xffffffffffffffa1}, 0x4008841) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="55ad", 0x2}], 0x1}, 0x4c03) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70e1f1dc", @ANYRES16=r4, @ANYBLOB="00042abd7000fddbdf25080000000c00018008000100", @ANYRES32=r6, @ANYBLOB="0c000280080002004000000018000280140003801000018004000300060002005e000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) accept4$inet(r3, &(0x7f0000000480)={0x2, 0x0, @empty}, &(0x7f00000004c0)=0x10, 0x80000) 1.094260514s ago: executing program 4 (id=9393): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x2e, 0x0, 0x8}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000040000000e000000100000009844fe7b8fbf3d1ae99df51b3bcd89fc47e7b05d07acbd15754f6a7d716aa4f686a685dad0133eeb24abe164bd7dd34436e1a05e2f15fc6105643211cae167f4067c926055d907bc2bfee5e63b7b2376a02278071ec846b31beabfd514d3892e57640fa5c6f54ece2aabe9a7334ac374e0f702ed3187c2eb4025ddaf5535f5f5a206772c84451ab68a47247a2919c79739c8cd422bcb38cb6b99d42fea14845c8d", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x400, 0xf, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000780)={0x5, &(0x7f0000000680)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}]}) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000780)={0x5, &(0x7f0000000680)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}]}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r7, @ANYBLOB="0800020096a68e15670b"], 0x20}}, 0x40000c0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r7, @ANYBLOB="0800020096a68e15670b"], 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40032e0c0c144e4a5694e67f4900000010000305", @ANYRES32=0x0, @ANYBLOB="00000000063800001800128008000100767469000c00028008000400e000000108000a00", @ANYRES32=r7, @ANYBLOB], 0x40}}, 0x440b0) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x16, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1805f4ff070000000000b6b5e8d40404ccce1100000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x11, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a86a4e08", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000) 1.013323624s ago: executing program 0 (id=9394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @random="f287a0060f06", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @local}, @time_exceeded={0x3, 0x8998bcce58ae484, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3f}}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000005000f000006"], 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x10, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRES32=r5, @ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000940)={{r8, &(0x7f0000000080)='&&!F\x00', 0x0, &(0x7f0000000140)={@_ha_fsid={[0x8, 0x100]}, {0x4, 0x8e, 0x2, 0x8}}, 0xb, &(0x7f0000000240), &(0x7f0000000300)=0x9}, 0x4, &(0x7f00000008c0)=[{0x2, 0x7, &(0x7f0000000340)='{\x00', &(0x7f00000004c0)="f3e95a7d9fab8777132c10c4855c84bdb35c8b4e81e0fb91ec786387854aa07f6a470b5bb2d8c187154a17f2be9d7fd808892b165dd5d02dccd3506131cafdb5d2", 0x41, 0x20}, {0x3, 0x2, &(0x7f0000000540)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000580)="5ca1b354421014e5540a8ac08ce794bf2fccf7", 0x13}, {0x1, 0xa4, &(0x7f00000005c0)=',[!^\x00', &(0x7f00000006c0)="6d639542a9a519185644fb9dc13474c866437be5bef0471084e191f038d5e1363a68763a7ef3307a2154295f5f908e72e536285579a1a92a129e280d5e1e79be8a3062c7e9d5b3b891ccb27815c45052fdbac96e811b0665c6c603dd613d433b473ad0e1ddec1dc0cdf0e100c941863bb7f35c9d2e95a00225a7900ee929ed3daca8d8197a477c9d6655fc55ddaf14076f2f3a9f17a89bf2c8093114edfbba6d95d43deef349c0f0c03a791d95c53baeeec83b1ef67842bda892f4921e59d2e5327b03eb9225f4edccca151a0d18347ec70fdcedf383", 0xd6, 0x8}, {0x1, 0x5, &(0x7f00000007c0)='%@:\x00', &(0x7f0000000800)="9cef93bda103fc20705b576569cce975051cea172635a087bbf41d54cf489a3728e98a2184a26430145a7ce7910dc52265e5813c2725094d97a190be5c23aa8189fe228b89d28e77c222d1c77e938c82a1e2a705fed37d1051bc69d07ab7220184ed40697e747f2699e1afbca6b05babfb266a51159114aaae3f6b1bde9bf37b6b3df1dbfb2a7f30ea0ee0f2", 0x8c}]}) ioctl$FIONCLEX(r9, 0x5450) 1.012133016s ago: executing program 4 (id=9395): r0 = socket(0xb, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c080) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0x8, &(0x7f0000000b00)={&(0x7f0000000300)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000240)=0x9, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d00)={0x0, 0x0, 0x0}, &(0x7f0000000c00)=0xc) sendmmsg$unix(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="114a", 0x2}], 0x1, 0x0, 0x0, 0x400e815}}], 0x2, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_x25_SIOCADDRT(r6, 0x890b, &(0x7f0000000600)={@null, 0x5, 'rose0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0) r7 = socket(0x1, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0f00000008000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffff00"/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r7, 0x1}, 0x20) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r7, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000801}}], 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008b80)={&(0x7f0000008a40)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d0000000001000000030000000b00000000000000fbffffff0300000007000000010000000000"], 0x0, 0x46, 0x0, 0x1, 0x3}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r9}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1400"/20], 0x14}, 0x1, 0x0, 0x0, 0x4884}, 0xa810) recvmmsg(r6, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x3e, 0x72fa70bb4c377980, 0x70bd2a, 0x25dfdbfd, {0x20}, [@nested={0x10, 0x16, 0x0, 0x1, [@typed={0xb, 0x10d, 0x0, 0x0, @str='+\'+(&*\x00'}]}, @typed={0x8, 0x10d, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x87}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20008845) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000bc0)=[{&(0x7f0000002100)="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"/4096, 0x1000}, {&(0x7f0000003100)="e92c052bdea3e3a40d10683b704e13fa43c6cfad986ce7f3e5458746bd98b8260000000070f40f0fadd55cc3f8f0139173fefe342f170000000000000000", 0x3e}, {&(0x7f0000003140)="9af3190b8845b2a6a44a1f3d21f8a1bcfce6d03e666a44259df2a744f737c168e08c884b9a548570a263dbe5467416535464af0fda4cbd88b9f37f5c03b197fdf9cd312e75cbd63d44dc14028d37c0a53fa0ac46b07b4175fd05a01e93177794c8c44ad6a8b8030b63291889c4bd2e5f723aa67bdc5d71d8c088c5660ce2b7bbc60bd84f2f41ba629e720a305fd8b149caf00d72c5be8f6bdef9b6c47c8365845a5ccb41d6ee1086a901443235faa7", 0xaf}, {&(0x7f0000003200)="d7525fd7d7da5a056b74fb90c33ad99b07285575db3f3f71569d59c0461f614ada2b6fd32c7a5cb24103410a92fb99c0f24ad42f6a54f2a3cc04675e4fe97ce7ac2c20cad0d5db0d7b966bc2", 0x4c}], 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xf, &(0x7f0000000e80)=ANY=[@ANYBLOB="00820101050000008520000004000000185a0000100000000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r10, @ANYBLOB="00000000000000001800000002000000000000000101000018380000040000000000000000000000402f1e06cdb567fbdc386a1fe96c07801586e3caf4ac134ba7a845eb3746f930a9b6fe94558883da69a7dd286c0018b0be0e155907a62a56f0a5026859cbb693a806b313d5770c39d11cb13dc7a4b39dc11a88b112776839c5a58e7715b5262dd1c28f9f5673"], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbc, &(0x7f00000001c0)=[r10, r10, r10, r10, 0xffffffffffffffff, r10], 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x9, &(0x7f0000000c80)=ANY=[@ANYBLOB="000000000000000018170000", @ANYRES32=r10, @ANYBLOB="0000000000000000184700000500000000000000000000001800000055601422000000007f0000008510000003000000"], &(0x7f0000000480)='syzkaller\x00', 0x568, 0x7b, &(0x7f0000000540)=""/123, 0x32c52916f1095d49, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x4, 0x1, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000900)=[r12, 0xffffffffffffffff, 0x1], &(0x7f0000000940)=[{0x1, 0x4, 0xc, 0x9}, {0x3, 0x4, 0xe, 0xb}, {0x5, 0x3, 0x6, 0xa}, {0x5, 0x3, 0xe, 0x8}, {0x1, 0x2, 0x7, 0xa}, {0x4, 0x5, 0x3, 0x2}, {0x3, 0x5, 0x5, 0xd}, {0x1, 0x4, 0x6, 0xa}], 0x10, 0x2}, 0x94) 832.419421ms ago: executing program 1 (id=9396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r5 = socket(0x10, 0x803, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0xfffffffffffffe81, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000050) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e23, 0x8a, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@dstopts={{0x18, 0x29, 0x37, {0x32}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}}}}], 0x40}, 0x20000010) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r7, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r11, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r11, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea80cba3c", @ANYRES16=0x0, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="0c00990001000000280000000600b400e40c00000600b400770700000600b300000000000600b30000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0) 367.271342ms ago: executing program 3 (id=9397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f0000000140)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) 275.236871ms ago: executing program 3 (id=9398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pim6reg\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044850}, 0x20040040) r2 = socket$packet(0x11, 0x3, 0x300) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x80800) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433", 0x3b}], 0x1}], 0x1, 0x40800) accept$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000014000000000000000000000850000008700000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c2760000850000000600000095"], &(0x7f0000000040)='syzkaller\x00', 0x8003, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x0) 74.678493ms ago: executing program 3 (id=9399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, 0x0, 0x0, 0x10002, 0x0) sendmsg$can_bcm(r1, 0x0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000214010027bdfdfbdbdf25ca43c50600", @ANYRES32, @ANYBLOB="05005400010000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x44018}, 0x4000044) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x10001, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) getpeername(r4, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x24, r7, 0x1, 0x70bd28, 0x4000001, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}}, 0x80) 0s ago: executing program 4 (id=9400): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40012022, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000041401000000000000000000080003000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4048055}, 0x814) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @hopopts_2292={{0x18}}], 0x58}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000a00)={0x2, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff00c}, {0x28, 0x0, 0x1, 0x5ae9}]}, 0x10) sendmmsg$inet(r11, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r10, &(0x7f0000000140), 0x4) r13 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r13, 0x10e, 0x2, &(0x7f0000000000)=0x3, 0x4) kernel console output (not intermixed with test programs): ][ T5937] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1090.432542][ T5940] netlink: 'syz.1.7719': attribute type 1 has an invalid length. [ 1090.536844][ T5951] netlink: 'syz.3.7723': attribute type 1 has an invalid length. [ 1090.540890][ T5940] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1090.553519][ T5937] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1090.562082][ T5937] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1090.597483][ T5940] bond3: (slave geneve2): making interface the new active one [ 1090.614357][ T5940] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1090.826610][ T5955] bond7: (slave bridge3): Enslaving as a backup interface with an up link [ 1090.903309][ T5956] bond7: (slave bridge4): Enslaving as a backup interface with a down link [ 1091.078700][ T5965] __nla_validate_parse: 11 callbacks suppressed [ 1091.078720][ T5965] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7726'. [ 1091.340174][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7730'. [ 1091.354031][ T5971] netlink: 'syz.1.7728': attribute type 1 has an invalid length. [ 1091.713068][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7737'. [ 1091.754167][ T6006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7737'. [ 1091.806712][ T6006] geneve2: entered promiscuous mode [ 1091.824987][ T674] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.844118][ T674] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.874558][ T674] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.906540][ T674] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.323596][ T5994] lo speed is unknown, defaulting to 1000 [ 1092.528842][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7739'. [ 1092.818342][ T6027] L: renamed from nlmon0 [ 1092.833346][ T5997] lo speed is unknown, defaulting to 1000 [ 1093.016658][ T6032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7742'. [ 1093.150845][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7742'. [ 1093.266625][ T6032] macvlan2: entered allmulticast mode [ 1093.279571][ T6032] ip6gretap0: entered allmulticast mode [ 1093.290487][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7744'. [ 1093.317154][ T6039] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7742'. [ 1093.369763][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7744'. [ 1093.715361][ T6067] netlink: 'syz.2.7747': attribute type 16 has an invalid length. [ 1093.715635][ T6070] netlink: 'syz.2.7747': attribute type 1 has an invalid length. [ 1093.763572][ T6067] netlink: 'syz.2.7747': attribute type 3 has an invalid length. [ 1093.823837][ T6070] netlink: 'syz.2.7747': attribute type 1 has an invalid length. [ 1094.119595][ T6086] netlink: 'syz.4.7752': attribute type 14 has an invalid length. [ 1095.306937][ T6147] net_ratelimit: 335 callbacks suppressed [ 1095.306959][ T6147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1095.567438][ T6163] veth1_to_batadv: entered promiscuous mode [ 1095.595139][ T6163] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1095.737718][ T674] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.746540][ T674] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.755726][ T674] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.765018][ T676] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.810635][ T6182] geneve3: entered promiscuous mode [ 1096.543426][ T6195] netlink: 'syz.2.7781': attribute type 1 has an invalid length. [ 1097.485904][ T6198] bond6: entered promiscuous mode [ 1098.547741][ T6163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1098.559566][ T6182] netlink: 'syz.0.7777': attribute type 1 has an invalid length. [ 1098.586405][ T6182] __nla_validate_parse: 6 callbacks suppressed [ 1098.586427][ T6182] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7777'. [ 1098.760558][ T6218] netlink: 'syz.2.7788': attribute type 1 has an invalid length. [ 1098.776597][ T6218] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7788'. [ 1098.800694][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7788'. [ 1098.810540][ T6222] ip6gretap0: left allmulticast mode [ 1098.834986][ T6222] netlink: 'syz.0.7784': attribute type 13 has an invalid length. [ 1098.837113][ T6209] tipc: Enabled bearer , priority 10 [ 1098.856226][ T676] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1098.876425][ T6222] netlink: 'syz.0.7784': attribute type 17 has an invalid length. [ 1098.885365][ T676] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.998994][ T6222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.013842][ T6222] batadv0: left promiscuous mode [ 1099.026741][ T6222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.160195][ T6222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.186168][ T6222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.255340][ T6222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1099.261953][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1099.280423][ T6222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1099.321778][ T6222] veth1_vlan: left promiscuous mode [ 1099.329936][ T6222] veth0_vlan: left promiscuous mode [ 1099.337116][ T6222] veth0_vlan: entered promiscuous mode [ 1099.348648][ T6222] veth1_vlan: entered promiscuous mode [ 1099.364287][ T6222] veth1_macvtap: left promiscuous mode [ 1099.372154][ T6222] veth0_macvtap: left promiscuous mode [ 1099.379241][ T6222] veth0_macvtap: entered promiscuous mode [ 1099.388719][ T6222] macvtap0: left promiscuous mode [ 1099.409686][ T6222] veth1_macvtap: entered promiscuous mode [ 1099.425793][ T6222] vlan2: left allmulticast mode [ 1099.430692][ T6222] geneve1: left allmulticast mode [ 1099.437307][ T6222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1099.462963][ T6222] batadv0: entered promiscuous mode [ 1099.468543][ T6222] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1099.480336][ T6222] bridge1: left promiscuous mode [ 1099.486178][ T6222] bridge1: left allmulticast mode [ 1099.494339][ T6222] bridge2: left promiscuous mode [ 1099.499394][ T6222] bridge2: left allmulticast mode [ 1099.509451][ T6222] bond0: left promiscuous mode [ 1099.514468][ T6222] bridge3: left promiscuous mode [ 1099.520968][ T6222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.539430][ T6222] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1099.553233][ T6222] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1099.567178][ T6222] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1099.582221][ T6222] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1099.599809][ T6222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1099.609497][ T6222] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1099.619686][ T6222] geneve2: left promiscuous mode [ 1099.628696][ T6222] ip6gretap0: entered promiscuous mode [ 1099.634672][ T6222] ip6gretap0: entered allmulticast mode [ 1099.643952][ T6222] macvlan2: left allmulticast mode [ 1099.649945][ T6222] ip6gretap0: left allmulticast mode [ 1099.697115][ T6222] geneve3: left promiscuous mode [ 1099.712629][T14905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.719888][T14905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.732631][T14905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.739871][T14905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.785489][ T674] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1099.809715][ T676] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1099.819653][ T676] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.860426][T19420] tipc: Node number set to 2744562677 [ 1099.986679][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7799'. [ 1100.010063][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7799'. [ 1100.031900][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7799'. [ 1100.051883][ T6278] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7799'. [ 1100.076328][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7801'. [ 1100.091565][ T6278] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7799'. [ 1100.110485][ T6278] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7799'. [ 1100.186488][ T6289] netlink: 'syz.3.7803': attribute type 14 has an invalid length. [ 1100.349654][ T6300] tipc: New replicast peer: 172.30.0.2 [ 1100.363549][ T6300] tipc: Enabled bearer , priority 10 [ 1100.386411][ T6298] veth1_to_team: entered promiscuous mode [ 1100.395204][ T6298] ipvlan1: entered promiscuous mode [ 1100.403698][ T6298] ipvlan1: left promiscuous mode [ 1100.409579][ T6298] veth1_to_team: left promiscuous mode [ 1100.419922][ T6300] tipc: Disabling bearer [ 1100.596662][ T6314] bond9: option lp_interval: invalid value (0) [ 1100.605867][ T6314] bond9: option lp_interval: allowed values 1 - 2147483647 [ 1100.618048][ T6314] bond9 (unregistering): Released all slaves [ 1100.634706][ T6317] netlink: 'syz.2.7811': attribute type 1 has an invalid length. [ 1100.655181][ T6317] netlink: 'syz.2.7811': attribute type 2 has an invalid length. [ 1100.672286][ T6316] syzkaller1: entered promiscuous mode [ 1100.677970][ T6316] syzkaller1: entered allmulticast mode [ 1100.889442][T19420] IPVS: starting estimator thread 0... [ 1100.916996][ T6326] xt_hashlimit: size too large, truncated to 1048576 [ 1100.970215][ T6331] netlink: 'syz.4.7814': attribute type 1 has an invalid length. [ 1100.991552][ T6329] IPVS: using max 32 ests per chain, 76800 per kthread [ 1101.657691][ T6351] tipc: Enabled bearer , priority 0 [ 1101.693158][ T6355] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1101.695637][ T6342] syzkaller0: entered promiscuous mode [ 1101.758583][ T6342] syzkaller0: entered allmulticast mode [ 1101.802671][ T6359] netlink: 'syz.3.7822': attribute type 1 has an invalid length. [ 1101.826150][ T6359] netlink: 'syz.3.7822': attribute type 2 has an invalid length. [ 1101.910426][ T6363] tipc: Enabled bearer , priority 0 [ 1101.917801][ T674] wlan1: Trigger new scan to find an IBSS to join [ 1101.962932][ T6361] tipc: Resetting bearer [ 1102.113998][ T6361] tipc: Disabling bearer [ 1102.166715][ T6372] bridge0: port 3(vlan2) entered blocking state [ 1102.182289][ T6372] bridge0: port 3(vlan2) entered disabled state [ 1102.195340][ T6372] vlan2: entered allmulticast mode [ 1102.212210][ T6372] dummy0: entered allmulticast mode [ 1102.230075][ T6372] vlan2: entered promiscuous mode [ 1102.244710][ T6372] dummy0: entered promiscuous mode [ 1102.279078][ T6387] xt_addrtype: ipv6 does not support BROADCAST matching [ 1102.486900][ T6341] tipc: Resetting bearer [ 1102.555847][ T6341] tipc: Disabling bearer [ 1102.573040][ T6398] netlink: 'syz.4.7830': attribute type 1 has an invalid length. [ 1102.580890][ T6398] netlink: 'syz.4.7830': attribute type 2 has an invalid length. [ 1102.968207][ T6424] netlink: 'syz.0.7839': attribute type 14 has an invalid length. [ 1103.079837][ T6433] openvswitch: netlink: IP tunnel dst address not specified [ 1103.178934][ T6441] netlink: 'syz.0.7846': attribute type 4 has an invalid length. [ 1103.353152][ T6449] netlink: 'syz.0.7851': attribute type 1 has an invalid length. [ 1103.480558][ T6459] syzkaller1: entered promiscuous mode [ 1103.486602][ T6459] syzkaller1: entered allmulticast mode [ 1103.531859][ T6462] netlink: 'syz.3.7855': attribute type 23 has an invalid length. [ 1103.592738][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1103.597340][ T6467] sctp: [Deprecated]: syz.4.7857 (pid 6467) Use of int in max_burst socket option deprecated. [ 1103.597340][ T6467] Use struct sctp_assoc_value instead [ 1103.626752][ T6461] __nla_validate_parse: 75 callbacks suppressed [ 1103.626775][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7854'. [ 1103.627024][ T6468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7855'. [ 1103.810187][ T6475] tipc: Enabled bearer , priority 0 [ 1103.818684][ T6475] syzkaller0: entered promiscuous mode [ 1103.825834][ T6475] syzkaller0: entered allmulticast mode [ 1103.860330][ T6475] IPv6: sit1: Disabled Multicast RS [ 1103.885755][ T6475] sch_tbf: burst 255 is lower than device sit1 mtu (1480) ! [ 1103.914959][ T46] IPVS: starting estimator thread 0... [ 1103.926532][ T6475] tipc: Resetting bearer [ 1103.965722][ T6482] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7861'. [ 1103.975001][ T6482] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1103.996513][ T6474] tipc: Resetting bearer [ 1104.032142][ T6480] IPVS: using max 30 ests per chain, 72000 per kthread [ 1104.039800][ T6474] tipc: Disabling bearer [ 1104.209140][ T6464] lo speed is unknown, defaulting to 1000 [ 1104.258900][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7863'. [ 1104.358611][ T6495] bridge0: port 4(vlan3) entered blocking state [ 1104.365889][ T6495] bridge0: port 4(vlan3) entered disabled state [ 1104.375911][ T6495] vlan3: entered allmulticast mode [ 1104.387118][ T6495] geneve0: entered allmulticast mode [ 1104.397414][ T6495] vlan3: entered promiscuous mode [ 1104.403490][ T6495] geneve0: entered promiscuous mode [ 1104.409918][ T6496] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7865'. [ 1104.600785][ T6500] veth1_macvtap: left promiscuous mode [ 1104.612302][ T6500] macsec0: entered allmulticast mode [ 1104.625152][ T6500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7867'. [ 1104.635009][ T6500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7867'. [ 1104.650508][ T6498] macsec0: entered promiscuous mode [ 1104.706639][ T6502] ip6gre1: entered promiscuous mode [ 1104.712603][ T6502] ip6gre1: entered allmulticast mode [ 1104.722682][ T6498] macsec0: left promiscuous mode [ 1104.728333][ T6503] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1104.822838][ T6506] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7869'. [ 1104.824457][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7870'. [ 1104.861520][T12157] wlan1: Trigger new scan to find an IBSS to join [ 1105.309078][ T674] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1105.330242][ T674] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1105.338193][ T5732] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1105.651605][ T5732] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1105.889973][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7880'. [ 1105.916657][ T6542] vlan3: entered promiscuous mode [ 1105.929531][ T6542] syz_tun: entered promiscuous mode [ 1106.188160][ T5732] hsr0: entered promiscuous mode [ 1106.305577][ T6566] netlink: 'syz.2.7885': attribute type 22 has an invalid length. [ 1106.584969][ T6572] netlink: 'syz.4.7890': attribute type 21 has an invalid length. [ 1106.618917][T32140] IPVS: starting estimator thread 0... [ 1106.721834][ T6582] IPVS: using max 31 ests per chain, 74400 per kthread [ 1106.813029][ T6591] ip6tnl2: entered allmulticast mode [ 1106.827678][T10480] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1106.865090][T10480] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1106.876268][T19420] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1106.906809][ T6597] bridge0: port 3(vlan3) entered blocking state [ 1106.915247][ T6597] bridge0: port 3(vlan3) entered disabled state [ 1106.922352][ T6597] vlan3: entered allmulticast mode [ 1106.930675][ T6597] vlan3: entered promiscuous mode [ 1106.958175][ T6602] netlink: 'syz.4.7896': attribute type 4 has an invalid length. [ 1107.005702][ T6598] syzkaller0: entered promiscuous mode [ 1107.014232][ T6598] syzkaller0: entered allmulticast mode [ 1107.053509][ T6598] bridge5: port 1(vlan4) entered blocking state [ 1107.076283][ T6598] bridge5: port 1(vlan4) entered disabled state [ 1107.096597][ T6598] vlan4: entered allmulticast mode [ 1107.106551][ T6598] bridge5: entered allmulticast mode [ 1107.118850][ T6598] vlan4: left allmulticast mode [ 1107.126327][ T6598] bridge5: left allmulticast mode [ 1107.184703][ T5732] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1107.200371][ T6602] tipc: Enabled bearer , priority 0 [ 1107.305499][ T6599] tipc: Resetting bearer [ 1107.383890][T32140] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1107.408322][ T6599] tipc: Disabling bearer [ 1107.430811][ T6579] Bluetooth: hci3: Opcode 0x080f failed: -4 [ 1107.459547][ T6620] openvswitch: netlink: IP tunnel dst address not specified [ 1107.665391][ T6635] bridge0: port 1(erspan0) entered blocking state [ 1107.689401][ T6635] bridge0: port 1(erspan0) entered disabled state [ 1107.712494][ T6635] erspan0: entered allmulticast mode [ 1107.734069][ T6635] erspan0: entered promiscuous mode [ 1107.780707][ T6646] erspan0: left allmulticast mode [ 1107.793560][ T6646] erspan0: left promiscuous mode [ 1107.814279][ T6646] bridge0: port 1(erspan0) entered disabled state [ 1107.902342][ T676] wlan1: Trigger new scan to find an IBSS to join [ 1108.163292][ T29] audit: type=1800 audit(1780298990.773:34): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7912" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1612 res=0 errno=0 [ 1108.276338][ T6681] syzkaller0: entered promiscuous mode [ 1108.292523][ T6681] syzkaller0: entered allmulticast mode [ 1108.404872][ T6685] netlink: 'syz.1.7917': attribute type 10 has an invalid length. [ 1108.455241][ T6685] netlink: 'syz.1.7917': attribute type 10 has an invalid length. [ 1108.624135][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1108.747155][ T6713] __nla_validate_parse: 18 callbacks suppressed [ 1108.747181][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7926'. [ 1108.872936][ T6721] syzkaller0: entered promiscuous mode [ 1108.880280][ T6721] syzkaller0: entered allmulticast mode [ 1108.895926][T10480] wlan1: Creating new IBSS network, BSSID b2:72:0a:fa:2b:fc [ 1108.922500][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7926'. [ 1109.044086][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7931'. [ 1109.060331][ T5732] bridge0: entered promiscuous mode [ 1109.066484][ T6723] syzkaller0: entered promiscuous mode [ 1109.074548][ T6723] syzkaller0: entered allmulticast mode [ 1109.302734][ T6739] bond0: option resend_igmp: invalid value (1023) [ 1109.321796][ T6739] bond0: option resend_igmp: allowed values 0 - 255 [ 1109.567994][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7939'. [ 1110.621380][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1110.621398][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1110.704155][ T6798] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7951'. [ 1110.785669][ T6805] netlink: 'syz.3.7952': attribute type 4 has an invalid length. [ 1111.050560][ T6826] netlink: 'syz.3.7957': attribute type 1 has an invalid length. [ 1111.180051][ T6835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7959'. [ 1111.191861][ T6826] bond8: entered promiscuous mode [ 1111.204059][ T6826] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1111.287988][ T6834] ipvlan2: entered allmulticast mode [ 1111.294662][ T6834] bond8: entered allmulticast mode [ 1111.406647][ T6836] ipvlan3: entered allmulticast mode [ 1111.422380][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1111.457944][ T6852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7964'. [ 1111.492910][ T6826] bond8: (slave bridge6): making interface the new active one [ 1111.500570][ T6826] bridge6: entered promiscuous mode [ 1111.507906][ T6826] bridge6: entered allmulticast mode [ 1111.516461][ T6826] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 1111.529910][ T6857] netlink: 'syz.2.7963': attribute type 2 has an invalid length. [ 1111.556898][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7959'. [ 1112.409442][ T6902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7977'. [ 1112.468677][ T6905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7977'. [ 1112.877770][ T6925] netlink: 'syz.3.7984': attribute type 1 has an invalid length. [ 1112.889269][ T6925] netlink: 'syz.3.7984': attribute type 3 has an invalid length. [ 1112.903626][ T6925] netlink: 'syz.3.7984': attribute type 3 has an invalid length. [ 1113.232559][ T6947] geneve3: entered promiscuous mode [ 1113.474049][ T6973] 0ŖX¹¦Ą: renamed from batadv0 (while UP) [ 1113.492770][ T6973] 0ŖX¹¦Ą: entered allmulticast mode [ 1113.501005][ T6973] A link change request failed with some changes committed already. Interface 60ŖX¹¦Ą may have been left with an inconsistent configuration, please check. [ 1113.569748][ T6294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1113.992885][ T6996] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1114.012199][ T6996] bond7: (slave lo): Enslaving as an active interface with an up link [ 1114.031829][ T6996] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1114.084896][ T46] lo speed is unknown, defaulting to 1000 [ 1114.090707][ T5732] lo speed is unknown, defaulting to 1000 [ 1114.097095][ T46] syś2: Port: 1 Link ACTIVE [ 1114.165583][ T7002] __nla_validate_parse: 11 callbacks suppressed [ 1114.165605][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8006'. [ 1114.193549][ T7002] netlink: 'syz.1.8006': attribute type 21 has an invalid length. [ 1114.245850][ T7008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8008'. [ 1114.384957][ T7013] syzkaller0: entered promiscuous mode [ 1114.397596][ T7013] syzkaller0: entered allmulticast mode [ 1114.425919][ T7013] tipc: Enabled bearer , priority 0 [ 1114.456821][ T7013] tipc: Resetting bearer [ 1114.482631][ T7018] : entered promiscuous mode [ 1114.488057][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8011'. [ 1114.517510][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8010'. [ 1114.531747][ T7018] nbd: must specify at least one socket [ 1114.565126][ T7012] tipc: Resetting bearer [ 1114.688677][ T7012] tipc: Disabling bearer [ 1114.980387][ T7047] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8016'. [ 1115.033737][ T7047] netlink: 'syz.2.8016': attribute type 1 has an invalid length. [ 1115.056716][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8016'. [ 1115.709028][T30381] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.737049][T30381] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.752147][ T7052] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8018'. [ 1115.782993][T30381] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.816835][T30381] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.003464][ T7073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8024'. [ 1116.029599][ T7068] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1116.050385][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8026'. [ 1116.050701][ T7068] bond5 (unregistering): Released all slaves [ 1116.676948][ T7105] netlink: 136 bytes leftover after parsing attributes in process `syz.4.8032'. [ 1116.707240][ T7105] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1116.749140][ T7114] tipc: Failed to remove unknown binding: 66,0,0/0:1314294825/1314294827 [ 1116.769380][ T7114] tipc: Failed to remove unknown binding: 66,0,0/0:1314294825/1314294826 [ 1116.796447][ T7114] tipc: Failed to remove unknown binding: 66,0,0/0:1314294825/1314294827 [ 1116.854904][ T7114] tipc: Failed to remove unknown binding: 66,0,0/0:1314294825/1314294826 [ 1116.948208][ T7125] syzkaller0: entered promiscuous mode [ 1116.961907][ T7125] syzkaller0: entered allmulticast mode [ 1118.461341][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1119.594601][ T7100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1119.815273][ T7168] __nla_validate_parse: 1 callbacks suppressed [ 1119.815293][ T7168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8050'. [ 1119.875728][ T7173] netlink: 'syz.0.8048': attribute type 6 has an invalid length. [ 1119.884883][ T7168] unsupported nla_type 48896 [ 1119.969595][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8049'. [ 1120.866064][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8061'. [ 1120.883515][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8061'. [ 1121.250377][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8066'. [ 1121.255124][ T7232] dummy0: entered allmulticast mode [ 1121.268860][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8066'. [ 1121.423665][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8067'. [ 1121.694538][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8072'. [ 1121.924241][ T7263] bond0: option miimon: invalid value (18446744072200228527) [ 1121.946148][ T7263] bond0: option miimon: allowed values 0 - 2147483647 [ 1122.133108][ T7271] syzkaller0: entered promiscuous mode [ 1122.160468][ T7271] syzkaller0: entered allmulticast mode [ 1122.487379][ T7292] x_tables: duplicate underflow at hook 1 [ 1122.499380][ T7294] x_tables: duplicate underflow at hook 1 [ 1122.662836][ T7297] netlink: 'syz.1.8082': attribute type 1 has an invalid length. [ 1122.681760][ T7297] netlink: 'syz.1.8082': attribute type 1 has an invalid length. [ 1122.687506][ T7303] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8085'. [ 1122.698050][ T7297] netlink: 'syz.1.8082': attribute type 2 has an invalid length. [ 1122.730420][ T7297] netlink: 'syz.1.8082': attribute type 1 has an invalid length. [ 1122.754581][ T7305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8082'. [ 1122.804419][ T7297] netlink: 'syz.1.8082': attribute type 2 has an invalid length. [ 1122.977836][ T7312] xt_ecn: cannot match TCP bits for non-tcp packets [ 1123.160282][ T7318] IPv6: addrconf: prefix option has invalid lifetime [ 1123.442802][ T7326] syzkaller0: entered promiscuous mode [ 1123.457595][ T7326] syzkaller0: entered allmulticast mode [ 1123.849199][ T7351] netlink: 'syz.4.8096': attribute type 1 has an invalid length. [ 1124.398533][ T7367] gre0: left allmulticast mode [ 1124.587940][ T7385] syzkaller1: entered promiscuous mode [ 1124.595583][ T7389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1124.609212][ T7385] syzkaller1: entered allmulticast mode [ 1124.873961][ T7348] lo speed is unknown, defaulting to 1000 [ 1125.195204][ T7420] openvswitch: netlink: nsh attr 0 has unexpected len 12 expected 0 [ 1125.212719][ T7420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1125.334272][ T7423] netlink: 'syz.2.8116': attribute type 1 has an invalid length. [ 1125.395672][ T7429] __nla_validate_parse: 8 callbacks suppressed [ 1125.395693][ T7429] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8117'. [ 1125.466668][ T7423] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1125.469804][ T7432] team0: Port device netdevsim1 removed [ 1125.552283][ T7432] bond3: (slave geneve2): Releasing active interface [ 1125.813311][ T7449] tipc: Enabling of bearer rejected, failed to enable media [ 1125.957095][ T7456] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1126.002216][ T7456] bond5 (unregistering): Released all slaves [ 1126.099562][ T7461] syzkaller1: entered promiscuous mode [ 1126.113028][ T7461] syzkaller1: entered allmulticast mode [ 1126.141952][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1126.165077][ T7341] lo speed is unknown, defaulting to 1000 [ 1127.243902][ T7491] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8130'. [ 1127.889105][ T7521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8137'. [ 1127.940311][ T7522] syzkaller0: entered promiscuous mode [ 1127.946274][ T7522] syzkaller0: entered allmulticast mode [ 1128.304493][ T7534] nbd2: detected capacity change from 0 to 3 [ 1128.338538][ T7532] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1128.355198][ T7527] block nbd2: Dead connection, failed to find a fallback [ 1128.428872][ T7540] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1128.439027][ T7541] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1128.529657][ T7546] openvswitch: netlink: Message has 67 unknown bytes. [ 1129.148531][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8150'. [ 1129.245890][ T7571] syzkaller1: entered promiscuous mode [ 1129.252208][ T7571] syzkaller1: entered allmulticast mode [ 1129.302770][ T7574] syzkaller0: entered promiscuous mode [ 1129.313426][ T7574] syzkaller0: entered allmulticast mode [ 1129.562017][ T7583] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1129.609689][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8157'. [ 1129.819479][ T7591] block nbd0: not configured, cannot reconfigure [ 1129.903800][ T7603] geneve1: entered promiscuous mode [ 1130.044571][ T7610] netlink: 205668 bytes leftover after parsing attributes in process `syz.1.8164'. [ 1130.355600][ T7617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8166'. [ 1130.640493][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8173'. [ 1130.688463][ T7632] team1: entered promiscuous mode [ 1130.694903][ T7632] team1: entered allmulticast mode [ 1130.703764][ T7632] 8021q: adding VLAN 0 to HW filter on device team1 [ 1130.769368][ T7643] openvswitch: netlink: Flow actions attr not present in new flow. [ 1130.875174][ T7647] netlink: 'syz.3.8174': attribute type 1 has an invalid length. [ 1130.924026][ T7643] gre3: entered allmulticast mode [ 1130.972875][ T7650] ipip1: entered promiscuous mode [ 1131.492931][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8178'. [ 1131.608025][ T7672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8181'. [ 1131.908673][ T7681] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 1131.915197][ T7682] xt_bpf: check failed: parse error [ 1131.926568][ T7681] pim6reg0: persist disabled [ 1131.937483][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8183'. [ 1131.979582][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8183'. [ 1132.011080][ T7676] netlink: 'syz.0.8183': attribute type 12 has an invalid length. [ 1132.039338][ T7676] netlink: 'syz.0.8183': attribute type 14 has an invalid length. [ 1132.167264][ T7663] lo speed is unknown, defaulting to 1000 [ 1132.188686][ T7686] syzkaller1: entered promiscuous mode [ 1132.201919][ T7686] syzkaller1: entered allmulticast mode [ 1132.517967][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8189'. [ 1132.814273][ T7706] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1132.894049][ T7678] lo speed is unknown, defaulting to 1000 [ 1133.528079][ T7731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8197'. [ 1133.600212][ T7702] lo speed is unknown, defaulting to 1000 [ 1134.067974][ T7745] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8201'. [ 1134.080108][ T7745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8201'. [ 1134.145923][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8201'. [ 1134.461369][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1134.600619][T14904] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.629865][T14904] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.655427][T14904] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.669378][T14904] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.679917][T14904] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.691052][T14904] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.701902][T14904] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.710919][T14904] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.965763][ T7803] netlink: 'syz.1.8215': attribute type 6 has an invalid length. [ 1135.993882][ T7808] netlink: 'syz.3.8218': attribute type 2 has an invalid length. [ 1136.130999][ T7810] bond9: option arp_interval: invalid value (18446744073709551615) [ 1136.142356][ T7810] bond9: option arp_interval: allowed values 0 - 2147483647 [ 1136.157861][ T7810] bond9 (unregistering): Released all slaves [ 1136.198026][ T7814] kthread_run failed with err -4 [ 1136.306957][ T7832] netlink: 'syz.0.8225': attribute type 1 has an invalid length. [ 1136.322973][ T7832] __nla_validate_parse: 7 callbacks suppressed [ 1136.322994][ T7832] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8225'. [ 1136.435981][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8224'. [ 1137.214525][ T7863] netlink: 'syz.0.8234': attribute type 1 has an invalid length. [ 1137.532451][ T7886] 8021q: VLANs not supported on ipvlan0 [ 1137.629050][ T7883] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1137.710318][ T7893] sctp: [Deprecated]: syz.4.8242 (pid 7893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1137.710318][ T7893] Use struct sctp_sack_info instead [ 1137.743330][ T7894] sctp: [Deprecated]: syz.4.8242 (pid 7894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1137.743330][ T7894] Use struct sctp_sack_info instead [ 1138.245872][ T7917] netlink: zone id is out of range [ 1138.255176][ T7920] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8250'. [ 1138.262748][ T7917] netlink: zone id is out of range [ 1138.281949][ T7917] netlink: zone id is out of range [ 1138.298316][ T7917] netlink: zone id is out of range [ 1138.307622][ T7917] netlink: zone id is out of range [ 1138.331014][ T7917] netlink: zone id is out of range [ 1138.358245][ T7881] lo speed is unknown, defaulting to 1000 [ 1138.368449][ T7917] netlink: set zone limit has 4 unknown bytes [ 1138.433237][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8254'. [ 1138.659603][ T7944] netlink: 'syz.2.8257': attribute type 58 has an invalid length. [ 1138.669845][ T7944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8257'. [ 1139.315345][ T7976] x_tables: duplicate underflow at hook 2 [ 1139.437800][ T7982] netlink: 'syz.0.8266': attribute type 33 has an invalid length. [ 1139.460996][ T7982] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8266'. [ 1139.482636][ T7982] `: renamed from team0 (while UP) [ 1139.509405][ T7985] netlink: 'syz.1.8267': attribute type 287 has an invalid length. [ 1139.670054][ T7989] : entered promiscuous mode [ 1139.739025][ T7975] lo speed is unknown, defaulting to 1000 [ 1140.090925][ T8011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8272'. [ 1140.207631][ T8023] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8277'. [ 1140.320401][ T8028] netlink: 666 bytes leftover after parsing attributes in process `syz.4.8277'. [ 1141.192378][ T8042] bond6: option lp_interval: invalid value (0) [ 1141.198793][ T8042] bond6: option lp_interval: allowed values 1 - 2147483647 [ 1141.225836][ T8042] bond6 (unregistering): Released all slaves [ 1141.246557][ T8049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8283'. [ 1141.501839][T10488] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1141.574417][ T8064] netlink: 476 bytes leftover after parsing attributes in process `syz.4.8287'. [ 1141.700979][ T8072] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.8289'. [ 1141.799294][ T8078] netlink: 'syz.1.8286': attribute type 16 has an invalid length. [ 1141.807786][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8286'. [ 1142.333931][ T8098] netlink: 'syz.4.8296': attribute type 1 has an invalid length. [ 1142.381511][ T8098] netlink: 'syz.4.8296': attribute type 1 has an invalid length. [ 1142.395316][ T8098] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.8296'. [ 1142.823048][ T8113] netlink: 'syz.1.8298': attribute type 11 has an invalid length. [ 1142.858569][ T8116] netlink: 4120 bytes leftover after parsing attributes in process `syz.0.8299'. [ 1142.929146][ T8121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1142.939713][ T8116] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1143.103717][ T8126] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.8303'. [ 1143.412201][ T8140] syzkaller1: entered promiscuous mode [ 1143.431517][ T8140] syzkaller1: entered allmulticast mode [ 1143.480122][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8305'. [ 1143.857848][ T8151] netlink: 'syz.4.8309': attribute type 10 has an invalid length. [ 1143.900723][ T8151] syz_tun: entered promiscuous mode [ 1143.942187][ T8151] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1144.092403][ T8157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8310'. [ 1144.216873][ T8127] lo speed is unknown, defaulting to 1000 [ 1144.300807][ T8172] openvswitch: netlink: IPv4 tun info is not correct [ 1144.337147][ T8172] openvswitch: netlink: IPv4 tun info is not correct [ 1144.349380][ T8172] openvswitch: netlink: IPv4 tun info is not correct [ 1144.374692][ T8172] openvswitch: netlink: IPv4 tun info is not correct [ 1144.408493][ T8172] openvswitch: netlink: IPv4 tun info is not correct [ 1144.425596][ T8172] openvswitch: netlink: IPv4 tun info is not correct [ 1144.433404][ T8172] openvswitch: netlink: IPv4 tun info is not correct [ 1144.440927][ T8172] openvswitch: netlink: IPv4 tun info is not correct [ 1144.455467][ T8169] syzkaller0: entered promiscuous mode [ 1144.461135][ T8169] syzkaller0: entered allmulticast mode [ 1144.661943][ T8195] netlink: 'syz.0.8319': attribute type 1 has an invalid length. [ 1144.803790][ T8196] netlink: 'syz.2.8320': attribute type 3 has an invalid length. [ 1145.252931][ T8195] bond6: entered promiscuous mode [ 1145.273217][ T8195] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1145.595265][ T8228] netlink: 666 bytes leftover after parsing attributes in process `syz.3.8323'. [ 1145.966471][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8332'. [ 1146.944131][ T8288] __nla_validate_parse: 4 callbacks suppressed [ 1146.944155][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8343'. [ 1146.990772][ T8290] netlink: 'syz.1.8344': attribute type 32 has an invalid length. [ 1146.999001][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8344'. [ 1147.053051][ T8290] bond5: option coupled_control: invalid value (12) [ 1147.062753][ T8290] bond5 (unregistering): Released all slaves [ 1147.092007][ T8294] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.8345'. [ 1147.132422][ T8294] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1147.309036][ T29] audit: type=1107 audit(1780299029.913:35): pid=8297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1147.442658][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8349'. [ 1147.452156][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8349'. [ 1147.728581][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8351'. [ 1147.749182][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8351'. [ 1147.759327][ T8326] netlink: 'syz.4.8351': attribute type 14 has an invalid length. [ 1147.951748][ T8347] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8352'. [ 1147.965286][ T8347] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8352'. [ 1147.974429][ T8347] netlink: 'syz.2.8352': attribute type 5 has an invalid length. [ 1147.985392][ T8347] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8352'. [ 1150.548264][ T8322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1150.777297][ T29] audit: type=1107 audit(1780299033.383:36): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='`µ‡õxāµ7d7WK”Ķ’äÖ’ĖZćÉÜVK6¾ó†-bxĪß?˜GUQ@Sß"ŁżŒą½Ķ¹Ä9J%ŌM)ÓCiģWc ć [ 1150.777297][ T29] ē¶­·ž W^ļrēī¼āōÉåh»ÄCFšŹ;× y)ąJØfG•żĆ”˜:htS^õŚ1&t|ųdQįo|8Y" ³Y‡<)iüėČF¼»s—·īf»õö%vūų†ažVżM‘ķo±ā?¦Y˜en i [ 1150.777297][ T29] Æ6Ó' [ 1150.980538][ T8383] vlan3: entered promiscuous mode [ 1151.002957][ T8383] syz_tun: entered promiscuous mode [ 1151.689045][ T8430] xt_CT: No such helper "snmp_trap" [ 1151.728083][ T8434] xt_CT: No such helper "snmp_trap" [ 1151.896984][ T8441] syzkaller1: entered promiscuous mode [ 1151.913206][ T8441] syzkaller1: entered allmulticast mode [ 1152.073314][ T8453] netlink: 'syz.0.8378': attribute type 1 has an invalid length. [ 1152.116771][ T8453] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1152.277307][ T8466] __nla_validate_parse: 3 callbacks suppressed [ 1152.277328][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8382'. [ 1152.345645][ T8467] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8382'. [ 1152.358856][ T8470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8383'. [ 1152.407059][ T8470] ip6gre2: entered promiscuous mode [ 1152.415059][ T8470] ip6gre2: entered allmulticast mode [ 1152.952653][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8391'. [ 1153.121432][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8394'. [ 1153.151610][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8394'. [ 1153.198763][ T8522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8395'. [ 1154.207313][ T8566] sctp: [Deprecated]: syz.4.8405 (pid 8566) Use of int in max_burst socket option. [ 1154.207313][ T8566] Use struct sctp_assoc_value instead [ 1154.301954][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1154.689852][ T8584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1154.742684][ T8584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8408'. [ 1154.793100][ T8579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8408'. [ 1154.820326][ T8579] nbd: must specify at least one socket [ 1154.966826][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8413'. [ 1155.059792][ T8600] bridge9: port 1(gretap3) entered blocking state [ 1155.073320][ T8600] bridge9: port 1(gretap3) entered disabled state [ 1155.080620][ T8600] gretap3: entered allmulticast mode [ 1155.089788][ T8600] gretap3: entered promiscuous mode [ 1155.164863][ T8603] netlink: 'syz.1.8415': attribute type 2 has an invalid length. [ 1155.186580][ T8603] net_ratelimit: 57 callbacks suppressed [ 1155.186602][ T8603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1155.503471][ T8628] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1155.670361][ T8638] netlink: 'syz.1.8418': attribute type 18 has an invalid length. [ 1155.887784][ T8622] lo speed is unknown, defaulting to 1000 [ 1157.256403][ T8660] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1157.275033][ T8660] bond9 (unregistering): Released all slaves [ 1157.487953][ T8667] __nla_validate_parse: 8 callbacks suppressed [ 1157.487973][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8428'. [ 1157.531331][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8428'. [ 1158.317483][ T8617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1158.532901][ T8698] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8436'. [ 1158.544298][ T8698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8436'. [ 1158.897726][ T8719] ip6tnl2: entered allmulticast mode [ 1159.005652][ T8727] bridge0: port 5(vlan4) entered blocking state [ 1159.014479][ T8727] bridge0: port 5(vlan4) entered disabled state [ 1159.036503][ T8727] vlan4: entered allmulticast mode [ 1159.067297][ T8727] vlan4: entered promiscuous mode [ 1159.402446][T14904] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1159.410982][T14904] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1159.431819][ T5530] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1159.511814][ T5530] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1160.021853][ T5530] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1161.664682][ T8714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1161.905440][ T8741] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8446'. [ 1161.964358][ T8741] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1161.970742][ T8746] netlink: 'syz.1.8449': attribute type 1 has an invalid length. [ 1161.997889][ T8741] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 1161.998697][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8450'. [ 1162.020404][ T8741] bond0 (unregistering): Released all slaves [ 1162.032684][ T8749] syzkaller0: entered promiscuous mode [ 1162.043362][ T8749] syzkaller0: entered allmulticast mode [ 1162.138183][ T8746] bond5: entered promiscuous mode [ 1162.145568][ T8746] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1162.157422][ T8748] tipc: Disabling bearer [ 1162.215298][ T8751] vlan3: entered allmulticast mode [ 1162.223048][ T8751] bond5: entered allmulticast mode [ 1162.349031][ T8759] bond5: (slave bridge2): making interface the new active one [ 1162.359771][ T8759] bridge2: entered promiscuous mode [ 1162.367418][ T8759] bridge2: entered allmulticast mode [ 1162.384495][ T8759] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 1162.538855][ T8774] netlink: 308 bytes leftover after parsing attributes in process `syz.2.8455'. [ 1162.809703][ T8789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8458'. [ 1162.989754][ T8792] syzkaller1: entered allmulticast mode [ 1163.341901][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1163.869339][ T8824] bond9: option lacp_rate: invalid value (128) [ 1163.876369][ T8829] netlink: 'syz.4.8469': attribute type 10 has an invalid length. [ 1163.879977][ T8824] bond9 (unregistering): Released all slaves [ 1163.929517][ T8818] syzkaller1: entered promiscuous mode [ 1163.951376][ T8818] syzkaller1: entered allmulticast mode [ 1164.001786][ T8833] xt_TCPMSS: Only works on TCP SYN packets [ 1164.006787][ T8829] team0: Port device veth1_to_hsr added [ 1164.033284][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8469'. [ 1164.073683][ T8833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8469'. [ 1164.420002][ T8847] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8474'. [ 1164.666238][ T8862] batadv_slave_1: entered promiscuous mode [ 1164.687586][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8477'. [ 1165.038595][ T8876] bond7 (unregistering): Released all slaves [ 1165.219885][ T8861] batadv_slave_1: left promiscuous mode [ 1165.459771][ T8898] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8487'. [ 1165.802770][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8491'. [ 1165.821435][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1165.926192][ T8915] team0: Port device team_slave_0 removed [ 1165.954545][ T8935] netlink: 'syz.4.8495': attribute type 32 has an invalid length. [ 1165.966316][ T8924] syzkaller1: entered promiscuous mode [ 1165.990303][ T8924] syzkaller1: entered allmulticast mode [ 1166.019198][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8496'. [ 1166.105771][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8496'. [ 1166.137436][ T8936] netlink: 'syz.3.8496': attribute type 1 has an invalid length. [ 1166.164688][ T8936] netlink: 'syz.3.8496': attribute type 2 has an invalid length. [ 1166.266513][ T8946] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1166.293803][ T8946] syzkaller0: entered promiscuous mode [ 1166.299464][ T8946] syzkaller0: entered allmulticast mode [ 1166.376839][ T8952] syzkaller0: entered promiscuous mode [ 1166.383189][ T8952] syzkaller0: entered allmulticast mode [ 1171.581451][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1172.862200][ T676] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1186.942990][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1188.653374][ T8960] netlink: 'syz.3.8505': attribute type 1 has an invalid length. [ 1188.709709][ T8960] bond9: entered promiscuous mode [ 1188.724773][ T8960] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1188.733248][ T8959] __nla_validate_parse: 2 callbacks suppressed [ 1188.733264][ T8959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8502'. [ 1188.761498][ T8967] tipc: Enabled bearer , priority 0 [ 1188.785556][ T8967] syzkaller0: entered promiscuous mode [ 1188.802578][ T8967] syzkaller0: entered allmulticast mode [ 1188.814511][ T8970] netlink: 'syz.3.8505': attribute type 27 has an invalid length. [ 1188.815122][ T8976] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8507'. [ 1188.892969][ T8967] tipc: Resetting bearer [ 1188.923954][ T8963] tipc: Resetting bearer [ 1188.984061][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8509'. [ 1188.995225][ T8963] tipc: Disabling bearer [ 1189.030766][ T8983] Cannot find del_set index 0 as target [ 1189.410262][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8512'. [ 1189.572471][ T9013] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.8516'. [ 1189.598536][ T9013] netlink: Unknown conntrack attr (0) [ 1189.878146][ T9033] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1190.097899][ T9044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8527'. [ 1190.123398][ T9044] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20000 [ 1190.186834][ T29] audit: type=1804 audit(1780299072.793:37): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8528" name="/newroot/450/memory.events" dev="tmpfs" ino=2327 res=1 errno=0 [ 1190.216018][ T29] audit: type=1800 audit(1780299072.793:38): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8528" name="memory.events" dev="tmpfs" ino=2327 res=0 errno=0 [ 1190.242896][ T29] audit: type=1804 audit(1780299072.793:39): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.8528" name="/newroot/450/memory.events" dev="tmpfs" ino=2327 res=1 errno=0 [ 1190.736442][ T29] audit: type=1800 audit(1780299073.343:40): pid=9061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8534" name="memory.events" dev="tmpfs" ino=2205 res=0 errno=0 [ 1190.841991][ T9066] netlink: 'syz.3.8537': attribute type 1 has an invalid length. [ 1190.895888][ T9066] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8537'. [ 1191.142191][ T9091] bond6: entered allmulticast mode [ 1191.150231][ T9093] tipc: Enabled bearer , priority 0 [ 1191.201746][ T9091] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8543'. [ 1191.290891][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8546'. [ 1191.295544][ T9100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8544'. [ 1191.324018][ T9094] syzkaller0: entered promiscuous mode [ 1191.329707][ T9094] syzkaller0: entered allmulticast mode [ 1191.336921][ T9094] tipc: Resetting bearer [ 1191.474714][ T9088] bond6: left allmulticast mode [ 1191.548715][ T9088] tipc: Resetting bearer [ 1191.983758][ T9128] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 1192.069081][ T9131] netlink: 'syz.2.8552': attribute type 2 has an invalid length. [ 1192.079403][ T9131] netlink: 'syz.2.8552': attribute type 1 has an invalid length. [ 1194.429631][ T4999] udevd[4999]: worker [7527] /devices/virtual/block/nbd2 is taking a long time [ 1197.218945][ T9088] tipc: Disabling bearer [ 1197.229822][ T9119] netlink: 'syz.1.8550': attribute type 2 has an invalid length. [ 1197.277455][ T5530] tipc: Node number set to 300148260 [ 1197.324123][ T9141] geneve3: entered promiscuous mode [ 1197.369335][ T9143] macvtap1: entered promiscuous mode [ 1197.412868][ T9143] macvtap1: entered allmulticast mode [ 1197.427712][ T9143] veth1_vlan: entered allmulticast mode [ 1197.458209][ T9144] macvtap2: entered promiscuous mode [ 1197.477663][ T9144] macvtap2: entered allmulticast mode [ 1197.525793][T30381] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.548491][ T9170] __nla_validate_parse: 6 callbacks suppressed [ 1197.548511][ T9170] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8557'. [ 1197.575440][T30381] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.637056][T30381] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.660196][T30381] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.853021][ T9194] netlink: 'syz.4.8560': attribute type 1 has an invalid length. [ 1198.055898][ T9215] gretap1: entered allmulticast mode [ 1198.076615][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8561'. [ 1198.089292][ T9215] bond0: (slave gretap1): making interface the new active one [ 1198.099456][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8561'. [ 1198.200318][ T9215] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 1198.810378][ T9278] workqueue: Failed to create a rescuer kthread for wq "nfc22_nci_cmd_wq": -EINTR [ 1198.852124][ T9299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8566'. [ 1199.387834][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8570'. [ 1199.450671][ T9327] tipc: Enabling of bearer rejected, failed to enable media [ 1199.845460][ T9341] netlink: 67 bytes leftover after parsing attributes in process `syz.3.8575'. [ 1200.156050][ T9353] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8578'. [ 1200.214443][ T9353] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8578'. [ 1200.334963][ T9353] netlink: 'syz.3.8578': attribute type 32 has an invalid length. [ 1200.361667][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8578'. [ 1200.448555][ T9353] bond10: option coupled_control: invalid value (12) [ 1200.570316][ T9353] bond10 (unregistering): Released all slaves [ 1200.947121][ T9368] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8582'. [ 1201.202708][ T9364] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.652166][ T9364] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.711812][ T9399] netlink: 'syz.0.8589': attribute type 1 has an invalid length. [ 1202.036836][ T9364] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.234450][ T9364] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.466337][ T9401] lo speed is unknown, defaulting to 1000 [ 1202.732299][ T675] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.744449][ T9433] netlink: 'syz.0.8598': attribute type 6 has an invalid length. [ 1202.764156][ T9433] netlink: 'syz.0.8598': attribute type 7 has an invalid length. [ 1202.776355][ T9433] netlink: 'syz.0.8598': attribute type 8 has an invalid length. [ 1202.796412][ T9433] netlink: 'syz.0.8598': attribute type 15 has an invalid length. [ 1202.884227][ T9430] netlink: 'syz.2.8599': attribute type 5 has an invalid length. [ 1203.130894][ T6306] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.382768][ T9458] netlink: 'syz.2.8603': attribute type 3 has an invalid length. [ 1203.396989][ T6294] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.505138][T10488] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.762428][ T9468] __nla_validate_parse: 2 callbacks suppressed [ 1203.762450][ T9468] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8606'. [ 1203.805184][ T9472] netlink: 'syz.0.8607': attribute type 2 has an invalid length. [ 1203.835330][ T9472] netlink: 'syz.0.8607': attribute type 2 has an invalid length. [ 1204.203895][ T9486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8610'. [ 1204.222575][ T676] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1204.349555][ T9491] syzkaller0: entered promiscuous mode [ 1204.363661][ T9491] syzkaller0: entered allmulticast mode [ 1204.479995][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8615'. [ 1204.500691][ T9501] netlink: 'syz.2.8615': attribute type 1 has an invalid length. [ 1204.521887][ T9501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8615'. [ 1204.778541][ T9512] xt_bpf: check failed: parse error [ 1204.787323][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8617'. [ 1204.797932][ T9512] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8617'. [ 1205.417757][ T9539] netlink: 'syz.1.8627': attribute type 39 has an invalid length. [ 1205.627886][ T9550] netlink: 284 bytes leftover after parsing attributes in process `syz.1.8628'. [ 1205.840872][ T9516] lo speed is unknown, defaulting to 1000 [ 1206.059082][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8631'. [ 1206.120510][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8631'. [ 1206.517839][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8639'. [ 1207.960660][ T9645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1208.061396][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1208.182114][ T9651] macsec0: entered promiscuous mode [ 1208.189447][ T9651] batadv0: entered promiscuous mode [ 1208.203028][ T9651] macsec0: entered allmulticast mode [ 1208.214552][ T9651] batadv0: entered allmulticast mode [ 1208.232839][ T9651] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 1208.253721][ T9651] batadv0: left allmulticast mode [ 1208.259730][ T9651] batadv0: left promiscuous mode [ 1208.325595][ T9629] lo speed is unknown, defaulting to 1000 [ 1208.533216][ T9667] macvlan2: entered allmulticast mode [ 1208.544867][ T9667] erspan0: entered allmulticast mode [ 1209.165110][ T9703] __nla_validate_parse: 2 callbacks suppressed [ 1209.165133][ T9703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8669'. [ 1209.343355][ T9705] validate_nla: 1 callbacks suppressed [ 1209.343374][ T9705] netlink: 'syz.1.8671': attribute type 6 has an invalid length. [ 1209.398384][ T9705] netlink: 'syz.1.8671': attribute type 23 has an invalid length. [ 1209.426737][ T9709] syzkaller0: entered promiscuous mode [ 1209.438592][ T9705] IPv6: NLM_F_CREATE should be specified when creating new route [ 1209.461812][ T9709] syzkaller0: entered allmulticast mode [ 1209.620117][ T9722] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1209.831026][ T9735] bond10: option lacp_rate: invalid value (128) [ 1209.840370][ T9735] bond10 (unregistering): Released all slaves [ 1209.858699][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8679'. [ 1209.870812][ T9734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.039189][ T9756] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8686'. [ 1210.052402][ T9756] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8686'. [ 1210.107613][ T9757] bond7: entered promiscuous mode [ 1210.114105][ T9757] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1210.208895][ T9757] bridge6: entered promiscuous mode [ 1210.250994][ T9757] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 1210.270470][ T9769] ±’’’’a–ļD: renamed from lo (while UP) [ 1210.502475][ T9789] block nbd4: not configured, cannot reconfigure [ 1210.657218][ T9788] block nbd4: server does not support multiple connections per device. [ 1210.670015][ T9788] block nbd4: shutting down sockets [ 1210.797899][ T9696] udevd[9696]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 1210.908633][ T9806] netlink: 'syz.4.8696': attribute type 1 has an invalid length. [ 1210.916828][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8696'. [ 1211.714445][ T9849] xt_hashlimit: invalid rate [ 1211.755212][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8708'. [ 1211.845846][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8714'. [ 1212.317814][ T9884] tun0: tun_chr_ioctl cmd 1074812117 [ 1212.364182][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8717'. [ 1212.647767][ T9905] netlink: 'syz.0.8721': attribute type 1 has an invalid length. [ 1212.665593][ T9905] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8721'. [ 1212.807830][ T9921] netlink: 'syz.4.8726': attribute type 1 has an invalid length. [ 1212.844073][ T9921] netlink: 280 bytes leftover after parsing attributes in process `syz.4.8726'. [ 1212.874576][ T9926] sctp: [Deprecated]: syz.4.8726 (pid 9926) Use of int in maxseg socket option. [ 1212.874576][ T9926] Use struct sctp_assoc_value instead [ 1212.889944][ T9927] tipc: Enabled bearer , priority 0 [ 1212.905762][ T9924] syzkaller0: entered promiscuous mode [ 1212.922265][ T9924] syzkaller0: entered allmulticast mode [ 1213.109157][ T9929] tipc: Resetting bearer [ 1213.144044][ T9923] tipc: Resetting bearer [ 1213.223937][ T9923] tipc: Disabling bearer [ 1213.361453][ T6294] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.382091][ T6294] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.401848][ T6294] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.459590][ T6294] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.645630][ T9955] pim6reg: left allmulticast mode [ 1213.904775][ T9942] lo speed is unknown, defaulting to 1000 [ 1214.124819][ T9971] netlink: 'syz.3.8737': attribute type 2 has an invalid length. [ 1214.145842][ T9971] netlink: 'syz.3.8737': attribute type 1 has an invalid length. [ 1214.180910][ T9971] netlink: 'syz.3.8737': attribute type 1 has an invalid length. [ 1214.195709][ T9972] __nla_validate_parse: 3 callbacks suppressed [ 1214.195727][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8737'. [ 1214.248733][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8737'. [ 1214.273480][ T9976] 8021q: VLANs not supported on ip6_vti0 [ 1214.295763][ T9974] netlink: 'syz.0.8738': attribute type 1 has an invalid length. [ 1214.727315][ T9990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8743'. [ 1214.768990][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8742'. [ 1215.066268][T10014] netlink: 'syz.4.8749': attribute type 14 has an invalid length. [ 1215.067271][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8746'. [ 1215.115894][T10004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8746'. [ 1215.150567][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8748'. [ 1215.601489][T10042] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8754'. [ 1215.642015][T10042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8754'. [ 1215.761995][T10046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8755'. [ 1215.779205][T10026] veth0_virt_wifi: entered promiscuous mode [ 1215.840898][T10051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.026465][T10055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1216.175350][T10067] netlink: 'syz.0.8762': attribute type 1 has an invalid length. [ 1216.283109][T10067] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1216.285688][T10074] netlink: 'syz.1.8764': attribute type 21 has an invalid length. [ 1216.347876][T10074] netlink: 'syz.1.8764': attribute type 21 has an invalid length. [ 1216.364429][T10072] bond8: (slave gretap1): making interface the new active one [ 1216.417770][T10072] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 1216.499275][T10074] kthread_run failed with err -4 [ 1216.505337][T10041] lo speed is unknown, defaulting to 1000 [ 1216.986695][T10096] veth1_vlan: left allmulticast mode [ 1217.027725][T14909] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.056028][T14909] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.079697][T14909] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.115393][T14909] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.440716][T10122] netlink: 'syz.0.8774': attribute type 7 has an invalid length. [ 1217.469828][T10122] netlink: 'syz.0.8774': attribute type 8 has an invalid length. [ 1217.834595][T10144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1217.844166][T10145] batadv_slave_1: entered promiscuous mode [ 1217.860402][T10144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1217.940251][T10134] batadv_slave_1: left promiscuous mode [ 1218.086373][T10155] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1218.292818][T10169] openvswitch: netlink: EtherType 50a is less than min 600 [ 1218.951325][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1219.054899][T10205] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1219.325104][T10214] __nla_validate_parse: 11 callbacks suppressed [ 1219.325126][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8799'. [ 1219.345816][T10216] veth1_to_bond: entered allmulticast mode [ 1219.362029][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8800'. [ 1219.379567][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8799'. [ 1219.392866][T10216] veth1_to_bond (unregistering): left allmulticast mode [ 1219.466215][T10222] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8796'. [ 1219.497065][T10195] lo speed is unknown, defaulting to 1000 [ 1219.649099][T10227] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8802'. [ 1220.000188][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8804'. [ 1220.009925][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8806'. [ 1220.076285][T10240] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1220.300733][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8807'. [ 1220.400768][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8807'. [ 1220.496785][T10253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8812'. [ 1221.023155][T10280] sctp: [Deprecated]: syz.3.8817 (pid 10280) Use of int in max_burst socket option. [ 1221.023155][T10280] Use struct sctp_assoc_value instead [ 1221.432866][T10295] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1221.945506][T10276] lo speed is unknown, defaulting to 1000 [ 1221.987727][T10311] xt_hashlimit: size too large, truncated to 1048576 [ 1222.086550][T10313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.128135][T10315] netlink: 'syz.3.8825': attribute type 1 has an invalid length. [ 1222.141088][T10313] bridge_slave_0 (unregistering): left allmulticast mode [ 1222.155778][T10313] bridge_slave_0 (unregistering): left promiscuous mode [ 1222.179705][T10313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.888228][T10323] syzkaller0: entered promiscuous mode [ 1222.908792][T10323] syzkaller0: entered allmulticast mode [ 1223.140958][T10326] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 1223.608533][T10349] xt_hashlimit: size too large, truncated to 1048576 [ 1223.659955][T10353] @0Ł: renamed from bond_slave_1 [ 1223.708542][T10355] openvswitch: netlink: IP tunnel dst address not specified [ 1223.859206][T10325] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 1224.234769][T10359] bond6: entered promiscuous mode [ 1224.903878][T10396] __nla_validate_parse: 3 callbacks suppressed [ 1224.903897][T10396] netlink: 240 bytes leftover after parsing attributes in process `syz.0.8837'. [ 1225.174740][T10409] syzkaller0: entered promiscuous mode [ 1225.190549][T10409] syzkaller0: entered allmulticast mode [ 1225.206712][T10414] netlink: 6 bytes leftover after parsing attributes in process `syz.1.8843'. [ 1225.244791][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8846'. [ 1225.327649][T10408] erspan0: left allmulticast mode [ 1225.722974][T10441] mac80211_hwsim hwsim106 »»»»»»: renamed from wlan0 [ 1226.240428][T10468] syzkaller1: entered promiscuous mode [ 1226.260691][T10468] syzkaller1: entered allmulticast mode [ 1226.349326][T10481] netlink: 'syz.3.8858': attribute type 11 has an invalid length. [ 1226.697644][T10495] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1226.987191][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8871'. [ 1227.046049][T10509] gretap1: entered allmulticast mode [ 1227.130718][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8873'. [ 1227.246833][T10521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8874'. [ 1227.259642][T10521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8874'. [ 1227.299363][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8875'. [ 1227.431642][T10529] syzkaller0: entered promiscuous mode [ 1227.439635][T10529] syzkaller0: entered allmulticast mode [ 1227.490633][T10530] netlink: 'syz.3.8877': attribute type 4 has an invalid length. [ 1227.548372][T10532] syzkaller0: entered promiscuous mode [ 1227.562216][T10532] syzkaller0: entered allmulticast mode [ 1227.607789][T10533] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1227.648242][T10535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8879'. [ 1227.704278][T10535] ip6gre4: entered promiscuous mode [ 1227.722071][T10535] ip6gre4: entered allmulticast mode [ 1228.005218][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8883'. [ 1228.503657][T10569] macvtap1: entered promiscuous mode [ 1228.514403][T10569] erspan0: entered promiscuous mode [ 1228.530740][T10569] macvtap1: entered allmulticast mode [ 1228.540932][T10569] erspan0: entered allmulticast mode [ 1228.541498][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1228.569577][T10582] netlink: 'syz.4.8892': attribute type 1 has an invalid length. [ 1228.627509][T10582] bond11: entered promiscuous mode [ 1228.645672][T10582] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1228.715799][T10582] bond11: (slave bridge6): making interface the new active one [ 1228.723984][T10582] bridge6: entered promiscuous mode [ 1228.731807][T10582] bridge6: left promiscuous mode [ 1229.456536][T10603] openvswitch: netlink: Flow actions attr not present in new flow. [ 1229.798770][T10616] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1229.823713][T10616] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1230.035333][T23816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1230.050139][T23816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1230.065947][T23816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1230.102256][T23816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1230.117903][T23816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1230.408169][T10637] vlan5: entered promiscuous mode [ 1230.426569][T10637] gretap0: entered promiscuous mode [ 1230.443950][T10637] vlan5: entered allmulticast mode [ 1230.472836][T10637] gretap0: entered allmulticast mode [ 1230.915835][T10640] syzkaller1: entered promiscuous mode [ 1230.928248][T10640] syzkaller1: entered allmulticast mode [ 1230.946685][T10660] __nla_validate_parse: 12 callbacks suppressed [ 1230.946709][T10660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8910'. [ 1231.406873][T10684] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8915'. [ 1231.520194][T10690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8916'. [ 1231.687788][T10694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8917'. [ 1231.748755][T10693] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8917'. [ 1231.971009][T10701] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8920'. [ 1232.141518][ T50] Bluetooth: hci1: command tx timeout [ 1232.542256][T10706] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1232.880002][T14909] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.069459][T30382] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.094693][T10624] lo speed is unknown, defaulting to 1000 [ 1233.140547][ T676] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.344806][T12157] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.376710][ T675] veth0_to_bond: left allmulticast mode [ 1233.384650][ T675] veth0_to_bond: left promiscuous mode [ 1233.397447][ T675] bridge2: port 2(veth0_to_bond) entered disabled state [ 1233.409258][ T675] veth3: left allmulticast mode [ 1233.421490][ T675] veth3: left promiscuous mode [ 1233.433659][ T675] bridge2: port 1(veth3) entered disabled state [ 1233.876535][ T675] bond0 (unregistering): (slave gretap1): Releasing active interface [ 1234.058399][ T675] bond1 (unregistering): Released all slaves [ 1234.084301][ T675] bond2 (unregistering): Released all slaves [ 1234.098385][ T675] bond3 (unregistering): Released all slaves [ 1234.128607][ T675] bond4 (unregistering): Released all slaves [ 1234.143341][ T675] bond5 (unregistering): Released all slaves [ 1234.158306][ T675] bond6 (unregistering): Released all slaves [ 1234.174168][ T675] bond7 (unregistering): (slave lo): Releasing backup interface [ 1234.185701][ T675] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1234.197625][ T675] bond7 (unregistering): Released all slaves [ 1234.214868][ T675] bond8 (unregistering): Released all slaves [ 1234.221452][ T50] Bluetooth: hci1: command tx timeout [ 1234.234498][ T675] bond9 (unregistering): Released all slaves [ 1234.249758][ T675] bond0 (unregistering): Released all slaves [ 1234.270871][ T675] bond10 (unregistering): Released all slaves [ 1234.288692][ T675] bond11 (unregistering): Released all slaves [ 1234.310138][T32140] lo speed is unknown, defaulting to 1000 [ 1234.331698][T32140] syś2: Port: 1 Link DOWN [ 1234.779636][ T675] 5nč: left promiscuous mode [ 1234.859230][ T675] hmac(sha2: left promiscuous mode [ 1235.004417][ T675] tipc: Disabling bearer [ 1235.013915][ T675] tipc: Left network mode [ 1235.059194][T10624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.067699][T10624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.075524][T10624] bridge_slave_0: entered allmulticast mode [ 1235.084202][T10624] bridge_slave_0: entered promiscuous mode [ 1235.093332][T10624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.100600][T10624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.109208][T10624] bridge_slave_1: entered allmulticast mode [ 1235.117346][T10624] bridge_slave_1: entered promiscuous mode [ 1235.156052][T10624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.169116][T10624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.216855][T10624] team0: Port device team_slave_0 added [ 1235.229176][T10624] team0: Port device team_slave_1 added [ 1235.262761][T10624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.269941][T10624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.296816][T10624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.321267][T10624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.328251][T10624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.356835][T10624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.424536][T10624] hsr_slave_0: entered promiscuous mode [ 1235.431064][T10624] hsr_slave_1: entered promiscuous mode [ 1235.833339][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8932'. [ 1235.908254][T10743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1236.304253][ T50] Bluetooth: hci1: command tx timeout [ 1236.323022][T10803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8937'. [ 1236.677969][ T675] team0 (unregistering): Port device veth1_to_hsr removed [ 1236.926311][T14909] smbdirect: ib_dev[syś2] removed [ 1237.069265][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8943'. [ 1237.469968][T10849] FAULT_INJECTION: forcing a failure. [ 1237.469968][T10849] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.550584][T10849] CPU: 1 UID: 0 PID: 10849 Comm: syz.1.8947 Not tainted syzkaller #0 PREEMPT(full) [ 1237.550612][T10849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1237.550624][T10849] Call Trace: [ 1237.550633][T10849] [ 1237.550641][T10849] dump_stack_lvl+0xe8/0x150 [ 1237.550673][T10849] should_fail_ex+0x412/0x560 [ 1237.550821][T10849] should_failslab+0xa8/0x100 [ 1237.550844][T10849] __kmalloc_noprof+0xe8/0x760 [ 1237.550870][T10849] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1237.550932][T10849] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1237.550953][T10849] ? tomoyo_domain+0xd7/0x130 [ 1237.550976][T10849] ? tomoyo_path_number_perm+0x219/0x630 [ 1237.551027][T10849] tomoyo_path_number_perm+0x246/0x630 [ 1237.551053][T10849] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1237.551077][T10849] ? __lock_acquire+0x6b5/0x2cf0 [ 1237.551117][T10849] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1237.551205][T10849] ? __fget_files+0x2a/0x420 [ 1237.551240][T10849] ? __fget_files+0x2a/0x420 [ 1237.551260][T10849] ? __fget_files+0x3a0/0x420 [ 1237.551281][T10849] ? __fget_files+0x2a/0x420 [ 1237.551307][T10849] security_file_ioctl+0xc3/0x2a0 [ 1237.551400][T10849] __se_sys_ioctl+0x47/0x170 [ 1237.551433][T10849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.551454][T10849] do_syscall_64+0x174/0x580 [ 1237.551475][T10849] ? clear_bhb_loop+0x40/0x90 [ 1237.551497][T10849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.551513][T10849] RIP: 0033:0x7fcaa1f9ce59 [ 1237.551529][T10849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.551544][T10849] RSP: 002b:00007fcaa2e1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1237.551564][T10849] RAX: ffffffffffffffda RBX: 00007fcaa2215fa0 RCX: 00007fcaa1f9ce59 [ 1237.551577][T10849] RDX: 0000200000000180 RSI: 0000000000008932 RDI: 0000000000000004 [ 1237.551588][T10849] RBP: 00007fcaa2e1d090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.551600][T10849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.551611][T10849] R13: 00007fcaa2216038 R14: 00007fcaa2215fa0 R15: 00007ffdb8b85ce8 [ 1237.551642][T10849] [ 1237.803975][T10624] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.808007][T10849] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1237.995384][T10624] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.382087][ T50] Bluetooth: hci1: command tx timeout [ 1238.595739][T10624] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.728146][ T675] IPVS: stop unused estimator thread 0... [ 1238.734072][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1238.773594][T10884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8953'. [ 1238.922603][T10901] FAULT_INJECTION: forcing a failure. [ 1238.922603][T10901] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.950912][T10901] CPU: 0 UID: 0 PID: 10901 Comm: syz.0.8957 Not tainted syzkaller #0 PREEMPT(full) [ 1238.950936][T10901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1238.950945][T10901] Call Trace: [ 1238.950951][T10901] [ 1238.950958][T10901] dump_stack_lvl+0xe8/0x150 [ 1238.950991][T10901] should_fail_ex+0x412/0x560 [ 1238.951011][T10901] should_failslab+0xa8/0x100 [ 1238.951027][T10901] __kmalloc_noprof+0xe8/0x760 [ 1238.951047][T10901] ? tomoyo_encode+0x28b/0x550 [ 1238.951066][T10901] tomoyo_encode+0x28b/0x550 [ 1238.951083][T10901] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1238.951101][T10901] ? tomoyo_domain+0xd7/0x130 [ 1238.951120][T10901] ? tomoyo_path_number_perm+0x219/0x630 [ 1238.951140][T10901] tomoyo_path_number_perm+0x246/0x630 [ 1238.951159][T10901] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1238.951175][T10901] ? __lock_acquire+0x6b5/0x2cf0 [ 1238.951201][T10901] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1238.951232][T10901] ? __fget_files+0x2a/0x420 [ 1238.951250][T10901] ? __fget_files+0x2a/0x420 [ 1238.951265][T10901] ? __fget_files+0x3a0/0x420 [ 1238.951279][T10901] ? __fget_files+0x2a/0x420 [ 1238.951297][T10901] security_file_ioctl+0xc3/0x2a0 [ 1238.951316][T10901] __se_sys_ioctl+0x47/0x170 [ 1238.951336][T10901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.951353][T10901] do_syscall_64+0x174/0x580 [ 1238.951367][T10901] ? trace_irq_disable+0x3b/0x140 [ 1238.951388][T10901] ? clear_bhb_loop+0x40/0x90 [ 1238.951407][T10901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.951421][T10901] RIP: 0033:0x7fcae579ce59 [ 1238.951436][T10901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1238.951448][T10901] RSP: 002b:00007fcae673d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1238.951465][T10901] RAX: ffffffffffffffda RBX: 00007fcae5a15fa0 RCX: 00007fcae579ce59 [ 1238.951476][T10901] RDX: 0000200000000180 RSI: 0000000000008932 RDI: 0000000000000004 [ 1238.951486][T10901] RBP: 00007fcae673d090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.951496][T10901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.951505][T10901] R13: 00007fcae5a16038 R14: 00007fcae5a15fa0 R15: 00007ffe1fa976f8 [ 1238.951531][T10901] [ 1239.179934][T10901] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1239.294436][T10624] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.308883][T10908] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1239.755598][T10926] IPVS: set_ctl: invalid protocol: 8 10.1.1.0:20000 [ 1239.863167][T10624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1239.920107][T10624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1239.936019][T10624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1239.958169][T10624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1239.973306][T10624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1240.005855][T10624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1240.023649][T10624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1240.079555][T10624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1240.186590][T10944] syzkaller0: entered promiscuous mode [ 1240.207915][T10955] FAULT_INJECTION: forcing a failure. [ 1240.207915][T10955] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1240.234550][T10944] syzkaller0: entered allmulticast mode [ 1240.261889][T10955] CPU: 0 UID: 0 PID: 10955 Comm: syz.3.8970 Not tainted syzkaller #0 PREEMPT(full) [ 1240.261915][T10955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1240.261926][T10955] Call Trace: [ 1240.261934][T10955] [ 1240.261942][T10955] dump_stack_lvl+0xe8/0x150 [ 1240.261969][T10955] should_fail_ex+0x412/0x560 [ 1240.261994][T10955] _copy_from_user+0x2d/0xb0 [ 1240.262145][T10955] sock_do_ioctl+0x195/0x320 [ 1240.262173][T10955] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1240.262193][T10955] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1240.262228][T10955] sock_ioctl+0x5c6/0x7f0 [ 1240.262252][T10955] ? __pfx_sock_ioctl+0x10/0x10 [ 1240.262275][T10955] ? __fget_files+0x2a/0x420 [ 1240.262295][T10955] ? __fget_files+0x3a0/0x420 [ 1240.262315][T10955] ? __fget_files+0x2a/0x420 [ 1240.262339][T10955] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1240.262366][T10955] ? __pfx_sock_ioctl+0x10/0x10 [ 1240.262387][T10955] __se_sys_ioctl+0xfc/0x170 [ 1240.262420][T10955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.262442][T10955] do_syscall_64+0x174/0x580 [ 1240.262459][T10955] ? trace_irq_disable+0x3b/0x140 [ 1240.262485][T10955] ? clear_bhb_loop+0x40/0x90 [ 1240.262507][T10955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.262525][T10955] RIP: 0033:0x7fca11f9ce59 [ 1240.262543][T10955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1240.262558][T10955] RSP: 002b:00007fca12eee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1240.262577][T10955] RAX: ffffffffffffffda RBX: 00007fca12215fa0 RCX: 00007fca11f9ce59 [ 1240.262590][T10955] RDX: 0000200000000180 RSI: 0000000000008932 RDI: 0000000000000004 [ 1240.262602][T10955] RBP: 00007fca12eee090 R08: 0000000000000000 R09: 0000000000000000 [ 1240.262612][T10955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1240.262622][T10955] R13: 00007fca12216038 R14: 00007fca12215fa0 R15: 00007ffc93382e88 [ 1240.262652][T10955] [ 1240.558537][T10624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.582511][T10624] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.611089][T30381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.618315][T30381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.634324][T10964] sctp: [Deprecated]: syz.2.8971 (pid 10964) Use of int in maxseg socket option. [ 1240.634324][T10964] Use struct sctp_assoc_value instead [ 1240.731839][T10968] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 1240.745387][T10964] sctp: [Deprecated]: syz.2.8971 (pid 10964) Use of int in maxseg socket option. [ 1240.745387][T10964] Use struct sctp_assoc_value instead [ 1240.769073][T30381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.776285][T30381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.819373][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8973'. [ 1241.015365][T10979] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1241.480981][T11009] netlink: 'syz.0.8984': attribute type 1 has an invalid length. [ 1241.508771][T11009] netlink: 276 bytes leftover after parsing attributes in process `syz.0.8984'. [ 1241.533781][T11009] netlink: 'syz.0.8984': attribute type 1 has an invalid length. [ 1241.558229][T11009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8984'. [ 1241.726962][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8986'. [ 1242.013763][T10624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.193224][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8991'. [ 1242.315996][T11048] netlink: 'syz.0.8993': attribute type 1 has an invalid length. [ 1242.357413][T11048] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8993'. [ 1242.919974][T11076] batadv_slave_1: entered promiscuous mode [ 1242.969867][T11075] batadv_slave_1: left promiscuous mode [ 1243.027955][T10624] veth0_vlan: entered promiscuous mode [ 1243.086404][T10624] veth1_vlan: entered promiscuous mode [ 1243.168175][T10624] veth0_macvtap: entered promiscuous mode [ 1243.187231][T10624] veth1_macvtap: entered promiscuous mode [ 1243.209336][T10624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1243.222510][T10624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1243.275996][ T676] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.308128][ T676] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.332147][ T676] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.359803][ T676] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.579074][T11107] netlink: 'syz.1.9004': attribute type 9 has an invalid length. [ 1243.612523][T11107] netlink: 'syz.1.9004': attribute type 6 has an invalid length. [ 1243.620410][T11107] netlink: 'syz.1.9004': attribute type 7 has an invalid length. [ 1243.629000][T11107] netlink: 'syz.1.9004': attribute type 8 has an invalid length. [ 1243.943346][T12157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.977285][T12157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.014758][T11117] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9009'. [ 1244.050001][T14909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.086344][T14909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.106275][T11118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9007'. [ 1244.329932][T11138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9007'. [ 1244.375883][T11133] mac80211_hwsim hwsim90 syzkaller0: entered promiscuous mode [ 1244.387271][T11133] mac80211_hwsim hwsim90 syzkaller0: entered allmulticast mode [ 1244.599328][T11147] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1244.802015][T11157] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9017'. [ 1244.833472][T11158] netlink: 'syz.1.9018': attribute type 4 has an invalid length. [ 1245.787925][T11186] tipc: Failed to remove unknown binding: 66,0,0/0:2951010314/2951010316 [ 1245.844491][T11186] tipc: Failed to remove unknown binding: 66,0,0/0:2951010314/2951010315 [ 1245.984960][T11196] tc_dump_action: action bad kind [ 1246.055634][T11197] tipc: Failed to remove unknown binding: 66,0,0/0:2951010314/2951010316 [ 1246.099993][T11197] tipc: Failed to remove unknown binding: 66,0,0/0:2951010314/2951010315 [ 1246.325238][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9030'. [ 1246.371017][T11202] IPv6: NLM_F_CREATE should be specified when creating new route [ 1246.602564][T11212] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9035'. [ 1246.621789][T11214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9035'. [ 1246.825185][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1247.131594][ T5732] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1247.256426][T11240] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9042'. [ 1247.330343][T11232] syzkaller0: entered promiscuous mode [ 1247.338861][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9043'. [ 1247.352063][T11232] syzkaller0: entered allmulticast mode [ 1247.622136][T11239] pim6reg1: entered promiscuous mode [ 1247.638333][T11239] pim6reg1: entered allmulticast mode [ 1247.948877][T11265] netlink: 'syz.3.9049': attribute type 21 has an invalid length. [ 1247.974544][T11267] netlink: 'syz.1.9047': attribute type 1 has an invalid length. [ 1248.029466][T11267] bond8: entered promiscuous mode [ 1248.034158][T11271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9047'. [ 1248.036269][T11267] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1248.135742][T11268] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1248.275137][T11271] bond8: entered allmulticast mode [ 1248.399027][T11278] tipc: Enabled bearer , priority 0 [ 1248.525709][T11278] tipc: Resetting bearer [ 1248.700543][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9058'. [ 1248.785888][T11303] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1248.993942][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9057'. [ 1249.556220][ T24] tipc: Node number set to 1400552675 [ 1249.818930][T11347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9066'. [ 1250.208476][T11377] Cannot find set identified by id 0 to match [ 1252.036914][T11318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1252.361728][T11392] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1252.475181][T11396] netlink: 'syz.2.9077': attribute type 11 has an invalid length. [ 1252.489191][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9078'. [ 1252.640226][T11396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.679375][T11396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.699399][T11396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.821588][T11396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.842434][T11396] veth1_to_batadv: left promiscuous mode [ 1252.851076][T11396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.871580][T11396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1252.882541][T11396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1252.904420][T11396] veth1_vlan: left promiscuous mode [ 1252.911689][T11396] veth0_vlan: left promiscuous mode [ 1252.919262][T11396] veth0_vlan: entered promiscuous mode [ 1252.929276][T11396] veth1_vlan: entered promiscuous mode [ 1252.952571][T11396] veth1_macvtap: left promiscuous mode [ 1252.959974][T11396] veth0_macvtap: left promiscuous mode [ 1252.967517][T11396] veth0_macvtap: entered promiscuous mode [ 1252.975260][T11396] veth1_macvtap: entered promiscuous mode [ 1253.034947][T11396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1253.048124][T11396] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1253.063954][T11396] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1253.076584][T11396] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1253.089914][T11396] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1253.119105][T11396] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1253.145756][T11396] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1253.154920][T11396] veth1_to_batadv: entered promiscuous mode [ 1253.163121][T11396] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1253.212865][T11396] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1253.221621][T11396] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1253.230592][T11396] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1253.240310][T11396] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1253.248124][T11396] ieee802154 phy3 wpan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1253.269128][T11396] bridge9: port 1(gretap3) entered blocking state [ 1253.275702][T11396] bridge9: port 1(gretap3) entered forwarding state [ 1253.298546][T11396] erspan0: entered promiscuous mode [ 1253.306879][T11396] erspan0: entered allmulticast mode [ 1253.328767][T11402] mac80211_hwsim hwsim85 wlan0: entered promiscuous mode [ 1253.341072][T11402] mac80211_hwsim hwsim85 wlan0: entered allmulticast mode [ 1253.397326][ T676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.404592][ T676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.419498][ T676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.426779][ T676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.530645][T14911] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1253.539139][T14911] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.977788][T14911] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1253.998780][T11441] nbd: socks must be embedded in a SOCK_ITEM attr [ 1254.015126][T14911] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.029568][T14911] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1254.061588][T14911] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.248268][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9090'. [ 1254.292446][T11457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1254.312682][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9090'. [ 1254.335411][T11453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9090'. [ 1254.387148][T14911] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1254.412843][T14911] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.468972][ T6294] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1254.486983][T11458] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1254.515237][ T6294] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1254.582904][ T6294] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1254.606923][T11468] netlink: 280 bytes leftover after parsing attributes in process `syz.1.9093'. [ 1254.638481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 1254.908338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 1255.038180][T11481] syzkaller0: entered promiscuous mode [ 1255.059375][T11481] syzkaller0: entered allmulticast mode [ 1255.319932][ C0] IPv6: veth0_to_bridge: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 1255.377463][T11493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9103'. [ 1255.648268][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9106'. [ 1255.969690][T11519] team0: Port device dummy0 removed [ 1255.985885][T11519] bridge_slave_0: left allmulticast mode [ 1256.012259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 1256.037664][T11519] bridge_slave_0: left promiscuous mode [ 1256.045947][T11519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.059304][T11519] bridge_slave_1: left allmulticast mode [ 1256.068615][T11519] bridge_slave_1: left promiscuous mode [ 1256.076845][T11519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.097084][T11519] bond0: (slave bond_slave_0): Releasing backup interface [ 1256.122749][T11519] bond0: (slave c@0Ł): Releasing backup interface [ 1256.157287][T11519] team0: Port device team_slave_1 removed [ 1256.165547][T11519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1256.174073][T11519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.183203][T11519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1256.190631][T11519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1256.200325][T11519] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1256.282208][T11529] team0: Mode changed to "activebackup" [ 1256.504397][T11540] netlink: 'syz.3.9114': attribute type 6 has an invalid length. [ 1256.517927][T11540] netlink: 'syz.3.9114': attribute type 23 has an invalid length. [ 1256.528681][T11540] IPv6: NLM_F_CREATE should be specified when creating new route [ 1256.610251][T11544] xt_hashlimit: size too large, truncated to 1048576 [ 1256.660454][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9115'. [ 1256.667230][T11549] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1256.951932][T11559] netlink: 'syz.3.9120': attribute type 8 has an invalid length. [ 1256.980160][T11557] syzkaller0: entered promiscuous mode [ 1256.989291][T11557] syzkaller0: entered allmulticast mode [ 1257.043267][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9121'. [ 1257.053778][T11562] tc_dump_action: action bad kind [ 1257.113153][T11562] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1257.453685][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9127'. [ 1257.558294][T11589] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1257.706661][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9132'. [ 1257.717557][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9132'. [ 1257.733711][T11595] Bluetooth: MGMT ver 1.23 [ 1257.756441][T11594] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9129'. [ 1258.039893][T11615] netlink: 'syz.4.9136': attribute type 1 has an invalid length. [ 1258.056374][T11617] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9138'. [ 1258.078797][T11619] nbd: couldn't find a device at index 0 [ 1258.272936][T11615] veth3: entered allmulticast mode [ 1258.461495][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1258.605350][T11648] tap0: tun_chr_ioctl cmd 2147767520 [ 1258.612502][T12157] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1258.631881][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1258.951968][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1261.454504][T11641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1261.780789][T11686] netlink: 'syz.2.9150': attribute type 20 has an invalid length. [ 1261.943275][T11686] netlink: 'syz.2.9150': attribute type 20 has an invalid length. [ 1262.652871][T11715] netlink: 'syz.1.9160': attribute type 2 has an invalid length. [ 1262.695746][T11715] netlink: 'syz.1.9160': attribute type 2 has an invalid length. [ 1263.048913][T11721] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9162'. [ 1263.343280][T11730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9165'. [ 1263.439920][T11739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1263.764747][T11745] bond11: Removing last arp target with arp_interval on [ 1264.043781][T11756] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1264.127749][T11758] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1264.330884][T11777] rdma_op ffff888032dea1f0 conn xmit_rdma 0000000000000000 [ 1264.382301][T11783] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9180'. [ 1264.544443][T11789] netlink: 120 bytes leftover after parsing attributes in process `syz.0.9181'. [ 1264.614905][T11795] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9182'. [ 1264.805374][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9185'. [ 1264.816075][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9185'. [ 1264.831981][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9185'. [ 1265.093947][T11817] netlink: 'syz.3.9192': attribute type 4 has an invalid length. [ 1265.116333][T11817] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9192'. [ 1265.290441][T11833] bond5: (slave bridge2): Releasing backup interface [ 1265.325873][T11822] netlink: 'syz.1.9194': attribute type 3 has an invalid length. [ 1265.341956][T11833] bridge2: left promiscuous mode [ 1265.359231][T11833] bridge2: left allmulticast mode [ 1265.371455][T11822] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9194'. [ 1265.544270][T11851] netlink: 'syz.4.9200': attribute type 1 has an invalid length. [ 1266.265139][T11895] netlink: 'syz.0.9209': attribute type 1 has an invalid length. [ 1266.942425][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1266.950321][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1268.223727][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1269.165246][T11889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1269.689078][T11947] __nla_validate_parse: 4 callbacks suppressed [ 1269.689099][T11947] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.9224'. [ 1269.750015][T11947] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.9224'. [ 1269.804991][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9226'. [ 1269.980931][T11957] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1270.240195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.258295][T11973] ’: renamed from bond_slave_0 (while UP) [ 1270.313363][T11974] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9233'. [ 1270.355142][ T50] block nbd3: Receive control failed (result -32) [ 1270.622328][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.908544][T12011] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1271.092523][T12029] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1508 [ 1271.143557][T12032] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9250'. [ 1271.153992][T12032] netlink: 116 bytes leftover after parsing attributes in process `syz.1.9250'. [ 1271.165300][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9251'. [ 1271.206859][T12032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9250'. [ 1271.264923][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.288100][T12035] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9252'. [ 1271.316033][T12035] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9252'. [ 1271.366706][T12045] IPVS: length: 195 != 3672 [ 1271.423453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1271.426589][T14911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.448336][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.472012][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.657332][T12054] syzkaller0: entered promiscuous mode [ 1271.663536][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.672627][T12054] syzkaller0: entered allmulticast mode [ 1271.779164][T12060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.106461][T12073] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1272.127972][T12073] bond12: option mode: unable to set because the bond device is up [ 1272.276336][T12074] bond9: option updelay: invalid value (18446744073709518847) [ 1272.302509][T12074] bond9: option updelay: allowed values 0 - 2147483647 [ 1272.317145][T12074] bond9 (unregistering): Released all slaves [ 1272.345720][T12086] macvlan2: entered promiscuous mode [ 1272.529712][T12098] netlink: 'syz.0.9269': attribute type 1 has an invalid length. [ 1272.862171][ T675] wlan1: Trigger new scan to find an IBSS to join [ 1273.424897][T12141] netlink: 'syz.0.9280': attribute type 1 has an invalid length. [ 1274.247730][T12166] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1274.342803][T12171] netlink: 'syz.2.9287': attribute type 3 has an invalid length. [ 1275.074596][T12208] netlink: 'syz.3.9296': attribute type 1 has an invalid length. [ 1275.122323][T12208] bond13: entered promiscuous mode [ 1275.128110][T12208] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1275.151979][T12208] vlan6: entered allmulticast mode [ 1275.157181][T12208] bond13: entered allmulticast mode [ 1275.180932][T12208] bond13: (slave bridge8): making interface the new active one [ 1275.189559][T12208] bridge8: entered promiscuous mode [ 1275.195964][T12208] bridge8: entered allmulticast mode [ 1275.204723][T12208] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 1275.223594][T12212] __nla_validate_parse: 4 callbacks suppressed [ 1275.223612][T12212] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9297'. [ 1275.388311][T12220] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1275.540549][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9301'. [ 1275.572883][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9301'. [ 1275.715751][T12240] netlink: 'syz.0.9304': attribute type 12 has an invalid length. [ 1275.737227][T12240] netlink: 'syz.0.9304': attribute type 29 has an invalid length. [ 1275.788161][T12240] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9304'. [ 1275.813233][T12240] netlink: 'syz.0.9304': attribute type 1 has an invalid length. [ 1275.823226][ T4610] net_ratelimit: 1007 callbacks suppressed [ 1275.823247][ T4610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.850453][T12240] netlink: 'syz.0.9304': attribute type 2 has an invalid length. [ 1275.871560][T12240] netlink: 11 bytes leftover after parsing attributes in process `syz.0.9304'. [ 1275.903044][T30382] wlan1: Trigger new scan to find an IBSS to join [ 1275.910067][T32140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.956324][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9307'. [ 1276.030883][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9307'. [ 1276.126600][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9307'. [ 1276.486984][T12283] netlink: 'syz.1.9316': attribute type 5 has an invalid length. [ 1276.550852][T12289] xt_NFQUEUE: number of total queues is 0 [ 1276.575240][T12291] xt_NFQUEUE: number of total queues is 0 [ 1276.612882][T12292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9317'. [ 1276.639411][T12291] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9317'. [ 1276.863296][ T4610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.022360][T19420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.181364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.193860][ T6294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.911120][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.928018][T23816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1277.949233][T23816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1277.961380][T23816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1277.978030][T23816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1277.990510][T23816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1278.169519][T12353] pim6reg1: entered promiscuous mode [ 1278.177658][T12353] pim6reg1: entered allmulticast mode [ 1278.463534][T12157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.863503][ T675] wlan1: Trigger new scan to find an IBSS to join [ 1278.941747][ T4610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.018180][T12404] netlink: zone id is out of range [ 1279.219936][T12345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.227245][T12345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.235225][T12345] bridge_slave_0: entered allmulticast mode [ 1279.244392][T12345] bridge_slave_0: entered promiscuous mode [ 1279.253428][T12345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.260599][T12345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.268288][T12345] bridge_slave_1: entered allmulticast mode [ 1279.283963][T12345] bridge_slave_1: entered promiscuous mode [ 1279.317520][T12345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.330455][T12345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1279.372356][T12345] team0: Port device team_slave_0 added [ 1279.380133][T12345] team0: Port device team_slave_1 added [ 1279.408258][T12345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.415555][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.442703][T12345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.464794][T12345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.472031][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.498330][T12345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.548474][T12345] hsr_slave_0: entered promiscuous mode [ 1279.555243][T12345] hsr_slave_1: entered promiscuous mode [ 1279.562687][T12345] debugfs: 'hsr0' already exists in 'hsr' [ 1279.568466][T12345] Cannot create hsr debugfs directory [ 1279.737274][T12345] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1279.749835][T12345] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.785033][T14905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.862978][T12345] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1279.874065][T12345] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.960290][T12345] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1279.970676][T12345] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.078304][T12345] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1280.089865][ T50] Bluetooth: hci3: command tx timeout [ 1280.101340][T12345] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.026310][ T5858] net_ratelimit: 6 callbacks suppressed [ 1281.026332][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.042058][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.622231][T12381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1281.768866][T12345] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1281.828795][T12345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1281.857313][T12345] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1281.885447][T12419] __nla_validate_parse: 3 callbacks suppressed [ 1281.885469][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9344'. [ 1281.930409][T12345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1281.945102][T12345] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1281.984287][T12345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1281.993112][T12345] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1282.051020][T12345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1282.064675][ T4610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.144528][ T50] Bluetooth: hci3: command tx timeout [ 1282.216135][T12427] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1282.544232][T12345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.587761][T12345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.613723][ T676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.620947][ T676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1282.643954][ T676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.651226][ T676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.699528][T12462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1282.918465][T12467] netlink: 'syz.3.9354': attribute type 21 has an invalid length. [ 1282.941680][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1282.951513][T12467] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9354'. [ 1282.962335][T14905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.038807][T12468] netlink: 'syz.3.9354': attribute type 1 has an invalid length. [ 1283.039473][T12471] netlink: 'syz.3.9354': attribute type 1 has an invalid length. [ 1283.108919][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.218765][T12474] netlink: 'syz.1.9355': attribute type 1 has an invalid length. [ 1283.251191][T12474] netlink: 'syz.1.9355': attribute type 2 has an invalid length. [ 1283.262530][T12474] netlink: 'syz.1.9355': attribute type 2 has an invalid length. [ 1283.273726][T12474] netlink: 'syz.1.9355': attribute type 1 has an invalid length. [ 1283.298313][T12474] netlink: 'syz.1.9355': attribute type 1 has an invalid length. [ 1283.585485][T14905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.144820][ T4610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.216325][T12345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1284.221845][ T50] Bluetooth: hci3: command tx timeout [ 1284.225000][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1284.350673][T12345] veth0_vlan: entered promiscuous mode [ 1284.407893][T12345] veth1_vlan: entered promiscuous mode [ 1284.499828][T12345] veth0_macvtap: entered promiscuous mode [ 1284.518631][T12345] veth1_macvtap: entered promiscuous mode [ 1284.562152][T12345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.600657][T12345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.625312][T14905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.664784][T14905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.686948][T14905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.726075][T14905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.863485][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1284.990987][ T675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.035843][ T675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.086701][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9364'. [ 1285.216245][ T4610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.229630][T12522] team0: Port device team_slave_0 removed [ 1285.244956][T12527] syzkaller1: entered promiscuous mode [ 1285.250602][T12527] syzkaller1: entered allmulticast mode [ 1285.271985][T14905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.292746][T14905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.038123][T12562] netlink: 'syz.2.9373': attribute type 15 has an invalid length. [ 1286.054292][T12564] netlink: 'syz.1.9375': attribute type 30 has an invalid length. [ 1286.071784][T12562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9373'. [ 1286.100160][ T4610] IPVS: starting estimator thread 0... [ 1286.139255][T12562] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1286.189819][T12567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9376'. [ 1286.231870][T12569] IPVS: using max 30 ests per chain, 72000 per kthread [ 1286.301558][ T50] Bluetooth: hci3: command tx timeout [ 1286.668436][T12587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9379'. [ 1286.691024][T12587] tipc: Invalid UDP bearer configuration [ 1286.692364][T12587] tipc: Enabling of bearer rejected, failed to enable media [ 1286.783866][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1286.793614][ T675] net_ratelimit: 1 callbacks suppressed [ 1286.793633][ T675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.914026][T12609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9388'. [ 1286.996365][T12611] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9389'. [ 1287.052560][T12611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9389'. [ 1287.228376][T12616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9391'. [ 1287.244279][T12616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9391'. [ 1287.261853][ T4610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.579093][T12629] tipc: Started in network mode [ 1287.606172][T12629] tipc: Node identity 8ee51e7d4b7c, cluster identity 4711 [ 1287.620712][T12629] tipc: Enabled bearer , priority 0 [ 1287.657705][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9396'. [ 1287.758491][T12629] syzkaller0: entered promiscuous mode [ 1287.779644][T12629] syzkaller0: entered allmulticast mode [ 1287.805986][T12629] tipc: Resetting bearer [ 1287.858621][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9396'. [ 1287.867858][T12627] tipc: Resetting bearer [ 1287.878115][T12633] xt_TCPMSS: Only works on TCP SYN packets [ 1288.062210][ T675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.302211][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.404170][T12646] validate_nla: 3 callbacks suppressed [ 1288.404191][T12646] netlink: 'syz.4.9400': attribute type 32 has an invalid length. [ 1288.418851][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9400'. [ 1289.342913][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.352241][T14911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.696848][T23816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1289.729556][T23816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1289.744875][T23816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1289.771428][T23816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1289.782909][T23816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1290.382919][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.122961][T19420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.273521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.422319][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.906318][ T30] INFO: task udevd:7527 blocked for more than 143 seconds. [ 1291.906906][ T50] Bluetooth: hci4: command tx timeout [ 1291.920154][T12157] net_ratelimit: 1 callbacks suppressed [ 1291.920173][T12157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.932824][ T30] Not tainted syzkaller #0 [ 1291.939868][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1291.949076][ T30] task:udevd state:D stack:23400 pid:7527 tgid:7527 ppid:4999 task_flags:0x400140 flags:0x00080000 [ 1291.961532][ T30] Call Trace: [ 1291.964882][ T30] [ 1291.967835][ T30] __schedule+0x1821/0x5740 [ 1291.973064][ T30] ? irqentry_exit+0x218/0x8b0 [ 1291.978060][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1291.984780][ T30] ? __blk_flush_plug+0x416/0x4d0 [ 1291.989968][ T30] ? __pfx___schedule+0x10/0x10 [ 1291.995370][ T30] ? schedule+0x90/0x360 [ 1291.999682][ T30] schedule+0x164/0x360 [ 1292.004380][ T30] schedule_timeout+0x158/0x2c0 [ 1292.009391][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1292.018214][ T30] ? __pfx_process_timeout+0x10/0x10 [ 1292.031217][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1292.044975][ T30] ? prepare_to_wait_event+0x436/0x480 [ 1292.050624][ T30] nbd_queue_rq+0x857/0x1100 [ 1292.055863][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1292.060958][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1292.067715][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1292.073761][ T30] ? sbitmap_get+0x229/0x390 [ 1292.078552][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1292.088289][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1292.094526][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1292.101024][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1292.108317][ T30] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 1292.131288][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1292.147573][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1292.155716][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1292.161172][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 1292.166324][ T30] blk_mq_dispatch_list+0xd16/0xe10 [ 1292.171636][ T30] ? bdev_count_inflight+0x1cf/0x210 [ 1292.176938][ T30] ? blk_mq_dispatch_list+0x180/0xe10 [ 1292.182415][ T30] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1292.188154][ T30] ? rcu_is_watching+0x15/0xb0 [ 1292.193088][ T30] blk_mq_flush_plug_list+0x48d/0x570 [ 1292.198547][ T30] ? blk_add_rq_to_plug+0x300/0x450 [ 1292.203861][ T30] ? blk_mq_submit_bio+0x1a95/0x28a0 [ 1292.209165][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1292.215149][ T30] ? blk_mq_submit_bio+0x49e/0x28a0 [ 1292.220373][ T30] __blk_flush_plug+0x3ed/0x4d0 [ 1292.225575][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 1292.231041][ T30] __submit_bio+0x28d/0x580 [ 1292.236965][ T30] ? __pfx___submit_bio+0x10/0x10 [ 1292.242573][ T30] ? bio_associate_blkg+0x6d/0x230 [ 1292.247848][ T30] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1292.254281][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1292.260483][ T30] block_read_full_folio+0x599/0x830 [ 1292.266593][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 1292.272710][ T30] filemap_read_folio+0x137/0x3b0 [ 1292.277798][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1292.283777][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 1292.289337][ T30] ? filemap_add_folio+0x356/0x530 [ 1292.295305][ T30] do_read_cache_folio+0x358/0x590 [ 1292.300473][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1292.306686][ T30] read_part_sector+0xb6/0x2b0 [ 1292.311564][ T30] adfspart_check_ICS+0xb1/0x960 [ 1292.316528][ T30] ? seq_buf_printf+0x212/0x2d0 [ 1292.321775][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1292.328128][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1292.333750][ T30] bdev_disk_changed+0x817/0x1770 [ 1292.338844][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1292.344809][ T30] blkdev_get_whole+0x380/0x510 [ 1292.349672][ T30] bdev_open+0x31e/0xd30 [ 1292.354781][ T30] blkdev_open+0x470/0x610 [ 1292.359233][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1292.364664][ T30] do_dentry_open+0x822/0x13a0 [ 1292.369441][ T30] vfs_open+0x3b/0x340 [ 1292.374189][ T30] ? path_openat+0x2df0/0x3860 [ 1292.378988][ T30] path_openat+0x2e08/0x3860 [ 1292.385455][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1292.390898][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1292.396902][ T30] ? __pfx_path_openat+0x10/0x10 [ 1292.403480][ T30] ? __x64_sys_openat+0x138/0x170 [ 1292.408582][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1292.414569][ T30] do_file_open+0x23e/0x4a0 [ 1292.419152][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1292.424643][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1292.429503][ T30] ? alloc_fd+0x64b/0x6c0 [ 1292.434330][ T30] do_sys_openat2+0x113/0x200 [ 1292.439018][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1292.444905][ T30] ? exc_page_fault+0x6a/0xc0 [ 1292.449590][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 1292.455422][ T30] __x64_sys_openat+0x138/0x170 [ 1292.460281][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.466631][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.475864][ T30] do_syscall_64+0x174/0x580 [ 1292.480511][ T30] ? trace_irq_disable+0x3b/0x140 [ 1292.486157][ T30] ? clear_bhb_loop+0x40/0x90 [ 1292.490882][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.497497][ T30] RIP: 0033:0x7ffbeb6a7407 [ 1292.502495][ T30] RSP: 002b:00007ffdc2ce2530 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1292.510907][ T30] RAX: ffffffffffffffda RBX: 00007ffbebe7a880 RCX: 00007ffbeb6a7407 [ 1292.519585][ T30] RDX: 00000000000a0800 RSI: 000056204b312d30 RDI: ffffffffffffff9c [ 1292.527689][ T30] RBP: 000056204b300910 R08: 0000000000000000 R09: 0000000000000000 [ 1292.535947][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000056204b313e20 [ 1292.546682][ T30] R13: 000056204b30e190 R14: 0000000000000000 R15: 000056204b313e20 [ 1292.554985][ T30] [ 1292.558073][ T30] [ 1292.558073][ T30] Showing all locks held in the system: [ 1292.576226][ T30] 1 lock held by khungtaskd/30: [ 1292.581209][ T30] #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1292.591213][ T30] 2 locks held by getty/5388: [ 1292.595903][ T30] #0: ffff888036bc60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1292.608153][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1292.618676][ T30] 4 locks held by kworker/u8:0/30381: [ 1292.624656][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1292.636211][ T30] #1: ffffc9000d317c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1292.647347][ T30] #2: ffffffff8fdba0e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1292.657152][ T30] #3: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: cangw_pernet_exit_batch+0x20/0x90 [ 1292.667629][ T30] 1 lock held by syz-executor/31643: [ 1292.673343][ T30] #0: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1292.682816][ T30] 3 locks held by kworker/u8:7/676: [ 1292.688020][ T30] #0: ffff888032775940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1292.700215][ T30] #1: ffffc900036efc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1292.719122][ T30] #2: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1292.729605][ T30] 3 locks held by kworker/1:3/4610: [ 1292.735501][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1292.751434][ T30] #1: ffffc90003a27c40 (rx_mode_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1292.762079][ T30] #2: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x19/0x3c0 [ 1292.771857][ T30] 3 locks held by kworker/0:2/4614: [ 1292.777079][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1292.788376][ T30] #1: ffffc90003a97c40 ((work_completion)(&tn->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1292.800218][ T30] #2: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: tipc_net_finalize_work+0x1e/0x90 [ 1292.810207][ T30] 3 locks held by udevd/7527: [ 1292.815149][ T30] #0: ffff88802701d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1292.825082][ T30] #1: ffff88801f723b18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 1292.834762][ T30] #2: ffff8880273f7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1292.844500][ T30] 2 locks held by syz.0.9394/12627: [ 1292.849716][ T30] #0: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1292.859275][ T30] #1: ffffffff8e962fe8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1292.870802][ T30] 1 lock held by syz.1.9396/12632: [ 1292.876699][ T30] #0: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_release+0x29/0x540 [ 1292.886931][ T30] 1 lock held by syz.1.9396/12633: [ 1292.892625][ T30] #0: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x42a/0x820 [ 1292.902544][ T30] 1 lock held by syz.1.9396/12636: [ 1292.907670][ T30] #0: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x6e1/0x10b0 [ 1292.917518][ T30] 1 lock held by syz.3.9399/12651: [ 1292.923081][ T30] #0: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1292.932823][ T30] 2 locks held by syz.4.9400/12646: [ 1292.938041][ T30] #0: ffffffff9030bea0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1292.948287][ T30] #1: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1292.958081][ T30] 1 lock held by syz-executor/12657: [ 1292.964196][ T30] #0: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1292.974295][ T30] [ 1292.976668][ T30] ============================================= [ 1292.976668][ T30] [ 1293.000199][ T30] NMI backtrace for cpu 0 [ 1293.000221][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1293.000242][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1293.000254][ T30] Call Trace: [ 1293.000261][ T30] [ 1293.000271][ T30] dump_stack_lvl+0xe8/0x150 [ 1293.000301][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1293.000414][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1293.000447][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1293.000471][ T30] sys_info+0x135/0x170 [ 1293.000490][ T30] watchdog+0xfd3/0x1030 [ 1293.000566][ T30] ? watchdog+0x1c9/0x1030 [ 1293.000597][ T30] kthread+0x389/0x470 [ 1293.000621][ T30] ? __pfx_watchdog+0x10/0x10 [ 1293.000643][ T30] ? __pfx_kthread+0x10/0x10 [ 1293.000667][ T30] ret_from_fork+0x514/0xb70 [ 1293.000702][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1293.000722][ T30] ? __switch_to+0xc79/0x1410 [ 1293.000750][ T30] ? __pfx_kthread+0x10/0x10 [ 1293.000774][ T30] ret_from_fork_asm+0x1a/0x30 [ 1293.000816][ T30] [ 1293.000823][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1293.115011][ C1] NMI backtrace for cpu 1 [ 1293.115029][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1293.115047][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1293.115057][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1293.115081][ C1] Code: 8b 7d 02 e9 d3 f8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 51 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1293.115094][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1293.115109][ C1] RAX: 0000000001440553 RBX: ffffffff819a858a RCX: 0000000080000001 [ 1293.115121][ C1] RDX: 0000000000000001 RSI: ffffffff8dfad876 RDI: ffffffff8c28b860 [ 1293.115132][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 1293.115143][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 1293.115154][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 1293.115165][ C1] FS: 0000000000000000(0000) GS:ffff88812538b000(0000) knlGS:0000000000000000 [ 1293.115177][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1293.115187][ C1] CR2: 00005555845374e8 CR3: 00000000363aa000 CR4: 00000000003526f0 [ 1293.115202][ C1] Call Trace: [ 1293.115209][ C1] [ 1293.115215][ C1] default_idle+0x9/0x20 [ 1293.115233][ C1] default_idle_call+0x72/0xb0 [ 1293.115253][ C1] do_idle+0x36a/0x5f0 [ 1293.115301][ C1] ? __pfx_do_idle+0x10/0x10 [ 1293.115322][ C1] cpu_startup_entry+0x43/0x60 [ 1293.115339][ C1] start_secondary+0x101/0x110 [ 1293.115353][ C1] common_startup_64+0x13e/0x147 [ 1293.115381][ C1] [ 1293.190966][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.198516][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1293.198542][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1293.198563][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1293.198575][ T30] Call Trace: [ 1293.198584][ T30] [ 1293.198595][ T30] vpanic+0x56c/0xa60 [ 1293.198622][ T30] ? __pfx___schedule+0x10/0x10 [ 1293.198652][ T30] ? __pfx_vpanic+0x10/0x10 [ 1293.198673][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1293.198704][ T30] panic+0xc5/0xd0 [ 1293.198723][ T30] ? __pfx_panic+0x10/0x10 [ 1293.198744][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1293.198775][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1293.198801][ T30] watchdog+0x102c/0x1030 [ 1293.198834][ T30] ? watchdog+0x1c9/0x1030 [ 1293.198864][ T30] kthread+0x389/0x470 [ 1293.198887][ T30] ? __pfx_watchdog+0x10/0x10 [ 1293.198909][ T30] ? __pfx_kthread+0x10/0x10 [ 1293.198933][ T30] ret_from_fork+0x514/0xb70 [ 1293.198956][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1293.198975][ T30] ? __switch_to+0xc79/0x1410 [ 1293.199001][ T30] ? __pfx_kthread+0x10/0x10 [ 1293.199024][ T30] ret_from_fork_asm+0x1a/0x30 [ 1293.199060][ T30] [ 1293.205787][ T30] Kernel Offset: disabled