last executing test programs: 4m15.571537938s ago: executing program 3 (id=684): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x2}, {}, {}, {0x1}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a400fe000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f00000006c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @exit, @jmp={0x5, 0x0, 0x9, 0x7, 0x9, 0x100, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) 4m15.291867349s ago: executing program 3 (id=690): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$kcm(0xa, 0x2, 0x88) (async) r2 = socket$kcm(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$inet(r2, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000b70000000000"], 0x18}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000b70000000000"], 0x18}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000122f01"], 0x18}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000ac0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="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", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c5", 0xb3}, {&(0x7f00000002c0)="b1155498aa147d5345bf7f28767cb0160e43a397bd7570c1d12d3e06a6334296c872c191e6e2b68a08bd78c4988dcf59614cafcfa96f99140ac9f7193e8998f0993fb76c6481e13e3b648c286c934fe1c0fe868869f393b0f0373e25b390c5127c8952ea553daf116c8957ae988f8e6fa82216fa8f80a88894860903df4f387720a7d6657034ec7e335badeb31c379c1ebdd173d1971bdd9b1bfd1cad28c11471545a1e6d377a747038116bc1371530008d9a91ad0042640dd2334974286a10fa8", 0xc1}, {&(0x7f0000000840)="22e7c6de6dbd521cbafc70e7baa415b54b2e473d78fffa3e6827ba5a3c051f58c5310b9651318d54dc812f44b3b6434d719dcad2a4bf1b70ba2b23ec38a52c74bf9f16d82be8ad7b46d8f58c4c21bc359898520636758637eca6feef25aeb6eed685e7da07fd105a1a18cec1bd9b09b56429181939521b30390d4a79e65522d4e1bce0c56d99526fb4b69fb1e53f5f8027c551eed9904c6ce31f254988ecb0184c27653aad4dd2938cc027130ee37b6ca8d720f453e588067dc98c22dc210fc20e789fb3", 0xc4}, {&(0x7f0000000940)="ddb67efee812168dde248906e99e3af8ceeb3becaede5a5614565c375ce0cb", 0x1f}], 0x4}}], 0x3, 0x20d0) (async) sendmmsg$inet(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000ac0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="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", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c5", 0xb3}, {&(0x7f00000002c0)="b1155498aa147d5345bf7f28767cb0160e43a397bd7570c1d12d3e06a6334296c872c191e6e2b68a08bd78c4988dcf59614cafcfa96f99140ac9f7193e8998f0993fb76c6481e13e3b648c286c934fe1c0fe868869f393b0f0373e25b390c5127c8952ea553daf116c8957ae988f8e6fa82216fa8f80a88894860903df4f387720a7d6657034ec7e335badeb31c379c1ebdd173d1971bdd9b1bfd1cad28c11471545a1e6d377a747038116bc1371530008d9a91ad0042640dd2334974286a10fa8", 0xc1}, {&(0x7f0000000840)="22e7c6de6dbd521cbafc70e7baa415b54b2e473d78fffa3e6827ba5a3c051f58c5310b9651318d54dc812f44b3b6434d719dcad2a4bf1b70ba2b23ec38a52c74bf9f16d82be8ad7b46d8f58c4c21bc359898520636758637eca6feef25aeb6eed685e7da07fd105a1a18cec1bd9b09b56429181939521b30390d4a79e65522d4e1bce0c56d99526fb4b69fb1e53f5f8027c551eed9904c6ce31f254988ecb0184c27653aad4dd2938cc027130ee37b6ca8d720f453e588067dc98c22dc210fc20e789fb3", 0xc4}, {&(0x7f0000000940)="ddb67efee812168dde248906e99e3af8ceeb3becaede5a5614565c375ce0cb", 0x1f}], 0x4}}], 0x3, 0x20d0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x6}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4m14.305201194s ago: executing program 3 (id=702): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000380)=0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$igmp6(0xa, 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x80000004}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe0000002000000000000000000000000e00000010000000000000000000000004e200000000000000a"], 0xb8}}, 0x24000080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x60}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x300}, [@IFLA_MASTER={0x8, 0xa, r12}]}, 0x28}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40020}}}}}}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000804}, 0x20008020) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r5, 0x533, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc081}, 0x4000) 4m13.787890218s ago: executing program 3 (id=711): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m13.500223183s ago: executing program 3 (id=716): bind$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x804) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000200)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0xb29, 0x14, 0x3}, @mpls={[{0x8, 0x0, 0x1}, {0x40}, {0x8001, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1}, {0xb2}, {0x8}], @llc={@snap={0x0, 0xaa, "00b1", "37271a", 0x88e7, "e79f1b12b45a3e1e0fa5a1d8d7f04566ad88ade74f1a7e1d60710d0481b77ec84d19c006f90117eee5e4589022fc3c395d224009b88524dd2787f0aef24b5681832d616bfdf44eff5ded6fa7f76547ac099a4124348e18bd60ba"}}}}, 0x8d) 4m11.576418168s ago: executing program 3 (id=729): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x2e, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x8064) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) epoll_create1(0x80000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r14], 0x5c}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r15, 0x29, 0xb, &(0x7f00000002c0)=0xfa0, 0xfee3) getsockopt$inet6_buf(r15, 0x29, 0x6, &(0x7f0000000180)=""/8, &(0x7f0000000240)=0xffffffffffffff61) 3m56.575982623s ago: executing program 32 (id=729): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x2e, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x8064) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) epoll_create1(0x80000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r14], 0x5c}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r15, 0x29, 0xb, &(0x7f00000002c0)=0xfa0, 0xfee3) getsockopt$inet6_buf(r15, 0x29, 0x6, &(0x7f0000000180)=""/8, &(0x7f0000000240)=0xffffffffffffff61) 2m1.288143696s ago: executing program 2 (id=2056): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010800000000fbdbdf25040117800c00180006ac0f"], 0x114}], 0x1}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x3, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="660a00000000001a61114c00000000009500000000000000e23377038c05de62d0e2148868ab67ee5823a201e4c686ea5a1bea9c4f1d8cb02176452fb6040e48ad29ea4d326c19a332f7f7a0fc98741bcddf3b2660dd3ad883d6dbe3b0f782a888a5263fc6e42efe79595ee4912d870e05358cc581bf9faa4f951502f55c4797a89d992904e7ce79c84391d369f8abea991b54e798d065bb0c3b33a23812e82d203ad2b6e50d68007a3ae989c3bc4e7f622e26c8ac3f32a354f8e0a74fb02f8b718b743d261ac190ce571f89f0502e53b3ec90d3fa2e9a2f8be6f128c732c362bc93c74e98e0465e0d6cd7736a212f9bb26387779c2ac8b7cabd2e16"], 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x6, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000029000f000000000000"], 0x18}}], 0x2, 0x4001) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200ff0000000000000040000a00000008000100feffffff"], 0x1c}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0x277, 0x100}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r6, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 2m0.837423516s ago: executing program 2 (id=2063): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 2m0.21772137s ago: executing program 2 (id=2068): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) r1 = socket$isdn(0x22, 0x2, 0x10) close(r1) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000040), 0x4) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000bf090d88e089580300000000000000009500000000000000bf91000000000000b702000000f69b6776008500000000000000b700"/87], &(0x7f0000000580)='syzkaller\x00', 0x5, 0x20, &(0x7f00000000c0)=""/32, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000400)={0x0, 0x800000}, 0x8}, 0x90) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x24, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @pid}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x2, 0xd5}, 0x8) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x2, 0x6, 0xd77, 0x9]}, &(0x7f0000000080)=0x78) r7 = socket$igmp6(0xa, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_type(r8, &(0x7f0000000100), 0x2, 0x0) sendfile(r9, r9, 0x0, 0x6) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x13a8, 0x1e8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) 1m59.622304963s ago: executing program 2 (id=2073): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_setlink={0x50, 0x13, 0x300, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x10000, 0x1}, [@IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffffffd}, @IFLA_EVENT={0x8, 0x2c, 0x3}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0xfffffff9}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x9, 0x1, {{0xe, 0x4, 0x3, 0x14, 0x38, 0x65, 0x0, 0x0, 0x17, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp={0x44, 0x18, 0x14, 0x0, 0x6, [0x1, 0x1, 0x6, 0x9d, 0x8]}, @timestamp={0x44, 0xc, 0x2d, 0x0, 0x5, [0xfff, 0x1a]}]}}}}}) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv4_getnetconf={0x3c, 0x52, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x5}, @NETCONFA_RP_FILTER={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x401}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x3ec475565b36531c) socket$packet(0x11, 0x3, 0x300) 1m59.38080867s ago: executing program 2 (id=2077): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='1\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="b4718e28be31082bcb", @ANYRES64=0x0], 0x20) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0xd9}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_TOS={0x5, 0x9, 0xb5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 1m59.063897335s ago: executing program 2 (id=2083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf25100000000500100083000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x44000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x54}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0x9b, &(0x7f00000001c0)="b6c5ea35c7864622d1209f29d81e9c3e12ad1c8595662899285f4eb8b8f1842b92dde534e5c0b23db01a89c615bff5e87722aeb72957a259b3eae67d1459aba6bd879cbe6bedb191cf03d54ccf4a58e9b740ad834e8bb1d0bfca8fa0a3180888330d3b5b05d90742afa0ac541ef2221608b71d389b1b3ae8b03abced330e6f945983d35993f274162330c608fa109f79a012f1096e62605cdc8c0a", 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="dc30"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e0000000800", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcfffffd0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x480c4}, 0x2c000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200104013"], 0x44}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1m43.609542178s ago: executing program 33 (id=2083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf25100000000500100083000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x44000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x54}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0x9b, &(0x7f00000001c0)="b6c5ea35c7864622d1209f29d81e9c3e12ad1c8595662899285f4eb8b8f1842b92dde534e5c0b23db01a89c615bff5e87722aeb72957a259b3eae67d1459aba6bd879cbe6bedb191cf03d54ccf4a58e9b740ad834e8bb1d0bfca8fa0a3180888330d3b5b05d90742afa0ac541ef2221608b71d389b1b3ae8b03abced330e6f945983d35993f274162330c608fa109f79a012f1096e62605cdc8c0a", 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="dc30"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e0000000800", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcfffffd0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x480c4}, 0x2c000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200104013"], 0x44}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 5.749458769s ago: executing program 0 (id=3240): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) connect$rxrpc(r0, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="08002600ad1600004000330010000000080211000000080211"], 0x68}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001300)=ANY=[@ANYBLOB="a4090000", @ANYRES16=r3, @ANYBLOB="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"/2478], 0x9a4}, 0x1, 0x0, 0x0, 0x2400c015}, 0x8010) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d65746100000000140002800800014000000000080073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/124], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x20, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0x6}, {0xffff, 0xf}}, [@TCA_EGRESS_BLOCK={0x41, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvfrom$rxrpc(r0, &(0x7f00000001c0)=""/155, 0x9b, 0x0, &(0x7f0000000280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @private0, 0xaa7c}}, 0x24) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x8004, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x88, 0xb, 0x1, 0x42}, {0x6, 0x400004, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 5.271909867s ago: executing program 6 (id=3244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2040000}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x439, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x5}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x50}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f000000fa00)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ppoll(&(0x7f0000000240)=[{r2, 0x51}], 0x1, &(0x7f0000000380), 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250c0000000c0099008100f810"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x10) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000180), 0x4) getpid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@initdev, @in=@private}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000e00)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000e40), &(0x7f0000000e80)=0xc) 5.1744038s ago: executing program 0 (id=3246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000002e00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xc, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000005000b"], 0x34}}, 0x4044890) 4.735480378s ago: executing program 5 (id=3250): syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async, rerun: 64) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x20000000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) (async) sendmmsg$inet_sctp(r4, &(0x7f0000008800)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="776b08de", 0x4}], 0x1, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x8, 0x8, 0xf}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x81}}], 0x38, 0x4040000}], 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000780)={{r3}, "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"}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000001940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001900)={&(0x7f0000001800)=ANY=[@ANYBLOB="9c0000001d0010002abd7000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="4000b000060006004e24000014000100fe88000000000000000000000000000108000700010000001c000e800400020005000100060000000400020005000100dc0000000800011d08000100000000000a000100aaaaaaaaaabb00000a000100aaaaaaaaaaaa0000060005000200000005000c003000000008000d0001010000"], 0x9c}, 0x1, 0x0, 0x0, 0x84}, 0xc008000) (async) close(r3) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async, rerun: 64) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000001c0)={r4, &(0x7f0000000000)='\x00', 0x101000, &(0x7f00000000c0)={@align=0x10, {0x7ff, 0x160, 0x0, 0x2}}, 0x5, &(0x7f0000000100), &(0x7f0000000180)}) (async, rerun: 64) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_BEARER_DISABLE(r8, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000880) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = socket$kcm(0x29, 0x2, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r13 = socket$kcm(0x2, 0x1, 0x0) writev(r11, &(0x7f0000000600)=[{&(0x7f0000000180)="ae6df6", 0x3}, {0x0}], 0x2) (async) sendmsg$inet(r13, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000040)={r13, r12}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r11, 0x89e1, &(0x7f00000001c0)={r13}) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r10) sendmsg$IPVS_CMD_FLUSH(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r14, 0x1edfaa1963650027, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x40004) 4.607865897s ago: executing program 0 (id=3252): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}]}, 0x28}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000040)={0x4}, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.400191705s ago: executing program 1 (id=3254): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x12024, 0x8d85}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x611bd}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 4.399514383s ago: executing program 5 (id=3255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@deltaction={0x9c, 0x31, 0x8, 0x70bd2d, 0x25dfdbfc}, 0x9c}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xfffffa3c, 0x2, 0x4, 0x80000001}}]}, {0x4}, {0xc, 0x3f}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x54}}]}, 0x88}}, 0x20040054) 4.198407043s ago: executing program 4 (id=3256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{}, {}], 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmmsg$inet(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="14ad98aff791d243d6b83c3cb05ffb", 0xf}, {&(0x7f00000002c0)="a75f3cd71fe0a71e27711c680bb253f8ffd1e9a91842dfdf236c58517be2a91431a2b36ddd65eb9d6343718bd6e0f41c30d28adbb680e11f8fa34a5ae6bd95b19a85553cbc5eb51a62e65b0afe92f9064bab2ea85a55867301f95ed497fff9999c0cf797bc54fe9e952d8fd2c7907c5b832c6cddb3284f102321746c1501ccfc3d7c28c22d98e5db878a004437131f537185ded0bdbdca7f85ff654e3bd5780a6876ce4ff7e8d34d261ff27692f7996761d342d5da80d76a55", 0xb9}, {&(0x7f0000000380)="505a6e4d0376e39d95e76d84cb42e0d3d3d8d21f015bbeecfb79c1efe36b2efca2549ec246b8ebf201c6ef89fc0c31a485b2d8474e888a3cb2ad256c2e4a2a5677fcfa4db589a882c3493dcdf8b1cc2d24bc5baa2a0923145e79acd380118bfc64e2f026137d65f1cac709d6df9d5a678e0d2b9d0ac0c42eed67c07d75ad59efaabec002378854a65a86ccd6d142ef41", 0x90}], 0x3, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x80, 0x1, 0x6, [{@private=0xa010101, 0xf}, {@remote, 0xe8000000}, {@loopback, 0xc3b8}, {@multicast1, 0x80000001}]}, @timestamp={0x44, 0x1c, 0xf0, 0x0, 0xe, [0xb4eb, 0x7, 0xffff, 0x8, 0xfffffff9, 0x4]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1a}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xb0}}, {{&(0x7f0000000540)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000580)="2f59ffa327487330b62fc79fad3df343fd305758918ad1dc217a217d45454c5c7ba0f223e57bea95ec539987d884388b580c1331ae3686edcca9ec1a6fe32cd0de7adf55feae1f4818d7528c5b1ecc216ac278503c0413b9724b2e21957d3f2db32437865d77ffbe6b58b22f1927e9303e091281a2eab2b428db01e7ad2e9e240b2b6ed3fbd74cb51f3839461f40689a75600f85872d80d9c8d5e5bb834070143c370d7e60926ea70362e50916f6e005a13d88ac10755ba5", 0xb8}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff5b}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0xa0}}, {{&(0x7f0000000740)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000780)="7b379784eb6c3407a6aba2dd59c8fc6a9838fd4f37b55864f1631deb3b1fa695efa425c790234f4ace24816b43824e63521fc624c7d06b94b435d658e3f0c97d246e6ca60f234ef305810e590cce04ab076b5cedc0c1e60d51a002bd0a5e8f3d7e5de5bbaa67cea9f4c1b7ec01c1d4b95d472b659ae26e62ddd474f90c21e25ab2dd7026fe36bbdeafc7a70e5e53e525fc0ba84bf78c3df9cf5fb93cdc33b59e37ea07717154fd6aec163bab77d296aaea70a83191b2e5666e0a502eaa3bea3aaf707daddb728077edabe5904713c2d838e5e9874bf3da76e1277f538aff78290a7f433e", 0xe4}, {&(0x7f00000008c0)="114609ae7370210b6e1b3a32a1a630f15b60277954186651823d342f4155f49f130b5aa29d2bbb2e280914587c47d7278c90d0", 0x33}, {&(0x7f0000000900)="0fe5501532cff9b582b9bb3424e476ea549a7c0ecd29ad3ad3c51adc57b01380b5b448ce73a28c87bfae42dececf9ac49ea9d3", 0x33}], 0x3, &(0x7f0000000980)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@generic={0x88, 0xd, "7b71a0e2eb02bf6033c69d"}, @timestamp_prespec={0x44, 0x14, 0xae, 0x3, 0x5, [{@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xe953}]}, @rr={0x7, 0x1f, 0xd9, [@multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0xe}]}, @timestamp_addr={0x44, 0x3c, 0x8f, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x10000}, {@multicast1, 0x5}, {@rand_addr=0x64010102, 0x7ff}, {@private=0xa010102, 0x8}, {@local}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x3}, {@loopback, 0x8}]}]}}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x110}}], 0x3, 0x40080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafe, {0x0, 0x0, 0x0, r5, {0xc, 0xe}, {0x1, 0xfff1}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4041080) 4.188713251s ago: executing program 1 (id=3257): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x44}, 0x4, "957b0a386101819797d7c1bd75f5fe54f049ddca5f0c5c9bc539d170cf2e21f5", 0xfd0, 0x3504, 0x4, 0x9}, 0x3c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000002c0)={{0x0, @empty, 0x4e20, 0x4, 'lblc\x00', 0x12, 0x625d, 0xb}, {@remote, 0x4e24, 0x0, 0x8, 0x7000, 0x7}}, 0x44) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0xef}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010029bd700000000006001c004e2400"/35], 0x24}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c5000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 4.072305284s ago: executing program 0 (id=3258): r0 = socket$kcm(0x2, 0x922000000001, 0x106) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x0) 3.995637574s ago: executing program 5 (id=3259): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "9f569b6052e5b642978a9a967c090e03"}]}, 0x30}, 0x1, 0x0, 0x0, 0xc800}, 0x84) 3.989310643s ago: executing program 1 (id=3260): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="4304f901"], 0x4) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000080)={&(0x7f0000000040)=[{0xfff, 0x4, 0xc0, 0x7, 0x4}], 0x1, 0x28, 0xfff7, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={0x14, 0x41, 0x9, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 3.840565239s ago: executing program 4 (id=3261): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x0, 0x2f, 0x84, &(0x7f0000000180)="bbe5336240014c6a266039064ae33fba3a57f996d73e25353a856b913b09b44b39ffe0baf0b057feba8585e381c55a", &(0x7f0000000300)=""/132, 0x5a73, 0x0, 0x70, 0x7d, &(0x7f00000003c0)="8d2d6d6615ac1b2a8af84434bb3de3940093f92be38c732b86854666b20eeec751f7796e225722e925179b3e3c0eb5fe21878149c621b9d6c43659250375c96a6d9ef744c64c71bad90f1382433f27769243c882bb167c0e83b2eee729086ec66d532ed9336b2f0d5e1d58c63cb5de60", &(0x7f0000000440)="33545112b93a43219270f9cf3d7893dcbdb964ae3a0fb6004ab14098ff1e5af33a8fa2b77f14e46110cd2586fd936b78c55b08976a695056d6d4c21f3489848a47e2629cb4cbea83866602366498f198cd83bdbd7fa2a3f5de627c6a512f714a53f07789ddf094c53dfaa8674e781f36fb739fa695b5230fd39764d617", 0x6, 0x0, 0x3}, 0x50) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x18, r5, 0x1, 0x81}, 0x14) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x4f) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x4f) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000007, 0x30, r4, 0x5703a000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000010483065b7d224a000000000000000c00000040000000000500010002000000"], 0x24}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.788082094s ago: executing program 4 (id=3262): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r6}, @CGW_MOD_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 3.632839812s ago: executing program 4 (id=3263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000740)=""/127, 0x7f}], 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010029bd7000cc249b7a2b2f0235a752920000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40091}, 0x8040000) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010029bd7000cc249b7a2b2f0235a752920000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40091}, 0x8040000) 2.459857483s ago: executing program 6 (id=3264): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000006180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r4, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r5, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0x439, 0x70bd2a, 0x25dfdbf8, {0x0, 0x0, 0x0, r6, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x7}, @IFLA_GRE_OKEY={0x8, 0x5, 0x40}]}}}]}, 0x64}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="05d936277c6f5422007f9f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c7168c7eb53bcc69", 0x2a, 0x408a1, &(0x7f0000000040)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.429533813s ago: executing program 6 (id=3265): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000100)=[{&(0x7f0000000400)='\r', 0x1}], 0x1, 0x4) tee(r2, r5, 0x8f5, 0x100000000000000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x28, r6, 0x607, 0x4, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x10) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) write(r3, &(0x7f0000000240)="94", 0x1) (async) vmsplice(r4, &(0x7f0000000100)=[{&(0x7f0000000400)='\r', 0x1}], 0x1, 0x4) (async) tee(r2, r5, 0x8f5, 0x100000000000000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x28, r6, 0x607, 0x4, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x10) (async) close(r0) (async) 787.626625ms ago: executing program 1 (id=3266): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x310, 0x2e, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x300, 0x10f3, 0x0, 0x1, [@nested={0xc, 0xe5, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @pid}]}, @nested={0x15d, 0x7f, 0x0, 0x1, [@generic="cc39cb9db042474549524889905886009171313736215baae9fdfd00355318c9977e4535d6b232b37dc0067392db2608b279505c77b74983531f58fce686effe61b609487abb81bc75d4e67ca3e055d72cb435ab6f1639ffd15c57dfcf7a0a6386e7afb30e5a0ce79b72d75913", @generic="f80bec69229f826d13775d03b15cc5d9882718098ed0675d1935b77f14e53e774732635edbf74182997ee5", @generic="8a1413e08e03a3389678ab2957a52405dabfa582c12516d13e7b20e21bec94abd3cc16f391bb36c846adb1a2dde9e7c38240b38b72f3f4f667a4f434dde0b0aeb0a2f56f7fd8eba140f139432ea7537f6f3f749d8dfca2af8f34aebbe449c0fda2131ad1c773103d88ebb282185baceaa3003f43f6993418a06f3f7a0a4a7342638a92486ebfdd5f632e95a74f510d67c3ea24374ce3676f13e058fe6d39426ccf2a0bf4c7e7ebab5b43d4756cbc7775fed402e1e066532afc62323a1bacacdf62"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @generic="053b3a0b0a3176fa81d5dd205df77d46f70df08bc18894624e7bffe90164484395675b08b5cb590c676c2142be91e216739d0690e72a5925af7fb13fb2a4be76902e2211229172bd7c360f6d603e8eff61b35dd6ff34fe58dc5d3ba23ebb70b0d2f8d302084ad3e98ec61864d2cb9d0647451ab80d4f325eadc8d7ad364274f68cf6f7874b0d0c1b6442967dae092f893ad27643e311bc94a206618e9e36515064a0fab336692db34956ed512f98d73cf478601a"]}]}, 0x310}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a00010000000000000000000a00000000e1ff"], 0x18}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000005000000000000000200000d0000000001000000000000000000000000000000005f10"], 0x0, 0x39}, 0x20) bind$tipc(r1, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000003c0)={0x42}, 0x10) 727.609827ms ago: executing program 0 (id=3267): r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x3, 0x20000000, 0x4) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x4, 0x90, [0x200000000780, 0x0, 0x0, 0x2000000007b0, 0x200000000ae4], 0x0, 0x0, &(0x7f0000000780)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x108) 710.612833ms ago: executing program 5 (id=3268): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) 710.183593ms ago: executing program 4 (id=3269): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}}}, [0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000]}, &(0x7f0000000000)=0x100) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x22, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x5}, 0x8) close(r3) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000890) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x2, 0x200000ff, 0x4, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) socket(0x10, 0x803, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000200)) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000240)=@req3={0x0, 0x400, 0xffffffff, 0x8, 0x8, 0xa3, 0x7}, 0x1c) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000000000000071122000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 709.334467ms ago: executing program 6 (id=3270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3ff, 0xfffffffff7087adc}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) poll(&(0x7f0000000340)=[{r0, 0x64}], 0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711235000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9, 0x100, @val=0x80}}}}}}}, 0x0) (async) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x8) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00032abd7000fedbdf2517000000080000009589ab4a8fecc0063ce9305dcae5a643cc5dc1a5dbc464bc6fec069487bc3960a987e3ed88c94fc6290a7d1df20218c35e093a3a9367c81b06cd2084a1fc95c1bdcbe5bab38aee20210c87de1ef7a3eba3e217109f12040f4cc636bd5ef720b59b12d6c49134bae39861d5816dd9b92b7200de725c20267506c64e2748e22e11a790e14750879313e0403a8cf56625fbc08e8a89102a372fd7a0d13073f9414f048cba60100f167d8fbe4cd9f553284ab80e456918c7f615b641c30423dd13ea5ed2d3a7b4703a782417e2201f749df836f31805c5670255bd37a81edbabf060721089447e16f337f74736ce75234b0b", @ANYRES32=r6, @ANYBLOB="0a001a0008021100000000000a001a0008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100000100000a001a0008021100000100000a001a00ffffffffffff0000"], 0x70}, 0x1, 0x0, 0x0, 0x4008001}, 0x4) (async) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa04009078010000004700000000000000001100000000000000000000440c0001ac1414bb4e210000443c0001e0000001000000000000000000000000886079328696338300000000000000000000000000000000ac1e000100000000ac14140000000000"], 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="5a0000000000a513bf0000"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x41) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async, rerun: 32) pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000240)="00214717a7070000000003060000000000000000aaa6729043098c737d317c447bd55c0b041d5874f72cf86d73d3b92ef9d7", 0x32}], 0x1, 0x7, 0x58) (async, rerun: 32) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000940)={0x218, r11, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x218}, 0x1, 0x0, 0x0, 0x40}, 0x2095) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0x44, 0x24, 0x200, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0xe, 0xf}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1, 0xff, 0x10001, 0x8, 0x7, 0x18}}]}}]}, 0xef2f04243058d40b}}, 0x0) 570.224832ms ago: executing program 0 (id=3271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x40) (async) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "08ae00", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xfcfb, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xae0a}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048081}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f00000000c0)='u32\x00', 0x101000, &(0x7f0000000180)={@align=0x8, {0x7, 0x5, 0xffff7479, 0x6}}, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x7}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl2\x00', r2, 0x20, 0x7, 0xc, 0x400, {{0x1a, 0x4, 0x1, 0x9, 0x68, 0x65, 0x0, 0xa, 0x4, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xaf, 0x1, 0x9, [{@multicast2, 0x4}]}, @rr={0x7, 0x7, 0x1d, [@loopback]}, @timestamp_prespec={0x44, 0x34, 0x2e, 0x3, 0xe, [{@remote, 0x5}, {@loopback, 0x1}, {@broadcast, 0x8}, {@broadcast, 0x200}, {@broadcast}, {@broadcast}]}, @end, @generic={0x88, 0x4, "ab94"}, @noop, @ra={0x94, 0x4}]}}}}}) (async) getpeername$packet(r5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa0, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x9}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa}}]}}]}, 0x44}}, 0x20000000) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 467.534523ms ago: executing program 5 (id=3272): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4004005}, 0x20000080) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 408.087652ms ago: executing program 1 (id=3273): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES8], 0x1c}}, 0x4006080) (async) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES8], 0x1c}}, 0x4006080) 393.531551ms ago: executing program 4 (id=3274): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x3, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x20}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x0, 0x10, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x0, {0x2, 0x4e23, @private=0xa010100}, 'xfrm0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000aff020000000000000000010000000900010073797a3100000000080002400000000340000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480140000001100810000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_emit_ethernet(0x43, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@llc_tr={0x11, {@snap={0x2, 0x0, "898c", "848361", 0x88fb, "c6a1bfd27c0469f5f00269deda3cc1b5e6fb15615da05e5e9f1a2104d4f91891247f7da4b81d6afd"}}}}}, &(0x7f0000000080)={0x1, 0x1, [0xa2e, 0x7fb, 0x5f6, 0xea3]}) 282.050094ms ago: executing program 6 (id=3275): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x64, 0x0, 0x0, 0xfffffffd}]}, 0x10) 222.691582ms ago: executing program 5 (id=3276): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8000, 0x4, 0x64, 0x1dc, @vifc_lcl_ifindex, @broadcast}, 0x10) 88.088833ms ago: executing program 1 (id=3277): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03f67147f00000000000070080000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c00128028000180090001006c617374000000001800028008000140000000020c0002400000000000000008080003400000011014000000100044ab9b4715c9ffda7ddef1410100"], 0xb8}}, 0x20050800) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000480), 0x3, 0x0, 0x0, 0x4844}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r3, 0x181}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x4d6, 0x33}, 0xa, @in6=@private0, 0x3502, 0x3, 0x0, 0x5, 0x400, 0x1, 0x70}, {{@in=@loopback, 0x4d5, 0x32}, 0xf, @in=@multicast2, 0x3504, 0x4, 0x3, 0x0, 0x6, 0x2, 0x8}]}]}, 0x13c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4c0c0) 0s ago: executing program 6 (id=3278): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d000005000000000000000000000003001700980e000002004e20ac1414150000000000000000"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.412861][T11339] netlink: 'syz.1.1518': attribute type 1 has an invalid length. [ 238.431460][ T1212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.740554][T11351] __nla_validate_parse: 8 callbacks suppressed [ 238.740575][T11351] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1522'. [ 239.112041][T11382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.144748][T11387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.154573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.215671][T11378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1527'. [ 239.250647][T11386] netlink: 'syz.0.1527': attribute type 1 has an invalid length. [ 239.310543][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.329215][T11402] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1533'. [ 239.423940][T11405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1527'. [ 239.456968][T11407] openvswitch: netlink: IP tunnel dst address not specified [ 239.497382][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 239.525802][T11366] bridge: RTM_NEWNEIGH with invalid ether address [ 240.054303][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1540'. [ 240.069696][T11435] netlink: 'syz.1.1544': attribute type 2 has an invalid length. [ 240.088720][T11426] netlink: 'syz.5.1540': attribute type 5 has an invalid length. [ 240.100093][T11435] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1544'. [ 240.141900][T11428] netlink: 'syz.2.1541': attribute type 3 has an invalid length. [ 240.152098][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'. [ 240.152210][T11426] ip6t_srh: unknown srh match flags 5F28 [ 240.528569][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 240.631321][T11465] hsr0: entered promiscuous mode [ 240.637099][T11465] macvlan4: entered allmulticast mode [ 240.643278][T11465] hsr0: entered allmulticast mode [ 240.648593][T11465] hsr_slave_0: entered allmulticast mode [ 240.654692][T11465] hsr_slave_1: entered allmulticast mode [ 241.409379][ T5905] net_ratelimit: 1 callbacks suppressed [ 241.409400][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.470934][ T1212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.490970][T11514] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1562'. [ 241.529493][T11514] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.536951][T11514] bridge0: port 2(bridge_slave_1) entered listening state [ 241.544455][T11514] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.551688][T11514] bridge0: port 1(bridge_slave_0) entered listening state [ 241.595923][T11514] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.603252][T11514] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.977436][T11543] netlink: 'syz.5.1573': attribute type 12 has an invalid length. [ 241.986023][T11543] netlink: 'syz.5.1573': attribute type 29 has an invalid length. [ 242.171958][T11548] syzkaller0: entered allmulticast mode [ 242.246530][T11548] syzkaller0 (unregistering): left allmulticast mode [ 242.430545][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.894652][T11580] netlink: 'syz.4.1586': attribute type 1 has an invalid length. [ 242.970616][T11583] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 243.253581][T11597] syzkaller0: entered promiscuous mode [ 243.270374][T11597] syzkaller0: entered allmulticast mode [ 243.286416][T11597] xt_cgroup: invalid path, errno=-2 [ 243.473593][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.775315][T11628] __nla_validate_parse: 12 callbacks suppressed [ 243.775340][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1599'. [ 243.831309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.985782][T11639] netlink: 'syz.5.1605': attribute type 1 has an invalid length. [ 244.004905][T11639] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1605'. [ 244.017376][T11640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1604'. [ 244.118978][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1605'. [ 244.192419][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1605'. [ 244.512527][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.520757][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.529204][T11674] x_tables: duplicate underflow at hook 3 [ 244.645031][T11685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.999471][T11705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1620'. [ 245.063199][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1618'. [ 245.551014][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.633195][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.926146][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1629'. [ 245.945093][T11741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1630'. [ 245.977330][T11742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1629'. [ 246.005895][T11742] nbd: must specify at least one socket [ 246.248820][T11759] netlink: 'syz.4.1635': attribute type 10 has an invalid length. [ 246.323443][T11759] bridge_slave_1: left allmulticast mode [ 246.329168][T11759] bridge_slave_1: left promiscuous mode [ 246.385174][T11759] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.421253][T11759] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 246.600434][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.790008][T11789] netlink: 'syz.5.1642': attribute type 1 has an invalid length. [ 246.958392][T11795] macvlan0: entered promiscuous mode [ 247.024028][T11805] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 247.326065][T11819] netlink: 'syz.4.1650': attribute type 7 has an invalid length. [ 247.506133][T11833] netlink: 'syz.0.1654': attribute type 1 has an invalid length. [ 247.549533][T11833] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.556898][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.577175][T11839] vlan2: entered allmulticast mode [ 247.582468][T11839] bond7: entered allmulticast mode [ 247.633373][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.642033][T11839] netlink: 'syz.0.1654': attribute type 3 has an invalid length. [ 247.682279][T11833] bond7: (slave geneve3): making interface the new active one [ 247.694143][T11833] geneve3: entered allmulticast mode [ 247.703630][T11833] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 248.150883][ T5925] IPVS: starting estimator thread 0... [ 248.167672][T11878] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20004 [ 248.209058][T11876] netlink: 'syz.4.1663': attribute type 1 has an invalid length. [ 248.252664][T11877] IPVS: using max 27 ests per chain, 64800 per kthread [ 248.541738][T11897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.570196][T11897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.670468][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.946063][T11925] __nla_validate_parse: 10 callbacks suppressed [ 248.946079][T11925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1675'. [ 248.975061][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 248.984203][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1675'. [ 249.005092][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 249.014943][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1675'. [ 249.235291][T11934] netlink: 'syz.0.1678': attribute type 1 has an invalid length. [ 249.243804][T11934] netlink: 'syz.0.1678': attribute type 1 has an invalid length. [ 249.538955][T11945] macvtap2: entered promiscuous mode [ 249.545293][T11945] macvtap2: entered allmulticast mode [ 249.710694][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.025037][T11966] veth0_to_hsr: entered promiscuous mode [ 250.042751][T11966] veth0_to_hsr: entered allmulticast mode [ 250.329419][T11989] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1694'. [ 250.357937][T11989] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 250.593236][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.751724][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.151131][T12039] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1705'. [ 251.179022][T12042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1706'. [ 251.511132][T12060] netlink: 'syz.5.1710': attribute type 1 has an invalid length. [ 251.616657][T12066] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1713'. [ 251.699423][ T1212] IPVS: starting estimator thread 0... [ 251.790479][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.798993][T12073] IPVS: using max 25 ests per chain, 60000 per kthread [ 251.978560][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1720'. [ 252.069121][T12087] tipc: Enabling of bearer rejected, media not registered [ 252.298932][T12106] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 252.433076][T12114] syzkaller1: entered promiscuous mode [ 252.453614][T12114] syzkaller1: entered allmulticast mode [ 252.790426][T12130] netlink: 'syz.5.1735': attribute type 1 has an invalid length. [ 252.801874][T12127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.830878][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.839343][T12130] NCSI netlink: No device for ifindex 0 [ 253.000320][T12137] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 253.324149][T12150] syzkaller0: entered promiscuous mode [ 253.339961][T12150] syzkaller0: entered allmulticast mode [ 253.351860][T12160] veth1_to_bond: entered allmulticast mode [ 253.381658][T12162] veth1_to_bond: left allmulticast mode [ 253.396349][T12156] team0: Device gtp0 is up. Set it down before adding it as a team port [ 253.631122][ T1212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.875406][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.979463][T12191] __nla_validate_parse: 4 callbacks suppressed [ 253.979485][T12191] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1746'. [ 254.146604][T12200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.158066][T12200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.911518][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.252713][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.338468][T12220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1751'. [ 255.556642][T12206] syzkaller0: entered promiscuous mode [ 255.565594][T12206] syzkaller0: entered allmulticast mode [ 255.770553][T12226] netlink: 'syz.5.1753': attribute type 10 has an invalid length. [ 255.779233][T12226] bond0: (slave wlan1): Opening slave failed [ 255.886480][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.943458][T12240] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1758'. [ 255.957494][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.985871][T12240] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1758'. [ 256.025167][T12240] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1758'. [ 256.043236][T12246] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1760'. [ 256.055104][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 256.064118][T12248] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1760'. [ 256.251902][T12258] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1764'. [ 256.385942][T12264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1766'. [ 256.603797][ T7111] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.617641][ T7111] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.640022][ T7111] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.693512][ T7111] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.780919][ T9909] udevd[9909]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 256.800656][T12283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.923552][T12286] netlink: 'syz.5.1774': attribute type 3 has an invalid length. [ 256.934931][T12286] netlink: 'syz.5.1774': attribute type 1 has an invalid length. [ 256.944411][T12286] netlink: 'syz.5.1774': attribute type 2 has an invalid length. [ 256.953636][T12286] netlink: 'syz.5.1774': attribute type 1 has an invalid length. [ 256.991776][ T5905] net_ratelimit: 3 callbacks suppressed [ 256.991794][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.167451][T12299] netlink: 'syz.2.1777': attribute type 2 has an invalid length. [ 257.175900][T12299] netlink: 'syz.2.1777': attribute type 2 has an invalid length. [ 257.315727][T12303] netlink: set zone limit has 4 unknown bytes [ 257.329644][T12303] netlink: zone id is out of range [ 257.348281][T12303] netlink: zone id is out of range [ 258.030595][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.424243][T12355] syz_tun: refused to change device tx_queue_len [ 258.480816][T12355] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 258.601287][T12359] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 258.648762][T12369] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 258.674064][T12369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.708122][T12371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.813606][T12376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.063768][T12392] __nla_validate_parse: 11 callbacks suppressed [ 259.063788][T12392] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1811'. [ 259.064405][T12389] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 259.096811][ T29] audit: type=1107 audit(1775282394.472:4): pid=12382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='oT;9l|"mK βzDw9SS"'J_ϼ1ou2hc+8W˱FsH*ixԿoTyߒ*[}TV]guu*7a<6Ӄ4kF÷̙1C=gYE X<N5EvLvHTup7cy_ [ 259.096811][ T29] VadJP0M,qd )5@W' [ 259.281806][T12399] syzkaller0: entered promiscuous mode [ 259.295221][T12399] syzkaller0: entered allmulticast mode [ 259.406438][T12408] bond2: option mode: unable to set because the bond device has slaves [ 259.525332][T12414] netlink: 'syz.2.1817': attribute type 1 has an invalid length. [ 259.533378][T12414] netlink: 'syz.2.1817': attribute type 7 has an invalid length. [ 259.541740][T12414] netlink: 'syz.2.1817': attribute type 8 has an invalid length. [ 259.549670][T12414] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1817'. [ 259.561345][T12414] NCSI netlink: No device for ifindex 65584 [ 259.739766][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 259.793158][T12422] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 259.808263][T12430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1821'. [ 259.818177][T12431] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1821'. [ 259.922090][T12435] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.1822'. [ 260.129201][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 260.138744][T12442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1824'. [ 260.647479][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1829'. [ 260.717091][T12459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1829'. [ 260.783745][T12463] validate_nla: 2 callbacks suppressed [ 260.783765][T12463] netlink: 'syz.5.1829': attribute type 9 has an invalid length. [ 260.842391][T12459] netlink: 'syz.5.1829': attribute type 5 has an invalid length. [ 260.859446][ T49] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.898459][ T49] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.931913][ T49] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.959129][ T49] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.973705][T12483] syzkaller0: entered promiscuous mode [ 260.979355][T12483] syzkaller0: entered allmulticast mode [ 261.243322][T12498] netlink: 'syz.2.1838': attribute type 4 has an invalid length. [ 261.507355][T12513] nbd: socks must be embedded in a SOCK_ITEM attr [ 261.593306][T12521] netlink: 'syz.0.1843': attribute type 4 has an invalid length. [ 262.144968][T12551] netlink: 'syz.4.1854': attribute type 64 has an invalid length. [ 262.192414][ T5891] net_ratelimit: 8 callbacks suppressed [ 262.192431][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.213585][ T5905] syz_tun: tun_net_xmit 110 [ 262.354030][T12551] netlink: 'syz.4.1854': attribute type 2 has an invalid length. [ 262.732527][T12575] openvswitch: netlink: IP tunnel TTL not specified. [ 262.751340][ T1212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.995187][ T5891] syz_tun: tun_net_xmit 110 [ 263.298071][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.499216][T12613] netlink: 'syz.4.1875': attribute type 16 has an invalid length. [ 263.516608][T12613] netlink: 'syz.4.1875': attribute type 17 has an invalid length. [ 263.691058][ T1212] syz_tun: tun_net_xmit 110 [ 263.703595][T12613] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.710889][T12613] bridge0: port 1(bridge_slave_0) entered listening state [ 263.769278][T12623] netlink: 'syz.5.1879': attribute type 4 has an invalid length. [ 263.809279][T12613] veth0_to_hsr: left promiscuous mode [ 263.818458][T12613] veth0_to_hsr: left allmulticast mode [ 263.829837][T12628] netlink: 'syz.5.1879': attribute type 4 has an invalid length. [ 263.841427][ T5835] syz_tun: tun_net_xmit 110 [ 263.852723][T12613] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 264.055936][T12631] bridge4: entered promiscuous mode [ 264.084264][T12631] bridge4: entered allmulticast mode [ 264.127274][T12631] team0: Port device bridge4 added [ 264.170370][T12638] bridge0: port 1(team0) entered blocking state [ 264.181739][T12638] bridge0: port 1(team0) entered disabled state [ 264.229069][T12638] team0: entered allmulticast mode [ 264.255048][T12638] team0: left allmulticast mode [ 264.339059][T12652] __nla_validate_parse: 11 callbacks suppressed [ 264.339081][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1887'. [ 264.351145][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.412366][T12658] syz_tun: tun_net_xmit 62 [ 264.723862][T12673] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.1895'. [ 264.746132][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1894'. [ 264.756302][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1894'. [ 264.772785][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1895'. [ 264.831141][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.083953][T12688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1899'. [ 265.447411][T12710] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1907'. [ 265.535410][ T1148] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 265.800772][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.811126][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.822158][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.219674][T12702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.483011][T12744] pim6reg1: entered promiscuous mode [ 266.488963][T12744] pim6reg1: entered allmulticast mode [ 266.593291][T12747] validate_nla: 3 callbacks suppressed [ 266.593310][T12747] netlink: 'syz.0.1915': attribute type 1 has an invalid length. [ 266.630403][T12748] netlink: 'syz.0.1915': attribute type 1 has an invalid length. [ 266.660449][T12747] block nbd0: not configured, cannot reconfigure [ 266.761210][T12752] netlink: 'syz.1.1917': attribute type 12 has an invalid length. [ 266.804930][T12752] bond10: option primary_reselect: invalid value (255) [ 266.847478][T12752] bond10 (unregistering): Released all slaves [ 267.163461][T12779] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1925'. [ 267.182838][T12781] netlink: 'syz.0.1924': attribute type 12 has an invalid length. [ 267.619063][T12794] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1931'. [ 267.655185][T12796] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1928'. [ 267.705706][T12797] macvtap1: entered allmulticast mode [ 267.711466][T12797] veth0_macvtap: entered allmulticast mode [ 267.871991][T12793] macvtap2: entered allmulticast mode [ 268.112497][T12809] bond5: (slave lo): Releasing backup interface [ 268.135134][T12809] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 268.182799][T12818] syz_tun: tun_net_xmit 1510 [ 268.223031][T12818] syz_tun: tun_net_xmit 1510 [ 268.231612][ T5891] syz_tun: tun_net_xmit 110 [ 268.239740][T12818] syz_tun: tun_net_xmit 1510 [ 268.254012][T12818] syz_tun: tun_net_xmit 1510 [ 268.263224][T12818] syz_tun: tun_net_xmit 1510 [ 268.275668][T12818] syz_tun: tun_net_xmit 1510 [ 268.285802][T12818] syz_tun: tun_net_xmit 1510 [ 268.297673][T12818] syz_tun: tun_net_xmit 1510 [ 268.309833][T12818] syz_tun: tun_net_xmit 1510 [ 268.328314][T12818] syz_tun: tun_net_xmit 1510 [ 268.343017][T12818] syz_tun: tun_net_xmit 1510 [ 268.353114][T12818] syz_tun: tun_net_xmit 526 [ 268.367375][T12809] : (slave batadv0): Releasing backup interface [ 268.400708][ T5891] syz_tun: tun_net_xmit 110 [ 268.596532][T12809] bridge_slave_0: left allmulticast mode [ 268.625793][T12809] bridge_slave_0: left promiscuous mode [ 268.644733][T12809] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.918985][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.016963][T12809] : (slave bridge_slave_1): Releasing backup interface [ 269.071881][T12809] : (slave bond_slave_0): Releasing backup interface [ 269.092777][T12809] : (slave bond_slave_1): Releasing backup interface [ 269.162100][T12809] team0: Port device team_slave_0 removed [ 269.175439][T12809] team0: Port device team_slave_1 removed [ 269.191562][T12809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.209457][T12809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.219673][T12809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.228744][T12809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.239999][T12809] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 269.264068][T12810] team0: No ports can be present during mode change [ 269.606739][T12851] netlink: 'syz.2.1944': attribute type 2 has an invalid length. [ 269.614952][T12851] netlink: 'syz.2.1944': attribute type 2 has an invalid length. [ 269.641030][T12854] __nla_validate_parse: 2 callbacks suppressed [ 269.641049][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1943'. [ 269.660536][T12855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1945'. [ 269.718031][T12855] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1945'. [ 269.721044][T12849] can: request_module (can-proto-0) failed. [ 269.822129][T12862] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1948'. [ 269.835538][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'. [ 270.144015][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1950'. [ 270.669303][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 270.716628][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 270.733922][T12916] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1962'. [ 270.736222][T12917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1958'. [ 271.012785][T12928] netlink: 'syz.4.1965': attribute type 10 has an invalid length. [ 271.088483][T12928] team0: Device vxcan1 is of different type [ 271.338983][T12944] tipc: Started in network mode [ 271.365467][T12944] tipc: Node identity 010000000000000001, cluster identity 4711 [ 271.611638][T12960] netlink: 'syz.2.1973': attribute type 9 has an invalid length. [ 271.748270][T12971] tc_dump_action: action bad kind [ 271.883759][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.892578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.237614][T12995] netlink: 'syz.5.1981': attribute type 2 has an invalid length. [ 272.434958][T13007] syz_tun: tun_net_xmit 62 [ 272.747052][T13020] netlink: 'syz.5.1990': attribute type 10 has an invalid length. [ 272.756894][T13020] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.764720][T13020] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.797035][T13020] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.804377][T13020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.811998][T13020] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.819208][T13020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.849831][T13020] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 273.282652][T13049] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 274.482325][ T1212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.099835][T13137] __nla_validate_parse: 12 callbacks suppressed [ 275.099858][T13137] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2022'. [ 275.316123][T13146] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2024'. [ 275.561670][T13149] netlink: 'syz.5.2025': attribute type 29 has an invalid length. [ 275.570704][T13149] netlink: 'syz.5.2025': attribute type 29 has an invalid length. [ 275.716841][T13162] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 276.459063][T13186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2034'. [ 276.511801][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2034'. [ 276.544124][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2034'. [ 276.580651][ T7111] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.606942][ T7111] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.640588][ T7106] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.651206][ T7106] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.773340][T13194] netlink: 'syz.5.2036': attribute type 23 has an invalid length. [ 276.793979][T13191] netlink: 'syz.5.2036': attribute type 23 has an invalid length. [ 276.809689][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 276.818753][T13195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2037'. [ 276.994114][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.002884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.275529][T13217] xt_addrtype: ipv6 does not support BROADCAST matching [ 277.378682][T13222] netlink: 'syz.4.2045': attribute type 32 has an invalid length. [ 277.401648][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 277.447094][T13222] bond7: Setting coupled_control to off (0) [ 277.689437][T13234] atomic_op ffff88802e5c8998 conn xmit_atomic 0000000000000000 [ 277.699267][T13235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2047'. [ 277.910840][T13243] netlink: 'syz.0.2052': attribute type 1 has an invalid length. [ 277.941783][T13243] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2052'. [ 277.968436][T13246] netlink: 'syz.4.2053': attribute type 21 has an invalid length. [ 278.174116][T13246] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 278.199626][T13246] bond8 (unregistering): Released all slaves [ 278.252911][T13262] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 278.268360][T13259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.451554][T13266] sctp: [Deprecated]: syz.5.2058 (pid 13266) Use of int in max_burst socket option. [ 278.451554][T13266] Use struct sctp_assoc_value instead [ 278.644239][T13279] macvlan0: left promiscuous mode [ 278.910809][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.919228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.321814][T13319] delete_channel: no stack [ 279.329293][T13320] openvswitch: netlink: Flow key attribute not present in set flow. [ 279.664318][ T5490] veth0_macvtap: left promiscuous mode [ 279.856459][T13336] gre1: entered promiscuous mode [ 279.930302][T13336] gre1: entered allmulticast mode [ 280.421343][T13364] __nla_validate_parse: 9 callbacks suppressed [ 280.421363][T13364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2080'. [ 280.502391][T13364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2080'. [ 280.605827][T13369] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2081'. [ 281.433007][T13407] syzkaller0: entered promiscuous mode [ 281.439831][T13407] syzkaller0: entered allmulticast mode [ 281.465011][T13407] syz_tun: tun_net_xmit 42 [ 281.473900][T13407] syzkaller1: entered promiscuous mode [ 281.480742][T13407] syzkaller1: entered allmulticast mode [ 281.492270][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.501232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.550474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.594525][T13424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2093'. [ 282.015285][T13446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2099'. [ 282.228639][T13456] h: entered promiscuous mode [ 282.510256][ C1] syz_tun: tun_net_xmit 42 [ 282.584067][T13468] syzkaller0: entered promiscuous mode [ 282.589636][T13468] syzkaller0: entered allmulticast mode [ 282.927034][T13482] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 282.939641][T13482] bond8 (unregistering): Released all slaves [ 282.969387][T13487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2114'. [ 283.138577][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2116'. [ 283.161615][T13496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2117'. [ 283.361264][T13502] netlink: 'syz.0.2119': attribute type 1 has an invalid length. [ 283.512250][T13510] block nbd0: not configured, cannot reconfigure [ 283.550268][ C1] syz_tun: tun_net_xmit 42 [ 283.730980][T13517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2124'. [ 283.779490][T13517] team0 (unregistering): Port device team_slave_0 removed [ 283.816684][T13517] team0 (unregistering): Port device team_slave_1 removed [ 283.845192][T13517] team0 (unregistering): Port device bond2 removed [ 283.912471][T13528] syzkaller0: entered promiscuous mode [ 283.917995][T13528] syzkaller0: entered allmulticast mode [ 284.031705][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.449365][T13536] netlink: 'syz.0.2129': attribute type 4 has an invalid length. [ 285.950726][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.064144][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2139'. [ 286.174118][T13565] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.189757][T13565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.220536][T13570] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2137'. [ 286.387914][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2142'. [ 286.413344][T13580] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2144'. [ 286.452299][T13580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2144'. [ 286.503702][T13589] netlink: 'syz.4.2146': attribute type 1 has an invalid length. [ 286.523960][T13589] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2146'. [ 286.546995][T13589] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2146'. [ 286.616167][T13589]  (unregistering): (slave wlan1): Releasing backup interface [ 286.631696][T13589]  (unregistering): Released all slaves [ 287.074489][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2156'. [ 287.241965][ T7108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.250833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.366687][T13632] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2161'. [ 287.443871][T13635] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2162'. [ 287.746746][T13645] xt_hashlimit: size too large, truncated to 1048576 [ 288.103793][T13673] netlink: 'syz.0.2173': attribute type 2 has an invalid length. [ 288.886638][T13698] netlink: 'syz.4.2178': attribute type 3 has an invalid length. [ 288.902692][T13700] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.928088][T13700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.382572][T13724] lo: entered allmulticast mode [ 289.408928][T13724] lo: left allmulticast mode [ 289.705339][T13747] netlink: 'syz.0.2193': attribute type 1 has an invalid length. [ 289.714021][T13748] netlink: 'syz.0.2193': attribute type 1 has an invalid length. [ 290.342310][T13779] netlink: zone id is out of range [ 290.349124][T13779] netlink: zone id is out of range [ 290.357149][T13779] netlink: zone id is out of range [ 290.362875][T13779] netlink: zone id is out of range [ 290.368034][T13779] netlink: zone id is out of range [ 290.393659][T13782] netlink: 'syz.5.2203': attribute type 1 has an invalid length. [ 290.402712][T13779] netlink: zone id is out of range [ 290.410977][T13779] netlink: zone id is out of range [ 290.487668][T13782] bond4: entered promiscuous mode [ 290.505415][T13782] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.618672][T13782] bond4: (slave bridge3): making interface the new active one [ 290.626436][T13782] bridge3: entered promiscuous mode [ 290.635170][T13782] bridge3: left promiscuous mode [ 291.366772][T13844] __nla_validate_parse: 13 callbacks suppressed [ 291.366808][T13844] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2219'. [ 291.583415][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.593034][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.082525][T13877] netlink: 'syz.4.2228': attribute type 9 has an invalid length. [ 292.284044][T13886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2230'. [ 292.352803][ T1148] net_ratelimit: 8 callbacks suppressed [ 292.352822][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.367320][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.581945][T13902] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2233'. [ 292.608940][T13902] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 292.844330][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2236'. [ 293.004379][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.015095][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.487759][T13955] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.2245'. [ 293.642514][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.686066][T13965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2250'. [ 293.715977][T13965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2250'. [ 293.893507][T13973] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2253'. [ 294.028040][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2252'. [ 294.062910][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2252'. [ 294.104474][T13982] gretap0: entered promiscuous mode [ 294.129617][T13982] gretap0: left promiscuous mode [ 294.282268][T13991] netlink: 'syz.1.2257': attribute type 1 has an invalid length. [ 294.373240][T13995] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 294.394185][T13995] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 294.769463][T14021] bond10: (slave vlan0): Enslaving as a backup interface with an up link [ 294.960971][T14029] IPv6: NLM_F_CREATE should be specified when creating new route [ 295.281763][T14043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.961006][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 295.970603][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 295.978896][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 295.988541][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 295.997568][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 296.168035][T14049] chnl_net:caif_netlink_parms(): no params data found [ 296.191410][ T181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.263946][T14049] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.271450][T14049] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.278707][T14049] bridge_slave_0: entered allmulticast mode [ 296.286645][T14049] bridge_slave_0: entered promiscuous mode [ 296.295261][T14049] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.302687][T14049] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.310721][T14049] bridge_slave_1: entered allmulticast mode [ 296.318245][T14049] bridge_slave_1: entered promiscuous mode [ 296.352098][T14049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.364662][T14049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.399085][T14049] team0: Port device team_slave_0 added [ 296.408019][T14049] team0: Port device team_slave_1 added [ 296.437724][T14049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.444992][T14049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.471223][T14049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.485144][T14049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.492324][T14049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.518838][T14049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.569062][T14049] hsr_slave_0: entered promiscuous mode [ 296.575828][T14049] hsr_slave_1: entered promiscuous mode [ 296.582731][T14049] debugfs: 'hsr0' already exists in 'hsr' [ 296.588505][T14049] Cannot create hsr debugfs directory [ 296.831898][ T1212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.370836][T14011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.494245][T14049] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 297.526435][T14049] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 297.557672][T14049] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 297.573026][T14066] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 297.583213][T14049] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 297.783311][T14078] netlink: 'syz.4.2275': attribute type 1 has an invalid length. [ 297.797000][T14084] __nla_validate_parse: 4 callbacks suppressed [ 297.797021][T14084] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2276'. [ 297.835404][T14078] 8021q: adding VLAN 0 to HW filter on device bond8 [ 297.864610][T14086] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 297.918610][T14049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.006428][T14049] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.030521][ T5842] Bluetooth: hci6: command tx timeout [ 298.042945][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.050246][ T7106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.080928][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.088693][ T7111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.124775][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 298.544808][T14049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.121654][T14049] veth0_vlan: entered promiscuous mode [ 299.129330][T14132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.179632][T14049] veth1_vlan: entered promiscuous mode [ 299.221481][T14049] veth0_macvtap: entered promiscuous mode [ 299.237150][T14049] veth1_macvtap: entered promiscuous mode [ 299.323456][T14049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.367750][T14049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.473476][ T145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.487857][ T145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.517504][ T145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.548443][ T145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.580400][T14156] netlink: 'syz.1.2297': attribute type 1 has an invalid length. [ 299.588888][T14156] netlink: 'syz.1.2297': attribute type 2 has an invalid length. [ 299.614787][T14157] netlink: 'syz.1.2297': attribute type 1 has an invalid length. [ 299.624455][T14157] netlink: 'syz.1.2297': attribute type 2 has an invalid length. [ 299.719490][T14159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.736006][T14159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.758181][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.791082][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.868019][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.878089][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.957305][T14169] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 299.976882][T14169] syzkaller1: linktype set to 823 [ 300.086661][T14172] syzkaller1: entered promiscuous mode [ 300.110724][ T5842] Bluetooth: hci6: command tx timeout [ 300.116504][T14172] syzkaller1: entered allmulticast mode [ 300.131992][T14176] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.2269'. [ 300.247198][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2305'. [ 300.404117][T14180] 8021q: adding VLAN 0 to HW filter on device bond5 [ 300.794838][T14208] SET target dimension over the limit! [ 300.864282][T14208] syzkaller1: entered promiscuous mode [ 300.878608][T14208] syzkaller1: entered allmulticast mode [ 300.909116][T14208] netlink: 54 bytes leftover after parsing attributes in process `syz.0.2312'. [ 300.923633][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2312'. [ 301.028231][T14192] netlink: 'syz.1.2307': attribute type 1 has an invalid length. [ 301.691800][T14241] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2321'. [ 301.727291][T14243] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2322'. [ 301.761163][T14243] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2322'. [ 301.793215][T14244] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2322'. [ 301.853632][T14246] batadv_slave_0: entered promiscuous mode [ 302.037333][T14245] batadv_slave_0: left promiscuous mode [ 302.190657][ T5842] Bluetooth: hci6: command tx timeout [ 302.834710][T14300] __nla_validate_parse: 2 callbacks suppressed [ 302.834731][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2334'. [ 302.836915][T14302] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 302.862591][T14300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2334'. [ 303.094460][T14312] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2337'. [ 303.374884][T14323] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2341'. [ 303.603229][T14333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2344'. [ 303.658621][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2344'. [ 303.925732][T14351] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.2350'. [ 304.079954][T14353] xt_l2tp: invalid flags combination: 8 [ 304.173997][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2353'. [ 304.204349][T14356] netlink: 'syz.6.2352': attribute type 12 has an invalid length. [ 304.223347][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2353'. [ 304.240956][T14356] netlink: 'syz.6.2352': attribute type 29 has an invalid length. [ 304.265404][T14356] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2352'. [ 304.276061][ T5842] Bluetooth: hci6: command tx timeout [ 304.712154][T14371] gre1: entered promiscuous mode [ 304.717188][T14371] gre1: entered allmulticast mode [ 304.998063][T14391] bridge: RTM_NEWNEIGH with invalid ether address [ 305.171155][T14398] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.339536][T14407] netlink: 'syz.6.2366': attribute type 28 has an invalid length. [ 305.362936][T14407] netlink: 'syz.6.2366': attribute type 3 has an invalid length. [ 305.370069][T14406] netlink: 'syz.4.2367': attribute type 1 has an invalid length. [ 305.453179][T14409] syzkaller0: entered promiscuous mode [ 305.459614][T14409] syzkaller0: entered allmulticast mode [ 305.511573][T14406] bond8: (slave veth0_to_bond): Releasing active interface [ 306.187855][T14446] bridge0: entered promiscuous mode [ 306.193606][T14446] macsec1: entered promiscuous mode [ 306.199173][T14446] macsec1: entered allmulticast mode [ 306.209540][T14446] bridge0: entered allmulticast mode [ 306.216065][T14448] netlink: 'syz.1.2379': attribute type 1 has an invalid length. [ 306.225957][T14446] bridge0: port 3(macsec1) entered blocking state [ 306.232981][T14446] bridge0: port 3(macsec1) entered disabled state [ 306.246801][T14446] bridge0: left allmulticast mode [ 306.252640][T14446] bridge0: left promiscuous mode [ 306.333227][T14448] 8021q: adding VLAN 0 to HW filter on device bond11 [ 306.349123][T14455] vlan4: entered promiscuous mode [ 306.354732][T14455] bond11: entered promiscuous mode [ 306.360022][T14455] vlan4: entered allmulticast mode [ 306.365901][T14455] bond11: entered allmulticast mode [ 306.391973][T14459] bond11: (slave bridge8): making interface the new active one [ 306.399786][T14459] bridge8: entered promiscuous mode [ 306.406192][T14459] bridge8: entered allmulticast mode [ 306.414686][T14459] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 306.536534][T14466] netlink: 'syz.0.2383': attribute type 1 has an invalid length. [ 306.749882][T14482] x_tables: duplicate underflow at hook 2 [ 306.790705][T14475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.811212][T14487] sctp: [Deprecated]: syz.1.2388 (pid 14487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.811212][T14487] Use struct sctp_sack_info instead [ 306.911629][T14487] sctp: [Deprecated]: syz.1.2388 (pid 14487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.911629][T14487] Use struct sctp_sack_info instead [ 306.997413][T14494] sctp: [Deprecated]: syz.1.2388 (pid 14494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.997413][T14494] Use struct sctp_sack_info instead [ 307.013887][T14495] netlink: 'syz.0.2393': attribute type 1 has an invalid length. [ 307.013912][T14495] nbd: error processing sock list [ 307.102447][T14493] sctp: [Deprecated]: syz.1.2388 (pid 14493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.102447][T14493] Use struct sctp_sack_info instead [ 307.321067][T14514] netlink: 'syz.5.2398': attribute type 1 has an invalid length. [ 307.510789][T14527] bond0: (slave gre0): refused to change device type [ 307.627562][T14524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.754278][T14542] x_tables: duplicate underflow at hook 1 [ 307.896869][ T7108] TC_ACT_REPEAT abuse ? [ 307.907380][T14546] __nla_validate_parse: 23 callbacks suppressed [ 307.907402][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2407'. [ 307.913101][T14550] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2408'. [ 307.922854][T14546] netlink: 'syz.1.2407': attribute type 5 has an invalid length. [ 307.922878][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2407'. [ 307.975108][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2407'. [ 308.017046][T14546] netlink: 'syz.1.2407': attribute type 5 has an invalid length. [ 308.070729][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2407'. [ 308.101935][T14559] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2408'. [ 308.852478][T14587] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 309.047716][T14604] xt_bpf: check failed: parse error [ 309.139359][T14606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2420'. [ 309.299955][T14611] openvswitch: netlink: IP tunnel dst address not specified [ 309.887413][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2425'. [ 309.933590][T14629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2423'. [ 310.127579][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2426'. [ 310.182006][T14636] netlink: 'syz.0.2426': attribute type 1 has an invalid length. [ 310.555500][T14667] validate_nla: 2 callbacks suppressed [ 310.555522][T14667] netlink: 'syz.1.2431': attribute type 9 has an invalid length. [ 310.690847][T14671] gretap0: entered promiscuous mode [ 310.950958][T14691] netlink: 'syz.1.2438': attribute type 2 has an invalid length. [ 310.959025][T14691] netlink: 'syz.1.2438': attribute type 11 has an invalid length. [ 311.023227][T14689] IPv6: sit1: Disabled Multicast RS [ 311.053411][T14689] netlink: 'syz.6.2439': attribute type 3 has an invalid length. [ 311.847144][T14746] netlink: 'syz.4.2455': attribute type 8 has an invalid length. [ 312.006018][T14755] netlink: 'syz.4.2458': attribute type 11 has an invalid length. [ 312.018822][T14755] tipc: Enabled bearer , priority 0 [ 312.037554][T14755] syzkaller0: MTU too low for tipc bearer [ 312.061109][T14755] tipc: Disabling bearer [ 312.403015][T14774] netlink: 'syz.0.2462': attribute type 1 has an invalid length. [ 312.468382][T14766] bond2 (unregistering): Released all slaves [ 313.129582][T14808] : renamed from virt_wifi0 [ 313.146296][T14808] xt_HMARK: spi-set and port-set can't be combined [ 313.293457][T14812] netlink: set zone limit has 4 unknown bytes [ 313.305311][T14813] netlink: zone id is out of range [ 313.332823][T14813] netlink: zone id is out of range [ 313.373444][T14812] x_tables: duplicate underflow at hook 4 [ 314.596231][T14853] tipc: Enabling of bearer rejected, failed to enable media [ 314.983894][T14875] xt_l2tp: wrong L2TP version: 0 [ 315.072731][T14880] ipt_REJECT: ECHOREPLY no longer supported. [ 315.559162][T14901] syzkaller0: entered promiscuous mode [ 315.563526][T14899] can: request_module (can-proto-0) failed. [ 315.570792][T14901] syzkaller0: entered allmulticast mode [ 315.979287][T14915] __nla_validate_parse: 11 callbacks suppressed [ 315.979307][T14915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2504'. [ 316.032616][T14915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2504'. [ 316.078131][T14921] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2506'. [ 316.653443][T14945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2512'. [ 316.665376][T14944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2513'. [ 316.690472][T14944] openvswitch: netlink: Flow actions attr not present in new flow. [ 316.742206][T14947] x9: renamed from bridge_slave_0 (while UP) [ 316.962215][T14949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.079590][T14960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2516'. [ 317.319350][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.389264][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2531'. [ 318.407437][T15009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2530'. [ 318.450992][T15011] netlink: 'syz.1.2530': attribute type 29 has an invalid length. [ 318.515978][T15015] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 318.556072][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2532'. [ 318.601002][T15016] bridge0: Device is already in use. [ 318.894113][T15035] netlink: 'syz.5.2538': attribute type 21 has an invalid length. [ 318.902194][T15035] IPv6: NLM_F_CREATE should be specified when creating new route [ 318.921593][T15035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 318.929242][T15035] IPv6: NLM_F_CREATE should be set when creating new route [ 318.936609][T15035] IPv6: NLM_F_CREATE should be set when creating new route [ 318.943935][T15035] IPv6: NLM_F_CREATE should be set when creating new route [ 318.998923][T15043] Bluetooth: MGMT ver 1.23 [ 319.082258][T15038] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2539'. [ 319.454745][T15073] x_tables: duplicate underflow at hook 2 [ 319.498616][T15076] netlink: 'syz.6.2552': attribute type 1 has an invalid length. [ 319.538197][T15076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.147706][T15105] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 320.160566][T15105] syzkaller1: linktype set to 823 [ 320.791246][T15134] openvswitch: netlink: IPv4 tun info is not correct [ 320.972767][T15140] netlink: 'syz.0.2577': attribute type 8 has an invalid length. [ 321.097015][T15140] syzkaller0: entered promiscuous mode [ 321.105666][T15140] syzkaller0: entered allmulticast mode [ 321.927660][T15162] xt_NFQUEUE: number of total queues is 0 [ 323.205578][T15189] __nla_validate_parse: 7 callbacks suppressed [ 323.205597][T15189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2592'. [ 323.353804][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'. [ 323.374887][T15191] netlink: 'syz.1.2593': attribute type 30 has an invalid length. [ 323.400588][T15191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2593'. [ 323.518130][T15211] openvswitch: netlink: IP tunnel dst address not specified [ 323.553292][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2597'. [ 323.671064][T15218] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2600'. [ 323.726159][T15222] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2600'. [ 323.957185][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2603'. [ 324.109225][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'. [ 324.172913][T15242] syzkaller0: entered promiscuous mode [ 324.178996][T15242] syzkaller0: entered allmulticast mode [ 324.257529][T15252] netlink: 'syz.4.2610': attribute type 10 has an invalid length. [ 324.257528][T15248] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2609'. [ 324.313981][T15257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2611'. [ 324.321230][T15252] veth0_macvtap: left promiscuous mode [ 324.714013][T15275] lo: entered promiscuous mode [ 324.722549][T15275] tunl0: entered promiscuous mode [ 324.744166][T15275] gre0: entered promiscuous mode [ 324.791179][T15275] gretap0: entered promiscuous mode [ 324.937839][T15275] erspan0: entered promiscuous mode [ 324.983170][T15275] ip_vti0: entered promiscuous mode [ 325.127697][T15296] netlink: 'syz.6.2622': attribute type 1 has an invalid length. [ 325.152905][T15296] netlink: 'syz.6.2622': attribute type 2 has an invalid length. [ 325.278391][T15290] syzkaller0: entered promiscuous mode [ 325.284065][T15290] syzkaller0: entered allmulticast mode [ 327.435307][ T5905] IPVS: starting estimator thread 0... [ 327.553015][T15358] IPVS: using max 26 ests per chain, 62400 per kthread [ 328.066292][T15393] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.089218][T15393] tc_dump_action: action bad kind [ 328.232337][T15400] netlink: 'syz.4.2651': attribute type 5 has an invalid length. [ 328.245808][T15403] netlink: 'syz.6.2653': attribute type 2 has an invalid length. [ 328.288202][T15403] team0 (unregistering): Port device team_slave_0 removed [ 328.302809][T15403] team0 (unregistering): Port device team_slave_1 removed [ 328.421120][T15409] : renamed from bond0 (while UP) [ 328.440847][T15409] __nla_validate_parse: 12 callbacks suppressed [ 328.440867][T15409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2655'. [ 328.476715][T15409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2655'. [ 328.489923][T15413] atomic_op ffff888053b5b198 conn xmit_atomic 0000000000000000 [ 328.579920][T15418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2657'. [ 328.602774][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2658'. [ 328.767696][T15430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2661'. [ 329.019939][T15440] sctp: [Deprecated]: syz.5.2664 (pid 15440) Use of int in max_burst socket option deprecated. [ 329.019939][T15440] Use struct sctp_assoc_value instead [ 329.062547][T15442] netlink: 3364 bytes leftover after parsing attributes in process `syz.1.2665'. [ 329.099090][T15442] openvswitch: netlink: Flow key attr not present in new flow. [ 329.189613][T15450] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2666'. [ 329.674502][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2674'. [ 329.707694][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 329.730233][T15472] netlink: 'syz.4.2674': attribute type 12 has an invalid length. [ 329.763641][T15472] netlink: 'syz.4.2674': attribute type 11 has an invalid length. [ 329.829694][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2677'. [ 330.267948][T15506] netlink: 'syz.1.2684': attribute type 1 has an invalid length. [ 330.297366][T15506] netlink: 'syz.1.2684': attribute type 2 has an invalid length. [ 330.328447][T15506] netlink: 'syz.1.2684': attribute type 1 has an invalid length. [ 331.379087][T15557] xt_hashlimit: size too large, truncated to 1048576 [ 331.924056][T15584] netlink: 'syz.1.2705': attribute type 5 has an invalid length. [ 331.943001][T15584] netlink: 'syz.1.2705': attribute type 6 has an invalid length. [ 332.198438][T15593] IPVS: length: 194 != 24 [ 333.173934][T15612] xt_check_match: 55 callbacks suppressed [ 333.173964][T15612] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 333.409112][T15615] xt_CT: No such helper "netbios-ns" [ 334.576094][T15651] __nla_validate_parse: 13 callbacks suppressed [ 334.576114][T15651] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2722'. [ 334.788935][T15655] can: request_module (can-proto-0) failed. [ 335.259404][ T29] audit: type=1107 audit(1775282470.632:5): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 335.296341][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2730'. [ 335.563522][T15652] netlink: 'syz.5.2723': attribute type 29 has an invalid length. [ 335.586648][T15652] netlink: 'syz.5.2723': attribute type 29 has an invalid length. [ 335.605529][T15652] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2723'. [ 335.835870][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.846646][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.855334][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.865328][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.875230][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.183933][T15701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2737'. [ 336.291693][T15704] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2736'. [ 336.356000][T15703] IPv6: sit2: Disabled Multicast RS [ 336.401790][T15703] sit2: entered allmulticast mode [ 336.431554][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2736'. [ 336.444366][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2736'. [ 336.458763][T15699] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2736'. [ 336.871738][T15726] bond9: option all_slaves_active: invalid value (222) [ 336.881319][T15726] bond9 (unregistering): Released all slaves [ 337.007225][T15693] chnl_net:caif_netlink_parms(): no params data found [ 337.076702][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2747'. [ 337.301357][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2748'. [ 337.404593][T15693] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.422313][T15693] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.456133][T15693] bridge_slave_0: entered allmulticast mode [ 337.477671][T15693] bridge_slave_0: entered promiscuous mode [ 337.490573][T15693] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.519194][T15693] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.540513][T15693] bridge_slave_1: entered allmulticast mode [ 337.552612][T15693] bridge_slave_1: entered promiscuous mode [ 337.965406][ T5842] Bluetooth: hci7: command tx timeout [ 337.983062][ T7116] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x93 [ 338.099538][T15693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.116489][T15693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.201008][T15693] team0: Port device team_slave_0 added [ 338.211605][T15693] team0: Port device team_slave_1 added [ 338.267913][T15693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.275343][T15693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.310579][T15693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.340439][T15693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.356909][T15693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.384563][T15693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.486949][T15693] hsr_slave_0: entered promiscuous mode [ 338.494533][T15693] hsr_slave_1: entered promiscuous mode [ 338.501963][T15693] debugfs: 'hsr0' already exists in 'hsr' [ 338.507803][T15693] Cannot create hsr debugfs directory [ 338.547189][T15780] vlan2: entered allmulticast mode [ 338.552719][T15780] bond0: entered allmulticast mode [ 338.837775][T15693] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.849856][T15693] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.860632][T15693] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 338.944088][T15693] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.956207][T15693] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.966831][T15693] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 339.034796][T15693] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.045654][T15693] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.056421][T15693] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 339.156765][T15693] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.167463][T15693] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.178431][T15693] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 340.030883][ T5842] Bluetooth: hci7: command tx timeout [ 340.405311][T15763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.414692][T15769] __nla_validate_parse: 3 callbacks suppressed [ 340.414713][T15769] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2751'. [ 340.469524][T15693] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 340.533702][T15693] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 340.598343][T15693] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 340.625415][T15693] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 340.701996][T15805] syzkaller0: entered promiscuous mode [ 340.707585][T15805] syzkaller0: entered allmulticast mode [ 340.740775][T15805] openvswitch: netlink: IP tunnel TTL not specified. [ 340.777186][T15815] netlink: 'syz.4.2765': attribute type 1 has an invalid length. [ 340.828231][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2765'. [ 340.878909][T15815] 8021q: adding VLAN 0 to HW filter on device bond9 [ 340.913907][T15817] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 340.929180][T15817] bond9: entered allmulticast mode [ 340.974662][T15815] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 341.054978][T15831] xt_ecn: cannot match TCP bits for non-tcp packets [ 341.461307][T15693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.548181][T15693] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.588501][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.595911][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.635307][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.642748][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.822894][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2775'. [ 341.875066][T15854] netlink: 'syz.1.2775': attribute type 3 has an invalid length. [ 341.929658][T15863] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2778'. [ 342.114105][ T5842] Bluetooth: hci7: command tx timeout [ 342.364470][T15693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.385876][T15889] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2783'. [ 342.552425][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2786'. [ 342.575677][T15693] veth0_vlan: entered promiscuous mode [ 342.606522][T15897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.673200][T15897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.738424][T15693] veth1_vlan: entered promiscuous mode [ 342.816253][T15693] veth0_macvtap: entered promiscuous mode [ 342.927854][T15693] veth1_macvtap: entered promiscuous mode [ 342.959490][T15693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.974854][T15693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.994500][ T145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.063783][ T145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.088214][ T145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.162148][ T145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.459889][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.482497][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.539078][T15931] SET target dimension over the limit! [ 343.556390][T15924] syzkaller0: entered promiscuous mode [ 343.587214][T15924] syzkaller0: entered allmulticast mode [ 343.618240][ T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.639075][ T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.828086][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'. [ 343.838775][T15947] xt_l2tp: invalid flags combination: 8 [ 343.872594][T15949] netlink: 'syz.1.2800': attribute type 28 has an invalid length. [ 343.997108][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2801'. [ 344.042556][T15953] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2801'. [ 344.192247][ T5842] Bluetooth: hci7: command tx timeout [ 344.205417][T15963] delete_channel: no stack [ 344.353465][T15967] syzkaller0: entered promiscuous mode [ 344.369619][T15967] syzkaller0: entered allmulticast mode [ 344.389728][T15967] tc action pedit offset must be on 32 bit boundaries [ 344.398846][T15967] netlink: 'syz.0.2807': attribute type 17 has an invalid length. [ 344.407851][T15967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2807'. [ 344.435175][T15967] gretap0: entered promiscuous mode [ 344.444848][T15967] gretap0: left promiscuous mode [ 345.123911][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.142783][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.152892][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.181182][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.198959][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.557370][T16009] ip6erspan1: entered allmulticast mode [ 346.026259][T15993] chnl_net:caif_netlink_parms(): no params data found [ 346.125989][T16032] vlan3: entered promiscuous mode [ 346.140370][T16032] geneve1: entered promiscuous mode [ 346.146107][T16032] vlan3: entered allmulticast mode [ 346.154575][T16032] geneve1: entered allmulticast mode [ 346.348770][T16044] team0: Device vcan1 is of different type [ 346.434655][T15993] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.452887][T15993] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.470981][T15993] bridge_slave_0: entered allmulticast mode [ 346.479197][T15993] bridge_slave_0: entered promiscuous mode [ 346.519846][T15993] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.544415][T15993] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.612246][T15993] bridge_slave_1: entered allmulticast mode [ 346.655949][T15993] bridge_slave_1: entered promiscuous mode [ 346.732582][T16065] __nla_validate_parse: 4 callbacks suppressed [ 346.732603][T16065] netlink: 212 bytes leftover after parsing attributes in process `syz.6.2836'. [ 346.763643][T16068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2838'. [ 346.797762][T16068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2838'. [ 346.832572][T15993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.865049][T15993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.023464][T16079] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2841'. [ 347.098061][T15993] team0: Port device team_slave_0 added [ 347.108995][T15993] team0: Port device team_slave_1 added [ 347.230755][ T5842] Bluetooth: hci0: command tx timeout [ 347.249079][T15993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.262336][T15993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.291745][T15993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.306391][T15993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.323621][T15993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.352037][T15993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.487582][T15993] hsr_slave_0: entered promiscuous mode [ 347.503480][T15993] hsr_slave_1: entered promiscuous mode [ 347.513423][T15993] debugfs: 'hsr0' already exists in 'hsr' [ 347.519379][T15993] Cannot create hsr debugfs directory [ 347.541876][T16093] veth0_macvtap: entered promiscuous mode [ 347.555306][T16093] macvtap2: entered allmulticast mode [ 347.561149][T16093] veth0_macvtap: entered allmulticast mode [ 347.828439][T16102] veth7: entered allmulticast mode [ 348.061585][T16109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2850'. [ 348.112144][T15993] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.124883][T15993] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.231826][T15993] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.260291][T15993] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.343196][T15993] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.354741][T16127] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2856'. [ 348.356304][T15993] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.446953][T15993] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.500450][T15993] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.577568][T16137] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2857'. [ 348.867016][T16156] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 348.987437][T15993] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.019078][T15993] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.094939][T15993] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.124475][T15993] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 349.310834][ T5842] Bluetooth: hci0: command tx timeout [ 349.475954][T15993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.514554][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2870'. [ 349.524778][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2870'. [ 349.535094][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2870'. [ 349.595090][T15993] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.641654][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.648975][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.684292][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.691540][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.242646][T16225] s5: renamed from vlan1 (while UP) [ 350.477102][T15993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.640016][T15993] veth0_vlan: entered promiscuous mode [ 350.667824][T15993] veth1_vlan: entered promiscuous mode [ 350.742803][T15993] veth0_macvtap: entered promiscuous mode [ 350.764351][T15993] veth1_macvtap: entered promiscuous mode [ 350.812647][T15993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.872939][T15993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.913564][ T7116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.943466][ T7116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.966638][ T7116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.986377][ T7116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.038331][T16232] FAULT_INJECTION: forcing a failure. [ 351.038331][T16232] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 351.053507][T16232] CPU: 0 UID: 0 PID: 16232 Comm: syz.5.2883 Not tainted syzkaller #0 PREEMPT(full) [ 351.053536][T16232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 351.053554][T16232] Call Trace: [ 351.053562][T16232] [ 351.053571][T16232] dump_stack_lvl+0xe8/0x150 [ 351.053608][T16232] should_fail_ex+0x412/0x560 [ 351.053645][T16232] _copy_from_user+0x2d/0xb0 [ 351.053672][T16232] ___sys_sendmsg+0x1c6/0x360 [ 351.053706][T16232] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.053776][T16232] ? __fget_files+0x2a/0x420 [ 351.053791][T16232] ? __fget_files+0x3a0/0x420 [ 351.053815][T16232] __x64_sys_sendmsg+0x1bd/0x2a0 [ 351.053841][T16232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.053870][T16232] ? __pfx_ksys_write+0x10/0x10 [ 351.053898][T16232] do_syscall_64+0x14d/0xf80 [ 351.053920][T16232] ? trace_irq_disable+0x3b/0x150 [ 351.053934][T16232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.053951][T16232] ? clear_bhb_loop+0x40/0x90 [ 351.053973][T16232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.053989][T16232] RIP: 0033:0x7f4dd9f9c819 [ 351.054006][T16232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.054022][T16232] RSP: 002b:00007f4ddae5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.054040][T16232] RAX: ffffffffffffffda RBX: 00007f4dda215fa0 RCX: 00007f4dd9f9c819 [ 351.054052][T16232] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 351.054062][T16232] RBP: 00007f4ddae5a090 R08: 0000000000000000 R09: 0000000000000000 [ 351.054072][T16232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.054081][T16232] R13: 00007f4dda216038 R14: 00007f4dda215fa0 R15: 00007ffc56edcba8 [ 351.054106][T16232] [ 351.390925][ T5842] Bluetooth: hci0: command tx timeout [ 351.422934][T16260] FAULT_INJECTION: forcing a failure. [ 351.422934][T16260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.452976][T16260] CPU: 0 UID: 0 PID: 16260 Comm: syz.4.2890 Not tainted syzkaller #0 PREEMPT(full) [ 351.453003][T16260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 351.453015][T16260] Call Trace: [ 351.453023][T16260] [ 351.453031][T16260] dump_stack_lvl+0xe8/0x150 [ 351.453063][T16260] should_fail_ex+0x412/0x560 [ 351.453094][T16260] _copy_to_user+0x31/0xb0 [ 351.453117][T16260] simple_read_from_buffer+0xe1/0x170 [ 351.453149][T16260] proc_fail_nth_read+0x1bb/0x230 [ 351.453183][T16260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.453218][T16260] ? rw_verify_area+0x2a6/0x4d0 [ 351.453240][T16260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.453271][T16260] vfs_read+0x20c/0xa70 [ 351.453291][T16260] ? fdget_pos+0x246/0x320 [ 351.453315][T16260] ? __pfx___mutex_lock+0x10/0x10 [ 351.453342][T16260] ? __pfx_vfs_read+0x10/0x10 [ 351.453366][T16260] ? __fget_files+0x2a/0x420 [ 351.453389][T16260] ? __fget_files+0x3a0/0x420 [ 351.453407][T16260] ? __fget_files+0x2a/0x420 [ 351.453434][T16260] ksys_read+0x150/0x270 [ 351.453459][T16260] ? __pfx_ksys_read+0x10/0x10 [ 351.453501][T16260] do_syscall_64+0x14d/0xf80 [ 351.453528][T16260] ? trace_irq_disable+0x3b/0x150 [ 351.453551][T16260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.453573][T16260] ? clear_bhb_loop+0x40/0x90 [ 351.453602][T16260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.453622][T16260] RIP: 0033:0x7f2d62b5d04e [ 351.453641][T16260] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 351.453660][T16260] RSP: 002b:00007f2d639f2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.453681][T16260] RAX: ffffffffffffffda RBX: 00007f2d639f36c0 RCX: 00007f2d62b5d04e [ 351.453696][T16260] RDX: 000000000000000f RSI: 00007f2d639f30a0 RDI: 0000000000000005 [ 351.453708][T16260] RBP: 00007f2d639f3090 R08: 0000000000000000 R09: 0000000000000000 [ 351.453720][T16260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.453731][T16260] R13: 00007f2d62e16038 R14: 00007f2d62e15fa0 R15: 00007ffcf689dde8 [ 351.453765][T16260] [ 351.454428][ T7116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.915055][ T7116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.945670][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.954043][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.076724][T16269] __nla_validate_parse: 6 callbacks suppressed [ 352.076744][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2892'. [ 352.336828][T16285] tipc: Started in network mode [ 352.361469][T16285] tipc: Node identity 010000000000000001, cluster identity 4711 [ 352.528095][T16294] tc_dump_action: action bad kind [ 352.615538][T16297] openvswitch: netlink: Key 6 has unexpected len 226 expected 2 [ 352.642371][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2900'. [ 352.681065][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 352.691955][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 352.709485][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 352.709888][T16299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2900'. [ 352.743061][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 352.763705][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 352.929241][T16308] tipc: Enabling not permitted [ 352.951109][T16308] tipc: Enabling of bearer rejected, failed to enable media [ 353.090760][T16310] FAULT_INJECTION: forcing a failure. [ 353.090760][T16310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.148663][T16310] CPU: 0 UID: 0 PID: 16310 Comm: syz.5.2904 Not tainted syzkaller #0 PREEMPT(full) [ 353.148700][T16310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 353.148712][T16310] Call Trace: [ 353.148720][T16310] [ 353.148728][T16310] dump_stack_lvl+0xe8/0x150 [ 353.148761][T16310] should_fail_ex+0x412/0x560 [ 353.148795][T16310] _copy_from_user+0x2d/0xb0 [ 353.148829][T16310] __copy_msghdr+0x3c5/0x5b0 [ 353.148858][T16310] ___sys_sendmsg+0x213/0x360 [ 353.148887][T16310] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.148950][T16310] ? __fget_files+0x2a/0x420 [ 353.148967][T16310] ? __fget_files+0x3a0/0x420 [ 353.148993][T16310] __x64_sys_sendmsg+0x1bd/0x2a0 [ 353.149027][T16310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.149065][T16310] ? __pfx_ksys_write+0x10/0x10 [ 353.149101][T16310] do_syscall_64+0x14d/0xf80 [ 353.149124][T16310] ? trace_irq_disable+0x3b/0x150 [ 353.149140][T16310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.149158][T16310] ? clear_bhb_loop+0x40/0x90 [ 353.149185][T16310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.149202][T16310] RIP: 0033:0x7f4dd9f9c819 [ 353.149219][T16310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.149233][T16310] RSP: 002b:00007f4ddae5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.149253][T16310] RAX: ffffffffffffffda RBX: 00007f4dda215fa0 RCX: 00007f4dd9f9c819 [ 353.149266][T16310] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 353.149279][T16310] RBP: 00007f4ddae5a090 R08: 0000000000000000 R09: 0000000000000000 [ 353.149291][T16310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.149303][T16310] R13: 00007f4dda216038 R14: 00007f4dda215fa0 R15: 00007ffc56edcba8 [ 353.149335][T16310] [ 353.471591][ T51] Bluetooth: hci0: command tx timeout [ 353.774185][ T7108] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.820235][ T7108] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.960413][ T29] audit: type=1107 audit(1775282489.332:6): pid=16330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='WNp9so9Pm3T,')27|c+,Zm$U9rH#r#MI1-H2;!0$ҋ3*4/뿦[,'.AGFJfVΣ߱Y )<ǟ{i+zkwPU4D3b!xޅg?pF%(DU*NOϜ08Ĭ5o͗&_weO`T(@aZJ D~1vl~AOKV/Fe[s0%͊J“4eZSğ~eRX?R,(Ls7c\7Dp [ 353.960413][ T29] ByO pU&:i83*,#up1tz`ju۲kuݜh~ Qz?^phP gD%oK`Q䈄ŴT:$`֖ [ 353.960413][ T29] "{yjĉ^u?9iߙ}F˭]q1꟏UiN[ AUZ0 ¨wv38^Fje:z4bHWCe8-6ܱu>)}_7Hox>~rA_deyt#љ1tAT>}|M*eÈYbP褥NHԱꀜ`5G' [ 354.185603][ T7108] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.232273][ T7108] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.544683][ T7108] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.557756][T16363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2914'. [ 354.567782][ T7108] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.568541][T16363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2914'. [ 354.609532][T16341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.617498][T16341] batadv_slave_0: entered promiscuous mode [ 354.739026][T16366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.825507][T16369] Unknown options in mask b7f2 [ 354.827719][ T7108] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.850183][ T7108] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.863969][ T51] Bluetooth: hci4: command tx timeout [ 354.900733][T16372] netlink: 'syz.6.2921': attribute type 3 has an invalid length. [ 354.908720][T16372] netlink: 666 bytes leftover after parsing attributes in process `syz.6.2921'. [ 355.053450][T16377] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2923'. [ 355.148315][T16300] chnl_net:caif_netlink_parms(): no params data found [ 355.248005][T16389] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 355.615631][T16300] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.631031][T16300] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.638412][T16300] bridge_slave_0: entered allmulticast mode [ 355.647197][T16300] bridge_slave_0: entered promiscuous mode [ 355.742573][T16300] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.770977][T16300] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.778455][T16300] bridge_slave_1: entered allmulticast mode [ 355.809842][T16300] bridge_slave_1: entered promiscuous mode [ 355.878893][T16383] FAULT_INJECTION: forcing a failure. [ 355.878893][T16383] name failslab, interval 1, probability 0, space 0, times 0 [ 355.905719][T16383] CPU: 0 UID: 0 PID: 16383 Comm: syz.1.2924 Not tainted syzkaller #0 PREEMPT(full) [ 355.905749][T16383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 355.905762][T16383] Call Trace: [ 355.905771][T16383] [ 355.905780][T16383] dump_stack_lvl+0xe8/0x150 [ 355.905816][T16383] should_fail_ex+0x412/0x560 [ 355.905855][T16383] should_failslab+0xa8/0x100 [ 355.905884][T16383] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 355.905908][T16383] ? __alloc_skb+0x186/0x7d0 [ 355.905931][T16383] ? __alloc_skb+0x1d0/0x7d0 [ 355.905950][T16383] ? __local_bh_enable_ip+0xd0/0x130 [ 355.905983][T16383] __alloc_skb+0x1d0/0x7d0 [ 355.906011][T16383] alloc_skb_with_frags+0xca/0x890 [ 355.906044][T16383] ? __lock_acquire+0x6b5/0x2cf0 [ 355.906077][T16383] sock_alloc_send_pskb+0x878/0x990 [ 355.906113][T16383] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 355.906144][T16383] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 355.906178][T16383] ? dev_get_by_index+0x22/0x2e0 [ 355.906215][T16383] ? dev_get_by_index+0x22/0x2e0 [ 355.906251][T16383] packet_sendmsg+0x33e5/0x50f0 [ 355.906284][T16383] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 355.906321][T16383] ? __lock_acquire+0x6b5/0x2cf0 [ 355.906380][T16383] ? aa_sk_perm+0x6d5/0x900 [ 355.906408][T16383] ? __pfx_packet_sendmsg+0x10/0x10 [ 355.906440][T16383] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 355.906470][T16383] ? aa_sock_msg_perm+0xf1/0x1b0 [ 355.906504][T16383] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.906533][T16383] ____sys_sendmsg+0x972/0x9f0 [ 355.906570][T16383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.906606][T16383] ? import_iovec+0x73/0xa0 [ 355.906634][T16383] ___sys_sendmsg+0x2a5/0x360 [ 355.906668][T16383] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.906733][T16383] ? __fget_files+0x2a/0x420 [ 355.906751][T16383] ? __fget_files+0x3a0/0x420 [ 355.906781][T16383] __x64_sys_sendmsg+0x1bd/0x2a0 [ 355.906811][T16383] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.906848][T16383] ? __pfx_ksys_write+0x10/0x10 [ 355.906884][T16383] do_syscall_64+0x14d/0xf80 [ 355.906911][T16383] ? trace_irq_disable+0x3b/0x150 [ 355.906929][T16383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.906950][T16383] ? clear_bhb_loop+0x40/0x90 [ 355.906976][T16383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.906996][T16383] RIP: 0033:0x7fd3f1b9c819 [ 355.907016][T16383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.907034][T16383] RSP: 002b:00007fd3f2abf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.907056][T16383] RAX: ffffffffffffffda RBX: 00007fd3f1e15fa0 RCX: 00007fd3f1b9c819 [ 355.907070][T16383] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 355.907082][T16383] RBP: 00007fd3f2abf090 R08: 0000000000000000 R09: 0000000000000000 [ 355.907095][T16383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.907106][T16383] R13: 00007fd3f1e16038 R14: 00007fd3f1e15fa0 R15: 00007ffea5ff2678 [ 355.907140][T16383] [ 356.229975][T16300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.243455][T16300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.284970][ T7108] veth13: left allmulticast mode [ 356.335453][ T7108] veth13: left promiscuous mode [ 356.342183][ T7108] bridge3: port 2(veth13) entered disabled state [ 356.354473][ T7113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.365622][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.374039][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.387002][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.425167][ T7108] veth11: left allmulticast mode [ 356.431633][ T7108] veth11: left promiscuous mode [ 356.436780][ T7108] bridge3: port 1(veth11) entered disabled state [ 356.724244][T16427] IPv6: NLM_F_CREATE should be specified when creating new route [ 356.910485][ T51] Bluetooth: hci4: command tx timeout [ 356.929639][ T7108] bond9 (unregistering): (slave ip6gretap1): Releasing active interface [ 356.972093][T16424] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2933'. [ 356.988088][ T983] IPVS: starting estimator thread 0... [ 356.994260][ T181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.090360][T16445] IPVS: using max 26 ests per chain, 62400 per kthread [ 357.687195][ T7108] bond0 (unregistering): Released all slaves [ 357.703147][ T7108] team0: Port device bond1 removed [ 357.709250][ T7108] bond1 (unregistering): Released all slaves [ 357.726443][ T7108] bond2 (unregistering): Released all slaves [ 357.755483][ T7108] bond3 (unregistering): (slave veth5): Releasing active interface [ 357.766517][ T7108] bond3 (unregistering): Released all slaves [ 357.785457][ T7108] bond4 (unregistering): Released all slaves [ 357.803646][ T7108] bond5 (unregistering): Released all slaves [ 357.821691][ T7108] bond6 (unregistering): Released all slaves [ 357.844556][ T7108] bond7 (unregistering): Released all slaves [ 357.861419][ T7108] bond8 (unregistering): Released all slaves [ 357.878328][ T7108] bond9 (unregistering): Released all slaves [ 357.912331][ T10] infiniband syz2: ib_query_port failed (-19) [ 357.918735][T16300] team0: Port device team_slave_0 added [ 357.926318][T16300] team0: Port device team_slave_1 added [ 357.956910][T16441] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 358.144080][T16462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2938'. [ 358.175415][ T7108] tipc: Disabling bearer [ 358.191654][ T7108] tipc: Left network mode [ 358.202726][T16300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.209739][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.271249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.279922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.289917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.298769][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.305566][T16300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.320963][T16300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.328154][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.447420][T16300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.827627][T16464] syzkaller0: entered promiscuous mode [ 358.845086][T16464] syzkaller0: entered allmulticast mode [ 358.917163][T16300] hsr_slave_0: entered promiscuous mode [ 358.923458][ T181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.928912][T16300] hsr_slave_1: entered promiscuous mode [ 358.934012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.944531][T16300] debugfs: 'hsr0' already exists in 'hsr' [ 358.956375][T16300] Cannot create hsr debugfs directory [ 358.990471][ T51] Bluetooth: hci4: command tx timeout [ 360.192690][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.201230][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.209450][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.218072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.074531][ T51] Bluetooth: hci4: command tx timeout [ 361.638953][T16486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.657443][T16537] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2950'. [ 361.668482][ T7108] hsr_slave_0: left promiscuous mode [ 361.683048][ T7108] hsr_slave_1: left promiscuous mode [ 361.703722][ T7108] veth1_vlan: left promiscuous mode [ 361.709349][ T7108] veth0_vlan: left promiscuous mode [ 361.999865][ T7108] pim6reg (unregistering): left allmulticast mode [ 362.324563][T16544] pim6reg1: entered promiscuous mode [ 362.330484][T16544] pim6reg1: entered allmulticast mode [ 362.518811][T16556] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2954'. [ 362.727188][T16564] netlink: 'syz.0.2956': attribute type 32 has an invalid length. [ 362.779118][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 363.045477][T16564] bond1: Setting coupled_control to off (0) [ 363.182208][T16562] FAULT_INJECTION: forcing a failure. [ 363.182208][T16562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.229587][T16562] CPU: 1 UID: 0 PID: 16562 Comm: syz.5.2955 Not tainted syzkaller #0 PREEMPT(full) [ 363.229616][T16562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 363.229634][T16562] Call Trace: [ 363.229642][T16562] [ 363.229651][T16562] dump_stack_lvl+0xe8/0x150 [ 363.229694][T16562] should_fail_ex+0x412/0x560 [ 363.229733][T16562] _copy_to_user+0x31/0xb0 [ 363.229761][T16562] simple_read_from_buffer+0xe1/0x170 [ 363.229798][T16562] proc_fail_nth_read+0x1bb/0x230 [ 363.229832][T16562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 363.229867][T16562] ? rw_verify_area+0x2a6/0x4d0 [ 363.229889][T16562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 363.229922][T16562] vfs_read+0x20c/0xa70 [ 363.229942][T16562] ? fdget_pos+0x246/0x320 [ 363.229967][T16562] ? __pfx___mutex_lock+0x10/0x10 [ 363.229997][T16562] ? __pfx_vfs_read+0x10/0x10 [ 363.230022][T16562] ? __fget_files+0x2a/0x420 [ 363.230046][T16562] ? __fget_files+0x3a0/0x420 [ 363.230068][T16562] ? __fget_files+0x2a/0x420 [ 363.230094][T16562] ksys_read+0x150/0x270 [ 363.230119][T16562] ? __pfx_ksys_read+0x10/0x10 [ 363.230154][T16562] do_syscall_64+0x14d/0xf80 [ 363.230186][T16562] ? trace_irq_disable+0x3b/0x150 [ 363.230204][T16562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.230225][T16562] ? clear_bhb_loop+0x40/0x90 [ 363.230252][T16562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.230277][T16562] RIP: 0033:0x7f4dd9f5d04e [ 363.230297][T16562] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 363.230315][T16562] RSP: 002b:00007f4ddae59fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 363.230337][T16562] RAX: ffffffffffffffda RBX: 00007f4ddae5a6c0 RCX: 00007f4dd9f5d04e [ 363.230352][T16562] RDX: 000000000000000f RSI: 00007f4ddae5a0a0 RDI: 0000000000000005 [ 363.230364][T16562] RBP: 00007f4ddae5a090 R08: 0000000000000000 R09: 0000000000000000 [ 363.230378][T16562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.230390][T16562] R13: 00007f4dda216038 R14: 00007f4dda215fa0 R15: 00007ffc56edcba8 [ 363.230425][T16562] [ 363.476705][T16579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2958'. [ 363.502246][T16581] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2959'. [ 363.554687][ T181] tipc: Subscription rejected, illegal request [ 363.597047][ T7108] IPVS: stop unused estimator thread 0... [ 364.042971][T16300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 364.099889][T16300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 364.164741][T16599] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.2963'. [ 364.182540][T16300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 364.293730][T16604] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2964'. [ 364.369597][T16300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 364.383397][T16603] tipc: Started in network mode [ 364.389322][T16603] tipc: Node identity , cluster identity 4711 [ 364.396047][T16603] tipc: Failed to set node id, please configure manually [ 364.416074][T16603] tipc: Enabling of bearer rejected, failed to enable media [ 364.531919][T16603] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2965'. [ 364.692819][ T7111] net_ratelimit: 7 callbacks suppressed [ 364.692839][ T7111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.707514][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.739661][T16628] netlink: 'syz.5.2971': attribute type 4 has an invalid length. [ 364.787515][T16627] netlink: 'syz.5.2971': attribute type 4 has an invalid length. [ 364.897216][T16300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.949081][T16300] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.994007][ T7108] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.001269][ T7108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.054414][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.061687][ T7111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.280721][T16654] tipc: Started in network mode [ 365.285720][T16654] tipc: Node identity 2a3555e5be5e, cluster identity 4711 [ 365.311343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.320959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.333674][T16656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.342720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.355874][T16654] tipc: Enabled bearer , priority 0 [ 365.463325][T16658] syzkaller0: entered promiscuous mode [ 365.478172][T16658] syzkaller0: entered allmulticast mode [ 365.485709][T16658] tipc: Resetting bearer [ 365.521511][T16653] tipc: Resetting bearer [ 365.943940][T16680] netlink: 'syz.0.2979': attribute type 1 has an invalid length. [ 365.953089][ T181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.976277][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2979'. [ 367.071081][ T7108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.642004][T16653] tipc: Disabling bearer [ 367.664336][T15287] tipc: Node number set to 2490062309 [ 367.710874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.772882][T16300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.903325][T16698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.241203][T16709] bridge_slave_0: left allmulticast mode [ 368.246939][T16709] bridge_slave_0: left promiscuous mode [ 368.290387][T16721] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2988'. [ 368.330756][T16709] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.398366][T16709] bridge_slave_1: left allmulticast mode [ 368.429021][T16709] bridge_slave_1: left promiscuous mode [ 368.450019][T16709] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.498966][T16709] bond0: (slave bond_slave_0): Releasing backup interface [ 368.556025][T16709] bond0: (slave bond_slave_1): Releasing backup interface [ 368.625477][T16709] team0: Port device team_slave_0 removed [ 368.681382][T16709] team0: Port device team_slave_1 removed [ 368.717174][T16709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.749740][T16709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.759300][T16709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.212073][T16300] veth0_vlan: entered promiscuous mode [ 369.286706][T16300] veth1_vlan: entered promiscuous mode [ 369.388898][T16300] veth0_macvtap: entered promiscuous mode [ 369.434046][T16300] veth1_macvtap: entered promiscuous mode [ 369.525220][T16300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.573094][T16300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.599243][T16761] netlink: 'syz.1.2993': attribute type 3 has an invalid length. [ 369.635518][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.656107][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.687276][ T7111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.735715][ T7111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.792807][ T7108] net_ratelimit: 1 callbacks suppressed [ 369.792829][ T7108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.807180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.983477][T16777] netlink: 'syz.0.2995': attribute type 75 has an invalid length. [ 370.179053][T16789] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2995'. [ 370.430514][ T5188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.726587][ T7106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.761317][ T7106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.939372][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.960811][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.247055][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3006'. [ 371.358487][T16841] syzkaller0: entered promiscuous mode [ 371.714982][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.493660][T16877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.505053][T16874] netlink: 'syz.0.3014': attribute type 12 has an invalid length. [ 372.513663][T16874] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3014'. [ 372.652860][T16883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.693163][T16887] netlink: 'syz.4.3019': attribute type 10 has an invalid length. [ 372.774709][T16887] team0 (unregistering): Port device team_slave_0 removed [ 372.835109][T16887] team0 (unregistering): Port device team_slave_1 removed [ 372.879819][T16896] netlink: 'syz.1.3022': attribute type 4 has an invalid length. [ 372.949373][T16897] netlink: 'syz.1.3022': attribute type 4 has an invalid length. [ 372.995223][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.202763][T16904] netlink: 'syz.0.3025': attribute type 1 has an invalid length. [ 373.506801][T16922] syzkaller0: entered promiscuous mode [ 373.532141][T16922] syzkaller0: entered allmulticast mode [ 373.682915][T16936] netlink: 'syz.5.3035': attribute type 4 has an invalid length. [ 373.710392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.782513][T16936] netlink: 'syz.5.3035': attribute type 4 has an invalid length. [ 373.944516][T16943] netlink: 'syz.4.3037': attribute type 2 has an invalid length. [ 374.046540][T16945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.088664][T16951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3040'. [ 374.503549][T16968] syzkaller0: entered allmulticast mode [ 374.597532][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3044'. [ 374.616028][T16970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3044'. [ 374.761880][T16977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3047'. [ 374.774350][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3047'. [ 374.915727][T16985] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3049'. [ 374.965825][T16985] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3049'. [ 375.361871][T17006] tipc: Enabling of bearer rejected, failed to enable media [ 375.446559][T17011] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3056'. [ 375.476427][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3056'. [ 375.508559][T17008] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3056'. [ 375.521491][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3056'. [ 375.540423][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3056'. [ 375.560023][ T7116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.568696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.820770][T17026] 8021q: VLANs not supported on ip6tnl0 [ 375.848643][T17028] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3062'. [ 375.881331][T17026] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 375.984381][T17032] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 375.997080][T17032] syzkaller1: Refused to change device type [ 376.591112][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3073'. [ 376.619059][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3075'. [ 376.914730][T17091] vlan2: entered allmulticast mode [ 376.919938][T17091] bridge0: entered allmulticast mode [ 376.987889][T17091] bridge0: port 3(vlan2) entered blocking state [ 377.012600][T17091] bridge0: port 3(vlan2) entered disabled state [ 377.077672][T17096] validate_nla: 1 callbacks suppressed [ 377.077696][T17096] netlink: 'syz.1.3079': attribute type 1 has an invalid length. [ 377.471445][ T7116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.564239][T17115] gtp0: entered promiscuous mode [ 377.576024][T17115] gtp0: entered allmulticast mode [ 377.781832][T17123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3087'. [ 377.811732][T17123] x_tables: unsorted underflow at hook 3 [ 377.979425][T17133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.179758][T17151] netlink: 'syz.6.3089': attribute type 3 has an invalid length. [ 378.188600][T17151] netlink: 766 bytes leftover after parsing attributes in process `syz.6.3089'. [ 378.404497][T17154] syzkaller0: entered promiscuous mode [ 378.418987][T17154] syzkaller0: entered allmulticast mode [ 378.762638][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.769434][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.932872][T17170] netlink: 'syz.4.3098': attribute type 7 has an invalid length. [ 378.940832][T17170] netlink: 'syz.4.3098': attribute type 8 has an invalid length. [ 380.037595][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.314124][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.322855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.371252][T17202] __nla_validate_parse: 4 callbacks suppressed [ 381.371274][T17202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3109'. [ 381.465332][T17208] netlink: 'syz.6.3110': attribute type 1 has an invalid length. [ 381.473855][T17208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.611151][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3113'. [ 381.875677][T17236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3117'. [ 382.291817][T17266] netlink: 'syz.5.3126': attribute type 1 has an invalid length. [ 382.361785][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'. [ 382.496902][T17277] netlink: 59 bytes leftover after parsing attributes in process `syz.6.3129'. [ 382.832146][T17305] x_tables: duplicate underflow at hook 4 [ 383.244004][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.572490][T17319] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3138'. [ 383.582937][T17319] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3138'. [ 383.715146][T17323] netlink: 'syz.0.3140': attribute type 5 has an invalid length. [ 383.723941][T17323] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3140'. [ 383.799790][T17326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3141'. [ 383.882786][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.052513][T17336] xt_TCPMSS: Only works on TCP SYN packets [ 384.107004][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'. [ 384.393311][T17348] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 385.620674][T17286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.891459][T17356] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.899236][T17356] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.358124][T17395] netlink: 'syz.6.3160': attribute type 2 has an invalid length. [ 386.380222][T17395] __nla_validate_parse: 5 callbacks suppressed [ 386.380244][T17395] netlink: 31 bytes leftover after parsing attributes in process `syz.6.3160'. [ 386.466170][T17398] netlink: 'syz.5.3162': attribute type 2 has an invalid length. [ 386.508774][T17398] 9: entered promiscuous mode [ 386.889489][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3170'. [ 387.078031][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.086602][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.113202][T17435] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3174'. [ 387.132440][T17435] netlink: 'syz.1.3174': attribute type 1 has an invalid length. [ 387.367367][T17444] netlink: 'syz.6.3178': attribute type 4 has an invalid length. [ 387.690926][T17473] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3184'. [ 387.724476][T17477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.733504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.848362][T17479] IPVS: length: 239 != 24 [ 387.862806][T17479] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3185'. [ 387.897076][T17481] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3186'. [ 388.151429][T17496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3188'. [ 388.255598][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3190'. [ 388.286414][T17500] netlink: 'syz.5.3190': attribute type 5 has an invalid length. [ 388.295740][T17500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3190'. [ 388.306431][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3190'. [ 388.317108][T17500] netlink: 'syz.5.3190': attribute type 5 has an invalid length. [ 388.353122][ T7113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.471447][T17503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.680479][T17521] xt_time: unknown flags 0xf4 [ 388.748451][T17526] syzkaller0: entered promiscuous mode [ 388.760004][T17526] syzkaller0: entered allmulticast mode [ 389.631003][ T5188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.639236][ T5188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.485133][T17468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.283776][T17580] netlink: 'syz.4.3209': attribute type 11 has an invalid length. [ 391.307462][T17580] netlink: 'syz.4.3209': attribute type 11 has an invalid length. [ 391.880158][T17609] netlink: 'syz.5.3214': attribute type 1 has an invalid length. [ 391.887975][T17609] __nla_validate_parse: 8 callbacks suppressed [ 391.887994][T17609] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3214'. [ 391.978127][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3214'. [ 392.031322][T17617] ip6gre1: entered allmulticast mode [ 392.041689][T17620] netlink: 'syz.6.3217': attribute type 12 has an invalid length. [ 392.065782][T17617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.115769][T17621] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3214'. [ 392.153251][T17621] netlink: 'syz.5.3214': attribute type 7 has an invalid length. [ 392.184451][T17621] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3214'. [ 392.493746][T17637] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3220'. [ 392.543760][T17637] bridge_slave_1: default FDB implementation only supports local addresses [ 392.573629][T17648] netlink: 'syz.6.3222': attribute type 2 has an invalid length. [ 392.603913][T17648] 9: entered promiscuous mode [ 392.692081][T17645] syzkaller0: entered promiscuous mode [ 392.699082][T17645] syzkaller0: entered allmulticast mode [ 393.194323][T17677] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3229'. [ 393.240869][T17677] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3229'. [ 393.284969][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3230'. [ 393.338830][T17677] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3229'. [ 393.369442][T17686] netlink: 'syz.6.3233': attribute type 1 has an invalid length. [ 393.377764][T17686] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3233'. [ 393.391590][T17686] netlink: 'syz.6.3233': attribute type 58 has an invalid length. [ 393.448456][T17676] 8021q: adding VLAN 0 to HW filter on device bond2 [ 393.485224][T17689] netlink: 'syz.0.3234': attribute type 1 has an invalid length. [ 393.500604][T17689] netlink: 'syz.0.3234': attribute type 11 has an invalid length. [ 393.528816][T17691] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 393.555802][T17689] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 393.996661][T17720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.005600][T17720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.117683][ T7116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.184903][T17726] netlink: 'syz.1.3243': attribute type 14 has an invalid length. [ 394.227446][T17726] netlink: 'syz.1.3243': attribute type 18 has an invalid length. [ 394.384807][T17729] netlink: 'syz.6.3244': attribute type 15 has an invalid length. [ 394.525597][T17745] netlink: 'syz.4.3247': attribute type 1 has an invalid length. [ 394.612797][T17734] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.819554][ T7113] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 394.863507][ T7113] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 394.983491][T17768] netlink: 'syz.0.3252': attribute type 1 has an invalid length. [ 395.011514][T17734] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.070204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.080915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.370729][T17787] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 395.392189][ T7113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.415829][T17787] netlink: Unknown conntrack attr (0) [ 396.674440][T17734] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 396.685578][T17734] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.759393][T17734] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 396.772425][T17734] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.823259][ T1148] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 396.832051][ T1148] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.851523][ T7113] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 396.860152][ T7113] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.876263][ T1148] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 396.885021][ T1148] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.903912][ T1148] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 396.914427][ T1148] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.562422][T17794] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.806812][T17826] __nla_validate_parse: 43 callbacks suppressed [ 398.806836][T17826] netlink: 14544 bytes leftover after parsing attributes in process `syz.5.3268'. [ 399.214963][T17856] xt_hashlimit: invalid rate [ 399.240197][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.251397][ T7113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.259950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.454767][T17863] nbd: must specify a device to reconfigure [ 399.639260][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3281'. [ 399.705406][T17883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3282'. [ 399.721160][T17878] bond0: entered promiscuous mode [ 399.727616][T17878] bond_slave_0: entered promiscuous mode [ 399.742468][T17883] netlink: 'syz.1.3282': attribute type 7 has an invalid length. [ 399.760411][T17883] netlink: 'syz.1.3282': attribute type 8 has an invalid length. [ 399.778886][T17878] bond_slave_1: entered promiscuous mode [ 399.788871][T17883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3282'. [ 399.805619][T17878] bond0: left promiscuous mode [ 399.815481][T17878] bond_slave_0: left promiscuous mode [ 399.824043][T17878] bond_slave_1: left promiscuous mode [ 400.005428][T17894] netlink: 'syz.5.3286': attribute type 1 has an invalid length. [ 400.039589][T17894] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3286'. [ 400.086905][T17894] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3286'. [ 400.106182][T17900] netlink: 'syz.6.3285': attribute type 1 has an invalid length. [ 400.182269][T17894] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3286'. [ 400.216028][T17900] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3285'. [ 400.283617][T17904] 8021q: adding VLAN 0 to HW filter on device bond4 [ 400.293370][T17904] bond3: (slave bond4): making interface the new active one [ 400.303893][T17904] bond3: (slave bond4): Enslaving as an active interface with an up link [ 400.319502][T17900] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.795061][ T5844] Bluetooth: hci6: command 0x0406 tx timeout [ 426.111833][ T30] INFO: task syz.2.2083:13377 blocked for more than 143 seconds. [ 426.119631][ T30] Not tainted syzkaller #0 [ 426.125160][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 426.134382][ T30] task:syz.2.2083 state:D stack:26464 pid:13377 tgid:13370 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 426.146722][ T30] Call Trace: [ 426.151629][ T30] [ 426.154626][ T30] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 426.159223][ T30] ? __pfx___schedule+0x10/0x10 [ 426.164326][ T30] ? schedule+0x90/0x360 [ 426.169361][ T30] schedule+0x164/0x360 [ 426.174670][ T30] schedule_preempt_disabled+0x13/0x30 [ 426.180867][ T30] __mutex_lock+0x7fe/0x1300 [ 426.185539][ T30] ? __mutex_lock+0x5ac/0x1300 [ 426.191058][ T30] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 426.197025][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 426.202656][ T30] ? __nlmsg_put+0xef/0x1b0 [ 426.207326][ T30] ? genlmsg_put+0x137/0x2e0 [ 426.212729][ T30] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 426.218436][ T30] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 426.225342][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 426.231307][ T30] ? __asan_memcpy+0x40/0x70 [ 426.235960][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 426.300571][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 426.305633][ T30] genl_rcv_msg+0x61c/0x7a0 [ 426.348826][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 426.373529][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 426.379806][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 426.405643][ T30] netlink_rcv_skb+0x232/0x4b0 [ 426.414751][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 426.419870][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 426.440140][ T30] ? down_read+0x272/0x2e0 [ 426.444676][ T30] ? genl_rcv+0xd/0x40 [ 426.448801][ T30] genl_rcv+0x28/0x40 [ 426.470295][ T30] netlink_unicast+0x80f/0x9b0 [ 426.475186][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 426.491090][ T30] ? netlink_sendmsg+0x650/0xb40 [ 426.496310][ T30] ? skb_put+0x11b/0x210 [ 426.512266][ T30] netlink_sendmsg+0x813/0xb40 [ 426.517181][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.540197][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 426.545312][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.560290][ T30] ____sys_sendmsg+0x972/0x9f0 [ 426.565171][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.580894][ T30] ? import_iovec+0x73/0xa0 [ 426.585501][ T30] ___sys_sendmsg+0x2a5/0x360 [ 426.601126][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.606432][ T30] ? futex_wake+0x4ac/0x580 [ 426.621498][ T30] ? __fget_files+0x2a/0x420 [ 426.626162][ T30] ? __fget_files+0x3a0/0x420 [ 426.641610][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 426.646688][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.670429][ T30] ? rcu_is_watching+0x15/0xb0 [ 426.675328][ T30] do_syscall_64+0x14d/0xf80 [ 426.679972][ T30] ? trace_irq_disable+0x3b/0x150 [ 426.700422][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.706591][ T30] ? clear_bhb_loop+0x40/0x90 [ 426.720145][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.726401][ T30] RIP: 0033:0x7f574699c819 [ 426.741199][ T30] RSP: 002b:00007f574789b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.749794][ T30] RAX: ffffffffffffffda RBX: 00007f5746c16180 RCX: 00007f574699c819 [ 426.780118][ T30] RDX: 0000000020040000 RSI: 0000200000000140 RDI: 0000000000000004 [ 426.788199][ T30] RBP: 00007f5746a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 426.809302][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.817621][ T30] R13: 00007f5746c16218 R14: 00007f5746c16180 R15: 00007ffd9636ec48 [ 426.826017][ T30] [ 426.833280][ T30] [ 426.833280][ T30] Showing all locks held in the system: [ 426.841282][ T30] 1 lock held by khungtaskd/30: [ 426.871474][ T30] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 426.890507][ T30] 3 locks held by kworker/1:3/983: [ 426.895729][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 426.947207][ T30] #1: ffffc9000492fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 426.981625][ T30] #2: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 427.020710][ T30] 2 locks held by getty/5580: [ 427.025496][ T30] #0: ffff888032f110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 427.060420][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 427.090893][ T30] 4 locks held by kworker/0:6/5931: [ 427.096292][ T30] 2 locks held by syz.3.729/8612: [ 427.110191][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 427.118494][ T30] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 427.153913][ T30] 2 locks held by syz-executor/9215: [ 427.159280][ T30] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 427.180256][ T30] #1: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 427.240227][ T30] 2 locks held by syz.2.2083/13377: [ 427.245517][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 427.277046][ T30] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 427.301561][ T30] 4 locks held by syz-executor/14049: [ 427.307023][ T30] #0: ffff888059f18ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 427.330196][ T30] #1: ffff888059f180c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 427.339977][ T30] #2: ffffffff8fd5d528 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 427.379485][ T30] #3: ffff888054465300 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 427.400180][ T30] 3 locks held by syz-executor/15693: [ 427.405631][ T30] #0: ffff88805d3d8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 427.415914][ T30] #1: ffff88805d3d80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 427.426648][ T30] #2: ffffffff8fd5d528 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 427.436977][ T30] 1 lock held by syz-executor/15993: [ 427.442429][ T30] 3 locks held by syz-executor/16300: [ 427.447841][ T30] #0: ffff888021b74ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 427.458167][ T30] #1: ffff888021b740c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 427.468093][ T30] #2: ffffffff8fd5d528 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 427.479098][ T30] [ 427.489034][ T30] ============================================= [ 427.489034][ T30] [ 427.497767][ T30] NMI backtrace for cpu 1 [ 427.497788][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 427.497812][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 427.497824][ T30] Call Trace: [ 427.497832][ T30] [ 427.497841][ T30] dump_stack_lvl+0xe8/0x150 [ 427.497883][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 427.497905][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 427.497934][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 427.497959][ T30] sys_info+0x135/0x170 [ 427.497987][ T30] watchdog+0xfd9/0x1030 [ 427.498013][ T30] ? watchdog+0x21a/0x1030 [ 427.498039][ T30] kthread+0x388/0x470 [ 427.498060][ T30] ? __pfx_watchdog+0x10/0x10 [ 427.498076][ T30] ? __pfx_kthread+0x10/0x10 [ 427.498097][ T30] ret_from_fork+0x51e/0xb90 [ 427.498128][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 427.498153][ T30] ? __switch_to+0xc7d/0x1450 [ 427.498181][ T30] ? __pfx_kthread+0x10/0x10 [ 427.498203][ T30] ret_from_fork_asm+0x1a/0x30 [ 427.498258][ T30] [ 427.498266][ T30] Sending NMI from CPU 1 to CPUs 0: [ 427.613926][ C0] NMI backtrace for cpu 0 [ 427.613946][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 427.613966][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 427.613977][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 427.614005][ C0] Code: ce 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f2 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 427.614020][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 427.614036][ C0] RAX: 0000000000170615 RBX: ffffffff819a91fa RCX: 0000000080000001 [ 427.614049][ C0] RDX: 0000000000000001 RSI: ffffffff8defac37 RDI: ffffffff8c27d100 [ 427.614062][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863399b R09: 1ffff110170c6733 [ 427.614075][ C0] R10: dffffc0000000000 R11: ffffed10170c6734 R12: 0000000000000000 [ 427.614087][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8 [ 427.614099][ C0] FS: 0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 427.614114][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.614125][ C0] CR2: 00007f634819894b CR3: 000000000e54c000 CR4: 00000000003526f0 [ 427.614142][ C0] Call Trace: [ 427.614148][ C0] [ 427.614155][ C0] default_idle+0x9/0x20 [ 427.614179][ C0] default_idle_call+0x72/0xb0 [ 427.614212][ C0] do_idle+0x36a/0x5f0 [ 427.614239][ C0] ? __pfx_do_idle+0x10/0x10 [ 427.614268][ C0] cpu_startup_entry+0x43/0x60 [ 427.614291][ C0] rest_init+0x2de/0x300 [ 427.614308][ C0] start_kernel+0x385/0x3d0 [ 427.614334][ C0] x86_64_start_reservations+0x24/0x30 [ 427.614367][ C0] x86_64_start_kernel+0x143/0x1c0 [ 427.614387][ C0] common_startup_64+0x13e/0x147 [ 427.614414][ C0] [ 427.794242][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 427.801177][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 427.810308][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 427.820582][ T30] Call Trace: [ 427.823897][ T30] [ 427.826865][ T30] vpanic+0x56c/0xa60 [ 427.831501][ T30] ? __pfx___schedule+0x10/0x10 [ 427.836401][ T30] ? __pfx_vpanic+0x10/0x10 [ 427.840962][ T30] ? __pfx_console_unlock+0x10/0x10 [ 427.846226][ T30] panic+0xc5/0xd0 [ 427.849984][ T30] ? __pfx_panic+0x10/0x10 [ 427.854483][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 427.859969][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 427.866152][ T30] watchdog+0x1023/0x1030 [ 427.870522][ T30] ? watchdog+0x21a/0x1030 [ 427.874990][ T30] kthread+0x388/0x470 [ 427.879099][ T30] ? __pfx_watchdog+0x10/0x10 [ 427.883806][ T30] ? __pfx_kthread+0x10/0x10 [ 427.888450][ T30] ret_from_fork+0x51e/0xb90 [ 427.893093][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 427.898249][ T30] ? __switch_to+0xc7d/0x1450 [ 427.902973][ T30] ? __pfx_kthread+0x10/0x10 [ 427.907586][ T30] ret_from_fork_asm+0x1a/0x30 [ 427.912382][ T30] [ 427.916044][ T30] Kernel Offset: disabled [ 427.920395][ T30] Rebooting in 86400 seconds..